IT Cybersecurity Specialist

Office of Inspector General•Washington, DC

1d•Onsite

About The Position

The IT Cybersecurity Specialist serves as a Security Engineer in the General Services Administration Office of Inspector General (GSA OIG) Information Technology Division, supporting operation and maintenance of the OIG cyber defense suite. The position reports directly to the Chief Information Security Officer (CISO). One vacancy is being filled in Washington, DC, with the possibility of additional vacancies. The role protects the confidentiality, integrity, and availability of systems, networks, and data by supporting the information systems security program, policies, procedures, and tools. It supports cybersecurity operations for IT networks, systems, and cloud platforms; enterprise IT planning and modernization; and the design, implementation, optimization, and maintenance of networked and cloud systems. The specialist administers enterprise security tools and ensures security controls operate as intended, advises users about system risks, assesses risk, and maintains security documentation, including system security plans.

Requirements

Demonstrated IT-related experience in each of the nine IT Specialist competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, and Technical Competence.
One year of specialized experience equivalent to the GS-12 level in the Federal service.
Experience working independently or on a team with systems engineering involving Windows servers, virtualization, routing and switching, databases, firewalls, virtual private networking, Windows and Linux operating systems, and SASE products.
Experience providing technical advice, guidance, and recommendations to management and technical specialists on critical IT issues, including information security.
Experience with Zero Trust Architecture (ZTA).
Experience applying security requirements such as FISMA, FedRAMP, NIST 800-53, and other applicable federal requirements for assessment, authorization, and continuous monitoring.
Experience interpreting and applying policies, procedures, and strategies governing the planning and delivery of IT services.
Experience managing network scans, log reviews, IDS configurations, and antivirus/malware flags.
Experience with security analysis toolsets and information security concepts, principles, and practices.
Experience configuring and managing enterprise firewalls, intrusion detection systems, antivirus software, data encryption, and other industry-standard security techniques and practices.
U.S. citizenship or national status (residents of American Samoa and Swains Island).
Meet all eligibility requirements within 30 days of the closing date.
Register with Selective Service if male and born after December 31, 1959.
If selected, disclose current or recent political appointment status as described in the announcement.
Serve a one-year probationary period, if required.
Undergo and pass a Tier 3 background investigation.
Have identity and work-status eligibility verified through E-Verify if not a GSA OIG employee, and resolve any discrepancies.
Complete a financial disclosure report.

Responsibilities

Plan, analyze, develop, implement, maintain, and enhance information systems security programs, policies, procedures, and tools to protect systems, networks, and data.
Support cybersecurity operations for IT networks, systems, and cloud platforms by applying cybersecurity policies and security engineering principles, including identity and access management, encryption, continuous monitoring, secure configuration, and automation.
Contribute to analysis, planning, and support of the OIG enterprise IT framework, including cloud modernization, automation initiatives, and digital transformation efforts aligned with organizational goals.
Support the planning, design, implementation, optimization, and maintenance of networked and cloud systems.
Administer enterprise security tools, including firewalls, VPN gateways, zero-trust technologies, MFA services, and DLP.
Ensure security controls are in place and operate as intended; advise users of risks and assess risk.
Complete and maintain security documentation, including system security plans.