What are the responsibilities and job description for the ISSM position at Sem-Sol?
Science, Engineering, Management Solutions, LLC (Sem-Sol) is a small business located in Albuquerque, NM. The company consists of skilled scientists, engineers and technicians that specialize in directed energy and pulsed power systems.
Sem-Sol is seeking a full-time Information System Security Manager (ISSM) to design, implement and lead classified and unclassified networking, data transmission, and cyber compliance. The successful candidate must be self-motivated, work well with a team, take direction, and possess strong organizational skills.
Duties will include:
- Responsible for beginning-to-end, design, implementation, full compliance and information assurance for all classified program computing needs
- Responsible for both hardware and software
- Successful candidate will possess and maintain a Department of Defense Top Secret clearance and must be able to qualify to special access and SCI programs
- Design and set up information systems (IS) for classified computing and networks for US Government system accreditation under the Risk Management Framework (RMF)
- Create and review required documentation, including System Security Plans (SSPs), Risk Assessment Reports (RARs), Assessment and Authorization (A&A) packages, Security Controls Traceability Matrix and Continuous Monitoring artifacts
- Perform auditing and vulnerability analysis and develop risk assessments to support Government A&A activities
- Secure classified data transmission lines and protocol
- Experience performing continuous monitoring of secure systems and system controls.
- Develop and maintain computer solutions that are DoD compliant
- Develop and maintain cross boundary network solutions (e.g., firewalls, access control lists, etc.) between multiple secure networks
- Act as secondary responsible for all company non-classified IT systems
- Other duties, as assigned
Required Qualifications:
- BS in related field or 15 years relevant experience
- 5 years of experience in cybersecurity within Department of Defense
- Extensive knowledge of DoDI 8500, NIST SP 800-37, NIST SP 800-53 and Committee on National Security Systems Instruction (CNSSI) 1253
- Active DoD TS Clearance
- Knowledge of Information Assurance Vulnerability Alerts (IAVAs)
- Experience obtaining and maintaining Cybersecurity Maturity Model Certification (CMMC)
- Experience with Windows and Linux environments
- Fortigate Firewalls
- Network infrastructure including LAN, WAN, routing, switching, monitoring
- Working knowledge of Layer-3, VPNs, firewall policy and VLAN management
- Active Directory; managing Group Policy, OU Design, etc.
- Virtualization; VMWare/HyperV.
- Network Protocols; DNS, DHCP, RADIUS
Desired Skills/Experience/Qualifications:
- Business Class Wireless Solutions
- Backup, Disaster Recovery, and Business Continuity
- zScaler solutions
- Experience designing and maintaining non-secure computer systems and networks
- Understanding of Patch Management cycle including Vulnerability Scans, WSUS, 3rd Party patching
- CCNA (Preferred)
- ISC2 – CISSP
- ISACA – CISA
- CompTIA - CySA
- GIAC Certified Enterprise Defender
- GIAC Information Security Professional Certification
To be eligible for this opportunity, you must meet the following requirements:
- This position must meet Export Control compliance requirements, therefore a “US Person” as defined by 22 C.F.R. § 120.15 is required. “US Person” includes US Citizen, lawful permanent resident, refugee, or asylee.
- Active Security Clearance is required or ability to obtain a security clearance
Science, Engineering, Management Solutions, LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status.
We offer a competitive salary along with comprehensive medical, dental, vision, 401k, sick leave and PTO.