Information Security Engineer III - Rockville, United States - TriMetrix

Description

Overview

TriMetrix, WRMA's parent organization, is a woman-owned small business empowering organizations and communities to improve and manage their social service programs. We focus on our clients' needs, providing the technical know-how, collaborative spirit, and management expertise required to deliver effective solutions that last. The TriMetrix team includes experts in training and technical assistance, ensuring our clients' teams are up to speed on day one, while being responsive to their needs and developing innovations to drive projects forward. We are currently seeking an Information Security Engineer III. This position will provide leadership and technical assistance for an Information Technology Support Services contract with the Dept. of Interior.

This is an on-site position and will be performed in these two locations .... Lakewood, Colorado and Reston, Virginia

Responsibilities

The InfoSec Engineer will have direct experience developing IT security policies, architectures, and standard operating procedures with a strategic perspective.

The contractor will assist the government with developing and implementing innovative solutions resulting in a stable and cost-effective operational environment, which must support agency systems,

applications, and their underlying databases in a current state.

The general scope is to provide operational and engineering support to the Reston, Denver, and Cloud Data Centers (NPS Data Centers). The Contractor shall collaborate with Government staff to ensure all activities are well coordinated and integrated with other NPS Data Centers, and that replicated or overlapped efforts do not occur

Qualifications

BA/BS or MS/5 or 8 yrs

Extensive knowledge of and practical experience with implementing standard methodologies used in the Risk Management Framework (RMF) process (Formerly referred to as Certification and Accreditation (C&A)). Expert-level knowledge and experience with National Institute of Standards and Technology (NIST) guidelines and industry best practices for: Risk Assessment and Management, Vulnerability Analysis, Contingency Planning, Disaster Recovery, Configuration Management, Security Assessments and developing Mitigation Plans. Must have a minimum of 4 years direct full-time experience conducting security assessments and developing all deliverables within a system authorization package. Must have detailed and extensive experience with implementing, evaluating, and documenting all technical, management, and operational security controls as defined by the NIST SP as amended).

Functional Responsibility: Will provide multi-discipline security administrative and technical security support to the organization. Areas of responsibility include Physical, Computer, Personnel, Information, Administrative, Operational, and Communications Security analysis, assessment, and reporting. Specific roles include:

• Provide recommendations to organizational stakeholders for the integration of security processes and compliance with Federal regulations and Departmental policy.

• Direct security efforts to increase efficiencies and enforce a global security mindset.

• Provide strategic guidance for the further development of the security program.

• Develop policies and procedures supporting regulations, directives, and Departmental policy.

• Assist senior management with establishing a plan of action for the remediation of weaknesses.

• Provide direct information assurance guidance pertaining to the development and modification of information systems and industrial control systems.

• Provide strategic insight and continuous support for the integration of the system development life cycle.

• Provide recommendations concerning new and existing projects and assist project managers with security oversight.

• Coordinate with representatives and Subject Matter Experts (SME) from other Federal Agencies and commercial organizations to maintain awareness of upcoming changes to regulations and technologies.

• Develop Risk Assessments in accordance with NIST guidance and deliver risk analysis and guidance as needed to organizational leadership.

PHYSICAL REQUIREMENTS

• Long periods of sitting
• Long periods of computer use
• Lifting up to 25 pounds*
• Long periods of focus

TRAVEL: This is a remote position, and travel (25% or less) is required.

BENEFITS:

Working at WRMA can provide for a very fulfilling and rewarding career. The contributions our employees make to our mission of improving the lives of children and families are invaluable to us. We offer opportunities for personal growth, competitive salaries, a generous benefits package, and opportunities to give back to your community.

HOW TO APPLY: To apply for this position, please go to our website,

WRMA is an equal opportunity employer.

*This requirement may be waived with proper documentation.

HOW TO APPLY: To apply for this position, please go to our website,

WRMA is an equal opportunity employer.

*This requirement may be waived with proper documentation.

#JT