Cybersecurity SME
About The Position
At IPT Associates (IPTA), we enjoy solving real-world problems with technology. We work closely with our customers, teammates, experts, and partners to come up with practical solutions that make a difference. Whether it's a government or business organization, we focus on understanding the need and building something that works. Our Team At IPTA, everything starts with our people. We're big believers that when you invest in your team, great things happen. That's why we encourage learning, growth, and trying new things-even if you don't have all the answers yet. Our culture is rooted in fierce determination, fearless integrity, and passionate service-but we also like to keep things collaborative, supportive, and down-to-earth. We're looking for people who: Are curious and excited about technology Like solving problems and figuring things out Can take initiative but also enjoy working with a team Want to keep learning, growing, and challenging themselves If you're someone who's eager to jump in, learn something new, and make an impact-you'll fit right in here.
Requirements
- Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience
- Experience in assessing security controls and conducting authorization reviews for large, complex organizations
- Active security clearance
- DoD Approved 8570 Baseline Certification: Category IAM Level III
Responsibilities
- Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures
- Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process
- Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes
- Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system's current or future authorization
- Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Education Level
No Education Listed
