Information Assurance

DEFTEC Corporation; San Antonio (TX); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Benefits package

Job summary

DEFTEC Corporation is seeking information assurance professionals to join JBSA-related projects. The role requires TS/SCI clearance, DoD IA workforce qualifications, and extensive RMF/Cross Domain Solutions experience.

You will support SIPRNET/NIPRNET environments, manage vulnerability tracking, and ensure secure configurations across networks. We offer a comprehensive benefits package and opportunities to contribute to critical government missions.

Qualifications

• Active Top Secret/SCI clearance required.
• IAM level III certification (CISSP/CCISO/CISM) with 4 years C&A experience.
• Experience with Certification & Accreditation, Cross Domain Solutions, Requirements Validation, Mission System Tracking & Vulnerability Tracking.
• RMF (Risk Management Framework) experience (heavy).
• eMASS experience.
• IAAP Oversight/Inspections under DoD 8570 program management and removable media control.

Responsibilities

• Evaluate network accreditation packages per RMF guidance and ensure artifacts are complete.
• Provide cross-domain solution support to ensure data transfers from classified to unclassified systems are free of sensitive data.
• Shall perform requirements validation using Government AIS for network changes.
• Provide mission system tracking per prescribed guidance and directives.
• Be knowledgeable of network incident response, reporting, and mitigation actions.
• Comply with IA & Assessment Program for SIPRNET and NIPRNET networks.
• Review and process network account documentation for classified user and elevated privilege accounts.
• Perform media control of all external/removable media.
• Monitor compliance status and STIG checks to ensure end-point security for RMF controls.
• Ensure all classified areas meet TEMPEST certification requirements prior to installation/uses.
• Review logical network drawings to reflect current configuration and topology.
• Review documentation required to certify new hardware and software systems for deployment.
• Stay abreast of network security and must meet DoD 8570 IA workforce levels prior to employment.
• Assist with evolution of the network Configuration Control Board (CCB) process and proper coordination for deployments.
• Process ports, protocols, and services worksheet and security impact assessments.

Skills

RMF

eMASS

IAM level III certification

DoD 8570 program

Incident Response

Vulnerability Tracking

Network management

Tools

eMASS

Job description

Information Assurance (IA)

DEFTEC delivers mission-critical solutions through skillfully delivered services and innovative products. We are inspired by the critical missions of our clients, and we are driven to provide the most effective solutions to execute their missions, operational challenges, and requirements. Our dedicated, experienced, and talented employees work closely with our clients to ensure the delivery of exceptional services and products.

POSITION OVERVIEW

We are actively seeking to identify personnel to join our team of talented professionals who possess the experience, vision, commitment, and integrity to successfully support us and the 502d Communications Squadron Joint Base San Antonio.

The 502d supports all JBSA customers that require access to the Secure Internet Protocol Router Network (SIPRNET) and Non-Secure Internet Protocol Network (NIPRNET). 502 CS performs touch maintenance and support for network infrastructure and servers, provides service desk, server administration, Unified Capabilities, client systems support, information assurance and communications security, project management, and requirements desk support.

JOB RESPONSIBILITIES:

• Evaluate network accreditation packages per guidance and directives of network governing body and the AF; ensure modifications, exceptions, and deviations to information systems are made through the Risk Management Framework (RMF) process; ensure completeness of IA controls testing and applicable artifacts are provided and evaluated prior to forwarding to the appropriate agency.
• Provide cross domain solution support per guidance and directives, to ensure data transfers from classified to unclassified systems are free of sensitive data.
• Shall perform requirements validation using the Government AIS to ensure all additions, changes, and/or /upgrades to the network are WCO approved.
• Provide mission system tracking IAW prescribed guidance and directives.
• Be knowledgeable of network incident response, reporting, and mitigation actions; able to refer inquiries to appropriate work center/POCs.
• Comply with IA & Assessment Program for SIPRNET and NIPRNET networks.
• Receive, review and process network account documentation for classified user and elevated privilege accounts IAW established AF and local procedures.
• Perform media control of all external and removable media IAW AF and local directives.
• Monitor/audit status of compliance for Time Compliance Network Orders, Methods & Procedures Technical Orders, Information Assurance & Vulnerability Assessments (IAVA) with respective authorities.
• Monitor/audit compliance vulnerability scan status and STIG checks to ensure end-point security compliance for RMF controls.
• Ensure all areas that contain classified systems meet Emission Security/TEMPEST certification requirements prior to installation/uses of classified networks.
• Review logical network drawings to ensure they are up-to-date, reflect the current configuration and topology of the entire network and meet DISA standard.
• Review documentation required to certify new hardware and software systems for deployment on the network.
• Shall stay abreast of network security and must meet DoD 8570.01M Information Assurance Workforce, Information Assurance Manager Level II and/or III (depending on function) prior to employment.
• Assist with the continual development and evolution of the network Configuration Control Board (CCB) process and ensure that proper coordination is obtained prior to any hardware, software or patch deployment is installed on the production network.
• Process the ports, protocols, and services worksheet and required security impact assessment, secure registration of the system/enclave for initial authorization, reauthorization, and updates/changes through the change management process.

QUALIFICATIONS:

Required Qualifications:

• Top Secret/SCI clearance
• Certified as an IAM level III (CISSP, CCISO or CISM) as outlined in DoDM 8140.03, Cyberspace Workforce Qualification and Management Program with 4 years of C&A experience
• Experience with Certification & Accreditation Cross Domain Solutions Requirements Validation Mission System Tracking Vulnerability Tracking.
• RMF (Risk Management Framework) Experience (heavy)
• eMASS experience
• Incident Response Coordination IAAP Oversight/Inspections DoD 8570 Program Management Removable Media Control.
• Orders Tracking/Compliance Patch Management/Deployment EMSEC/TEMPEST.
• General knowledge of real-time services such as video teleconference systems and VoIP communication technology.
• General knowledge and 4 years of experience with Microsoft client operating systems, applications, and 3rd party software.
• Basic knowledge of Government programs working within network rules and guidelines.
• Experience with network management tools, engineering principles, and analysis

DEFTEC offers a comprehensive whole-life benefits package that includes medical, dental, vision, holiday, paid time off, 401K with a match, life insurance, short/long-term disability, and educational reimbursement.

DEFTEC is a Drug-Free Workplace where post-offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria are met as outlined in our policies.

AAP/EEO Statement

DEFTEC Corp is an Equal Opportunity and based on actual or perceived race, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, and medical conditions related to pregnancy, childbirth or breastfeeding), gender, gender identity, and gender expression, religious creed, disability (mental and physical) including HIV and AIDS, medical condition (cancer and genetic characteristics ), genetic information, age, marital status, civil union status, sexual orientation, military and veteran status, denial of family and medical care leave, arrest record and/or any other characteristic(s) protected by federal, state or local law.