IAM – Journeyman (DoD Top Secret)

It's fun to work in a company where people truly BELIEVE in what they're doing!

We're committed to bringing passion and customer focus to the business.

****This position is hybrid to the Fort Meade, MD location***

SUMMARY

The IAM – Journeyman supports the Department of Defense (DoD) ACAS capability which scans an estimated 11 million devices on the DoD Information Network (DoDIN) for potential vulnerabilities that may affect the DoD security postures.  This position serves as the Assessment and Authorization (A&A) Lead.   This position performs security engineering to the Government and supports A&A activities for test and productions systems to maintain compliance with DoD 8500 series publication, Federal Information processing Standards, and National Institute of Standards and Technology (NIST) Special Publications on both NIPRNET and SIPRNET.

ESSENTIAL REQUIREMENTS

Must have an active Top Secret/Sensitive Compartmented Information (TS/SCI) Security Clearance which requires U.S. citizenship. 

KEY DUTIES AND RESPONSIBILITIES
Essential Duties and responsibilities include the following.  Other duties may be assigned.

Obtains and applies patches to all assets affected by open findings.

Coordinates with the Government-specified A&A team to remediate security defects on any open findings on the test and production systems in a timely manner.

Supports Information Systems Security Manager (ISSM) team in collecting information and answering DTO and OPORD

Provides the Ports, Protocols and Service Management (PPSM) information for ACAS and assist the ISSM with submitting the information to the Government PPSM system of record.

Performs preparation of the necessary accreditation documentation, to include a System Security Plan to describe the protection and sustainment of the Cyber Security requirements to comply with applicable Security Controls of the ACAS capabilities.

Performs preparation of the accreditation packages that show the certification status of the system in the Government-furnished format, to include change request forms and supporting documentation for major change management activities.

Ensures that the accreditation package(s) contains accurate information and is maintained in a current status, to include updates to the implementation plan.

Performs all the required A&A data entry and artifact submissions to the unclassified and classified Enterprise Mission Assurance Support Service (eMASS) and DISA Requirements Task System (RTS).

Maintains the Lifecycle A&A Plan that addresses the process, procedures, and timing of A&A activities for new software and software updates/upgrades across the anticipated lifecycle of the product(s), including but not limited to:

• Plans of Action and Milestones (POA&M) development
• Mitigation strategy for findings that cannot be fixed immediately
• All current and future required accreditation documentation for the Risk Management Framework (RMF)
• Registration information (shall be within required documents above)
• Information Assurance Vulnerability Alert (IAVA) review and compliance

Performs assessments for all STIG and IAVAs in the agreed upon format and medium and submit a written STIG/IAVA compliance report of all discrepancies.

Provides a System POA&M, in accordance with the DISA AO Vulnerability Management Policy, for any open STIG or IAVA that requires further research and testing

Maintains and updates an SRG for the ACAS capability, which includes STIGs or system configurations that cannot be implemented until the capability is implemented at the operational site.

Updates and maintains a Continuity of Operations (COOP) and Information System Contingency Plan (ISCP) for the ACAS capability.

Conducts an annual exercise of the COOP or ISCP with all appropriate support personnel and update the operations strategy and architecture documents to reflect any needed changes.

Plans daily activities within the guidelines of company policy, job description and supervisor’s instruction in such a way as to maximize personal output.  

Responsible for aiding in own self-development by being available and receptive to all training made available by the company. 

OTHER DUTIES

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job.  Duties, responsibilities and activities may change at any time with or without notice.

EDUCATION AND EXPERIENCE

Bachelor's degree and a minimum of five (5) years’ relevant