Jobs at System High

Provides day-to-day IT assurance, systems administration, cybersecurity, and authorization support for DoD Collateral, SCI, and Special Access Program environments. Responsibilities include maintaining servers, networks, firewalls, security monitoring systems, and VTC systems; troubleshooting; patching; account administration; preparing authorization packages; identifying vulnerabilities; implementing countermeasures; supporting RMF compliance; and managing COMSEC equipment and media accountability.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Ensures compliance with NISPOM, DoD, ICD, DCID, and SAP policies; assesses vulnerabilities and risks; develops procedures and training; conducts facility compliance reviews; investigates classified information compromises; tracks corrective actions; briefs stakeholders; and mentors security personnel.

Maintain the operational security posture of DoD information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, security impact analysis, configuration management, audit review, vulnerability identification, incident handling, media sanitization, recovery monitoring, compliance inspections, and security documentation. The role supports ISSM and ISO activities and requires current Top Secret clearance with SCI eligibility, SAP eligibility, and willingness to undergo a counterintelligence polygraph.

Manages DD-254 drafting, updates, reviews, supporting documentation, contractor clearance validation, SAP addendums, NIDs, databases, and approval reporting for the F-35 JPO. Interprets and disseminates industrial security policy, coordinates with personnel security teams, and ensures compliance with NISPOM, DSS, ICD, DoDM, JAFAN, and SCIF security requirements.

Advise DoD customers on information system security across SAP, SCI, and Collateral environments. Develop and oversee RMF and JSIG authorization processes, conduct risk assessments, review security documentation, manage incidents and vulnerabilities, maintain authorization boundaries, and ensure configuration control and security testing. Lead security training, recovery planning, inspections, and compliance activities while mentoring cybersecurity and IT personnel.

Maintains the operational security posture of information systems supporting DoD Collateral, SCI, and SAP programs. Responsibilities include authorization packages, continuous monitoring, configuration management, vulnerability identification, audit review, incident handling, security documentation, system recovery oversight, self-inspections, and RMF support. The role collaborates with ISSMs, security officials, authorizing officials, and government organizations while ensuring compliance with security requirements.

Conducts security control assessments for Collateral, SCI, and SAP information systems using RMF and JSIG. Evaluates authorization packages, threats, vulnerabilities, continuous monitoring, security documentation, and system changes. Advises government and security stakeholders, prepares Security Assessment Reports and POA&Ms, supports inspections and incidents, and recommends authorization decisions and corrective actions.

Provides IT and information assurance support for DoD Special Access, SCI, and collateral programs. Maintains servers, firewalls, networks, security monitoring systems, VTC systems, and endpoint configurations; troubleshoots anomalies; manages accounts, patching, hardware, software, COMSEC, and help desk activities. Prepares authorization packages, coordinates security evidence, conducts inspections, identifies vulnerabilities, implements countermeasures, and ensures systems comply with cybersecurity policies and authorization requirements.

Lead software assurance activities for the Missile Defense Agency: develop and implement SwA policies and guidelines, assess compliance with DoD/JFAC standards, support quality/safety/mission assurance assessments, evaluate contractor compliance, and facilitate criticality, threat, vulnerability, security engineering, and anti-tamper validation across the SDLC.