Information Technology Specialist (INFOSEC/SYSADMIN)

Department of the Air Force Headquarters; South Dakota; On-site; USD 90,000 - 120,000; Full time

Job summary

The Department of the Air Force Headquarters seeks an Information Technology Security Specialist to plan, coordinate, and supervise security across JWICS network and server systems, from installation through maintenance and upgrades.

The role requires strong RMF expertise, deep knowledge of system security concepts, and the ability to manage A&A artifacts like SSPs and POA&Ms to achieve system authorization.

Qualifications

• Knowledge of IT cybersecurity principles, RMF, and A&A documentation requirements.
• Ability to create and maintain System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms).
• Understanding of network security, access control, and vulnerability management.

Responsibilities

• Plan, coordinate, and supervise security during installation, testing, upgrading, operation, troubleshooting and maintenance of JWICS network and server systems.
• Apply cybersecurity principles to implement controls and analyze vulnerability scans.
• Direct system administrators in applying patches and secure configurations.

Skills

IT cybersecurity principles

RMF knowledge

Vulnerability management

Network security concepts

Audit log review

Patching & configuration guidance

Job description

The primary purpose of this position is: To serve as an Information Technology Security Specialist with responsibility for security planning, coordinating, and supervising the security during installation, testing, modifying, upgrading, operation, troubleshooting, and maintenance of network and server hardware and softwaresystems on the installation's Joint Worldwide Intelligence Communications Systems (JWICS)network.

This is a GG-12 position in the Defense Civilian Intelligence Personnel System (DCIPS). The GG-12 duties for the "Professional" work category are at the "Full Performance" work level and are equivalent to those at the GG-12 level. The selectee's salary will be set within the grade equivalent to a GS/GG grade based on the selectee's qualifications in relation to the job. In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions for the GG-2210, Information Technology (IT) Management Series (Alternative A). BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.

• 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below. EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: knowledge of, and skill in applying, IT cybersecurity principles, concepts, and practices to perform a wide range of duties in support of the Information System Security Manager (ISSM). The role requires detailed practical knowledge of the Risk Management Framework (RMF) and its procedural application, including the ability to independently prepare, manage, and maintain all required Assessment &Authorization (A&A) documentation. This includes creating and updating System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other artifacts necessary to achieve system authorization. A comprehensive knowledge of system security concepts is required, including network security, access control, and vulnerability management. The position must apply this knowledge to implement security controls, analyze vulnerability scan results, review system audit logs, and direct system administrators in applying required patches and configurations. Note: Creditable experience may include previous military experience, experience gained in the private sector, or experience gained in another government agency.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: Knowledge of computer network security concepts, including network architecture, access control, and defense in-depth principles, sufficient to direct system administrators in applying secure configurations and to advise configuration control boards. Knowledge of the system development lifecycle and the ability to ensure cybersecurity principles and requirements are integrated and addressed in all phases of system change and modernization. Working knowledge of system vulnerability management, including the ability to manag