IT Spec (Infosec)

Patent and Trademark Office•Alexandria, VA

1d•Onsite

About The Position

This position is located in the U.S. Patent and Trademark Office’s Office of the Chief Financial Officer (OCFO), Office of Financial Management Systems (OFMS). The OCFO supports the USPTO’s mission through procurement, corporate planning, and finance. The physical worksite is in Alexandria, Virginia, and on-site presence is required for in-person functions. Situational telework may be available under agency policy and business-unit discretion; the agency currently allows 52 hours of telework per leave year. The role evaluates tools, methodologies, and processes for improving the effectiveness and efficiency of automated financial and planning/budgeting systems. It leads projects involving the design, development, modification, testing, installation, implementation, and support of new and existing systems. The position also enforces IT security policies and practices, owns and participates in Certification and Accreditation processes and annual security assessments, and plans, implements, reports on, and evaluates projects and tasks. Applicants must have at least one year (52 weeks) of specialized experience equivalent to the GS-13 level. Education may not substitute for specialized experience at this grade. The position is a moderate-risk Public Trust position, requires a background investigation and fingerprint check, and may require a one-year probationary period. It is a bargaining-unit position represented by 2318.

Requirements

United States citizenship or nationality.
One full year (52 weeks) of specialized experience equivalent to the next lower grade, GS-13.
Experience leading and supporting development of new or existing IT systems using Agile and DevSecOps methodologies.
Experience leading IT systems operation and maintenance, enforcing security policies, principles, and standards, implementing defense-in-depth protections, and supporting continuous monitoring and assessment and authorization activities using the NIST Risk Management Framework.
Experience identifying and documenting solutions to information security problems or issues and recommending changes to prevent recurrence.
Experience building service-oriented web applications and APIs in Agile environments using Angular, Spring Boot, Java, TypeScript, Node.js, REST/SOAP, and AWS/PaaS.
Experience in object-oriented development with databases such as DB2, SQL, MongoDB, or PostgreSQL, and CI/CD pipelines for modern delivery.
Pass a background investigation and fingerprint check; a credit check may also be required as part of suitability review.
Register for Selective Service if applicable.
Meet all qualification and eligibility requirements by the announcement closing date and be suitable for Federal employment.
Education may not be substituted for specialized experience at this grade level.

Responsibilities

Evaluate tools, methodologies, and processes for feasibility and for improving the effectiveness and efficiency of automated financial and planning/budgeting systems.
Lead teams and projects for the design, development, modification, testing, installation, implementation, and support of new and existing automated systems.
Enforce IT security policies, principles, and practices for production systems.
Participate in and maintain ownership of the Certification and Accreditation process and annual security assessment activities, ensuring coordinated execution, accurate documentation, and timely completion of deliverables.
Define project and task requirements through planning, implementation, reporting, and evaluation.
Lead and support development of new and existing IT systems using Agile and DevSecOps methodologies.
Lead IT systems operation and maintenance, implement defense-in-depth protections, and support continuous monitoring and NIST Risk Management Framework assessment and authorization activities.
Identify and document solutions to information security problems and recommend changes to prevent recurrence.
Build service-oriented web applications and APIs in Agile environments and support object-oriented development and CI/CD pipelines.