Systems Engineer III

Type: Full Time

Location: Washington, DC

Overtime Exempt: Yes

Reports To: ARMADA HQ

Security Clearance Required: Active Top Secret

****************** CONTINGENT UPON AWARD ************************

Systems Engineer III (Information Management Technical Support)

Duties & Responsibilities:

• The Systems Engineer III shall develop, update, and review Risk Management Framework (RMF) documentation to include (Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports.
• The Systems Engineer III shall assess system compliance against National Institute Standards and Technology (NIST), Department of Defense (DOD), and NGA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRG).
• The Systems Engineer III shall produce evidence as necessary to compliance status of NIST, DOD and National Geospatial Agency (NGA) security requirements as necessary to meet government requirements.
• Work with system administrators, engineers, and developers to create or update system/site policies, procedures, and process guides.
• Coordinate with other SME's, internal, and external customers to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories.
• Analyze vulnerability scans of information systems and assist in remediation tasks.
• Conduct risk and vulnerability assessment of information systems to identify vulnerabilities, risks, and protection needs.
• Facilitate or participate in meetings with stakeholders to discuss statuses and efforts of SIS systems and report to government on findings.
• Prepare and submit bi-weekly reports to team leads and government engineering team regarding system/program status.
• Serve as a Subject Matter Expert (SME) on one or more technologies/skills related to Assessment & Authorization (A&A) activities.
• Actively facilitate and participate in regular A&A status meetings with government and task order personnel to facilitate progress and address potential issues of RMF system efforts.
• Participate in sessions aimed and identifying, planning, and executing strategies in response to emerging cybersecurity RMF policies.
• Maintain industry awareness and knowledge of evolving security and risk management standards to include DOD, and NGA policies, procedures and regulations and communicate and apply relevant changes to existing processes.
• Ensure proper use of remote access connectivity from NGA to Background Investigations systems approved by NGA's CIO-T office and maintained in accordance with NGA's policy and procedures.
• Ensure File Transfer Protocol (FTP) connections from NGA to the Background Investigation system meets NGA and NIST requirements.
• Ensure site to site Virtual Private Network (VPN) tunnels are established based on NGA and DOD
• Ensure NGA approved documentation of all interconnections with systems in the SIS footprint connected to NGA infrastructures.
• Conduct audits on computer systems to detect, prevent, and record computer use and abnormalities, Report to Information System Security Officer (ISSO) or Information System Security Manager (ISSM) any attempts by non-authorized users to access SIS systems and provide monthly logs to NGA.
• Ensure data is being protected in accordance with NGA and DOD policies, standards, regulations, and procedures for the SIS specified systems.
• Coordinate the use of multiple security counter measures to protect the integrity of the information assets in SIS systems enterprise i.e. firewalls, access control, auditing etc. In accordance with accreditation standards using NIST's Intelligence Community Directive (ICD) 503.
• Develop, update, ensure security policy and procedures follow the accreditation standards using the NIST'S ICD 503, Risk Management Framework (RMF), and categorizing methods.
• Ensure the protection of the security system through implementation of security controls that protect against malicious behavior to include intrusion, tampering and virus detection.
• Ensure documentation of specific equipment restrictions, to include documentation on all interconnections required for all SIS systems.
• Ensure no personal computers, peripherals or other agencies computers, not authorized by NGA CIOT, will be used across interconnection or on NGA Networks.
• Other duties as assigned.

Knowledge, Skills, and Abilities (KSAs):

Required:

• Experience in assessing systems using NIST 800-53 and DISA STIGs and SRG.
• DOD 8070/8140 Compliant, CompTIA Security+ certified
• Efficient with RMF Package development, including POAM (mitigation statements) Security plans, Risk assessment system/site policies, procedures and processes, architecture.
• Windows Operating systems
• AWS Services

Desired:

• Testing Security Test Cases for NIST 800-53 Security Controls
• Nessus & DISA STIG Remediation
• Troubleshooting system issues
• Linux Operating systems

Minimum/General Experience & Education:

• Bachelor's Degree or equivalent experience in a related field to security engineering
• Minimum of 3-6 years of experience

Disclaimer:

The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position.

Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at www.armadausa.com.

Special Notes: Relocation is not available for these jobs.

ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.