Experience: 3 Years
Clearance: Secret
AERMOR LLC is seeking subject matter expertise and expert guidance to provide System Administrator support in maintaining, configuring and troubleshooting various Microsoft, Red Hat Linux (RHEL 8), and Operating System products included in approved ATO accreditation boundaries for various systems, including Microsoft Server, Microsoft SQL Server, Software Update Services, Windows 10/11, Microsoft Office Suite, Cradlepoint, VPN, and ACAS/Nessus.
Responsibilities Include: 

• Create, review, update, and validate Cybersecurity Standard Operations Procedures (SOPs) as required.
• Audit and validate configurations
• Maintain and update all Risk Management Framework (RMF) and C&A documentation and update eMass.
• Conduct comprehensive RMF package reviews to ensure continued compliance
• Ensure traceability is maintained throughout the RMF submission process (e.g.: C&A Plan, POAM, RAR, Topology, Software, Ports Protocols and Services, Test Plan).
• Maintain and report on the status of all outstanding C&A items and supporting documentation.
• Support compliance validation of current and future directives (e.g.: IAVs, STIGs, CTOs).
• Provide recommendations for corrective action of any non-compliant security controls.
• Execute DISA STIG validations for systems in conjunction with C&A package reviews annually.
• Provide security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current.
• Prepare reports on scanning results and configuration management observations monthly.
• Document assessment activities and results in sufficient detail to enable an external review of all assessment processes, activities, results, and conclusions.

Required Skills and Experience: 

• CompTIA Security .
• MD-102: Endpoint Administrator
• 1-3 years of experience with Assured Compliance Assessment System (ACAS) and/or Nessus.
• 1-3 years Certification and Accreditation (C&A) package assembly experience
• Risk Management Framework (RMF) training and certification is desired
• 1 year Linux System Administration experience is desired