Sr. Platform Boundary Defense ESS Engineer

Responsibilities:

• Coordinate with stakeholders, including Security Engineers, Network Administrators, System Administrators, Information Assurance Managers (IAMs) / Information Systems Security Managers (ISSMs), certification authorities, accreditation authorities (and representatives), program managers, vendors, etc., necessary to properly identify, document, mitigate, and manage risk attributed to the target system, network, and/or application
• Identify, develop (either directly, or in coordination with applicable experts), and incorporate common artifacts found in an RMF accreditation package, e.g., system architecture and boundaries, hardware and software inventories, risk assessment reports, POA&Ms, data flows, and other necessary system, network, and application documentation
• Racking and cabling the Platform Boundary Defense (PBD) system
• Configure/test the ACAS solution server components (software and underlying OS)
• Configure/test ACAS scan policies, to include assisting other engineers in designing and executing scans of their systems
• Create Engineering Changes to support the lifecycle including engineering documentation
• Perform vulnerability scans of the system and review on a weekly basis
• Use vulnerability scanning and assessment tools (e.g., ACAS/HBSS) necessary to identify and document compliance
• Design, implement and harden network and networks security solutions
• Work primarily in a secured lab space, where most work must be performed to support this tasking

Minimum Qualifications:

• DoD 8570.1 IAT Level II certification
• Must have one of the following security certifications: Security+, SCNP, SSCP, CISSP, GSEC
• 5+ years of experience in relevant technical field, to include: Technology Analysis and Assessment, Design Definition, Development of Systems Specification, Systems Analysis, Systems Architecture, Systems/Equipment Integration, Test & Evaluation Criteria, and Logistics support of C5ISR requirements
• Proven experience in one or more of the following:
  
  
  
  • System administration experience on DoD-deployed systems
  • Experience in designing, maintaining and/or deploying ESS systems in a DoD environment
  • Being comfortable with the creation of in-depth, accurate technical documentation
  • CANES/ADNS experience for Afloat vessels would be beneficial
  • Participation in SIT/AISIT events
  • Ability to obtain a DoD security clearance
  
  
  
  

Preferred Qualifications:

• One of the following OS/OE trainings or certifications is desired: DoD ACAS Certification, Linux certification (such as RHCSA)
• Knowledgeable with CND Information Assurance (IA) systems
• Experience conducting analyses of log files from a myriad of sources, to include individual host logs, network traffic logs, firewall logs, and intrusion detection system logs to identify & remediate possible threats to network security
• Experience utilizing DISA STIGs to harden and secure Windows or Linux systems
• Knowledge of the RMF process and supporting deliverables is a plus
• Experience maintaining, and/or deploying ACAS systems in a DoD environment
• Experience with design, deployment and/or sustainment of ACAS systems in large (15,000+) node environments is a plus
• Design, testing and validation experience on DoD-deployed systems
• A solid understanding of current operating system security design best practices
• Knowledge of CND ashore and afloat systems is a plus
• Knowledge of the RMF process and supporting deliverables is a plus

Salary: 120k+ to align with education and experience

Hybrid: 2-3 days a week onsite