Information System Security Officer (ISSO) / Onsite IT & Cloud Support

Information System Security Officer (ISSO) / Onsite IT & Cloud Support

Position summary

TechAxia is hiring an Information System Security Officer (ISSO) who is also the hands-on onsite IT administrator for a defense-industry client site in Colorado Springs. In this role, you will secure and maintain classified systems, provide day-to-day desktop and server support to everyone onsite, support Azure GCC High, and support the site's CMMC compliance. You will report to the site ISSM.

Please read before applying: this is not a classified-only ISSO role

Classified ISSO work is a core part of this job, but it is not the whole job. You are also the site's onsite IT support, so plan for a mixed day.

• Walk-up support is expected. Engineers and staff will stop by or call for help with workstations, accounts, printers, plotters, and software, and you will be the person who fixes it or calls a vendor when applicable to fix an issue.
• You work across both sides. You will move between classified systems and the unclassified network (Windows, Linux, macOS, Active Directory, Microsoft 365) throughout the week.
• Own every issue to resolution. You fix many issues yourself. For the rest, you engage the right team in the wider organization (network, firewall, and others), follow up, and see the issue through to closure.
• Onsite, Monday through Friday. This role is not remote or hybrid.

If you want a role focused only on classified ISSO duties, this position is not the right fit. If you enjoy variety and being the go-to technical person onsite, we want to hear from you.

About TechAxia and the assignment

TechAxia LLC is a CMMC Level 2 certified managed service provider serving the Defense Industrial Base. We specialize in Microsoft 365 and Azure GCC High, CMMC compliance, cybersecurity architecture, and ISSO/ISSM support, and we are an approved Microsoft Azure Government Direct CSP.

In this role you will be assigned full-time to one TechAxia client. You will be the site's go-to person for security and IT, and you will coordinate with the wider organization's teams at other locations.

Key responsibilities

1. ISSO - classified information systems

• Perform weekly antivirus scans and weekly audit log reviews on classified systems, and document the results.
• Perform monthly operating system patching and backups for Windows and Linux classified systems.
• Harden systems using DISA STIGs and SCAP tools; run vulnerability scans, interpret results, and remediate findings.
• Implement and follow system-specific security procedures as defined in each system's security plan.
• Support system compliance with NIST SP 800-53 and the Risk Management Framework (RMF).
• Carry out continuous monitoring: technical implementation of controls, documentation, and updates to processes and procedures.
• Participate in security audits, system assessments, and incident response activities.
• Support Engineering's classified requests, including installing approved applications.
• Maintain classified document control in SIMS.
• Support the ISSM with eMASS packages, DCSA Authority to Operate (ATO) artifacts, and other duties as assigned.

2. Onsite IT support and system administration

• Serve as the site's onsite help desk: respond to walk-up, phone, and ticket requests from engineers and staff.
• Administer Linux servers and workstations, Windows servers and workstations, and macOS workstations.
• Set up, troubleshoot, and maintain printers, plotter, and other peripherals.
• Manage Active Directory: users, groups, and devices.
• Support Microsoft 365 cloud services (GCC High), including Exchange Online, Teams, SharePoint/OneDrive, Entra ID, and Intune.
• Support remote users as well as onsite staff.
• Coordinate with IT, security, and business teams at the local site and across the larger organization.

3. Microsoft Azure GCC High support

• Build and support Azure IaaS: virtual machines, virtual networks (vNets), network security groups, and Azure VPN gateways.
• Support Azure PaaS and SaaS services as the environment grows.
• Apply security baselines, monitoring, and backup to Azure resources in line with CMMC and NIST SP 800-171.

4. CMMC compliance support

• Interpret CMMC Level 2 / NIST SP 800-171 requirements and how they apply to the site.
• Conduct CMMC self-assessments and help track SPRS scoring and remediation.
• Create, update, and maintain compliance documentation: policies, plans, procedures, System Security Plans (SSPs), and POA&Ms.
• Collect evidence and support C3PAO assessments, including interviews and demonstrations.

Required qualifications

• Applicants must be U.S. citizens with an active DoD Secret clearance (or higher) and the ability to maintain it.
• 3+ years of hands-on Linux and Windows system administration, including workstations, in a secure environment.
• Hands-on, white-glove desktop and end-user support experience: troubleshooting PCs, accounts, printers, and peripherals for non-IT users.
• Proven experience with STIG compliance, SCAP scanning, vulnerability remediation, and system hardening.
• Experience supporting classified systems under DCSA oversight, or equivalent ISSO or system administrator experience in a cleared environment.
• Working knowledge of RMF and NIST SP 800-53.
• Hands-on experience with Active Directory, Group Policy, and Microsoft 365 administration.
• Basic Azure IaaS experience: deploying and managing VMs, vNets, and VPN connectivity.
• DoD 8140 qualified (e.g., CompTIA Security+ CE) or the ability to obtain it within 6 months of hire.
• Strong troubleshooting, documentation, and customer-service skills.
• Ability to work onsite Monday to Friday and to work independently in a small team.

Preferred qualifications

• Experience with CMMC Level 2 / NIST SP 800-171: self-assessments, SSPs, POA&Ms.
• CMMC credentials such as Certified CMMC Professional (CCP) or Certified CMMC Assessor (CCA).
• Familiarity with eMASS and the DCSA assessment and authorization process.
• Experience with SIMS for classified document control.
• Microsoft 365 / Azure GCC High experience, including Entra ID, Intune, and Defender.
• macOS administration and support of engineering peripherals such as plotters.
• Certifications such as CASP+, CySA+, Azure Administrator Associate (AZ-104), or RHCSA.
• Previous experience in a DoD or federal contractor environment.

CMMC training path. CMMC experience is preferred but not required. TechAxia will train a strong ISSO or system administrator on CMMC requirements, documentation, and assessment support. Starting salary will reflect the skills and experience a candidate brings on day one.

Working conditions and compensation

Working conditions

• Onsite at the client facility in Colorado Springs, Monday to Friday; work includes closed areas and restricted spaces.
• Frequent interruptions from walk-up support requests; you will balance these with scheduled security tasks.
• Ability to lift up to 40 lbs, with or without reasonable accommodation, and move equipment such as workstations, printers, and servers.
• Occasional after-hours or weekend work for maintenance windows and incidents.
• While unlikely, this role may require travel within the United States, up to 5%.
• This role reports to the ISSM for both classified and unclassified work.

Compensation and benefits

• Pay: $110,000 - $130,000 per year, based on clearance, certifications, and experience, especially existing CMMC, ISSO, and eMASS/DCSA skills.
• Benefits: health, dental, and vision insurance; 401(k); paid time off.
• Professional development: TechAxia covers job-related certification training and exam costs, such as CMMC and Microsoft certifications. This does not include college degree programs.
• Work in a mission-critical environment that supports national defense, on a small team that values trust and ownership.
• Application deadline: November 11, 2026.

Equal opportunity

TechAxia LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, age, genetic information, or any other characteristic protected by federal, state, or local law. Because of the access requirements of this position, applicants must be U.S. citizens with an active DoD Secret clearance (or higher).

Pay: $110,000.00 - $130,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Work Location: In person