hatch I.T. is partnering with Expression to find aSenior Information Assurance Engineer. See details below:
About The Role:
Expression is looking for an experienced Senior Information Assurance (IA) Engineer to lead cybersecurity and Risk Management Framework (RMF) activities supporting the Defense Information Systems Agency (DISA) Global Force Management (GFM) Program Management Office (PMO) for the Joint Planning and Execution Services (JPES) and Joint Capabilities Requirements Manager (JCRM) Sustainment Program.
The Senior Information Assurance Engineer serves as the cybersecurity lead for the program, ensuring the confidentiality, integrity, availability, and compliance of mission-critical systems operating in classified and unclassified environments. This position provides technical leadership for RMF implementation, security compliance, vulnerability management, continuous monitoring, and cybersecurity documentation while partnering closely with Government Information System Security Managers (ISSMs), Security Control Assessors (SCAs), system engineers, and DevSecOps teams.
**Clearance:**Secret Clearance required
**Location:**DISA Headquarters, 6910 Cooper Ave, Fort Meade, MD
About the Company:
Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data analytics, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community. Expression’s “Perpetual Innovation” culture focuses on creating immediate and sustainable value for their clients via agile delivery of tailored solutions built through constant engagement with their clients. Expression was ranked #1 on the Washington Technology 2018’s Fast 50 list of fastest growing small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.
Responsibilities:
•
Lead execution of the DoD Risk Management Framework (RMF) throughout the system lifecycle in accordance with DoD, DISA, and NIST guidance.
•
Maintain and update cybersecurity documentation, security controls, and authorization artifacts within eMASS to support Authority to Operate (ATO) requirements.
•
Develop and maintain cybersecurity documentation, including Self-Assessment Plans, Self-Assessment Reports, Plans of Action and Milestones (POA&Ms), and other required RMF deliverables.
•
Conduct security control assessments, vulnerability assessments, STIG compliance reviews, and continuous monitoring activities to ensure ongoing system compliance.
•
Create, manage, and track POA&Ms, recommend risk mitigation strategies, and coordinate remediation efforts with engineering and system administration teams.
•
Support implementation of security controls aligned with NIST SP 800-37, NIST SP 800-53, DoD RMF, DISA STIGs, and applicable cybersecurity policies.
•
Collaborate with software development, DevSecOps, cloud infrastructure, and system administration teams to integrate cybersecurity requirements throughout the software development lifecycle.
•
Evaluate security impacts of software releases, infrastructure changes, patches, and technology refresh activities to ensure continued compliance.
•
Monitor emerging cybersecurity vulnerabilities, DoD taskings, and security advisories, providing recommendations to maintain secure system operations.
•
Support Government cybersecurity reviews, security inspections, audits, and authorization activities while serving as the primary cybersecurity interface with Government stakeholders.
•
Provide technical guidance on secure system architecture, vulnerability remediation, configuration management, and continuous improvement of cybersecurity processes.
•
Ensure compliance with classified network security requirements supporting NIPRNet, SIPRNet, and Microsoft Azure IL6 environments.
Qualifications:
•
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Assurance, or a related technical discipline. Four additional years of relevant experience may substitute for the degree.
•
Minimum 4 years of experience supporting Information Assurance, Cybersecurity, or Risk Management Framework (RMF) activities within Federal Government or DoD environments.
•
Security+, CISSP, CAP, CASP+, or equivalent DoD 8570/8140 cybersecurity certification.
•
Demonstrated experience implementing and maintaining DoD RMF in accordance with NIST SP 800-37 and NIST SP 800-53.
•
Experience administering and maintaining RMF documentation within eMASS.