Surge IT Certified Professional

Provides surge RMF lifecycle documentation and reconciliation support for ATC systems operating at theTop Secret level. Works under the direction of the IT Sys Solutions Architect-Sr and coordinates with Government security personnel on classified authorization boundaries.

• SecurityX(formally CASP+) or equivalent certification — CISSP,SecurityX, andCySA+ are acceptable.
• Minimum 5 years of experience supporting RMF lifecycle reporting and software/hardware reconciliation.
• Minimum 3 years supporting lifecycle documentation for Top Secret environments.

• Develop and maintain RMF authorization documentation for Top Secret systems, applying classified overlays and CNSSI 1253 baselines as directed.
• Perform hardware/software reconciliation and configuration baseline management within TS authorization boundaries.
• Analyze STIG/SCAP and vulnerability results on classified systems; document findings and maintain POA&Ms in the appropriate classified repository.
• Support classified system audits, inspections, and continuous monitoring in coordination with the ISSM and Government security office.
• Handle and safeguard classified information in accordance withthe DD254 and NISPOM (32 CFR Part 117).

• RMF for classified systems; CNSSI 1253 and classified overlays; NIST SP 800-53/53A; DISA STIGs.
• Classified information handling and safeguarding; secure documentation practices.
• eMASS(or classified equivalent), SCAP, ACAS/Nessus.