IT Certified Professional - Senior (TS)

UPSLOPE ADVISORS, INC; Aberdeen (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

UPSLOPE ADVISORS, INC. seeks a cybersecurity professional to support RMF activities and authorization sustainment for Top Secret enclaves when surge is activated. Responsibilities include lifecycle analysis, control implementation, and artifact management in accordance with ICD 503.

The role requires handling sensitive information, monitoring security controls, and coordinating remediation across Windows, Linux, and Apple platforms within classified environments.

Qualifications

• Experience with RMF lifecycle reporting for government systems.
• Ability to document and reconcile security artifacts and evidence.
• Proven track record in security-control lifecycle activities.
• Familiarity with DoD/IC security standards is a plus.

Responsibilities

• Conduct authorization lifecycle analysis and documentation for Top Secret environments.
• Support system categorization, boundary definition, and implementation of security controls.
• Develop and reconcile security authorization artifacts and required lifecycle reporting.
• Support security reviews, identified control weaknesses, and remediation follow-up.
• Execute continuous security-control monitoring and POA&M maintenance for classified environments.
• Review baseline changes and support configuration management, defect reviews, and reconciliation.
• Coordinate sensitive technical findings using approved classified-system processes.

Skills

RMF lifecycle reporting

Security controls implementation

Documentation & reporting

Remediation planning

Job description

POSITION SUMMARY

Support RMF and authorization sustainment for Top Secret enclaves when the Government activates the optional surge requirement. Perform cybersecurity and security-control lifecycle activities for classified systems in accordance with Intelligence Community Directive (ICD) 503 and the applicable ATC requirements.

PRIMARY RESPONSIBILITIES

• Conduct authorization lifecycle analysis and documentation for Top Secret environments in accordance with ICD 503 and relevant government direction.
• Support system categorization, boundary definition, selection and implementation of security controls, and control assessment/verification.
• Develop, maintain, and reconcile security authorization artifacts, assessment evidence, and required lifecycle reporting.
• Support SCA visits, security reviews, identified control weaknesses, and remediation follow-up.
• Execute continuous security-control monitoring, POA&M maintenance, and IAVM activities for assigned classified environments.
• Review hardware/software baseline changes and related security impacts; support configuration management, defect reviews, and hardware/software reconciliation.
• Coordinate sensitive technical findings and required reporting using approved classified-system processes.

MANDATORY QUALIFICATIONS

• CASP+ (now called CompTIA SecurityX) or an equivalent certification accepted under the solicitation.
• At least five years supporting RMF lifecycle reporting and software/hardware reconciliation.
• At least three years supporting lifecycle documentation for Top Secret environments.
• Experience managing networks across Windows, Linux, and Apple platforms and across unclassified/classified environments.
• Active Top Secret personnel security clearance supported by a favorably adjudicated Type 5 investigation at the time surge support is required.
• Meet applicable DoDD 8140.01, DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2 baseline certification requirements at award.