IT Specialist (INFOSEC)

Smithsonian Institution•Washington, DC

About The Position

The Smithsonian Institution is the world’s largest museum, education, and research complex, with 21 museums and the National Zoo. This position is located in the National Museum of African American History and Culture (NMAAHC), a national museum for the study and exhibition of African American history and culture. The position is in the Office of Operations, Information Technology (IT) Branch, IT Operations, NMAAHC. The Information Technology Specialist serves as an Information Systems Security Officer (ISSO), responsible for information security procedures that ensure compliance with requirements for safeguarding NMAAHC’s IT network infrastructure. The role develops and implements infrastructure security procedures, reviews network security vulnerabilities, coordinates remediation with computer security and network support teams, and establishes procedures for monitoring, identifying, and reporting suspected or actual security breaches.

Requirements

At least one year of specialized experience equivalent to the GS-11 level in the Federal Service.
Specialized experience developing and implementing information security procedures that ensure IT security compliance.
Specialized experience reviewing network security vulnerabilities and working with network support teams to rectify security breaches.
Specialized experience applying the Availability, Integrity, Confidentiality (A-I-C) information systems security triad to protect information systems from unauthorized access.
IT-related experience demonstrating all nine competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, and Technical Competence.
Meet the qualification requirements by the announcement closing date.
Pass a pre-employment background investigation.
Maintain a bank account for direct deposit or electronic transfer.
Males born after December 31, 1959, must be registered with Selective Service.

Responsibilities

Develop and implement procedures for the annual IT Infrastructure security plan to protect data transmission and storage media from unauthorized access.
Access and review configurations for routers, switches, Microsoft Windows servers, SUN servers, Linux servers, firewalls, IDSs, and IPSs against vendor documentation or websites to ensure appropriate security defenses and deterrents are implemented.
Review network security vulnerabilities and work with computer security and network support teams to resolve IT security findings.
Establish and implement procedures to monitor, identify, and report suspected or actual AIS security breaches affecting IT infrastructure equipment, software, stored data, computer outputs, or the physical environment.