Job opening: SUPERVISORY IT SPECIALIST (INFOSEC)
Salary: $144 354 - 191 900 per year
Relocation: YES
Published at: Oct 08 2024
Employment Type: Full-time
DCSA's PEO (National Background Investigation Services (NBIS)) is seeking a Systems/Data Engineer and/or Architect. The incumbent will support a team of engineers (system, cloud and data) and/or architects. The incumbent is responsible for addressing and integrating talent and culture, governance and administration of data and architecture standardization, and overseeing the agile planning and implementation of engineering solutions large and small in support of NBIS.
Duties
As a SUPERVISORY IT SPECIALIST (INFOSEC) you will be responsible for the following duties:
- Responsible for the cybersecurity of a program, organization, system, or enclave.
- Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.
- Manages and identifies program high-level technical specifications, which may include application design, cloud computing strategy and adoption, and integration of software applications into a functioning system to meet requirements.
- Leads necessary compliance activities (e.g., ensure system security configuration guidelines are followed, compliance monitoring occurs).
- Applies advanced skills to ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s).
- Applies advanced skills in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
- Leads development of a system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements.
- Leads development of security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.
- Leads development/integration of cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET).
- Applies advanced knowledge of cybersecurity principles and network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense in-depth).
- Applies advanced knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).
- Applies advanced knowledge of cloud computing deployment models in private, public, and hybrid environments and the difference between on-premises and off.
- Supervises and assigns work to cybersecurity professionals and other engineering and scientific personnel.
Requirements
- Must be a US citizen
- Selective Service Requirement: Males born after 12-31-59 must be registered for Selective Service. For more information http://www.sss.gov
- Resume and supporting documents received by 11:59PM EST will be considered
- This is a Drug Testing designated position
- Position is a (DCIPS) position in the Excepted Service under U.S.C. 1601
- Work Schedule: Full Time
- Overtime: Occasionally
- Tour of Duty: Flexible
- PCS (Permanent Change of Station): May be authorized.
- Fair Labor Standards Act (FLSA): Exempt
- Financial Disclosure: Not Required
- Telework Eligibility: This position is telework eligible, but is not a full time telework position. The incumbent will be required to report to the office on a routine basis.
- If selected, the incumbent must obtain and maintain appropriate security clearance as indicated in job announcement.
- Any Information Technology/Security certifications / education as specified in the DCWF Annex and as defined by DoD 8140-M are required within six months of appointment date.
- The incumbent must sign a Statement of Understanding regarding the certification requirements and maintaining the appropriate certification is a condition of employment.
Qualifications
The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: i.e. for professional positions or positions with a basic education requirement: http://main.opm.gov/policy-dataoversight/ classification-qualifications/general-schedule-qualification-standards/0100/foreign-affairs series- 0130/; i.e. for positions with no IOR: http://main.opm.gov/policy-dataoversight/ classification-qualifications/general-schedule-qualification-standards/0300/gs-2210-information-technology-management series/) for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 10/17/2024
Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position.
You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade GS/GG-13 in the Federal service and are prepared to take on greater responsibility.
Generally, this would include one year or more of such specialized experience. Specialized experience for this position includes:
1. Experience with the Risk Management Framework (RMF).
2. Management of information technology (IT) security goals and objectives to mitigate program risk.
3. Evaluation of IT engineering and development efforts to ensure baseline security safeguards are appropriately incorporated.
4. Supervision of program level Information System Security Officers (ISSOs) and Engineers (ISSEs).
5. Determination of security relevancy and impact of programmatic and technological changes.
6. IT data source security management; risk assessment; IT system cybersecurity strategy planning and implementation; Zero Trust Strategy; cybersecurity resource allocation; and mitigation of audit findings.
Skills to enter this position:
1. Experience with the Risk Management Framework (RMF) for DoD Systems (DODI 8510.01) S/E.
2. Experience with the Enterprise Mission Assurance Support Service (eMASS) system.
3. Experience ensuring Plans of Actions and Milestones (POA&Ms) or remediation plans are in place and executed against for vulnerabilities identified during risk assessments, audits, inspections, etc.
4. Knowledge of cloud computing deployment models and the difference between on-premises and off-premises/cloud environments.
5. Experience leading cybersecurity for a portfolio of interconnected and interrelated systems.
Specifically you will be evaluated on the following competencies:
1. Systems Integration - Knowledge of principles, methods, and procedures for installing, integrating, and optimizing information systems components.
2. Enterprise Architecture: - An enterprise architecture (EA) is a conceptual blueprint that defines the structure and operation of an organization. The intent of an enterprise architecture is to determine how an organization can most effectively achieve its current and future objectives.
3. Information Assurance - Knowledge of methods and procedures to protect information systems and data by ensuring their availability, authentication, confidentiality, and integrity.
4. Software Engineering - Knowledge of software engineering design and development methodologies, paradigms, and tools; the software life cycle; software reusability; and software reliability metrics.
5. Planning and Evaluating - Organizes work, sets priorities, and determines resource requirements; determines short- or long-term goals and strategies to achieve them; coordinates with other organizations or parts of the organization to accomplish goals; monitors progress and evaluates outcomes.
Education
Substitution of education may not be used in lieu of specialized experience for this grade level.
Contacts
- Address Defense Counterintelligence and Security Agency
27130 Telegraph Road
Quantico, VA 22134
US
- Name: DCSA Servicing Team
- Phone: 614-692-2886
- Email: [email protected]