Surge IT Certified Professional - Sr. Level

Job DescriptionProvides surge RMF lifecycle documentation and reconciliation support for ATC systems operating at the Top Secret level. Works under the direction of the IT Sys Solutions Architect-Sr and coordinates with Government security personnel on classified authorization boundaries.

QUALIFICATIONS

SecurityX (formerly CASP+) or equivalent certification - CISSP, SecurityX , and CySA + are acceptable. Minimum 5 years of experience supporting RMF lifecycle reporting and software/hardware reconciliation. Minimum 3 years supporting lifecycle documentation for Top Secret environments.

DUTIES AND RESPONSIBILITIES

Develop and maintain RMF authorization documentation for Top Secret systems, applying classified overlays and

CNSSI 1253

baselines as directed. Perform hardware/software reconciliation and configuration baseline management within TS authorization boundaries. Analyze STIG/SCAP and vulnerability results on classified systems; document findings and maintain POA&Ms in the appropriate classified repository. Support classified system audits, inspections, and continuous monitoring in coordination with the ISSM and Government security office. Handle and safeguard classified information in accordance with the DD254 and NISPOM (32 CFR Part 117).

KNOWLEDGE, SKILLS, AND TOOLS RMF

for classified systems; CNSSI 1253 and classified overlays;

NIST SP 800-53/53A

; DISA STIGs. Classified information handling and safeguarding; secure documentation practices. eMASS (or classified equivalent), SCAP, ACAS/Nessus.