Cybersecurity Manager

Air Force Civilian Service; Arlington (IN); On-site; USD 143,000 - 163,000; Full time

Benefits offered by this job

Recruitment incentives may be provided

Job summary

Air Force Civilian Service seeks a full-time IT Specialist (INFOSEC), GS-2210-14, at the Pentagon in Arlington, VA, to serve as the lead cybersecurity expert for SAF/SAS. This role requires Top Secret/SCI clearance and U.S. citizenship.

The position focuses on securing and operating SCIF and SAP vault IT environments and supporting cloud computing, HPC, AI/ML, and modeling capabilities critical to Air Force strategic decision-making.

Qualifications

• Must be a U.S. Citizen.
• Must be able to obtain/maintain Top Secret/SCI clearance.
• Experience with cybersecurity architecture, cloud security, and enterprise systems engineering.

Responsibilities

• Lead cybersecurity specialist and technical authority for SAF/SAS.
• Secure and operate SCIF and SAP vault IT environments.
• Support cloud computing, HPC, AI/ML, and advanced modeling/ simulation workloads.

Skills

Cybersecurity architecture

Cloud security

RMF / NIST

DevSecOps

Kubernetes security

Cloud and multi-cloud

Cloud compute / HPC security

Tools

Kubernetes

CI/CD

GitOps

Container security

Job description

Come be a part of something big! Smart Minds, Cool Jobs and Awesome Rewards! Fueled by innovation, talent and ambition, the Air Force Civilian Service (AFCS) is seeking civilian professionals prepared to deploy war-winning capabilities on behalf of the United States Air Force.

The Air Force Civilian Service (AFCS) is looking for a full-time IT Specialist (INFOSEC), GS-2210-14 located at the Information Technology & Security Division (SAS), Pentagon, Arlington, VA.

Special Salary Rate: $143,000 – 163,000

Recruitment incentives may be available based on eligibility.

Depending on the type of position (competitive/excepted) you are selected for, you will be required to serve a 1-year probationary period OR 2-year trial period.

In this position, you will serve as the lead cybersecurity specialist and technical authority for the Secretary of the Air Force, Studies and Analysis, Operations Directorate, Information Technology & Security Division (SAF/SAS), with primary responsibility for securing and operating SCIF and Special Access Program (SAP) vault IT environments supporting cloud computing, high performance computing (HPC), artificial intelligence/machine learning (AI/ML), and advanced modeling and simulation capabilities critical to Air Force strategic decision-making.

• Must be a U.S. Citizen
• Must be able to obtain/maintain a Top Secret/SCI clearance
• This position is designated by the Air Force as a testing designated position under the Air Force Civilian Drug Testing Program and is subject to random drug testing
• Knowledge of cybersecurity architecture, cloud security, and enterprise systems engineering including cybersecurity principles, cloud security architecture, container security, identity-based security implementation, multi-cloud security patterns, hybrid cloud integration, service mesh security (Istio), API gateway security, enterprise architecture, system integration, and technical operations sufficient to manage and secure complex multi-site infrastructure supporting Top Secret/SCI and SAP workloads in cloud-native, HPC, and AI/ML environments
• Knowledge of security compliance frameworks and risk management including NIST Risk Management Framework (RMF), NIST SP 800-53 Rev 5 security controls, DoD Cloud Computing SRG, Container STIGs, Kubernetes security benchmarks, Platform One security baselines, DFARS cybersecurity requirements, SAP security policies (ICD 503, ICD 705, NISPOM), DoD and Air Force information assurance policies, Clinger-Cohen Act, FISMA, FedRAMP, Privacy Act, CIO directives, security compliance frameworks, audit methodologies, security assessment procedures, and continuous compliance monitoring sufficient to achieve and maintain continuous ATO for operational infrastructure
• Knowledge of DevSecOps, containerization, and platform security including DevSecOps methodologies, CI/CD security, GitOps workflows, infrastructure-as-code security, policy-as-code enforcement, secure software supply chain practices, Kubernetes security architecture (cluster hardening, pod security standards, network policies, RBAC, admission controllers, runtime security, workload isolation), secrets management architecture, encryption key management, certificate management, identity and access management, and cryptographic best practices sufficient to operate on-premises cloud DevSecOps stack and secure container orchestration platforms in classified environments
• Knowledge of emerging and specialized technology security including AI/ML security (secure model development, MLOps security, training data protection, model artifact security, inference endpoint hardening, AI/ML threat vectors), HPC systems security, distributed computing environments, high-throughput analytical platforms, emerging security technologies, industry security trends, threat landscape evolution, and security research methodologies sufficient to secure advanced analytical workloads and inform strategic security decisions
• Cyberspace Qualification is a condition of employment. This position includes Cyberspace work as a paramount duty requirement. Per DoDM 8140.03, para 4.2.a.(2), requires foundational qualification requirements within 9 months of assignment to a cyberspace work role and resident qualification requirements within 12 months. A waiver may be granted per DoDM 8140.03. Failure to achieve and maintain qualification may result in removal from this position
• Must achieve and maintain foundational qualification for assigned work roles: WRC 461 (Cybersecurity Infrastructure Support) and WRC 451 (System Administrator). Required certifications include: Certified Cloud Security Professional (CCSP), CompTIA Cloud+, GIAC Cloud Security Automation (GCLD), Certified Kubernetes Administrator (CKA), and Certified Kubernetes Security Specialist (CKS). Advanced proficiency level qualification within 12 months is highly desired

Desired Experience: Kubernetes, Linux, AI/ML, MLOps, Cloud Security (CCSP/Cloud+), DevSecOps, Security Engineering, high performance computing (HPC)