Security/Compliance SME

🔥 1 minute ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

🚔 Compliance

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Koniag Government Services

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1975

🏛️ Government

🎖️ Defense

💼 Consulting

Government • Defense • Consulting

Koniag Government Services is an Alaska Native Corporation (ANC) that provides technical, professional, and operational expertise to the U. S. public sector. KGS supports Defense & Intelligence, Federal Civilian, and Health customers with enterprise solutions, professional services, and operations management, and emphasizes mission-focused outcomes, contracting speed (ANC direct awards), and strategic/technology partnerships. The company positions itself as a mission partner delivering people, technology, and program management to government customers.

📋 Description

• Serve as the authoritative policy and compliance reference across three System Enhancement Studies • Review and interpret Government-Furnished Information and applicable DoD, DAF, and Federal regulatory references • Provide security and compliance guidance for CDO-L edge identity architecture, disconnected operations, break-glass access, PKI certificate validation, and synchronization methods • Assess security posture management requirements for CDO-L edge node operations • Evaluate and document Authority to Operate implications for classified NIPRNet and SIPRNet edge components • Provide security and compliance guidance for NPE attribute schemas, governance workflows, credential management policies, and target architecture • Review and validate NPE credential management governance, including credential rotation, secret vault storage, and hardcoded credential controls • Assess Zero Trust Architecture alignment of NPE governance, workload identity, dynamic access control, and continuous authentication • Define compliance requirements for NPE audit logging and monitoring, including SOC and ELICSAR integration and UEBA/AI-driven anomaly detection • Guide JML transformation architecture, attribute sanitization, Microsoft Entra ID integration, event-driven group management, and administrator delegation • Review and validate Leaver revocation architecture, including mailbox handling, DAF365 license reclamation, Entra ID token revocation, and Okta disablement sequencing • Assess delegated provisioning against least-privilege, separation-of-duties, and audit-trail requirements • Conduct cross-study compliance gap analysis and identify required controls, waivers, or ATO actions • Contribute security and compliance sections and regulatory mappings to three Technical Study Reports • Advise the Program Manager and Study Lead Engineers on emerging DoD and DAF cybersecurity policy developments • Support draft Performance Work Statements for subsequent implementation Task Orders • Verify assigned personnel hold required security clearances and notify the Government of status changes

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a related field from an accredited college or university • 7+ years of experience in cybersecurity, information assurance, or security compliance in Defense or Federal government IT environments • Demonstrated experience interpreting and applying DoD and Federal cybersecurity policy frameworks including NIST SP 800-53, NIST SP 800-63, DoDI 8520.04, DoDI 8510.01, and related mandates to enterprise IT system design and governance • Experience supporting Authority to Operate (ATO) processes for Defense information systems, including RMF package development, security control assessment, and accreditation timeline management • Active Secret security clearance, with final adjudication required prior to assignment • Deep knowledge of DoD and Federal cybersecurity and identity management policy frameworks • Strong understanding of Zero Trust Architecture principles and application to enterprise ICAM systems, disconnected edge environments, non-person entity governance, and identity lifecycle management • Experience with DoD Risk Management Framework (RMF) and Authority to Operate (ATO) processes • Knowledge of PKI-based authentication, certificate lifecycle management, DoD/DoW X.509 Certificate Policy, and Common Access Card (CAC) authentication security requirements • Familiarity with Okta and SailPoint IdentityIQ • Knowledge of DoD audit standards and log management requirements, including CJCSI 6510.01 and SIEM/SOC integration • Experience performing compliance gap analysis and documenting findings in formal technical reports • Ability to interpret and apply complex, conflicting regulatory requirements • Experience advising technical engineers and architects on security and compliance requirements • Strong technical writing skills for compliance assessments, regulatory mapping, technical study reports, and draft Performance Work Statements • Ability to work collaboratively across cross-functional technical teams • Exceptional written and oral communication skills in English • Ability to obtain and maintain a Secret security clearance

🏖️ Benefits

• Medical, dental, and vision insurance • 401(k) retirement plan • Paid time off • Paid parental leave • Life and disability insurance • Flexible spending accounts • Commuter benefits • Tuition reimbursement