Information Systems Security Officer / Systems Administrator

Skills

• isso
• isso
• Summary Hiring manager is looking for a candidate who will be an ISSO but has done systems admin work in the past.

It's a bybrid ISSO / Sys Ad role. Information Systems Security Officer / Systems Administrator (B3) client is immediately seeking an Information Systems Security Officer / Systems Administrator (B3) to support one of our highly regarded clients in the government sector. This position requires a versatile technical professional who can administer Windows and Linux systems while also supporting the cybersecurity compliance, authorization, and continuous-monitoring requirements of classified information systems. The ideal candidate has worked within secured federal government environments and possesses hands-on experience with system administration, RMF, ICD 503, JSIG, JAFAN, DISA STIGs, vulnerability management, and security documentation. This individual must be comfortable working independently and collaborating with engineering teams, program leadership, ISSMs, network administrators, and end users.

Location:

Linthicum, MD Work Arrangement:

On-site, full-time due to the classified nature of the environment

Compensation:

Competitive and based on relevant education and experience

Clearance:

Active DoD Secret clearance required; candidate must be able to obtain and maintain SAP/SAR access as required Position Responsibilities Information Assurance and ISSO Responsibilities

• Serve as an Information Systems Security Officer for classified networked and standalone information systems.
• Support the implementation and maintenance of cybersecurity requirements under the Risk Management Framework.
• Ensure information systems are operated, maintained, configured, and disposed of in accordance with approved System Security Plans, internal security policies, and applicable government requirements.
• Support system authorization and continuous-monitoring activities in accordance with ICD 503, RMF, JSIG, JAFAN, NISPOM, and applicable customer guidance.
• Develop, review, and maintain security documentation, including:
• System Security Plans
• Security assessment and authorization documentation
• Hardware and software inventories
• Configuration-management records
• Continuous-monitoring documentation
• Plan of Action and Milestones
• Risk Acceptance or Risk Acknowledgment Letters
• Security audit and inspection records
• Evaluate proposed hardware, software, firmware, network, and configuration changes to determine their security impact.
• Advise the Information Systems Security Manager and program leadership regarding identified vulnerabilities, security risks, compliance gaps, and recommended remediation actions.
• Perform recurring security audits and reviews of operating systems, user accounts, access controls, audit logs, network configurations, and security-relevant system settings.
• Conduct vulnerability assessments using tools such as Nessus, SecurityCenter, ACAS, or comparable scanning platforms.
• Review vulnerability scan results and coordinate remediation, mitigation, POA&M development, or risk acceptance for findings that cannot immediately be resolved.
• and assess DISA Security Technical Implementation Guides for Windows, Linux, virtualization, network, and supporting infrastructure.
• Maintain records of security patches, operating-system updates, application upgrades, and configuration changes throughout the information system life cycle.
• Ensure users have the appropriate security clearance, authorization, need-to-know, and security training before receiving access.
• Support internal and external cybersecurity audits, customer inspections, authorization reviews, and security assessments.
• Assist with security education and provide cybersecurity training to system users and technical personnel.
• Maintain current and accessible information-system security documentation for properly authorized personnel.
• Perform security monitoring and log analysis using Splunk or another Security Information and Event Management platform.
• Investigate potential security events and escalate incidents in accordance with established reporting procedures. Systems Administration Responsibilities
• Administer Windows Server and Red Hat Enterprise Linux systems supporting classified government programs.
• Install, configure, maintain, monitor, and troubleshoot servers, workstations, operating systems, applications, and supporting infrastructure.
• Manage Windows domain services, Active Directory, Group Policy, LDAP, user accounts, computer accounts, file permissions, and access-control lists.
• Perform system patching, operating-system upgrades, software installations, configuration changes, and vulnerability remediation.
• Configure and maintain systems in accordance with approved security baselines and applicable

DISA STIG

requirements.

• Maintain the availability, performance, reliability, and security of multi-user computing environments.
• Provide backup and recovery services and manage data-storage devices, system images, and restoration procedures.
• Install, configure, and maintain antivirus, antimalware, endpoint-security, and host-based monitoring solutions.
• Support VMware environments, virtual machines, virtual infrastructure, and associated system-management activities.
• Support basic network administration and troubleshooting involving TCP/IP, subnets, routing, VLANs, DNS, and Cisco technologies.
• Maintain system logging and security-audit configurations on classified networked and standalone systems.
• Administer Splunk components, which may include indexers, search heads, deployment servers, dashboards, data inputs, searches, and field extractions.
• Test new operating-system releases, software products, patches, and configuration changes to verify compatibility and minimize user impact.
• Create, maintain, and deploy standardized system images within an enterprise environment.
• Develop and maintain technical processes, system diagrams, build documentation, troubleshooting guides, and operating procedures.
• Monitor system health and capacity using tools such as Splunk, HBSS, SolarWinds, or comparable enterprise-monitoring solutions.
• Recommend system enhancements that improve security, reliability, availability, supportability, or performance.
• Coordinate technical activities with systems engineers, software engineers, network engineers, security personnel, desktop-support technicians, program managers, and IT leadership.
• Troubleshoot technical issues with internal teams, end users, and external vendors.
• Provide status updates for recurring and nonrecurring technical and cybersecurity efforts.
• Work under minimal supervision and independently develop technical approaches to complex system and security requirements. Basic Qualifications
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Management Information Systems, Information Technology, or a related technical discipline with at least 5 years of relevant experience; a combination of additional education and directly related experience may be considered in lieu of a completed degree.
• Active DoD Secret security clearance required at the start of employment.
• Ability to obtain and maintain SAP/SAR access within the timeframe established by the program or customer.
• DoD 8570/8140-compliant certification at the appropriate Information Assurance Management or Information Assurance Technical level, such as:
• Security+ CE
• CySA+
• CASP+
• CISSP
• CISM

CAP/CGRC

• GSLC
• Experience performing ISSO, Information Assurance, cybersecurity compliance, or closely related responsibilities within a classified government environment.
• Hands-on experience administering Windows Server operating systems and Windows domain architecture.
• Hands-on experience administering Red Hat Enterprise Linux or a comparable enterprise Linux distribution.
• Working knowledge of

RMF, ICD

503, JSIG, JAFAN, N... Visit the Employer site for more details