DoD Compliance​/STIG Specialist

Location: Remote (Primary place of performance is remote; occasional on-site support may be required at JFRC Cheyenne, WY)

Clearance: Must meet minimum DoD SUITABILITY requirements for Entry on Duty (EOD); U.S. Citizenship required

Job Type: Full-time

Contract Type: Government Contract (Base Year: 30 September 2026 - 29 September 2027)

Seeking a highly experienced DoD Compliance / STIG Specialist to provide leadership and technical expertise in Security Technical Implementation Guide (STIG) compliance, FIPS 140-2 encryption validation, and DoD security controls for a government Pure Storage infrastructure environment. This role leads the way towards making storage compliance scalable and part of expected business practices across DoD organizations and various IT communities of practice DoD-wide.

This is a non-personal services contract position. The contractor employee reports directly to the Prime Contractor for HR, disciplinary, and administrative matters, while receiving work direction from the Government Technical Representative and the Contracting Officer's Representative (COR).

This is a remote position with occasional on-site requirements as directed by the Government.

• Perform STIG compliance testing of Pure Storage infrastructure using current version of DoD-approved assessment methods and test reporting tools and formats
• Use the DoD STIG assessment process for storage systems and maintain DoD STIG certification throughout the life of the task order
• Conduct thorough quality checks and reviews of STIG test results completed by HQ compliance teams to ensure accuracy, completeness, and compliance with DoD STIG guidelines
• Perform document remediation for electronic documents and forms (including Microsoft Office suite, Adobe, etc.) using Section 508 Tests for Documents endorsed by the Federal CIO Council Community of Practice
• Provide STIG technical assistance and respond to STIG questions that arise during technical evaluations of Accessibility Conformance Reports (ACR) or Voluntary Product Accessibility Templates (VPAT)
• Develop compliance test plans
• Advise on how to interpret compliance test results and remediate STIG defects
• Provide remediation support for ICT
• Provide STIG technical assistance and respond to STIG questions that arise throughout the system development lifecycle, including:
• Advising project teams and Senior Management on alternative analysis regarding STIG compliance
• Advising on how to use STIG design standards, pattern and code libraries, developer STIG technical guidance, and STIG testing tools
• Advising on STIG review of IT products going through the department's enterprise architecture and network service change processes
• Serve as a back-up to the Government STIG Program Manager, as needed
• Provide back-up support to assist in implementing the Headquarters' STIG Program
• Maintain up-to-date STIG certification throughout the life of the task order
• Participate in events and other activities where presentations or contractor presence is required
• Ensure all materials for events are prepared, delivered, and accessible

Education: High School Diploma or equivalent

Certifications:

• DoD STIG Certification (must possess and maintain throughout the life of the task order)
• IAAP CPACC Certification (Certified Professional in Accessibility Core Competencies)

Experience:

• Minimum of two (2) years of experience testing storage systems for conformance to STIG standards
• Minimum of two (2) years of experience testing and remediating electronic documents for STIG standards
• Minimum of three (3) years of experience supporting ICT project and acquisition efforts with addressing STIG requirements at defined stages throughout the project life cycle

Knowledge:…