Information System Security Manager (ISSM) (27.1)

SIERTEK LTD•San Antonio, FL

17d•Onsite

About The Position

SierTeK Ltd. is seeking an experienced Information System Security Manager (ISSM) to provide cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting Air Force Research Laboratory (AFRL) operations at JBSA-Fort Sam Houston. The role manages and supports cybersecurity activities across a distributed AFRL organization, with a focus on Risk Management Framework (RMF) compliance, Authorization to Operate (ATO) management, cybersecurity assessments, vulnerability management, eMASS administration, security documentation, and DoD cybersecurity workforce requirements. The ISSM provides cybersecurity guidance and support to technical personnel, leadership, and organizational stakeholders. The position supports DoD 8140 cybersecurity work-role responsibilities and a range of RMF, compliance, assessment, access management, vulnerability remediation, inspection, and organizational coordination activities. The job posting is intended to identify potential candidates for positions responding to a request for proposal; duties, qualifications, compensation, and benefits may change based on an awarded contract, and the opportunity is contingent on SierTeK being awarded the contract.

Requirements

Bachelor of Science degree in Information Technology, Cybersecurity, or a related field.
At least five years of demonstrated experience working with RMF requirements and providing cybersecurity services, with no more than three consecutive years of lapse in cybersecurity work.
Education, training, and/or certifications required by DoDM 8140.03 and applicable current Government directives, regulations, and policies for the assigned cybersecurity role.
Current, valid Security+ certification.
Intermediate-level cybersecurity work-role experience.
Ability to obtain and maintain any required access and credentials associated with the position.
Ability to execute and maintain a Non-Disclosure Agreement (NDA) due to potential access to confidential, proprietary, and/or sensitive information.

Nice To Haves

Current Secret security clearance.
Experience supporting DoD or Air Force cybersecurity programs.
Experience with eMASS, RMF, ATO management, STIG compliance, ACAS, and vulnerability remediation.
Experience supporting cybersecurity audits, inspections, and Government compliance requirements.
Experience working with distributed enterprise environments and multiple network enclaves.

Responsibilities

Serve as the ISSM and perform applicable DoD 8140 Cybersecurity Work Role responsibilities.
Verify that administrative and technical personnel meet baseline certification and training requirements before receiving elevated system access.
Administer Privileged Access Agreements and conduct recurring audits of privileged accounts.
Advise unit technicians and organizational personnel on cybersecurity matters.
Coordinate and track compliance with enterprise cybersecurity architecture, strategy, policies, plans, and supplemental requirements.
Ensure RMF requirements are satisfied and applicable ATO authorizations remain current.
Maintain accurate cybersecurity documentation, records, and supporting artifacts.
Support configuration management reviews and ensure security mechanisms are implemented appropriately.
Maintain cybersecurity information and organizational data in ITIPS, AFRL RMF Workflow, and eMASS.
Administer and track systems and enclaves in eMASS and maintain current ATO packages.
Prepare, maintain, and distribute cybersecurity plans, instructions, and SOPs, including SSPs, SARs, POA&Ms, risk assessment reports, Body of Evidence documentation, network topology diagrams, and hardware and software inventories.
Identify, document, track, and mitigate vulnerabilities found through assessments, audits, and inspections.
Maintain eMASS artifacts and update required documentation within established timelines.
Maintain system hardening checklists and STIGs and coordinate remediation activities.
Support internal and external cybersecurity inspections and audits conducted by Government organizations.
Implement, assess, manage, and monitor eMASS security controls and assessment procedures.
Use ACAS or other Air Force-approved vulnerability scanning tools and interpret scan results.
Conduct application, technical, and non-technical cybersecurity risk and vulnerability assessments.
Support IAVM dissemination, reporting, and compliance activities.
Apply cybersecurity strategies and requirements to cloud environments and deployment models.
Ensure users meet cybersecurity training requirements for continued network access.
Manage logical system access onboarding and offboarding, including DD Form 2875 routing and organizational account coordination.
Coordinate quarterly media destruction in accordance with Air Force and local policies.
Participate in cybersecurity meetings and provide minutes and documentation supporting RMF requirements.
Assist with system discovery, categorization, and entry into eMASS.
Assist in developing compliant cybersecurity solutions and organizational security policies.
Support hardware and software entry and exit requirements in accordance with applicable policies.
Assist with MOAs, MOUs, and AOR letters supporting the RMF accreditation program.
Support tracking and reporting of DoD Directive 8140.03 certification requirements; participate in related meetings and teleconferences and assist with compliance metrics and briefings.
Support the AFRL Cybersecurity Working Group, including meetings, action-item tracking, documentation, and project coordination.
Assist in developing cybersecurity processes, concepts of operation, implementation standards, and policies.
Provide cybersecurity briefings and recommendations to senior Government, Air Force, AFRL, Joint, DoD, and industry leadership as required.
Provide users with customer service and technical guidance on cybersecurity policies, procedures, configurations, and implementation.
Support AFRL Inspector General inspection activities, including pre- and post-inspection requirements.
Support research, selection, implementation, operation, metrics collection, and reporting for enterprise IT pilot and exploratory projects.
Support emerging technology initiatives involving cybersecurity, virtualization, collaborative systems, research computing, mobile technologies, automated IT management, and public, private, and hybrid cloud services.