Information Assurance

DEFTEC Corporation•San Antonio, TX

About The Position

DEFTEC is seeking an Information Assurance professional to support the 502d Communications Squadron at Joint Base San Antonio. The 502d provides support for customers requiring access to SIPRNET and NIPRNET, including network infrastructure and server maintenance, service desk and server administration, Unified Capabilities, client systems support, information assurance, communications security, project management, and requirements desk support. The role is responsible for network compliance, accreditation package governance, endpoint vulnerability management, and cybersecurity posture across NIPRNET and SIPRNET enterprise environments. The position requires operational familiarity with Air Force Risk Management Framework processes, Cross Domain Solutions, and technical order compliance. The individual will support accreditation and authorization activities, assess compliance and vulnerability status, manage network account and media documentation, and contribute to configuration and change management processes.

Requirements

Top Secret clearance with SCI eligibility.
Current DoD 8140.03 IAT Level II baseline certification, such as CompTIA Security+ CE, CCNA-Security, CySA+, or higher, obtained before employment starts. Certification must be current, with active continuing-education units registered in the DoD Cyber Exchange/DMDC tracking tool.
At least 4 years of hands-on experience in Certification & Accreditation (C&A/RMF), vulnerability tracking, and computer security standards.
At least 4 years of verified experience managing and securing Microsoft client operating systems, enterprise applications, and third-party software.
Working experience with network analysis, network management tools, network engineering principles, and DoD network operations guidelines.
Strong verbal communication skills and demonstrated ability to coordinate with cross-functional stakeholders.
Experience with Certification & Accreditation, Cross Domain Solutions, Requirements Validation, Mission System Tracking, and Vulnerability Tracking.
Substantial Risk Management Framework (RMF) experience.
Basic knowledge of Government programs operating within network rules and guidelines.
Experience with network management tools, engineering principles, and analysis.

Nice To Haves

Prior experience managing eMASS entries, POA&Ms, and package submissions at the Major Command (MAJCOM) or Air Force level.
Functional knowledge of security boundaries for Video Teleconference (VTC) systems and VoIP telecommunications.

Responsibilities

Evaluate network accreditation packages in accordance with governing-body and Air Force guidance; ensure information-system modifications, exceptions, and deviations follow the RMF process; and evaluate IA control testing and supporting artifacts before forwarding packages to the appropriate agency.
Support Cross Domain Solutions to ensure transfers from classified to unclassified systems are free of sensitive data.
Validate requirements using the Government AIS to ensure network additions, changes, and upgrades are approved by the WCO.
Track mission systems according to prescribed guidance and directives.
Understand network incident response, reporting, and mitigation actions, and refer inquiries to appropriate work centers or points of contact.
Comply with the IA and Assessment Program for SIPRNET and NIPRNET networks.
Receive, review, and process network account documentation for classified users and elevated-privilege accounts according to Air Force and local procedures.
Control external and removable media according to Air Force and local directives.
Monitor and audit compliance with Time Compliance Network Orders, Methods & Procedures Technical Orders, and Information Assurance & Vulnerability Assessments with the respective authorities.
Monitor and audit vulnerability scan status and STIG checks to ensure endpoint security compliance with RMF controls.
Ensure areas containing classified systems meet Emission Security/TEMPEST certification requirements before classified networks are installed or used.
Review logical network drawings to ensure they are current, reflect the network configuration and topology, and meet DISA standards.
Review documentation needed to certify new hardware and software systems for network deployment.
Maintain knowledge of network security and meet the applicable DoD 8570.01M Information Assurance Manager Level II and/or III requirements before employment.
Assist with developing and evolving the network Configuration Control Board process and ensure proper coordination before hardware, software, or patches are deployed to the production network.
Process ports, protocols, and services worksheets and required security impact assessments, and securely register systems or enclaves for initial authorization, reauthorization, and changes through change management.