Cyber A&A Engineer

ISYS Technologies•Schriever AFB, CO

2d•Onsite

About The Position

I2X TECHNOLOGIES is a reputable technology services company to the Federal Government. Whether the focus is on space exploration, national security, cyber security, or cutting-edge engineering applications, I2X is ready to offer you the chance to make a real-world impact in your field and for your country. We provide long-term growth and development. Headquartered in Colorado, I2X is engaged in programs across the country and in more than 20 states. Our programs support multiple Federal agencies, the Department of Defense and often focused on the space initiatives of our government customers. I2X Technologies is seeking a Cyber A&A Engineer to support ongoing activities for a customer in Colorado Springs, CO. This position will be on-site and will require an active Top Secret clearance.

Requirements

DoD final TS is required at start.
IAT certification - Level II or higher required at start.
Solid Cybersecurity engineering skills with working knowledge of Cyber technologies, DoDI 8500.2 and Risk Management Framework (RMF) 800-53.
Excellent technical document preparation and verbal communication.
Thorough understanding of ACAS/SCC outputs.
Hands-on experience reviewing scan data, STIGs and RMF controls.
Experience with eMASS and the accreditation of Cross Domain Solutions (CDS).
Experience managing Cyber Tasking Orders (CTO)/IAVMs and POA&Ms.
Experience working with 3rd party assessors and auditors.
Experience performing self-assessments and analyzing STIGs.
Experience with the management & auditing of accounts.
Knowledge/Understanding of patch & configuration management of complex and disparate enterprise systems.

Responsibilities

Utilize Assessment & Authorization (A&A) background to analyze ACAS/SCC/ConfigOS scans and controls for continuous system Authorization.
Work in collaboration with program & external stake holders to assess system vulnerabilities.
Account management.
Generate engineering responses for system POA&Ms.
Conduct risk analysis for Risk Acceptance Requests (RARs).