Information Systems Architect Mid

Ulu HI-Tech; Honolulu (HI); On-site; USD 123,000 - 125,000; Full time

Job summary

Ulu HI-Tech is seeking a Mid Information Systems Architect to ensure systems comply with security standards and assist in daily tasks related to authorization and assessments. The candidate should have at least 5 years of experience, a high school diploma or GED, and an active Secret Clearance. Responsibilities include developing security policies, facilitating assessments, and managing vulnerabilities with specific tools. Knowledge of the Department of Defense Information Assurance Program is essential.

Qualifications

• 5 years of experience in relevant field.
• Active Secret Clearance.
• Familiarity with Department of Defense Information Assurance.

Responsibilities

• Assist Government Lead with daily tasks and ensure all systems have current ATOs.
• Facilitate A&A for Information Systems and ensure security measures are in place.
• Develop and execute security policies, plans, and procedures.

Skills

Security measures implementation

Vulnerability management

Assessment and Authorization (A&A)

Communication security

Risk Management Framework (RMF)

ITIL version 3 Foundation certification

Education

High school Diploma or GED

Tools

Tenable SecurityCenter

Nessus

RedSeal

BigFix

RSA Archer eGRC system

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Systems Architect Mid

4 days ago Requisition ID: 1011

Salary Range: $123,000.00 To $125,000.00 Annually

LCAT Category Name: Information Systems Architect Mid

Education Level: High school Diploma or General Equivalency Diploma (GED)

Years of Experience: 5

Description

• Assist the Government Lead in daily tasks to ensure all systems have current Authorizations to Operate (ATOs).
• Facilitate Assessment and Authorization (A&A) for Information Systems, data availability, integrity, authentication, confidentiality, and non-repudiation.
• Through A&A review processes, ensure security measures are implemented for communication systems, networks, and provide advice that systems and personnel adhere to established security standards and Governmental requirements for security on these systems.
• Develop and execute security policies, plans, and procedures.
• Initiate creation of A&A packages to support receipt of Authorizations to Operate (ATOs), collaborate with Engineers to gather required information for A&A packages, and update A&A packages as required.
• Perform lifecycle maintenance of A&A packages ensuring ATOs do not expire without proper updates.
• Update the appropriate documentation for Department of the Navy (DON) Application & Database Management System (DADMS) and Department of Defense Information Technology Portfolio Repository - Department of the Navy (DITPR-DON). Submit Ports and Protocols with all supplemental documentation to DISA for approval.
• Submit tickets to initiate action from Headquarters Marine Corps (HQMC) Command, Control, Communications, and Computers (C4) Cybersecurity Division (CY) for approval.
• Ensure appropriate action is taken in a timely manner by appropriate point of contact (POC) within the A&A packages. Assist with validation of A&A packages as required by the Government.
• Review and provide input for Operational Plan of Action and Milestones (POA&M) for submission to Action Officer (AO). Conduct vulnerability scans using Assured Compliance Assessment Solution (ACAS) and assist Engineers in documenting system vulnerabilities.
• Vulnerability management duties include, but are not limited to:
  • Using Tenable SecurityCenter and Nessus scanners, RedSeal, BigFix, Security Content Automation Protocol (SCAP) Compliance Checker (SCC) Tool, HP Fortify, other automated tools, and manual inspections to identify vulnerabilities
  • Documenting vulnerabilities in the RSA Archer eGRC system; reporting vulnerability statistics.
• Experience with Department of Defense Information Assurance Program (DIACAP) and Risk Management Framework (RMF). Must possess Information Technology Infrastructure Library (ITIL) version 3 Foundation certification.

Additional Certification Requirements

• Security Clearance: Active Secret Clearance (T3 Investigation)