Hiring manager is looking for a candidate who will be an ISSO but has done systems admin work in the past. It's a bybrid ISSO / Sys Ad role.
Information Systems Security Officer / Systems Administrator (B3)
client is immediately seeking an Information Systems Security Officer / Systems Administrator (B3) to support one of our highly regarded clients in the government sector. This position requires a versatile technical professional who can administer Windows and Linux systems while also supporting the cybersecurity compliance, authorization, and continuous-monitoring requirements of classified information systems.
The ideal candidate has worked within secured federal government environments and possesses hands-on experience with system administration, RMF, ICD 503, JSIG, JAFAN, DISA STIGs, vulnerability management, and security documentation. This individual must be comfortable working independently and collaborating with engineering teams, program leadership, ISSMs, network administrators, and end users.
Location: Linthicum, MD
Work Arrangement: On-site, full-time due to the classified nature of the environment
Compensation: Competitive and based on relevant education and experience
Clearance: Active DoD Secret clearance required; candidate must be able to obtain and maintain SAP/SAR access as required
Position Responsibilities
Information Assurance and ISSO Responsibilities
- Serve as an Information Systems Security Officer for classified networked and standalone information systems.
- Support the implementation and maintenance of cybersecurity requirements under the Risk Management Framework.
- Ensure information systems are operated, maintained, configured, and disposed of in accordance with approved System Security Plans, internal security policies, and applicable government requirements.
- Support system authorization and continuous-monitoring activities in accordance with ICD 503, RMF, JSIG, JAFAN, NISPOM, and applicable customer guidance.
- Develop, review, and maintain security documentation, including:
- System Security Plans
- Security assessment and authorization documentation
- Hardware and software inventories
- Configuration-management records
- Continuous-monitoring documentation
- Plan of Action and Milestones
- Risk Acceptance or Risk Acknowledgment Letters
- Security audit and inspection records
- Evaluate proposed hardware, software, firmware, network, and configuration changes to determine their security impact.
- Advise the Information Systems Security Manager and program leadership regarding identified vulnerabilities, security risks, compliance gaps, and recommended remediation actions.
- Perform recurring security audits and reviews of operating systems, user accounts, access controls, audit logs, network configurations, and security-relevant system settings.
- Conduct vulnerability assessments using tools such as Nessus, SecurityCenter, ACAS, or comparable scanning platforms.
- Review vulnerability scan results and coordinate remediation, mitigation, POA&M development, or risk acceptance for findings that cannot immediately be resolved.
- Apply and assess DISA Security Technical Implementation Guides for Windows, Linux, virtualization, network, and supporting infrastructure.
- Maintain records of security patches, operating-system updates, application upgrades, and configuration changes throughout the information system life cycle.
- Ensure users have the appropriate security clearance, authorization, need-to-know, and security training before receiving access.
- Support internal and external cybersecurity audits, customer inspections, authorization reviews, and security assessments.
- Assist with security education and provide cybersecurity training to system users and technical personnel.
- Maintain current and accessible information-system security documentation for properly authorized personnel.
- Perform security monitoring and log analysis using Splunk or another Security Information and Event Management platform.
- Investigate potential security events and escalate incidents in accordance with established reporting procedures.
Systems Administration Responsibilities
- Administer Windows Server and Red Hat Enterprise Linux systems supporting classified government programs.
- Install, configure, maintain, monitor, and troubleshoot servers, workstations, operating systems, applications, and supporting infrastructure.
- Manage Windows domain services, Active Directory, Group Policy, LDAP, user accounts, computer accounts, file permissions, and access-control lists.
- Perform system patching, operating-system upgrades, software installations, configuration changes, and vulnerability remediation.
- Configure and maintain systems in accordance with approved security baselines and applicable DISA STIG requirements.
- Maintain the availability, performance, reliability, and security of multi-user computing environments.
- Provide backup and recovery services and manage data-storage devices, system images, and restoration procedures.
- Install, configure, and maintain antivirus, antimalware, endpoint-security, and host-based monitoring solutions.
- Support VMware environments, virtual machines, virtual infrastructure, and associated system-management activities.
- Support basic network administration and troubleshooting involving TCP/IP, subnets, routing, VLANs, DNS, and Cisco technologies.
