PPSM Analyst

Leidos; Alexandria (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos in Reston, Virginia is seeking a PPSM Analyst to manage PPSM Registry data, review CAL and firewall changes, and support RMF authorization processes for DoD systems.

Responsibilities include processing CLSA/FA/Non-Standard requests, correlating registrations with eMASS, monitoring for discrepancies, and coordinating with customers and project teams for standard and non-standard PPS requirements. The role requires active DoD clearance and DoD knowledge.

Qualifications

• Active DoD Secret clearance or higher; program can support up to TS/SCI
• DoD 8140: 652 Security Architect Intermediate (Includes: SecurityX, CISM, and multiple SANS certs)
• Bachelor's degree and 4+ years of prior experience; additional experience may substitute for degree
• Knowledge of the DoD Information Network and boundaries
• Experience processing PPSM requests and approvals (AO)
• Ability to conduct PPSM reviews and generate risk-based exception requests
• Knowledge of DoD DMZ Whitelist registrations and exception requirements
• Experience with work ticket monitoring and prioritization
• Strong oral and written communication for customer and team engagement
• Demonstrated skills in technical/workflow problem solving and customer service
• Knowledge of DISA Boundary Protection and CAL requirements

Responsibilities

• Maintain PPS Registry entries and correlate with eMASS packages
• Review changes to ports/protocols and ensure PPS are allowed per CAL
• Assess risk of new/modified firewall rules
• Review PPSM requirements and boundary protection improvements
• Monitor PPSM Registry for discrepancies and resolve them
• Process CLSA, FA, Non-Standard Boundary/Port, and Banned Services requests
• Track CLSA packages through DISA approval/denial
• Assess vulnerabilities and implementation strategies for protocols/services/ports
• Support requirement analysis, configuration management design, and vulnerability assessments
• Ensure PPSM Registry captures all IS ports/protocols/services
• Prevent deployment of non-standard requests without authorization
• Ensure IS in eMASS are registered in PPSM Registry
• Process government ITSM enterprise change requests
• Coordinate with customers/projects on PPS requirements
• Conduct PPS Registry validation reviews
• Provide status reports on reviews, risks and changes
• Attend PPSM TAG/CCB meetings and support authorization decisions
• Support customer meetings and recurring work-status reviews

Skills

DoD Security Clearance

RMF/DIACAP knowledge

Risk assessment

Customer communication

Problem solving

Education

Bachelor's degree in a related field

Tools

eMASS

PPSM Registry

Government ITSM

CAL (Category Assurance List)

DMZ Whitelist management

Job description

Description

Seeking a PPSM Analyst with experience in information systems security, networking/infrastructure, ports, protocols, services, boundary protection, and technical risk analysis. The analyst will maintain PPS Registry information; perform CAL and firewall compliance reviews; assess vulnerabilities and risks associated with ports, protocols, and services; process CLSA, FA, Non-Standard Boundary/Port, and Banned Services Exception requests; correlate PPSM registrations with eMASS authorization packages; process enterprise change requests; track PPSM actions through completion; and support PPSM TAG/CCB activities, customer coordination, metrics, and Government reporting

Primary Responsibilities

The PPSM Analyst will:

• Maintain J6 PPS Registry entries and ensure POC information and registrations are properly correlated with applicable J6 eMASS authorization packagesand evaluated as part of the RMF authorization process.
• Review initiatives requiring modifications to ports and protocols and verify that requested PPS are permitted in accordance with the DoD Category Assurance List (CAL).
• Assess and provide recommendations regarding the risk associated with new or modified firewall rules.
• Conduct technical reviews of new and existing PPSM requirements and provide assessments supporting boundary protection improvements.
• Monitor DoD PPSM Registry registrations for discrepancies and support discrepancy resolution.
• Process and track:
  • Component Local Service Assessments (CLSA)
  • Further Action (FA) requests
  • Non-Standard Boundary/Port Exception requests
  • Banned Services Exception requests
• Track PPSM CLSA packages through final DISA program approval or denial.
• Assess vulnerabilities and implementation strategies associated with protocols, services, ports, and application data services.
• Support requirements analysis, configuration management design, and vulnerability assessment/implementation strategies supporting DISA Boundary Protection and the DISA CAL.
• Ensure Enterprise Information System ports, protocols, and services are registered in the PPSM central registry and appropriately categorized against the CAL.
• Ensure non-standard requests are not deployed prior to required authorization.
• Ensure Information Systems represented in eMASS are captured in the PPSM Registry.
• Monitor and process customer requests through the Government ITSM tool for enterprise change requests.
• Coordinate with customers and project teams to ensure both standard and non-standard PPS requirements are understood and properly documented.
• Conduct recurring PPS Registry validation reviews to ensure entries remain valid and accurate.
• Provide status reports to Government leadership identifying review results, risks, discrepancies, and changes.
• Attend monthly PPSM TAG and CCB meetingsand provide recommendations supporting authorization decisions.
• Support customer meetings and recurring work-status reviews as directed by Government leadership.

Basic Qualifications

• Active DoD Secret clearance or higher - program can support up to TS/SCI

• DoD 8140: 652 Security Architect Intermediate (Includes: SecurityX, CISM, and multiple SANS certs)

• Bachelor's degree and 4+ years of prior experience; add'l experience may be considered in lieu of degree

• Demonstrated knowledge of the DoD Information Network and boundaries

• Demonstrated knowledge on requirements for processing internal and external PPSM requests to include Non-standard use for Authorizing Official (AO) and DoD PPSM approvals

• Demonstrate ability to conduct PPSM reviews and generate exception requests with appropriate risk assessment and recommended risk mitigations

• Demonstrate knowledge of DoD DMZ Whitelist registrations, Web Content Filtering and exception requirements

• Demonstrable skills in work ticket monitoring and prioritization

• Demonstrable skills in effective oral and written management, customer and team communication to include engagement

• Demonstrable skills In technical and workflow problem solving

• Demonstrable skills in exemplary customer service.

• Demonstrate knowledge of DoD DMZ Whitelist registrations and exception requirements

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

August 28, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.