Information Assurance

DEFTEC Corporation•San Antonio, TX

About The Position

DEFTEC is seeking Information Assurance personnel to support the 502d Communications Squadron at Joint Base San Antonio. The 502d supports customers requiring access to SIPRNET and NIPRNET and provides network infrastructure and server maintenance, service desk support, server administration, Unified Capabilities, client systems support, information assurance and communications security, project management, and requirements desk support. The Information Assurance role evaluates network accreditation packages and IA control artifacts; supports cross-domain solutions and requirements validation; tracks mission systems; and coordinates incident response, account documentation, removable media, vulnerability compliance, and network security requirements. The position also reviews network diagrams and certification documentation, supports configuration control and change management, and processes security-impact assessments and system authorization documentation. The incumbent must meet applicable DoD information assurance workforce requirements before employment.

Requirements

Top Secret/SCI clearance.
IAM Level III certification, such as CISSP, CCISO, or CISM, as outlined in DoDM 8140.03.
Four years of Certification and Accreditation experience.
Experience with Certification & Accreditation, Cross Domain Solutions, Requirements Validation, Mission System Tracking, and Vulnerability Tracking.
Extensive Risk Management Framework (RMF) experience.
eMASS experience.
Experience with incident response coordination, IAAP oversight and inspections, DoD 8570 program management, and removable media control.
Experience with orders tracking and compliance, patch management and deployment, and EMSEC/TEMPEST.
General knowledge of real-time services such as video teleconference systems and VoIP communications technology.
General knowledge of, and four years of experience with, Microsoft client operating systems, applications, and third-party software.
Basic knowledge of government programs operating under network rules and guidelines.
Experience with network management tools, engineering principles, and analysis.
Meet applicable DoD 8570.01M Information Assurance Workforce requirements for IAM Level II and/or III, depending on function, before employment.

Responsibilities

Evaluate network accreditation packages according to network governing-body and Air Force guidance; verify modifications, exceptions, and deviations are handled through the RMF process and evaluate IA control testing and artifacts before forwarding them to the appropriate agency.
Provide cross-domain solution support to help ensure data transfers from classified to unclassified systems are free of sensitive data.
Validate requirements using the Government AIS to ensure network additions, changes, and upgrades are approved by the WCO.
Track mission systems according to prescribed guidance and directives.
Apply knowledge of network incident response, reporting, and mitigation, and refer inquiries to the appropriate work center or point of contact.
Comply with the IA and Assessment Program for SIPRNET and NIPRNET networks.
Receive, review, and process account documentation for classified users and elevated-privilege accounts according to Air Force and local procedures.
Control external and removable media according to Air Force and local directives.
Monitor and audit compliance with Time Compliance Network Orders, Methods & Procedures Technical Orders, and Information Assurance & Vulnerability Assessments with the respective authorities.
Monitor and audit vulnerability scan status and STIG checks to ensure endpoint security compliance for RMF controls.
Ensure areas containing classified systems meet Emission Security/TEMPEST certification requirements before classified networks are installed or used.
Review logical network drawings for currency, accurate representation of network configuration and topology, and compliance with DISA standards.
Review documentation required to certify new hardware and software systems for network deployment.
Stay current on network security and meet DoD 8570.01M workforce requirements for Information Assurance Manager Level II and/or III, as applicable, before employment.
Assist with the ongoing development and evolution of the network Configuration Control Board process and ensure coordination before hardware, software, or patches are deployed to the production network.
Process ports, protocols, and services worksheets and required security impact assessments, and manage secure system/enclave registration for initial authorization, reauthorization, and changes through the change-management process.