Position: Certification and Accreditation (C&A) Analyst
Location: 50 miles from Ft Belvoir is preferred. Also acceptable: 50 miles from Battle Creek, MI / Columbus, OH / New Cumberland, PA / Ogden, UT / Richmond, VA / Dayton, OH and Philadelphia, PA.
Job Description:
Serves as a Subject Matter Expert (SME) with regards to C&A and all associated IA policies and procedures. Fully versed in the general tenets supporting the overall DOD implementation of its C&A process, to include supporting IA policy, procedures and processes. Additionally, experience in assessing IA Controls and conducting C&A reviews for large, complex organizations. Able to perform a DOD IA C&A process while either certifying an information system or serving as a SME for an information system undergoing certification. Possess an understanding of how the IA Controls identified in the DOD Instruction 8500.2 apply to the process of certifying and accrediting a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Able to determine the applicable severity category to an identified vulnerability (e.g., non-compliant IA Control), and determining the possible ramifications on the systems current or future accreditation should also be well documented. Required to brief senior management on the progress or results of an information system undergoing the C&A process.
Requirements:
• Certifications / Computing Environment: MCSE: 2012, MCSA:WS2012, MCSE 2016, MCSA:WS2016, MC Azure SAE, MC Azure SEA, or DLA approved CE, ACAS, Tanium, HBSS
• Experience: Two (2) to Five (5) years of relevant C&A experience; relevant certification meeting DOD 8570.01 IAM Level II. Desired, but not required): Five (5) to Seven (7) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD IA experience
• Investigative Requirement: SECRET IA Level: IAM-II