- Maintain system logging and security-audit configurations on classified networked and standalone systems.
- Administer Splunk components, which may include indexers, search heads, deployment servers, dashboards, data inputs, searches, and field extractions.
- Test new operating-system releases, software products, patches, and configuration changes to verify compatibility and minimize user impact.
- Create, maintain, and deploy standardized system images within an enterprise environment.
- Develop and maintain technical processes, system diagrams, build documentation, troubleshooting guides, and operating procedures.
- Monitor system health and capacity using tools such as Splunk, HBSS, SolarWinds, or comparable enterprise-monitoring solutions.
- Recommend system enhancements that improve security, reliability, availability, supportability, or performance.
- Coordinate technical activities with systems engineers, software engineers, network engineers, security personnel, desktop-support technicians, program managers, and IT leadership.
- Troubleshoot technical issues with internal teams, end users, and external vendors.
- Provide status updates for recurring and nonrecurring technical and cybersecurity efforts.
- Work under minimal supervision and independently develop technical approaches to complex system and security requirements.
Basic Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Management Information Systems, Information Technology, or a related technical discipline with at least 5 years of relevant experience; a combination of additional education and directly related experience may be considered in lieu of a completed degree.
- Active DoD Secret security clearance required at the start of employment.
- Ability to obtain and maintain SAP/SAR access within the timeframe established by the program or customer.
- DoD 8570/8140-compliant certification at the appropriate Information Assurance Management or Information Assurance Technical level, such as:
- Security+ CE
- CySA+
- CASP+
- CISSP
- CISM
- CAP/CGRC
- GSLC
- Experience performing ISSO, Information Assurance, cybersecurity compliance, or closely related responsibilities within a classified government environment.
- Hands-on experience administering Windows Server operating systems and Windows domain architecture.
- Hands-on experience administering Red Hat Enterprise Linux or a comparable enterprise Linux distribution.
- Working knowledge of RMF, ICD 503, JSIG, JAFAN, NISPOM, and DISA STIG requirements.
- Experience implementing, assessing, and documenting security controls for classified information systems.
- Experience performing operating-system patching, system hardening, account administration, configuration management, and vulnerability remediation.
- Experience developing or maintaining System Security Plans, POA&Ms, continuous-monitoring records, or related authorization documentation.
- Experience supporting system audits, security inspections, vulnerability assessments, or certification and accreditation activities.
- Ability to work on-site in Linthicum, Maryland within a classified facility.
- Strong documentation, troubleshooting, communication, and organizational skills.
- Ability to manage both operational system-administration priorities and cybersecurity compliance requirements with minimal direction.
Preferred Qualifications
- Active DoD Top Secret clearance or active SAP/SAR access.
- Previous experience supporting systems within SCIF, SAPF, or other secured environments.
- Experience with Nessus, ACAS, Tenable SecurityCenter, or equivalent vulnerability-scanning technologies.
- Experience administering and using Splunk, including dashboards, searches, alerts, deployment servers, search heads, indexers, field extractions, regular expressions, and Splunk Search Processing Language.
- Experience with Windows Active Directory, Group Policy, LDAP, VMware, and SAN storage systems.
- Experience with Cisco networking technologies and fundamental network concepts, including switching, routing, subnets, and VLANs.
- Experience with endpoint and infrastructure-monitoring tools such as HBSS, SolarWinds, or comparable platforms.
- Experience hardening Windows Server, Windows workstations, Red Hat Enterprise Linux, VMware, networking equipment, or supporting infrastructure using DISA STIGs.
- Familiarity with public key infrastructure, encryption technologies, multifactor authentication, and privileged-access management.
- Experience creating and deploying enterprise system images.
- Experience with PowerShell, Bash, Python, or another scripting language used to automate administrative or security tasks.
- Operating-system or infrastructure certifications involving Windows, Linux, VMware, Cisco, or Splunk.
- Experience supporting security engineering, systems engineering, laboratory, development, test, or production environments.
- Experience balancing system availability and program requirements against security-control and vulnerability-remediation obligations.
Thanks and Regards
Pushkar Dubey
Technical Recruiter | 1 Point System LLC
Mobile: +1
Email:
