Information Technology Specialist (Security)

NASA; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Job summary

NASA Headquarters, Office of Inspector General (OIG) seeks an Information Technology Specialist (Security) to oversee IT security across applications, networks, and enterprise architecture. The role drives risk assessments, policy development, disaster recovery, and executive briefings to protect mission data.

The position requires DHS/NASA OIG eligibility, top-secret clearance, and compliance with security requirements. Strong experience with patch management and cloud security is essential.

Qualifications

• Specialized experience equipping you to perform IT security duties.
• Experience remediating vulnerabilities and applying patches across servers and cloud/on-prem environments.
• Configuring and supporting AWS cloud services and related security controls.
• Evaluating networking and cloud-related procurements for secure enterprise IT operations.

Responsibilities

• Plan, schedule, execute, and validate patching across servers, workstations, and applications.
• Coordinate vulnerability remediation using BigFix, Nessus, SentinelOne; resolve findings.
• Manage system access; MFA and PIV initiatives; maintain secure permission structures.
• Lead evaluations of security features; develop certification and accreditation plans; track corrective actions.
• Assess IT systems for vulnerabilities; maintain continuous monitoring for compliance.

Skills

Attention to Detail

Customer Service

Tools

BigFix

Nessus

SentinelOne

EC2

GuardDuty

FSx

Airflow

AWS GovCloud

Job description

Information Technology Specialist (Security)

NATIONAL AERONAUTICS AND SPACE ADMINISTRATION

Headquarters, NASA

Office of Inspector General (OIG), Office of Management (OM)

Summary

This NASA OIG IT Security Specialist oversees application software, networks, and enterprise architecture. The role drives risk assessments, policy development, disaster recovery, and executive briefings to secure critical mission data.

Eligibility

This job is open to

Internal to an agency

Current federal employees of the hiring agency that posted the job announcement.

Clarification from the agency

You may apply if you are a current NASA OIG employee with career/career conditional tenure. You must submit an SF-50 that reflects current employment with NASA OIG and career/career-conditional tenure (Tenure field is 1 or 2), and status in the competitive service (Position Occupied field is 1). VRA, Schedule A for individuals with disabilities; NASA OIG term employees eligible under NASA OIG Term Conversation authority, and CTAP/RPL employees.

Duties

• Plan, schedule, execute, and validate patching across servers, workstations, and applications to ensure timely remediation of KEVs and other critical vulnerabilities.
• Coordinate and execute vulnerability remediation across servers and endpoints using tools such as BigFix, Nessus, and SentinelOne to resolve security findings.
• Create, modify, and remove system access; manage authentication controls; conduct account audits; support MFA and PIV initiatives; and maintain secure permission structures.
• Manage user accounts, permissions, and access to sensitive systems and data, ensuring proper authentication; remove access for terminated personnel; and maintain audit records.
• Design and maintain secure network and AWS GovCloud architectures, including firewalls, VPNs, segmentation, logging, high availability, disaster recovery, implement cloud security controls, and secure integration of new technologies.
• Lead evaluations of information system security features; develop certification and accreditation plans; document deficiencies; track corrective actions; and recommend improvements.
• Assess IT systems for vulnerabilities, track remediation of KEVs, and maintain continuous monitoring activities to ensure compliance with federal and agency security requirements.
• Provide expert advice and guidance to leadership, IT staff, and stakeholders on cybersecurity, IT procurements, and coordination with internal departments and external agencies.

Qualifications

Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work.

To qualify for GS-14, you must have one year of directly related specialized experience equivalent to the GS-13 level:

• Remediates enterprise server vulnerabilities across cloud and on-premises environments by applying patches, hardening Linux and Windows systems, updating certificates, and resolving KEV, SOC, and POA&M findings using tools such as BigFix, AWS, and EDW services.
• Configures and supports AWS cloud services, including EC2, Instance Scheduler, GuardDuty, FSx, Airflow, and virtual desktop solutions; upgrades production and development environments; and troubleshoots major application outages through root cause analysis and service restoration.
• Administers access control and security workflows by managing user permissions, implementing MFA, coordinating system access changes, and addressing SSP and POA&M security requirements.
• Evaluates networking and cloud-related procurements by analyzing technical requirements, licensing, subscription costs, and compatibility to support secure and efficient enterprise IT operations.

AND

IF you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the four competencies listed below:

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public,

Conditions of employment

This position is open to U.S. citizens, nationals or those who owe allegiance to the U.S. Current Federal employees must meet qualifications, time in grade, and 90 days after competitive appointment requirements by the closing date of the announcement. This position requires the incumbent to obtain and maintain a TOP SECRET security clearance. Must pass a pre-employment drug screening and background investigation. This position will be subject to random drug testing after the applicant is hired. If selected, you will be required to complete a financial disclosure statement.