Security/Compliance SME

Vaga não está no LinkedIn

🕒 Setembro 16

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

🚔 Conformidade

👻 Score fantasma 20%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Koniag Government Services

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 1975

🏛️ Governo

🎖️ Defesa

💼 Consultoria

Government • Defense • Consulting

A Koniag Government Services é uma Corporação Nativa do Alaska (ANC) que fornece expertise técnica, profissional e operacional para o setor público dos EUA. A KGS apoia os clientes de Defesa & Inteligência, Civil Federal e Saúde com soluções corporativas, serviços profissionais e gestão de operações, enfatizando resultados focados na missão, velocidade na contratação (prêmios diretos ANC) e parcerias estratégicas/tecnológicas. A empresa se posiciona como um parceiro de missão entregando pessoas, tecnologia e gestão de programas para clientes governamentais.

Descrição

• Serve as the authoritative policy and compliance reference across three System Enhancement Studies • Review and interpret Government-Furnished Information and applicable DoD, DAF, Federal, NIST, and Zero Trust regulatory references • Provide security and compliance guidance for CDO-L edge identity architecture, disconnected operations, break-glass access, PKI certificate validation, and synchronization • Assess security posture management requirements and autonomous access revocation for CDO-L edge nodes • Evaluate Authority to Operate implications and accreditation requirements for classified NIPRNet and SIPRNet edge components • Guide NPE governance architecture, attribute schemas, credential management policies, and governance workflows • Validate NPE credential rotation, secret vault storage, authentication transition, and hardcoded credential prohibition controls • Assess Zero Trust alignment, workload identity integration, dynamic access control, and continuous authentication for non-person entities • Define NPE audit logging and monitoring requirements, including SOC, ELICSAR, SIEM, and UEBA/AI-driven anomaly detection integration • Guide JML transformation workflows, Microsoft Entra ID integration, event-driven group management, and administrator delegation frameworks • Review Leaver revocation architecture, mailbox handling, license reclamation, session token revocation, and Okta identity disablement sequencing • Assess delegated provisioning against least-privilege, separation-of-duties, and audit trail requirements • Conduct cross-study compliance gap analysis and identify required security controls, policy waivers, or ATO actions • Contribute compliance and security policy sections and regulatory mappings to three Technical Study Reports • Advise the Program Manager and Study Lead Engineers on emerging DoD and DAF cybersecurity policy developments • Support draft Performance Work Statements for subsequent implementation Task Orders • Verify assigned personnel hold required security clearances and report clearance status changes

🎯 Requisitos

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a related field from an accredited college or university • 7+ years of experience in cybersecurity, information assurance, or security compliance in Defense or Federal government IT environments • Demonstrated experience interpreting and applying DoD and Federal cybersecurity policy frameworks, including NIST SP 800-53, NIST SP 800-63, DoDI 8520.04, DoDI 8510.01, and related mandates • Experience supporting Authority to Operate (ATO) processes, including RMF package development, security control assessment, and accreditation timeline management • Active Secret security clearance with final adjudication required prior to assignment • Deep knowledge of DoD and Federal cybersecurity and identity management policy frameworks • Strong understanding of Zero Trust Architecture principles and enterprise ICAM applications • Knowledge of PKI-based authentication, certificate lifecycle management, DoD/DoW X.509 Certificate Policy, and CAC authentication security requirements • Familiarity with Okta and SailPoint IdentityIQ • Knowledge of DoD audit standards and log management requirements, including CJCSI 6510.01, SIEM, and SOC environments • Experience performing compliance gap analysis and documenting findings in formal technical reports • Strong technical writing skills for compliance assessments, regulatory mapping, technical study reports, and draft Performance Work Statements • Ability to work collaboratively across cross-functional technical teams • Exceptional written and oral communication skills in English • Ability to obtain and maintain a Secret security clearance

🏖️ Benefícios

• Medical, dental, and vision insurance • 401(k) retirement plan • Paid time off • Paid parental leave • Life and disability insurance • Flexible spending accounts • Commuter benefits • Tuition reimbursement