Senior Cybersecurity WAN Manager

Serve as ISSM for Nooks' WANs, owning the full RMF lifecycle from categorization through continuous monitoring for each WAN.

Develop and maintain authorization packages — SSPs, POA&Ms, and supporting artifacts — to secure and sustain ATOs.

Ensure every package and control implementation aligns with NIST SP 800-53, the DAAPM, and DCSA requirements.

Project-manage WAN deployments end to end, driving each from kickoff to authorized, operational delivery.

Build and maintain deployment schedules, milestones, and dependencies so ATOs land on time and in scope.

Standardize repeatable authorization and deployment playbooks that scale to each new WAN and site.

Operate and sustain multi-tenant WANs, maintaining authorization boundaries across tenants.

Run continuous monitoring to keep authorizations valid and detect drift as the WAN grows.

Coordinate on-site implementation with the IT and operations teams building and running each site.

Serve as the primary security authority and point of contact for DCSA on WAN authorizations.

Stand up and lead a team of WAN ISSOs as the network scales.

Advise site and program stakeholders on WAN security posture, risk, and authorization status.

Within the first year, NEST is authorized and operating as a multi-tenant WAN, with its ATO package complete and defensible under NIST SP 800-53, the DAAPM, and DCSA requirements. WAN deployments run to a repeatable project plan, and new WANs move from categorization to ATO on schedule without becoming the bottleneck for site delivery. Authorization boundaries hold across tenants, and continuous monitoring keeps every WAN's authorization valid as the network grows. DCSA and site stakeholders regard this role as the authoritative owner of WAN security and authorization status. As the footprint expands, the role is scaling from a single owner into a WAN ISSO team executing to a consistent standard.

This role partners closely with Enterprise IT, which builds the WAN architecture, and with IT/Cyber Operations, which deploys and sustains it at each site, to carry every WAN from design to authorized delivery. It coordinates with IT/Cyber Product on gate reviews and site build timelines so authorization stays off the critical path. Externally, it is the primary interface to DCSA for WAN authorizations, and it executes on the RMF and security strategy set by the Director of Cybersecurity.

Active Top Secret/SCI clearance and U.S. citizenship; SAP eligibility a plus.

Demonstrated experience as an ISSM (or a senior ISSO ready to step up) for classified networks under DCSA/NISP.

Deep, hands-on RMF expertise — owning authorization packages (SSPs, POA&Ms) through ATO under NIST SP 800-53 and the DAAPM.

Direct experience with DCSA authorization processes and interfacing with DCSA as the cognizant security agency.

Strong project-management skills — planning, scheduling, and driving complex technical deployments to deadline.

Experience with WAN or network authorization, ideally multi-tenant or enterprise-scale classified networks (e.g., SIPR).

Active DoD 8570/8140 IAM Level II or III certification (e.g., CISSP, CISM, CASP+).

PMP or equivalent project-management certification.

Experience authorizing or operating SIPR/JWICS or other DoD transport networks.

Experience standing up and leading an ISSO team.

Familiarity with eMASS and DCSA/NISP eMASS authorization workflows.

Candidates must be authorized to work in the United States and must be U.S. citizens. This role requires an active Top Secret clearance (SCI eligibility preferred) as a condition of employment.

Salary Range for all departments