Information Systems Security Officer

ZTI Solutions LLC; Virginia, Fairfax (MN, VA); On-site; USD 120,000 - 195,000; Full time

Job summary

An established industry player is seeking an experienced Information Systems Security Officer to provide critical consulting services for a classified network. This role involves maintaining and developing security policies, ensuring compliance with DoD directives, and overseeing the accreditation process. You will collaborate with various teams to enhance security measures and facilitate the deployment of new applications. This position offers a chance to make a significant impact in a dynamic environment, where your expertise will help shape the security landscape of vital systems. If you are passionate about information security and looking for a rewarding challenge, this opportunity is perfect for you.

Benefits

4 Weeks Paid Time Off

All Federal Holidays Paid Vacation

Four Percent Matching 401K

Full health/vision/dental benefits for employee and family

Qualifications

• 10+ years of experience in Information Technology with a focus on security.
• Active Secret Clearance and IAM-II Level Certification required.

Responsibilities

• Provide ISSO consulting for a DoD-approved classified network.
• Develop and maintain policies, procedures, and accreditation documents.
• Coordinate with vendors for custom-developed applications.

Skills

Risk Management Framework (RMF)

Assessment and Authorization (A&A)

Information Assurance (IA)

Security Device Configurations

Continuous Monitoring

Education

Bachelor's Degree in Information Technology

Tools

eMASS

Job description

About the Job

US Citizen - Secret Clearance Required

Job Description:

• Information Systems Security Officer (ISSO) $120,000-195,000 – Fairfax, VA.

Summary:

Provide ISSO consulting related to the maintenance, upgrade, and technology insertion for a DoD-approved classified network with multiple sites. Specifically, maintain, update, and create new policies/procedures/SOPs and ensure the Assessment and Authorization (A&A) process utilizing the Risk Management Framework (RMF) within eMASS. Develop new accreditation approaches to support the rapid deployment of unaccredited applications by supervising the development process (inside development enclaves), the risk assessment process, and the deployment process of these custom-developed applications.

Certification and Accreditation Consultant Activities:

• Learn and understand the infrastructure to include security device configurations and Zone guidelines as outlined in DISA’s Enclave Test and Development STIG.
• Develop new documents and processes to support the development and deployment of new architectures on the enterprise platform, ensuring the deployed architecture complies with DoD directives.
• Prepare accreditation documents for the Authorizing Official’s review.
• Prepare Memorandums of Understanding (MOU) documents with agency partners.
• Coordinate with vendors who provide custom-developed applications to ensure the applications are developed and maintained in accordance with DoD policies and procedures.
• Update Risk Management Framework accreditation documents as appropriate and ensure the Continuous Monitoring Process is implemented and maintained.
• Maintain (A&A) Package within eMASS.
• Maintain POA&M within eMASS.
• Conduct Continuous Monitoring and self-assessments within eMASS.
• Assist in the following activities to introduce new systems or applications into the infrastructure:
  • Coordinate engineering discussions with application developers to determine the best architecture to support the deployment of the new application on the infrastructure which complies with DoD guidelines related to production and Zone DoD guidelines.
  • Assist in developing CONOPs for the operation of the new system on the network.
  • Approve change requests as required to deploy the new system components on the network.
  • Coordinate with the appropriate team members to determine the applicable STIGs for the new system – and deliver the STIG lists to the system developers.
  • Assist with documenting the Risk Assessment Report for new applications based on scan results from the IA team.
  • Discuss system details with the Authorizing Official’s (AO’s) representatives, specifically detailing potential risks introduced by any new applications along with associated mitigations.

Communication and Initiative:

• Attend weekly ops meetings and discuss your area of responsibility (Assessment and Authorization).
• Take the initiative to talk to team members daily to coordinate team efforts to ensure high-priority tasks are accomplished.
• Take the initiative to observe IA processes and procedures and make recommended improvements.
• Take the initiative to recommend technology improvements to the overall architecture.

Requirements:

• Active Secret Clearance.
• Bachelor’s Degree or higher in an Information Technology Field.
• 10+ years of experience.
• IAM-II Level Certification (e.g. CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP).

Benefits:

• 4 Weeks Paid Time Off.
• All Federal Holidays Paid Vacation.
• Four Percent Matching 401K.
• Full health/vision/dental benefits for the employee and family paid 100% by ZTI Solutions, LLC.