Information Assurance

DEFTEC Corporation•San Antonio, TX

18h

About The Position

DEFTEC is seeking Information Assurance personnel to support the 502d Communications Squadron at Joint Base San Antonio. The 502d supports JBSA customers requiring access to SIPRNET and NIPRNET and provides network infrastructure and server maintenance, service desk and server administration, Unified Capabilities, client systems support, information assurance and communications security, project management, and requirements desk support. The role supports network accreditation and Risk Management Framework processes, information assurance compliance, cross-domain solutions, network configuration and change management, classified account documentation, media controls, vulnerability tracking, and system authorization. Candidates must hold a Top Secret/SCI clearance and meet the stated DoD cybersecurity workforce certification and experience requirements. DEFTEC provides a whole-life benefits package. The workplace is drug-free, and post-offer applicants and employees may be subject to testing under the company’s policies. DEFTEC is an Equal Opportunity and Affirmative Action Employer.

Requirements

Top Secret/SCI clearance.
IAM Level III certification (CISSP, CCISO, or CISM), as outlined in DoDM 8140.03.
Four years of Certification and Accreditation (C&A) experience.
Experience with Certification & Accreditation, cross-domain solutions, requirements validation, mission system tracking, and vulnerability tracking.
Extensive RMF experience and eMASS experience.
Experience with incident response coordination, IAAP oversight and inspections, DoD 8570, program management, removable media control, orders tracking and compliance, patch management and deployment, and EMSEC/TEMPEST.
General knowledge of real-time services such as video teleconference systems and VoIP communications technology.
General knowledge of and four years of experience with Microsoft client operating systems, applications, and third-party software.
Basic knowledge of Government programs operating within network rules and guidelines.
Experience with network management tools, engineering principles, and analysis.
Meet DoD 8570.01M Information Assurance Workforce, Information Assurance Manager Level II and/or III requirements, depending on function, prior to employment.

Responsibilities

Evaluate network accreditation packages according to governing-body and Air Force guidance and directives.
Ensure information-system modifications, exceptions, and deviations are processed through the Risk Management Framework (RMF).
Ensure IA controls testing is complete and applicable artifacts are evaluated before submission to the appropriate agency.
Support cross-domain solutions and ensure transfers from classified to unclassified systems are free of sensitive data.
Validate requirements using the Government AIS to ensure network additions, changes, and upgrades are WCO approved.
Track mission systems according to prescribed guidance and directives.
Apply knowledge of network incident response, reporting, and mitigation, and refer inquiries to appropriate work centers or points of contact.
Comply with the IA and Assessment Program for SIPRNET and NIPRNET networks.
Receive, review, and process classified-user and elevated-privilege network account documentation according to Air Force and local procedures.
Control external and removable media according to Air Force and local directives.
Monitor and audit compliance with Time Compliance Network Orders, Methods & Procedures Technical Orders, and Information Assurance & Vulnerability Assessments (IAVA), coordinating with relevant authorities.
Monitor and audit vulnerability-scan status and STIG checks to ensure endpoint security compliance with RMF controls.
Ensure areas containing classified systems meet Emission Security/TEMPEST certification requirements before classified network installation or use.
Review logical network drawings for accuracy, current configuration and topology, and compliance with DISA standards.
Review documentation required to certify new hardware and software systems for network deployment.
Stay current on network security and meet applicable DoD 8570.01M Information Assurance Workforce requirements before employment.
Assist with developing and improving the network Configuration Control Board process and ensure proper coordination before hardware, software, or patches are deployed to the production network.
Process ports, protocols, and services worksheets and required security impact assessments.
Secure system/enclave registration for initial authorization, reauthorization, and updates or changes through the change management process.