ACAS Engineer

Peraton•Linthicum, MD

12d•$112,000 - $179,000•Onsite

About The Position

Peraton is seeking an ACAS Engineer to join our team. This role involves developing implementation strategies, guidance, best practices, schedules, and detailed product feature specifications to support the integration of ACAS enterprise servers and services. The engineer will provide solution engineering to ensure systems and components meet current and future standards, perform ACAS administration, and conduct testing of new ACAS technologies. This position requires a motivated self-starter with strong written and verbal communication skills, capable of creating complex technical reports on analytic findings, and possessing strong analytical and troubleshooting skills. The role also includes non-domain joinable device scanning.

Requirements

Skills and expertise in SQL/XSQL Server Administrator (SA), MAC O/S and security, Information Assurance (IA), IP Data Networking and Vulnerability Assessment product engineering and design, REM 3.X/Retina 5.X and greater.
Implementing National Institute of Standards and Technology (NIST) and RMF standards and framework.
Experience running ACAS on Red Hat Enterprise Linux (RHEL).
Hands-on experience with general RHEL administration and troubleshooting.
Demonstrated experience with multiple network security zones, subnetting, VRFs, and VLANs.
Active TS clearance with SCI eligibility.
Active CompTIA Security+ certification.
Active DISA ACAS certification.
Bachelor’s degree with 8+ years of relevant experience; or Master’s with 6+ years of relevant experience.
The degree in one of these fields of study is highly desired: Computer Science, Cybersecurity, Data Science, Information Systems, Mathematics, Software Engineering, or Information Technology.
In lieu of a degree, four years of additional relevant experience or specialized training may be accepted.

Nice To Haves

8+ years of IT related experience preferred.
4-6 years Red Hat experience in a DoD enterprise network environment.
4-6 years of experience with Assured Compliance Assessment Solution (ACAS).
RHCSA / Linux+ / Solaris, DISA ACAS 5.x preferred.

Responsibilities

Develop implementation, guidance, best practice information, schedules, and detailed product feature specifications to support integration of ACAS enterprise servers and services.
Provide solution engineering to ensure systems and components meet current and future standards.
ACAS Administration.
Conduct testing of new ACAS technologies and create documentation to meet suspense dates.
Provide performance tuning to systems and investigate issues with Tenable spanning a large and complex environment.
Deploy, maintain, and perform tuning of Tenable scanners to meet current and future needs.
Develop, create, deploy, and manage Tenable scan configurations to support scanning services to global enterprise.
Ensure that the ACAS scanners and Security Center are operational and reporting properly.
Assist customers in resolving ACAS issues, make recommendations as needed.
Perform recurring vulnerability scans and create repositories, queries, and dashboards as necessary to ensure vulnerability report information is available.
Investigate false positives or potentially confusing scan data results.
Update and maintain tracking mechanism for false positives and track false positives until the finding is corrected; provide results upon resolution.
Create/Update all documentation needed to support the ACAS teams requirements, taskings, deliverables, and maintenance of the ACAS solution.
Install and configure updates to Tenable software as released and in compliance with STIG requirements.
Perform site-specific Tier II support such as risk mitigation activities as part of change/configuration management to ensure smooth implementation and transition to ACAS.
Support the research and analysis of DoD and AF policies and tasking orders to mitigate implementation problems that may impact the ACAS implementation.
Create, modify, maintain, or provide input for supporting documentation to include, but not limited to system design specifications, diagrams, ports and protocols reports, implementation plans, process guides, security impact assessments, risk analysis, milestone forecasting, testing procedures, use cases, compliance documentation, eMASS and RMF support.