Senior ISSE (Cloud/FedRAMP)
ISSE (Cloud/FedRAMP)
Location: Quantico, VA
Email Resume with desired job in subject line to:
Education and Clearance Requirements:
BS & 5-12 yrs. experience (senior)
BS & 3-12 yrs. experience
Secret clearance
Sec+
Day to day activities may include expertise with the following:
Experience with Certification and Accreditation activities, in particular, experience in the area of moving accreditation packages through the RMF process to Authority To Operate (ATO).
Conducting vulnerability scans, system assessments, risk analysis, and technical recommendations to validate compliance.
Conducts verification and validation for security information systems, products, and components.
Analyzes design specifications, design documentation, configuration practices and procedures, and operational practices and procedures.
Provides identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance.
Verifies and validates that the system meets the security requirements.
Assist in determining the type of cloud solution for information systems i.e., IaaS, PasS, SaaS.
Review completeness and accuracy of DISA Provisional Authorization (DISA PA).
Ability to clearly differentiate between a FedRAMP ATO and Agency ATO, the process for a system to be accredited from a FedRAMP stand point.
Expertise in the following areas is desired/preferred:
Federal Risk and Authorization Management Program ATO(FedRAMP)
DISA Provisional Authorization (DISA PA)
cloud types (IaaS, PaaS, SaaS)
Joint Authorization Board (JAB)
Risk Management Framework (RMF)
Vulnerability and Risk Assessment, Analysis, and Reporting
DISA Security Content Automation Protocol (SCAP) content and Security
Technical Implementation Guides (STIGS)
Malware and Virus prevention, detection, and remediation
Analysis of system auditing and logging
Repository (DITPR) /Department of Navy (DON)
Networking, System Administration Windows and Unix/Linux platforms
Database Administration and Application Development
Project Management
USN and/or USMC Certification and Accreditation tools eMASS and MCCAST
Patch Management, Incident Response, and Asset/Inventory Management
DoD 8500. 01 and DoD 8510. 01 and National Institute of Technology Standards (NIST) publications
Payment Card Industry Data Security Standards (PCI DSS) Requirements
Windows Systems Administrator
Location: Quantico, VA
Email Resume with desired job in subject line to:
Education and Clearance Requirements:
BS & 8 years
Secret Clearance
Description:
Provide engineering expertise to design, plan, and implement system isolation and network segmentation of enterprise servers, major applications, and network defense systems.
Work will include:
Configuration management support for all Windows Servers
The Contractor shall establish and maintain a configuration management database and system inventory
The Contractor shall manage systems for updates and replacement, and manage changes required to support secure configurations, patches, and operational reporting requirements.
The Contractor shall ensure STIG and IAVM compliance for applications, systems, and devices operating on Microsoft Windows Server and workstation platforms.
The Contractor shall develop a remediation plan for all outstanding STIGS and IAVMs, to include acceptable mitigations and manage POA&Ms for all findings not in compliance.