60 SISX-TR-DO-0060 Information Management Technical Support L3

Job Description

Job Description

SISX Position 33 : Systems Engineer, Skill Level 3 (NGA Washington DC)

Overall Assignment Description : Information Management Technical Support

Duties include :

• (U) Develop, update, and or review Risk Management Framework (RMF) documentation to include (Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports
• (U) Assess system compliance against National Institute Standards and Technology (NIST), Department of Defense (DOD), and NGA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRG)
• (U) Produce evidence as necessary to compliance status of NIST, DOD and National Geospatial Agency (NGA) security requirements as necessary to meet government requirements
• (U) Work with system administrators, engineers, and developers to create or update system / site policies, procedures, and process guides
• (U) Coordinate with other SME’s, internal, and external customers to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories
• (U) Analyze vulnerability scans of information systems and assist in remediation tasks
• (U) Conduct risk and vulnerability assessment of information systems to identify vulnerabilities, risks, and protection needs
• (U) Facilitate or participate in meetings with stakeholders to discuss statuses and efforts of SIS systems and report to government on findings
• (U) Prepare and submit bi-weekly reports to team leads and government engineering team regarding system / program status
• (U) Serve as a Subject Matter Expert (SME) on one or more technologies / skills related to Assessment & Authorization (A&A) activities
• (U) Actively facilitate and participate in regular A&A status meetings with government and task order personnel to facilitate progress and address potential issues of RMF system efforts
• (U) Participate in sessions aimed and identifying, planning, and executing strategies in response to emerging cybersecurity RMF policies
• (U) Maintain industry awareness and knowledge of evolving security and risk management standards to include DOD, and NGA policies, procedures and regulations and communicate and apply relevant changes to existing processes
• (U) Ensure proper use of remote access connectivity from NGA to Background Investigations systems approved by NGA’s CIO-T office, and maintained in accordance with NGA’s policy and procedures
• (U) Ensure File Transfer Protocol (FTP) connections from NGA to the Background Investigation system meets NGA and NIST requirements
• (U) Ensure site to site Virtual Private Network (VPN) tunnels are established based on NGA and DOD requirements
• (U) Ensure NGA approved documentation of all interconnections with systems in the SIS footprint connected to NGA infrastructures
• (U) Conduct audits on computer systems to detect, prevent, and record computer use and abnormalities, Report to Information System Security Officer (ISSO) or Information System Security Manager (ISSM) any attempts by non-authorized users to access SIS systems and provide monthly logs to NGA
• (U) Ensure data is being protected in accordance with NGA and DOD policies, standards, regulations, and procedures for the SIS specified systems
• (U) Coordinate the use of multiple security countermeasures to protect the integrity of the information assets in SIS systems enterprise i.e. firewalls, access control, auditing etc. In accordance with accreditation standards using NIST’s Intelligence Community Directive (ICD) 503
• (U) Develop, update, ensure security policy and procedures follow the accreditation standards using the NIST’S ICD 503, Risk Management Framework (RMF), and categorizing methods
• (U) Ensure the protection of the security system through implementation of security controls that protect against malicious behavior to include intrusion, tampering and virus detection
• (U) Ensure documentation of specific equipment restrictions, to include documentation on all interconnections required for all SIS systems
• (U) Ensure no personal computers, peripherals or other agencies computers, not authorized by NGA CIOT, will be used across interconnection or on NGA Networks

Skills and Experience

Required :

Desired :