Want to know if this job is worth applying to?
Virginia, United States
Onsite
ABOUT NOOKS
Nooks is pioneering Classified-Infrastructure-as-a-Service (CIaaS) — designing, building, and operating Sensitive Compartmented Information Facilities (SCIFs) and other secured, classified environments for the defense and national security community. We work with the agencies, contractors, and mission-driven organizations that keep the nation safe, delivering the physical infrastructure that makes classified work possible. We’re growing fast, operating across multiple markets, and building a company that takes both the mission and the business seriously.
About the Role
The Principal ISSM owns the scaling and delivery of Nooks' wide-area networks (WANs) and serves as the Information System Security Manager (ISSM) for them — starting with NEST, our first multi-tenant WAN. Reporting to the Director of Cybersecurity, you own the Risk Management Framework (RMF) lifecycle and the project management behind every WAN deployment, ensuring authorization packages and ATOs are completed in accordance with NIST SP 800-53, the DCSA Assessment and Authorization Process Manual (DAAPM), and DCSA requirements. This is an individual-contributor role today, but it is built to grow: as WANs scale across the network, you will stand up and lead a team of WAN ISSOs and ISSM’s.
Because these are multi-tenant classified WANs, this is an on-site role at the sites where WANs are deployed. The program is being built as it scales — new WANs come online on aggressive timelines, and you are accountable for driving each one from categorization to ATO without becoming the bottleneck. You own that ambiguity, running the authorization and the project plan in parallel and keeping delivery on schedule while every package meets requirements.
Key Responsibilities
RMF & Authorization (ISSM)
WAN Delivery & Project Management
Multi-Tenant Operations & Monitoring
Team & Stakeholder Leadership
What Success Looks Like in This Role
Within the first year, NEST is authorized and operating as a multi-tenant WAN, with its ATO package complete and defensible under NIST SP 800-53, the DAAPM, and DCSA requirements. WAN deployments run to a repeatable project plan, and new WANs move from categorization to ATO on schedule without becoming the bottleneck for site delivery. Authorization boundaries hold across tenants, and continuous monitoring keeps every WAN's authorization valid as the network grows. DCSA and site stakeholders regard this role as the authoritative owner of WAN security and authorization status. As the footprint expands, the role is scaling from a single owner into a WAN ISSO team executing to a consistent standard.
Cross-Functional Expectations
This role partners closely with Enterprise IT, which builds the WAN architecture, and with IT/Cyber Operations, which deploys and sustains it at each site, to carry every WAN from design to authorized delivery. It coordinates with IT/Cyber Product on gate reviews and site build timelines so authorization stays off the critical path. Externally, it is the primary interface to DCSA for WAN authorizations, and it executes on the RMF and security strategy set by the Director of Cybersecurity.
The Skillset
Required
Preferred
Eligibility & Clearance
Candidates must be authorized to work in the United States and must be U.S. citizens. This role requires an active Top Secret clearance (SCI eligibility preferred) as a condition of employment.
Salary Range for all departments
