Principal Information Assurance (IA) Analyst

JCS Solutions LLC•Fort Meade, MD

1d•$116,000 - $167,000•Onsite

About The Position

JCS Solutions is seeking a Principal Information Assurance (IA) Analyst to support the Defense Enclave Services (DES) program, which serves the Defense Information Systems Agency (DISA) and Department of Defense Fourth Estate Agencies. This senior cybersecurity professional will support engineering teams in modernizing and enhancing enterprise network services, cybersecurity capabilities, automation initiatives, Zero Trust implementation, wireless modernization, IPv6 adoption, and network service migration efforts. The role involves providing Information Assurance guidance throughout the entire lifecycle of engineering initiatives, from design to sustainment. Expertise in Risk Management Framework (RMF), cybersecurity compliance, vulnerability management, and accreditation is crucial to ensure solutions meet Department of Defense cybersecurity requirements while supporting operational objectives. The Principal IA Analyst will act as a key liaison between engineering teams, government cybersecurity stakeholders, and Authorizing Officials, ensuring security requirements are integrated into technical designs and properly documented for the authorization process.

Requirements

Bachelor's degree and 12+ years of experience. Additional years of directly applicable experience may be accepted in lieu of a degree.
Active DoD Secret security clearance.
U.S. Citizenship required.
Current DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent).
Experience supporting Risk Management Framework (RMF) activities.
Experience serving as an ISSO, ISSO Support, Security Control Assessor (SCA) Representative, or similar cybersecurity role.
Experience supporting Authority to Operate (ATO) activities and cybersecurity accreditation efforts.
Experience performing vulnerability and compliance assessments using multiple assessment tools.
Experience using eMASS and/or Xacta.
Solid understanding of RMF and System Development Life Cycle (SDLC) methodologies.
Understanding of hardware and software engineering best practices.
Experience developing cybersecurity documentation and compliance artifacts.
Strong analytical and problem-solving skills.
Must meet eligibility requirements supporting the assigned government contract.
Ability to successfully complete required government security investigations.
Strong written and verbal communication skills.

Nice To Haves

Experience collaborating with diverse stakeholders to drive consensus, alignment, and forward progress across engineering, cybersecurity, operations, and government teams.
Ability to identify process improvement opportunities and implement continuous improvement initiatives that improve efficiency, compliance, and execution.
Experience supporting large-scale DoD or Federal cybersecurity programs.
Ability to work successfully and independently within a geographically distributed or virtual team environment.
Strong ability to balance cybersecurity compliance requirements with operational and mission needs.
Experience leading cybersecurity efforts supporting engineering modernization projects, network transformations, cloud initiatives, Zero Trust implementations, wireless modernization, or IPv6 adoption.
Certified Information Systems Security Professional (CISSP)
Certified Information Systems Auditor (CISA)
Certified Authorization Professional (CAP)

Responsibilities

Evaluate, develop, and implement information assurance policies, procedures, and security controls.
Recommend cybersecurity mitigations and enhancements supporting customer requirements and cybersecurity standards.
Perform vulnerability assessments and risk analyses throughout the system development lifecycle.
Conduct information technology security site surveys.
Support Authorizing Official (AO) actions through development and submission of RMF accreditation packages and supporting artifacts.
Develop and maintain cybersecurity documentation, evidence packages, and compliance artifacts required for authorization activities.
Support Audit and Accountability (AU) requirements in accordance with NIST SP 800-53 guidance.
Provide input into organizational access control policies and implementation plans.
Develop processes and procedures for evaluating and documenting vulnerabilities in accordance with DoDI 8510.01.
Ensure information systems meet or exceed cybersecurity compliance requirements.
Identify, document, report, and support remediation of security violations.
Establish information assurance requirements based upon user, policy, regulatory, and operational needs.
Perform vulnerability and compliance assessments using multiple security scanning and assessment tools.
Manage and maintain cybersecurity documentation within eMASS and/or Xacta.
Coordinate cybersecurity submissions and accreditation activities with government ISSMs and cybersecurity representatives.
Support engineering modernization efforts including Zero Trust initiatives, network service migrations, wireless modernization projects, and IPv6 implementation activities.
Mentor junior team members and provide cybersecurity guidance.
Monitor cybersecurity requirements, updates, directives, and evolving regulatory guidance.
Identify security requirements necessary for safeguarding government information and systems.