POSITION SUMMARY
Support RMF and authorization sustainment for Top Secret enclaves when the Government activates the optional surge requirement. Perform cybersecurity and security-control lifecycle activities for classified systems in accordance with Intelligence Community Directive (ICD) 503 and the applicable ATC requirements.
PRIMARY RESPONSIBILITIES
- Conduct authorization lifecycle analysis and documentation for Top Secret environments in accordance with ICD 503 and relevant government direction.
- Support system categorization, boundary definition, selection and implementation of security controls, and control assessment/verification.
- Develop, maintain, and reconcile security authorization artifacts, assessment evidence, and required lifecycle reporting.
- Support SCA visits, security reviews, identified control weaknesses, and remediation follow-up.
- Execute continuous security-control monitoring, POA&M maintenance, and IAVM activities for assigned classified environments.
- Review hardware/software baseline changes and related security impacts; support configuration management, defect reviews, and hardware/software reconciliation.
- Coordinate sensitive technical findings and required reporting using approved classified-system processes.
MANDATORY QUALIFICATIONS
- CASP+ (now called CompTIA SecurityX) or an equivalent certification accepted under the solicitation.
- At least five years supporting RMF lifecycle reporting and software/hardware reconciliation.
- At least three years supporting lifecycle documentation for Top Secret environments.
- Experience managing networks across Windows, Linux, and Apple platforms and across unclassified/classified environments.
- Active Top Secret personnel security clearance supported by a favorably adjudicated Type 5 investigation at the time surge support is required.
- Meet applicable DoDD 8140.01, DoD 8570.01-M, DFARS [redacted], and AR 25-2 baseline certification requirements at award.
