Cybersecurity IA Analyst

Diné Development Corporation

7d•Hybrid

About The Position

Serves as a Cybersecurity IA Analyst for test and pre-production environments. Provides cybersecurity Management support to the Program Executive Officer (PEO) Program Management Offices (PMO) for emerging information systems through the acquisition lifecycle and where applicable into sustainment; provides technical support and guidance to facilitate the identification and integration of security controls at the onset of the acquisition lifecycle for emerging IT capabilities; serves as a principal liaison for Enterprise-level boundary defense initiatives to ensure consistent and sufficient identification and implementation of applicable security controls in concert with the cybersecurity and IT architecture; and provides oversight for the design and implementation of Enterprise-level cybersecurity solutions providing standards for access control capabilities across the Enterprise. This position requires deep familiarity with cybersecurity concepts and processes within the Department and with AWS cloud environments, and specific working knowledge of what it takes to obtain Interim Authority to Test / Connect (IATT-C) and Authority to Operate (ATO) accreditations and their associated processes. This position is contingent upon contract award.

Requirements

Ten (10) years of practical industry, government and/or consulting experience in information technology management, relevant Assessment and Authorization (A&A) experience.
Demonstrated experience obtaining IATT-C and ATO accreditations, including hands-on ownership of the associated submission, review, and approval processes.
Demonstrated familiarity with cybersecurity concepts and processes within the Department.
Demonstrated experience securing and accrediting AWS cloud environments.
National Institute of Standards and Technology (NIST) A&A experience.
DOD RMF experience.
Malware Analysis.
IT project management experience using various Microsoft tools.
Knowledge and experience in managing information technology services and strategies.
Proficiency in basic analytical software such as Microsoft Excel and Access, and proficiency with the Microsoft Office suite to include Word, PowerPoint, and SharePoint.
Experience implementing modern security solutions (e.g., Blockchain or related cryptographic research).
Extensive experience working highly complex IT systems. Resume must demonstrate experience working legacy system upgrades, modernization, legacy system transition, data migration and/or system analysis and design.
Priority given to personnel with demonstrated experience performing functional and technical solutions decomposition that enables solutions analysis and design and demonstrated experience implementing solutions with respect to modern database design and modern software languages within the federal Government, specifically within the DoD.
Must possess IT-III Non-Sensitive security clearance or Tier 1 (T1) at time of proposal submission.

Nice To Haves

BS in Computer Science, Information Systems, Cybersecurity, Engineering, IT, or closely related discipline, or equivalent additional relevant experience.
AWS Cloud Practitioner and Security+ desired.
AI/ML experience is preferred.

Responsibilities

Drive the accreditation effort for the test and pre-production environments in accordance with the Risk Management Framework (RMF), NIST 800-37, revision 5.
Facilitate preparation and submission of IATT-C and ATO accreditation packages, managing each step of the associated approval processes and timelines.
Support the Government in obtaining Authority to Operate (ATO) in accordance with RMF requirements or equivalent and produce the artifacts and documentation necessary to ensure appropriate controls for the environment.
Implement and validate the RMF controls necessary to support full ATO accreditation of the scaled environments.
Apply cybersecurity concepts, policies, and processes specific to the Department's operating environment, and translate those requirements into actionable control implementations for the AWS-hosted environment.
Identify and integrate security controls at the onset of the acquisition lifecycle for emerging IT capabilities.
Serve as principal liaison for Enterprise-level boundary defense initiatives and provide oversight of Enterprise-level cybersecurity solution design and access control standards.
Support Zero Trust (ZT) / Identity Credentialing and Access Management (ICAM) integration within proper architectures.
Ensure alignment with the DoD Cyber Strategy, DoD Cyber Workforce Strategy, and DoD Zero Trust Strategy.
Provide cybersecurity input to project reviews, stakeholder meetings and other program activities; communicate risks timely with associated mitigation strategies.
Other duties as assigned.