Information Assurance Specialist
Read straight from Edgewater Federal Solutions, Inc.'s careers page, verified 3d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
Salary$90k – $105k
LocationWashington, DC, US
Work modehybrid
Typefull-time
SeniorityMid
Experience3–5 yrs
DepartmentInformation Technology
Company size201–500 people
PostedOct 18, 2024 · 2y ago
Verified live3d ago
May no longer be actively hiring
Posted by the company on Oct 18, 2024100% of this company's open roles have been listed for 90+ days
At a glanceSummarised by Seekless from the posting.
Bachelor’s degree or equivalent work experience in related field
Minimum of 3–5 years of experience aligning infrastructure with NIST SP 800-53 Rev 5 or FedRAMP security control frameworks
Proven track record authoring and deploying hardening guidance using CIS Benchmarks including Azure Foundations
Technical proficiency understanding and managing Microsoft Group Policy Objects (GPOs) and Microsoft Intune configuration policies
Strong understanding of cloud networking architecture, including NSGs, VNet segmentation, Azure Firewall, WAF, and Private Link
Strong understanding of Azure RBAC policies, configuring logging/monitoring solutions, and implementing data protection mechanisms
Ability to articulate ideas to both technical and non-technical audiences through excellent written and oral communication skills
Ability to independently collect, review, and evaluate IT product data to identify and characterize security threat sources of concern and provide recommendations to Government leadership
Experience securing infrastructure within Microsoft Azure or Azure Government environments
Must possess a valid baseline security certification (e.g., CompTIA Security+, CISSP, CEH, or DoD equivalent). Or obtain an approved certification within 90 days of hire
3-5 years of relevant work experience with network engineering and/or system administration background (Unix/Linux/Windows)
The ability to establish effective relationships with internal partners and teams
Skilled in authoring, testing, and debugging Azure Policy definitions and blueprints to automatically enforce configuration benchmarks (like CIS Azure Foundations) across subscriptions
Direct experience utilizing Microsoft Defender for Cloud and its Regulatory Compliance dashboard to monitor and report on security postures
US Citizenship is required
Must be local to DC area and willing to go onsite 1 to 2 days per week
Skills
CIS Benchmarks
Azure Foundations
Microsoft Group Policy Objects (GPOs)
Microsoft Intune
Active Directory
NIST SP 800-53 Rev 5
FedRAMP
Azure RBAC
NSGs
VNet segmentation
Azure Firewall
WAF
Private Link
Microsoft Defender for Cloud
Azure Policy
Overview
Edgewater is currently looking for an Information Assurance Specialist to support a federal customer in the Washington DC area. The Information Assurance Specialist manages security compliance, architectural safeguards, and systems hardening across our enterprise environments. In this role, you will analyze NIST SP 800-53 Rev 5 and FedRAMP basic categorizations to manage the split of shared security responsibilities between the organization and external providers.The ideal candidate will drive technical hardening initiatives by developing and implementing security baselines rooted in CIS Benchmarks. You will have deep technical proficiency in deploying security policies across both on-premises and modern environments using Microsoft Group Policy Objects (GPOs) and Microsoft Intune. You will oversee key governance and security safeguards—such as access policies (RBAC), data protection, network segmentation, and monitoring—to ensure continuous audit readiness.
*Due to the nature of the work and contract - US Citizenship is required.
*This position requires 1 to 2 days/week onsite - candidates not local to the DC area and/or not willing to go onsite 1 to 2 days per week will not be considered.
Responsibilities
•
Security Baseline Implementation: Implement, manage, and enforce robust security baselines and benchmarks such as CIS Benchmarks and Azure Foundations across enterprise endpoints and server infrastructure.
•
Microsoft Group Policy (GPO): Technical expertise to support and audit Active Directory Group Policy Objects (GPOs) to enforce least privilege, disable insecure legacy protocols, and harden on-premises Windows environments.
•
Microsoft Intune Policy Management Configuration: Experience translating traditional GPOs into modern cloud management frameworks using Microsoft Intune Settings Catalogs, Administrative Templates, and Endpoint Security configurations.
•
Compliance Mapping & Governance: Aligning technical configuration baselines directly with overarching Information Assurance (IA) frameworks, ensuring that GPO and Intune policy maps cleanly to auditable compliance controls.
•
Risk Identification & Assessment: Ability to identify, evaluate, and categorize security risks within organizational systems by analyzing technical configurations against established frameworks (such as NIST SP 800-30 or FedRAMP risk assessments).
•
Guide stakeholders in determining and integrating baseline security requirements, advise on viability of alternative approaches.
•
Propose remediation/mitigating controls and recommendations to stakeholders and management to minimize risk.
•
Lead security team engagements to build and mature processes to produce written Standard Operating Procedures (SOP) with a focus on improvement to FERC’s Information Assurance processes, methodologies, and communication methods.
•
Other duties as assigned.
Qualifications
•
Bachelor’s degree or equivalent work experience in related field.
•
Framework Alignment: Minimum of 3–5 years of experience aligning infrastructure with NIST SP 800-53 Rev 5 or FedRAMP security control frameworks.
•
Infrastructure Hardening: Proven track record authoring and deploying hardening guidance using CIS Benchmarks including Azure Foundations.
•
Policy Management: Technical proficiency understanding and managing Microsoft Group Policy Objects (GPOs) and Microsoft Intune configuration policies.
•
Network & Endpoint Security: Strong understanding of cloud networking architecture, including NSGs, VNet segmentation, Azure Firewall, WAF, and Private Link.
•
Identity & Governance: Strong understanding of Azure RBAC policies, configuring logging/monitoring solutions, and implementing data protection mechanisms.
•
Ability to articulate ideas to both technical and non-technical audiences through excellent written and oral communication skills.
•
Ability to independently collect, review, and evaluate IT product data to identify and characterize security threat sources of concern and provide recommendations to Government leadership.
•
Experience securing infrastructure within Microsoft Azure or Azure Government environments.
•
Must possess a valid baseline security certification (e.g., CompTIA Security+, CISSP, CEH, or DoD equivalent). Or obtain an approved certification within 90 days of hire.
Preferred Qualifications:
•
3-5 years of relevant work experience with network engineering and/or system administration background (Unix/Linux/Windows).
•
The ability to establish effective relationships with internal partners and teams.
•
Skilled in authoring, testing, and debugging Azure Policy definitions and blueprints to automatically enforce configuration benchmarks (like CIS Azure Foundations) across subscriptions.
•
Direct experience utilizing Microsoft Defender for Cloud and its Regulatory Compliance dashboard to monitor and report on security postures.
Salary range: $100,000 - $115,000
Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
•
While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, keyboard, and standard office equipment.
•
Specific vision abilities required by this job include close vision requirements due to computer work.
•
The employee must occasionally lift and/or move up to fifteen (15) pounds.
•
Fine hand manipulation (keyboarding).
Working at Edgewater Federal Solutions:
Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Companies since 2018.
Edgewater Federal Solutions is an Equal Opportunity Employer. It has been and continues to be our policy to provide equal employment to all employees and applicants for employment without regard to race, color, religion, gender, national origin, age, disability, marital status, veteran status, and/or other status protected by applicable law.
More roles at Edgewater Federal Solutions, Inc.