NMCC Systems Admin

KaylaTek•Arlington, VA

2d•$130,000 - $132,000•Onsite

About The Position

KaylaTek has an exciting Systems Admin opportunity supporting the AFNCR IT contract at the National Military Command Center. The primary responsibilities for the position are to support the Risk Management Framework (RMF) activities for the 844CS National Military Command Center (NMCC). The nature of the work requires that the candidate demonstrates initiative, organization, responsibility, customer service skills, and the ability to be flexible and adaptive to a fast-paced environment. The candidate must be able to communicate effectively and decisively with all levels of the organization and be able to solve practical problems as well as exercise sound judgement with regards to sensitive and confidential information. The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), Joint Chiefs of Staff, and other Air Force activities within the AFNCR, missions to include the Pentagon, Joint Base Andrews (JBA), Joint Base Anacostia-Bolling (JBAB), and other locations, leased spaces, and alternate sites. The major support areas required are: IT Operations and Maintenance; Plans, Projects, and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail, resulting in a fast-paced, challenging, but also rewarding environment.

Requirements

Bachelor Degree or equivalent work experience and certifications
Current DoD 8570 baseline certification for IAT II(one of the following: GSEC, Security+, SCNPand SSCP certifications)
8-10 years of Cyber Security experience
Familiarity with DoD STIG process.
Excellent verbal and written communication skills.
Familiarity with ACAS, eMASS and XACTASTIG Analysis

Nice To Haves

Nessus
System Admin experience
Experience with CCRI scoring.
Security Control Knowledge and Self-Assessment Experience
Received an ATO for a system and has worked the system through the entire process.

Responsibilities

Run and review Evaluate STIG scan and manually validate STIG
Analyze vulnerability scans and STIG checklists results to determine critical vulnerabilities that are still open and need to be remediated.
Using Analysis results, work with the system owners and work centers to determine if open vulnerabilities can be closed, mitigated or if a POAM needs to be submitted to give the work centers time to work on remediation efforts
Consider and identify impacts as well as consideration of existing risk mitigation strategies and work with the system POC to either close the vulnerability or mitigate the vulnerability using known mitigation strategies.
Provide recommendations to system owners on remediation steps based on DoW and AF guidance and directives.
Validate system Hardware/Software list to ensure information aligns with assets for system.
Create and maintain Standard Operating Procedures (SOP) and Work Instructions (WI)
Creation and tracking of Plans of Actions & Milestones (POA&Ms) for all System Impact Assessments through the lifecycle of the project.
Create Remedy tickets to track progress of STIG implementation.
Complete monthly application STIG status reporting and POA&M updates
Completed and validated STIG/SRG checklists for RMF, quarterly.
Strong verbaland written skills required providing management status reports and document system changes.
Analyze problems and provide focused solutions to effectively communicate information to various audiences verbally and through written communications.
Develops and maintains POAMs and supports remediation activities
Experience with continuous monitoring and Plans of Actions and Milestones (POA&Ms)