Information Assurance Analyst

AtLucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.

Location: This is a US-based remote position, with occasional on-site visits to Arlington, VA as required (travel at employee's expense).

Employment Type: Full-Time, Monday through Friday 7:30 a.m.

- 4:30 p.m.

Security Clearance: No security clearance required. Active favorably adjudicated Tier 3 (NACI) or higher federal background investigation required prior to start; ability to obtain and maintain a DoD Common Access Card (CAC).

Lucayan Technology Solutions LLC is seeking an Information Assurance (IA) Analyst to support the Headquarters, Department of the Army G-1, Directorate of Prevention, Resilience, and Readiness (DPRR) Information Assurance Support Services (IASS) program. This key personnel role performs vulnerability scanning, IAVA monitoring, STIG compliance, and system change-request analysis for the Drug and Alcohol Management Information System (DAMIS), the Risk Reduction Unit Risk Inventory Application, and associated standalone applications hosted in the cArmy Azure Cloud.

Working under the Senior IA Analyst / Program Manager and in coordination with DAMIS technical staff, this position helps keep the system continuously compliant with DoW and Army cybersecurity requirements and its Authority to Operate (ATO) current. Core hours are 7:30 a.m. to 4:30 p.m. Eastern Time, Monday through Friday.

• Conduct weekly, monthly, and annual ACAS vulnerability scans of all assets in the DAMIS authorization boundary, submit results to the System Owner/COR and P-ISSM, and upload them to eMASS within one week of scan completion.
• Monitor Information Assurance Vulnerability Alerts (IAVA) and related notices, assess applicability, and prepare IAVA reports and recommended corrective actions.
• Review system change requests, recommend alternatives based on IA vulnerabilities, and implement approved changes within 2 business days in coordination with DAMIS technical staff.
• Execute DISA STIG checklists and weekly CCI checks across Windows, Red Hat, Oracle, .NET/IIS, and Azure components, and support continuous monitoring of ATO requirements.
• Support RMF documentation and annual contingency, security, and recovery testing.
• Serve as a member of the agency's Computer Emergency Response Team (CERT), acknowledging incidents within 15 minutes and initiating approved mitigation within one hour during duty hours.
• Attend working groups and recurring meetings, and prepare meeting minutes within 2 business days.
• Review the Senior IA Analyst's deliverables for quality and provide backup coverage for program tasks as needed.

• IA/cybersecurity experience within an environment hosting Oracle databases and .NET web applications.
• Solid Red Hat and Windows security and administration experience, with the ability to assess and report on system vulnerabilities.
• Demonstrated technical proficiency conducting weekly, monthly, and annual vulnerability scans.
• Strong familiarity executing DISA STIG checklists for system compliance.
• Ability to review system change requests and recommend implementation or alternatives within a 2-business-day turnaround.
• Strong technical writing and organizational skills, with the ability to manage recurring compliance deadlines.
• Active favorably adjudicated Tier 3 (NACI) or higher federal background investigation prior to start.
• Ability to obtain and maintain a DoD Common Access Card (CAC).

• Experience with Microsoft Azure administration (highly preferred).
• Experience with ACAS, eMASS, SCAP Compliance Checker, and DISA STIG Viewer.
• Experience supporting DoD systems through ATO authorization and continuous monitoring.
• Experience with systems handling Privacy Act, PII, or HIPAA-protected data.
• Bachelor's degree in cybersecurity, computer science, or a related field.

• Active Tier 3 (NACI) or higher background investigation prior to start.
• DoD 8570 IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, CCNA Security) required at time of hire and maintained throughout employment.
• Azure security or Red Hat administration certification desired.