Cybersecurity IA Analyst

Ddc Dine; Columbus (OH); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life and disability coverage

Retirement savings with company match

Paid time off

Job summary

Diné Development Corporation (DDC) seeks a Cybersecurity IA Analyst to lead RMF accreditation for test and pre-production environments and to drive IATT-C/ATO package preparation and submission. The role supports DoD DoD cyberspace strategy and zero trust initiatives in an AWS-hosted environment.

The successful candidate will have 10+ years in IT management or consulting, with RMF and A&A experience, and familiarity with AWS cloud security and DoD accreditation processes.

Qualifications

• 10 years of practical industry, government and/or consulting experience in information technology management.
• Experience with A&A processes and RMF implementation is required.
• Familiarity with AWS cloud environments and DoD RMF is essential.
• Experience obtaining IATT-C and ATO accreditations is highly preferred.

Responsibilities

• Drive RMF accreditation for test and pre-production environments.
• Facilitate IATT-C and ATO packages and manage approval timelines.
• Support Government in obtaining ATO per RMF requirements and prepare necessary artifacts.
• Implement RMF controls for AWS-hosted environments and ensure proper access controls.
• Provide cybersecurity input to project reviews and stakeholder meetings.

Skills

IT project management

Microsoft Excel

Microsoft Access

Microsoft Office Suite

SharePoint

Security concepts

Education

BS in Computer Science or related field

Tools

Excel

Access

Word

PowerPoint

SharePoint

Job description

## Cybersecurity IA AnalystApplylocations: Remotetime type: Full timeposted on: Posted 2 Days Agojob requisition id: JR100294Serves as a **Cybersecurity IA Analyst** for test and pre-production environments. Provides cybersecurity Management support to the Program Executive Officer (PEO) Program Management Offices (PMO) for emerging information systems through the acquisition lifecycle and where applicable into sustainment; provides technical support and guidance to facilitate the identification and integration of security controls at the onset of the acquisition lifecycle for emerging IT capabilities; serves as a principal liaison for Enterprise-level boundary defense initiatives to ensure consistent and sufficient identification and implementation of applicable security controls in concert with the cybersecurity and IT architecture; and provides oversight for the design and implementation of Enterprise-level cybersecurity solutions providing standards for access control capabilities across the Enterprise. This position requires deep familiarity with cybersecurity concepts and processes within the Department and with AWS cloud environments, and specific working knowledge of what it takes to obtain Interim Authority to Test / Connect (IATT-C) and Authority to Operate (ATO) accreditations and their associated processes.*\*This position is contingent upon contract award.\****Responsibilities:*** Drive the accreditation effort for the test and pre-production environments in accordance with the Risk Management Framework (RMF), NIST 800-37, revision 5.* Facilitate preparation and submission of IATT-C and ATO accreditation packages, managing each step of the associated approval processes and timelines.* Support the Government in obtaining Authority to Operate (ATO) in accordance with RMF requirements or equivalent and produce the artifacts and documentation necessary to ensure appropriate controls for the environment.* Implement and validate the RMF controls necessary to support full ATO accreditation of the scaled environments.* Apply cybersecurity concepts, policies, and processes specific to the Department's operating environment, and translate those requirements into actionable control implementations for the AWS-hosted environment.* Identify and integrate security controls at the onset of the acquisition lifecycle for emerging IT capabilities.* Serve as principal liaison for Enterprise-level boundary defense initiatives and provide oversight of Enterprise-level cybersecurity solution design and access control standards.* Support Zero Trust (ZT) / Identity Credentialing and Access Management (ICAM) integration within proper architectures.* Ensure alignment with the DoD Cyber Strategy, DoD Cyber Workforce Strategy, and DoD Zero Trust Strategy.* Provide cybersecurity input to project reviews, stakeholder meetings and other program activities; communicate risks timely with associated mitigation strategies.* Other duties as assigned.**Qualifications:****Years of Experience: 10 years of relevant experience -** Ten (10) years of practical industry, government and/or consulting experience in information technology management, relevant Assessment and Authorization (A&A) experience.**Education Level: None.** Desired BS in Computer Science, Information Systems, Cybersecurity, Engineering, IT, or closely related discipline, or equivalent additional relevant experience.**Clearance Requirements: Secret -** Must possess IT-III Non-Sensitive security clearance or Tier 1 (T1) at time of proposal submission.**Certification Requirements: None –** AWS Cloud Practitioner and Security+ desired.**Any other work-related qualifications needed for the role:*** Demonstrated experience obtaining IATT-C and ATO accreditations, including hands-on ownership of the associated submission, review, and approval processes.* Demonstrated familiarity with cybersecurity concepts and processes within the Department.* Demonstrated experience securing and accrediting AWS cloud environments.* National Institute of Standards and Technology (NIST) A&A experience.* DOD RMF experience.* Malware Analysis.* IT project management experience using various Microsoft tools.* Knowledge and experience in managing information technology services and strategies.* Proficiency in basic analytical software such as Microsoft Excel and Access, and proficiency with the Microsoft Office suite to include Word, PowerPoint, and SharePoint.* Experience implementing modern security solutions (e.g., Blockchain or related cryptographic research).* Extensive experience working highly complex IT systems. Resume must demonstrate experience working legacy system upgrades, modernization, legacy system transition, data migration and/or system analysis and design. Priority given to personnel with demonstrated experience performing functional and technical solutions decomposition that enables solutions analysis and design and demonstrated experience implementing solutions with respect to modern database design and modern software languages within the federal Government, specifically within the DoD. AI/ML experience is preferred.* Travel to on-site meetings in Columbus, OH (Onsite once per month (average) up to 3 days.)**About Us**Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.**Benefits**Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.**Equal Opportunity & Compliance Statement**This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.We participate in E-Verify.DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]