PPSM Analyst

Leidos; Alabama; On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a PPSM Analyst with extensive experience in information systems security, networking, and boundary protection. The role focuses on maintaining PPSM registry data, evaluating changes to ports/protocols, and aligning them with CAL and RMF requirements.

The analyst will process CLSA, FA, and exception requests; coordinate with government leadership; and report on risks, discrepancies, and changes. A DoD clearance and 4+ years’ experience are required.

Qualifications

• Active DoD Secret clearance; program can support up to TS/SCI.
• DoD 8140: 652 Security Architect Intermediate (SecurityX, CISM, SANS).
• Bachelor's degree with 4+ years of experience; further experience may substitute for degree.
• Knowledge of the DoD Information Network and boundaries.
• Requirements processing for PPSM requests and approvals.
• PPSM reviews with risk assessment and mitigation recommendations.
• DoD DMZ Whitelist registrations and exception requirements.
• Strong ticket monitoring and prioritization skills.
• Effective oral and written management and customer engagement.
• Demonstrated technical/workflow problem solving and customer service.

Responsibilities

• Maintain PPS Registry entries and correlate with J6 eMASS packages.
• Review modifications to ports/protocols; verify CAL permissions.
• Assess risk of new/modified firewall rules and provide recommendations.
• Conduct PPSM reviews; support boundary protection improvements.
• Monitor PPSM Registry for discrepancies; assist in resolution.
• Process and track CLSA, FA, Non-Standard Boundary/Port, and Banned Services requests.
• Track CLSA packages through DISA approval or denial.
• Assess vulnerabilities and implementation strategies for protocols/services.
• Support DISA Boundary Protection and CAL requirements.
• Ensure PPSM registrations are catalogued and CAL-aligned.
• Monitor Government ITSM for enterprise changes; document requirements.
• Coordinate with customers and teams on PPS requirements.
• Conduct recurring PPS Registry validation reviews; report findings.

Skills

Active DoD Secret clearance

DoD 8140 Security Architect Intermed.

Security certifications (CISM, SANS)

Bachelor's degree

Knowledge of DoD Information Network

PPSM reviews & risk assessment

DoD DMZ Whitelist registrations

Work ticket monitoring & prioritiz.

Oral & written communication

Problem solving & customer service

Education

Bachelor's degree

Job description

Seeking a PPSM Analyst with experience in information systems security, networking/infrastructure, ports, protocols, services, boundary protection, and technical risk analysis. The analyst will maintain PPS Registry information; perform CAL and firewall compliance reviews; assess vulnerabilities and risks associated with ports, protocols, and services; process CLSA, FA, Non-Standard Boundary/Port, and Banned Services Exception requests; correlate PPSM registrations with eMASS authorization packages; process enterprise change requests; track PPSM actions through completion; and support PPSM TAG/CCB activities, customer coordination, metrics, and Government reporting

Primary Responsibilities

The PPSM Analyst will:

• Maintain J6 PPS Registry entries and ensure POC information and registrations are properly correlated with applicable J6 eMASS authorization packages and evaluated as part of the RMF authorization process.
• Review initiatives requiring modifications to ports and protocols and verify that requested PPS are permitted in accordance with the DoD Category Assurance List (CAL).
• Assess and provide recommendations regarding the risk associated with new or modified firewall rules.
• Conduct technical reviews of new and existing PPSM requirements and provide assessments supporting boundary protection improvements.
• Monitor DoD PPSM Registry registrations for discrepancies and support discrepancy resolution.
• Process and track:
  • Component Local Service Assessments (CLSA)
  • Further Action (FA) requests
  • Non-Standard Boundary/Port Exception requests
  • Banned Services Exception requests
• Track PPSM CLSA packages through final DISA program approval or denial.
• Assess vulnerabilities and implementation strategies associated with protocols, services, ports, and application data services.
• Support requirements analysis, configuration management design, and vulnerability assessment/implementation strategies supporting DISA Boundary Protection and the DISA CAL.
• Ensure Enterprise Information System ports, protocols, and services are registered in the PPSM central registry and appropriately categorized against the CAL.
• Ensure non-standard requests are not deployed prior to required authorization.
• Ensure Information Systems represented in eMASS are captured in the PPSM Registry.
• Monitor and process customer requests through the Government ITSM tool for enterprise change requests.
• Coordinate with customers and project teams to ensure both standard and non-standard PPS requirements are understood and properly documented.
• Conduct recurring PPS Registry validation reviews to ensure entries remain valid and accurate.
• Provide status reports to Government leadership identifying review results, risks, discrepancies, and changes.
• Attend monthly PPSM TAG and CCB meetings and provide recommendations supporting authorization decisions.
• Support customer meetings and recurring work-status reviews as directed by Government leadership.

Basic Qualifications

• Active DoD Secret clearance or higher - program can support up to TS/SCI

• DoD 8140: 652 Security Architect Intermediate (Includes: SecurityX, CISM, and multiple SANS certs)

• Bachelor's degree and 4+ years of prior experience; add'l experience may be considered in lieu of degree

• Demonstrated knowledge of the DoD Information Network and boundaries

• Demonstrated knowledge on requirements for processing internal and external PPSM requests to include Non-standard use for Authorizing Official (AO) and DoD PPSM approvals

• Demonstrate ability to conduct PPSM reviews and generate exception requests with appropriate risk assessment and recommended risk mitigations

• Demonstrate knowledge of DoD DMZ Whitelist registrations, Web Content Filtering and exception requirements

• Demonstrable skills in work ticket monitoring and prioritization

• Demonstrable skills in effective oral and written management, customer and team communication to include engagement

• Demonstrable skills In technical and workflow problem solving

• Demonstrable skills in exemplary customer service.

• Demonstrate knowledge of DoD DMZ Whitelist registrations and exception requirements

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

August 28, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.