Information Assurance

DEFTEC Corporation•San Antonio, TX

About The Position

DEFTEC is seeking an Information Assurance professional to support the 502d Communications Squadron at Joint Base San Antonio. The 502d supports JBSA customers who require access to SIPRNET and NIPRNET, providing network infrastructure and server maintenance, service desk and server administration, Unified Capabilities, client systems support, information assurance and communications security, project management, and requirements desk support. The position is responsible for network compliance, accreditation package governance, endpoint vulnerability management, and cybersecurity posture across NIPRNET and SIPRNET enterprise environments. It requires operational familiarity with Air Force RMF processes, Cross Domain Solutions, and technical order compliance. The role evaluates accreditation packages and IA control artifacts, supports secure cross-domain data transfers, validates network changes, tracks mission systems, and helps manage network incidents. It also processes account documentation for classified and elevated-privilege users, controls removable media, monitors technical order and vulnerability compliance, verifies endpoint security, and reviews network diagrams and system deployment documentation. The individual supports configuration control and change management, including security impact assessments and system registration for authorization, reauthorization, and updates. The successful candidate must hold a Top Secret clearance with SCI eligibility and a current DoD 8140.03 IAT Level II baseline certification before employment begins. DEFTEC provides a whole-life benefits package that includes medical, dental, and vision coverage, holidays, paid time off, a 401(k) with match, life and disability insurance, and educational reimbursement.

Requirements

Top Secret clearance with SCI eligibility.
Current DoD 8140.03 IAT Level II baseline certification (for example, CompTIA Security+ CE, CCNA-Security, CySA+, or higher) obtained before the employment start date; certifications must be current with active Continuing Education units registered in the DoD Cyber Exchange/DMDC tracking tool.
At least 4 years of hands-on experience in Certification & Accreditation (C&A/RMF), vulnerability tracking, and computer security standards.
At least 4 years of verified experience managing and securing Microsoft client operating systems, enterprise applications, and third-party software.
Demonstrated working experience with network analysis, network management tools, network engineering principles, and DoD network operations guidelines.
Superior verbal communication skills and demonstrated ability to coordinate with cross-functional stakeholders.
Experience with Certification & Accreditation, Cross Domain Solutions, requirements validation, mission system tracking, and vulnerability tracking.
Significant Risk Management Framework (RMF) experience.
Basic knowledge of Government programs operating within network rules and guidelines.
Experience with network management tools, engineering principles, and analysis.

Nice To Haves

Prior experience managing eMASS entries, POA&Ms, and package submissions at the Major Command (MAJCOM) or Air Force level.
Functional knowledge of security boundaries for Video Teleconference (VTC) systems and VoIP telecommunications.

Responsibilities

Evaluate network accreditation packages against governing-body and Air Force guidance and directives.
Ensure information-system modifications, exceptions, and deviations are processed through the Risk Management Framework (RMF).
Verify that IA control testing is complete and required artifacts are evaluated before forwarding to the appropriate agency.
Provide Cross Domain Solution support and help ensure data transfers from classified to unclassified systems contain no sensitive data.
Validate requirements using the Government AIS to ensure network additions, changes, and upgrades are WCO approved.
Track mission systems according to prescribed guidance and directives.
Support network incident response, reporting, and mitigation, and refer inquiries to appropriate work centers or points of contact.
Comply with the IA and Assessment Program for SIPRNET and NIPRNET networks.
Receive, review, and process account documentation for classified users and elevated-privilege accounts under Air Force and local procedures.
Control external and removable media according to Air Force and local directives.
Monitor and audit compliance with Time Compliance Network Orders, Methods & Procedures Technical Orders, and Information Assurance & Vulnerability Assessments with the respective authorities.
Monitor vulnerability scan status and STIG checks to ensure endpoint security compliance with RMF controls.
Ensure areas containing classified systems meet Emission Security/TEMPEST certification requirements before classified network installation or use.
Review logical network drawings for accuracy, currency, network topology, and DISA standards compliance.
Review documentation required to certify new hardware and software systems for network deployment.
Maintain current knowledge of network security and meet DoD 8570.01M Information Assurance Workforce requirements at Information Assurance Manager Level II and/or III, depending on function, before employment.
Assist with the continued development and evolution of the network Configuration Control Board process and ensure required coordination before production network hardware, software, or patches are deployed.
Process ports, protocols, and services worksheets and required security impact assessments.
Support secure system or enclave registration for initial authorization, reauthorization, and updates or changes through the change management process.