Information Assurance Engineer

Agile IT Synergy, LLC is a Subject Matter Expert (SME) based technology company focused on innovative engineering and integration of relevant technologies combined with effective business practices to deliver complete solutions that meets customer mission needs.

We are in search of customer focused professionals with a passion for solving difficult problems and exceeding our customer's expectations.

The successful candidate for the Information Systems Security Engineer is responsible for defining, implementing and maintaining information security policies, strategies, procedures and settings within the supported environment. The ISSM serves as a principal advisor on all matters, technical and otherwise, involving the security of information systems under his/her purview. In addition, the successful candidate collaborates with customers during the design and development phase to translate security and business requirements into achievable processes and systems.

The ISSM is responsible for the overall Cybersecurity/Information Assurance (IA) of a program, organization, system, or enclave within AIT Synergy's highly dynamic and fast-paced environment.

• Maintain and/or obtain systems accreditation and authorization for defense information systems and advise government Delegated Authorizing Official (DAO) as required.
• Support RMF and information assurance (IA) support for continuous monitoring in accordance with applicable DoD policies.
• Support industry partners and government agencies in the Risk Management Framework (RMF) Step 6 Phase, Continuous Monitoring, for major defense information systems.
• Support deployment and accreditation of mission owner workloads in commercial cloud IaaS, PaaS, and SaaS environments.
• Support continuous updates and plans of action and milestones (POAMs) as required for maintaining assigned DoD information systems
• Maintain systems for compliance with CNSSI 1253 at the Confidentiality, Integrity, and Availability of Moderate
  - Low
  - Low
• Maintain documentation and engineering artifacts for mission representative System Integration Labs (SIL) to remain as like-in-kind for other deployed or potentially deployed systems.
• Maintain system security plans currently in XACTA or EMASS as required on JWICS
• Follow assigned DoD interface control documents (ICD), RMF Implementation Guides, and other assigned directives for any updates and POAMs, and collaborate with government and industry partner representatives as directed in the coordination of these duties.
• Assist in the preparation of Contract Data Requirements List (CDRL) documents that are required to be reviewed and updated annually, and submit to the government for
  review/approvals. Examples include Security Concept of Operations, Incident Response Plan, Continuous Monitoring Plan, Configuration Management Plan, Contingency
  Plan, Ports, Protocols, and Services (PPS) Plan, and Program Protection Plans.
• Complete and process scans through Vulnerator or other applicable IA tools as directed. Perform analysis on the POAM from that report and compare it to the previous report. Develop
  the appropriate mitigation efforts and estimated completion dates and update the POAM that natively resides in XACTA. Update POAMs at intervals assigned by the government.
• Monitor quarterly service bulletins, and update program software lists with any version changes as required. Ensure that these bulletins are tracked and coordinated with designated engineering staff as required.
• Maintain compliance with directed mission-specific DoD processes (e.g. Certificate to Field (CtF), Security Impact Analysis (SIA) and others as assigned).
• Coordinate with designated Engineering and Management to ensure that the program source code for software and virtual machines (VM) created for any major version changes is reviewed and delivered to the government for Certificate to Field (CtF) or Authority to Operate (ATO) approval.
• Ensure that software that is third-party and proprietary follows the scan-load-scan process, and the pre-scan and post-scan results are sent to the government for CtF/ATO approval.
• Utilize government agency available sites to locate already…