Seeking a PPSM Analyst with experience in information systems security, networking/infrastructure, ports, protocols, services, boundary protection, and technical risk analysis. The analyst will maintain PPS Registry information; perform CAL and firewall compliance reviews; assess vulnerabilities and risks associated with ports, protocols, and services; process CLSA, FA, Non-Standard Boundary/Port, and Banned Services Exception requests; correlate PPSM registrations with eMASS authorization packages; process enterprise change requests; track PPSM actions through completion; and support PPSM TAG/CCB activities, customer coordination, metrics, and Government reporting

Primary Responsibilities

The PPSM Analyst will:

• Maintain J6 PPS Registry entries and ensure POC information and registrations are properly correlated with applicable J6 eMASS authorization packagesand evaluated as part of the RMF authorization process.
• Review initiatives requiring modifications to ports and protocols and verify that requested PPS are permitted in accordance with the DoD Category Assurance List (CAL).
• Assess and provide recommendations regarding the risk associated with new or modified firewall rules.
• Conduct technical reviews of new and existing PPSM requirements and provide assessments supporting boundary protection improvements.
• Monitor DoD PPSM Registry registrations for discrepancies and support discrepancy resolution.
• Process and track:
  • Component Local Service Assessments (CLSA)
  • Further Action (FA) requests
  • Non-Standard Boundary/Port Exception requests
  • Banned Services Exception requests
• Track PPSM CLSA packages through final DISA program approval or denial.
• Assess vulnerabilities and implementation strategies associated with protocols, services, ports, and application data services.
• Support requirements analysis, configuration management design, and vulnerability assessment/implementation strategies supporting DISA Boundary Protection and the DISA CAL.
• Ensure Enterprise Information System ports, protocols, and services are registered in the PPSM central registry and appropriately categorized against the CAL.
• Ensure non-standard requests are not deployed prior to required authorization.
• Ensure Information Systems represented in eMASS are captured in the PPSM Registry.
• Monitor and process customer requests through the Government ITSM tool for enterprise change requests.
• Coordinate with customers and project teams to ensure both standard and non-standard PPS requirements are understood and properly documented.
• Conduct recurring PPS Registry validation reviews to ensure entries remain valid and accurate.
• Provide status reports to Government leadership identifying review results, risks, discrepancies, and changes.
• Attend monthly PPSM TAG and CCB meetingsand provide recommendations supporting authorization decisions.
• Support customer meetings and recurring work-status reviews as directed by Government leadership.

Basic Qualifications

• Active DoD Secret clearance or higher - program can support up to TS/SCI

• DoD 8140: 652 Security Architect Intermediate (Includes: SecurityX, CISM, and multiple SANS certs)

• Bachelor's degree and 4+ years of prior experience; add'l experience may be considered in lieu of degree

• Demonstrated knowledge of the DoD Information Network and boundaries

• Demonstrated knowledge on requirements for processing internal and external PPSM requests to include Non-standard use for Authorizing Official (AO) and DoD PPSM approvals

• Demonstrate ability to conduct PPSM reviews and generate exception requests with appropriate risk assessment and recommended risk mitigations

• Demonstrate knowledge of DoD DMZ Whitelist registrations, Web Content Filtering and exception requirements

• Demonstrable skills in work ticket monitoring and prioritization

• Demonstrable skills in effective oral and written management, customer and team communication to include engagement

• Demonstrable skills In technical and workflow problem solving

• Demonstrable skills in exemplary customer service.

• Demonstrate knowledge of DoD DMZ Whitelist registrations and exception requirements

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.