What are the responsibilities and job description for the Configuration Manager position at MANTECH?
MANTECH seeks a motivated, career and customer-oriented Configuration Manager to join our team in Washington, D.C.
Responsibilities Include, But Are Not Limited To
Responsibilities Include, But Are Not Limited To
- Develop and maintain configuration management (CM) plans, policies, and baselines to support system development and operational environments
- Manage the Security Assessment and Authorization (SAA) process, ensuring systems comply with approved security policies and are properly maintained and transitioned into GRC tools
- Define and recommend system security controls, impact levels, and authorization boundaries in coordination with system owners and Authorizing Officials
- Coordinate and facilitate interconnection agreements (ISAs, MOUs, MOAs) for systems integrating with external or joint-use environments
- Conduct independent reviews of System Security Plans (SSPs), determine testing requirements, and support security control validation efforts
- Lead security inspections, testing, and ATO package submissions, while advising leadership on vulnerabilities, residual risks, and compliance status
- Support change and configuration management processes, including tracking Requests for Change (RFCs), maintaining documentation, and delivering executive-level briefings and stakeholder communications
- A minimum of 10 years’ experience in a computer science or cybersecurity related field with a minimum of 7 years of experience serving as an ISSR or in a similar role at a cleared facility
- Must hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or the CompTIA Advanced Security Practitioner (CASP), or Certified Information System Manager (CISM).
- Experience operating security tools such as Tenable Nessus/Security Center, IBM Guardium, HP WebInspect, NMAP, or similar technologies
- Strong knowledge of RMF and ATO/SAA processes, including NIST SP 800-53 and FISMA compliance requirements
- Hands-on experience with configuration management, system baselining, and change control processes
- Familiarity with GRC tools (e.g., eMASS, Xacta, Archer), including POA&M tracking, and experience developing/reviewing SSPs and security controls
- Bachelor's or advanced degree in Computer Science, Cybersecurity, or other cyber discipline
- Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting this position.
- Must be willing to sit for a polygraph if required
- Must be able to remain in a stationary position 50%.
- Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
- Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.
- Often positions self to maintain computers in the lab, including under the desks and in the server closet.
- Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.