Senior Information Security Professional
Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed:· Responsibilities are full time on customer’s onsite and will cover classified programs and Special Access Programs (SAP). No Telework.· Ideal candidate shall assist in developing and implementing DoD/DIA approved information security controls, procedures and documentation for the operation of standalone classified systems.· Demonstrate strong experience with IC/DoD customer's Assessment and Authorization (A&A) process (e.g., RMF, NIST800-53, ICD503).· Provide subject matter expertise and consulting on security related matters for enterprise information system andnetwork architectures, access problems, and implementation of security policies and procedures.· Assist in overseeing and managing day-to-day operation of SAP Information Systems.· Optimize system operation and resource utilization, and performs system capacity planning/analysis while maintaining the security posture.· Assist team in DIA’s Authorization and Accreditation (A&A) process using RMF across the design lifecycle for classified systems obtaining and maintaining Interim Authority to Operate (ATO), ATO and Authority toConnect (ATC).· Create and process RMF authorization SAP packages from submission to approval/disapproval· Develop and maintain IT security documents, including system security plans, risk assessments, Plan of Action and Milestones (POA&M), contingency plans, incident response plans, IT security policies and procedures.· Provide recommendations regarding remediation and mitigation of identified vulnerabilities by developing plan of action and milestones (POA&Ms).· Advise developers on integrating security requirements · Demonstrate a strong understanding of Networks, Cloud, and IT system security authorization procedures You will be part of a team that may need work schedule flexibility in support team providing on-site coverage of 5-day x 12 hours/day operations. Work will be performed on-site; no teleworking or hybrid work available.
Required Qualifications:
- A Bachelor’s Degree from an accredited institute in an area applicable to this position and eight (8) years ofrelevant experience
- An additional four (4) years of relevant experience may be substituted for the bachelor’s degree
- Demonstrates strong experience with IC/DoD customer's Assessment and Authorization (A&A) process (e.g., RMF, NIST800-53, ICD503).
- Experience in developing and implementing DoD/DIA approved information security controls, procedures and documentation for the operation of standalone classified systems.
- Must presently be 8570 compliant (IAT Level 2 preferred); must be 8570 compliant (IAT Level 2)
- Certification:
- 8570 Compliance (IAT Level II), Compute Environment
- 8570 Compliance (IAT Level II) approved baseline certifications:
- Security+ CE (preferred)
- CCNA-Security
- CySA+
- GICSP
- GSEC
- CND
- SSCP
- Clearance:
- Minimum: TS/SCI, will sponsor CI Poly if minimum requirements met
- Preferred: TS/SCI (crossover eligible) with CI Poly
Preferred Qualifications:
- Familiar with multi-level security environments (U, S, TS)
- Experience with one or more commercial government cloud service provider’s system accreditation processes
- Experience with the Xacta
- Experience as a Cybersecurity Control Assessor for SAP
- Experience with Ongoing Authorizations and Assessments
- Experience with C2S Cloud, or DevOpsSec)
- Desired Certifications:
- LPIC 1 – Linux Administrator
- LPIC 2 – Linux Engineer
- LFCS – Linux Foundation Certified System Administrator
- Cisco Certified Network Architect (CCNA) certification(s)
- Cisco Certified Network Professional (CCNP) certification(s)
- Certification and/or Experience with AWS cloud Desired Experience with one or more of the following:
- DoD or Intelligence Community service
- Experience working with Defense Intelligence Agency (DIA)
- Experience installing, managing, and updating applications and services hosted on Linux servers
- Experience working with cross domain solutions