Security Delivery Practitioner

Accenture Federal Services•Columbia, MD

11d•Onsite

About The Position

Accenture Federal Services is seeking a Security Delivery Practitioner to support a client in Columbia, Maryland. The role focuses on assessing, designing, integrating, and supporting information assurance and security for cloud computing, networking, and enclave environments, including systems with differing data protection and classification requirements. The practitioner works with cloud architects and system developers to incorporate security functionality and policy into cloud systems and to build secure cloud architectures. The position applies system security engineering throughout the program life cycle. Work includes identifying and mitigating risks, supporting security planning and authorization, and reviewing cloud-system certification and accreditation documentation. Security authorization activities follow applicable NSA/CSS and Department of Defense processes, the NIST Risk Management Framework, and prescribed NSA/CSS business processes. The position requires an active TS/SCI clearance with polygraph. It is based in Columbia, Maryland. The listed base pay range for the specified states and the District of Columbia is $106,300–$206,200 USD. Accenture Federal Services states that it offers a wide variety of benefits, with further information available through its benefits page.

Requirements

Bachelor’s degree and 3 years of experience, or 5 years of equivalent work experience.
3 years of experience in IT, cybersecurity, and/or CNO software development or security research.
3 years of network experience, including at least 1 year of cloud experience, in a large-scale global environment.
Active DoD 8570 Information Assurance IAM Level I or IAT Level II certification, such as Security+.
Active TS/SCI clearance with polygraph.
Applicants for US employment must have work authorization that does not now or in the future require visa sponsorship.

Nice To Haves

Experience controlling, labeling, and securely transferring data between information systems.
Experience with virus scanning and auditing tools, and reviewing system and audit logs.
Experience using databases or spreadsheets to develop or maintain Plans of Action & Milestones (POA&Ms).
Experience with RMF workflow tools such as XACTA or eMASS.
Experience with TS/SCI information security requirements.
Experience using NIST Risk Management Framework processes.
Excellent writing and communication skills.
Ability to communicate security solutions to development and engineering teams.

Responsibilities

Perform or review technical security assessments of cloud environments to identify vulnerabilities and non-compliance with information assurance standards and regulations, and recommend mitigation strategies.
Validate and verify cloud system security requirements and analyses, and establish secure cloud system designs.
Design, develop, implement, and/or integrate information assurance and security systems and components for cloud networking, computing, and enclave environments, including environments with multiple enclaves and differing data protection or classification requirements.
Build information assurance into cloud systems deployed to operational environments.
Assist cloud architects and system developers in identifying and implementing appropriate information security functionality to ensure consistent application of customer security policy and enterprise solutions in cloud environments.
Support the development of secure cloud architectures and enforce the design and implementation of trusted relationships between external systems and cloud architectures.
Assess and mitigate cloud system security threats and risks throughout the program life cycle.
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for cloud system and networking operations.
Review cloud-system certification and accreditation documentation and provide feedback on completeness and compliance.
Apply system security engineering expertise across cloud security design, engineering life cycles, information domains, cross-domain solutions, cryptography, identity and access controls, system integration, risk management, intrusion detection, contingency planning, incident handling, configuration and change management, auditing, certification and accreditation, information assurance principles, and security testing.
Support cloud system security authorization in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP), the DoD Risk Management Framework, the NIST Risk Management Framework, and prescribed NSA/CSS business processes.