Current Positions - Greenbelt, MD

Security Engineer Lead

Information Systems Application Security Engineer

Information Security Cloud Engineer

Active Cyber Defense Analyst

Risk Management Framework (RMF) Analyst

Security Engineer Lead

 Position Description: The Information Systems Security Engineer will work seamlessly with the Chief Security Engineer to conduct security engineering activities. [Apply]

Years of Experience: 14 years

Education Requirements: Bachelor’s degree

Preferred Certifications: CISSP, CCNP, AWS SA, applicable MS certs

Responsibilities:

• Work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture for the communications aspects of applications in both a private on premises data centers and public cloud offerings. 

• Works closely with Census Bureau Systems project teams to assist in the migration of systems from their current environment into the hybrid TI infrastructure while ensuring the security and integrity of the system.

• Follows documented technical approaches to assess threats and residual risks, along with specifying the implementations required for the 2020 Decennial Census.

• Utilizes the organization tasking tracking database, framework and application to manage security operations and make the necessary reports based on due dates, assignments, coordination requirements, percent of completion, completion and archival. Devises solutions to operational problems within the capacity and operational limitations of installed equipment. 

• Analyzes Decennial change requests for security impacts and provide recommendations to the 2020 Census TI GPMO.

• Monitors and tracks security-related defects and resolutions; assigns tasks to the appropriate working group or individual. Coordinates and facilitates working groups and integrated process teams to achieve solution.

• Assists in establishing and implementing a Continuous Diagnostics and Mitigation (CDM) capability with integrated security controls for the 2020 Census System of Systems (SoS). 

• Focuses on communications and networking needs between Cloud and on premises Data Centers, and Cloud and Internet (VPN) users

• Enables continuous monitoring to proactively survey, monitor, and track security-related defects and the status of their resolutions to report to the 2020 US Census GPMO.

• Works within a Sprint to ensure engineering features and enhancements include security requirements and meet Federal directives. Acts as a bridge between project teams or developers and security personnel, by being able to understand and interface in all areas. Identifies specific areas of concern related to securing sensitive data in a both a cloud and data center environment.

• Provides thought leadership to provide guidance and best practices for the implementation of SoS to support the 2020 Decennial Census.

• Provides expertise with Federal Requirements related to special classifications of data especially Title 13 and 26, FISMA, FedRAMP. NIST, etc.

• Generates documentation as required by the US Census.

Required Experience:

• Acquisition, installation, maintenance, and usage of the Government Enterprise networks. 

• Engineering solutions within multiple Cloud Service Providers, in particular AWS. 

• Operations for Cisco ASA firewalls, routers and switches and the ability to formulate access control lists (ACLs) via the Command Line Interface (CLI). 

• Enterprise level security hardening for Windows, Linux, Android and/or iOS operating systems and SQL, Oracle, and RDS database solutions in accordance with Center for Internet Security (CIS) and Security Technical Implementation Technical Guides (STIGs)

• Continuity of operations (COOP) concepts and implementation for network related hardware failures including isolated and major outages. Monitors and controls the performance and status of the network resources.

• Development and implementation of vulnerability remediation strategies. Configuration and execution of vulnerability and web application scans. Customization compliance scans to meet agency established baselines.

• Implementation PKI within an enterprise.

• Experience working in AWS via the CLI and management console.  Knowledge and experience configuring Virtual Private Clouds (VPCs) and understanding the service offerings and how to configure them. Ability to automate the development of security controls including firewall rules and policy and IPS policy.

• Experience with automating server configuration for security including logging, key changes, and system hardening.

Required Skills: 

• Expert knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)

• Deep technical understanding of operating systems, network architecture and design, Active Directory (AD) application log consumables, systems design as well as superior knowledge of technical operations process and procedures

• Knowledge of encryption, key management and cryptology

• Understanding of Enterprise Architecture Standards such as the Department of Defense Architecture Framework (DODAF), Service-Oriented Architecture (SOA), the Open Group Architecture Framework (TOGAF), and/or the Amazon Web Services (AWS) Well Architected Framework

• Familiarity with the Risk Management Framework (NIST 800-37), Security Controls as described in NIST 800-35, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines

• Experience with performing threat modelling, risk analysis, root cause analysis, risk identification, and risk mitigation

• Experience planning and implementing secure networking practices such as: application segmentation, network segmentation, NAC and other access control testing/validation, updating access control SOPs

• Ability to configure and develop an enterprise SIEM solution including signature tuning, development of correlation rules, reports, and alarms

• Familiarity with a variety of web application protocols, web services (components including JavaScript, XML, JSON), scripting capabilities (Powershell, Python) software development frameworks, operating systems, and networking technologies. Understanding of various web application frameworks such as ASP.NET, J2EE

• Organizational Skills: Proven ability to plan and prioritize work, both their own and that of project team. Follows tasks to their logical conclusion. Understanding of project management principles and techniques (project plans, critical path, etc), ability to develop security project plans and work with development teams to integrate those into development schedules - in both waterfall and agile environments.  

o Team Work: Excels both autonomously and as part of a team. Prepared to challenge ideas within a group in a constructive way. Ability to influence others and move a team toward a common vision or goal.

o Leadership: Acute business acumen and understanding of organizational issues and challenges. Able to work effectively at all levels in an organization.

o Communications: Ability to interact with senior managers, junior staff, and business unit (non-technical) customers clearly and efficiently, both verbally and in writing. Able to present ideas in a variety of ways depending upon audience and context. Excellent active listening skills.

o Problem Solving: Natural inclination for planning strategy and tactics. Ability to analyze problems and determine root cause, generating alternatives, evaluating and selecting alternatives and implementing solutions.

Results oriented: Able to drive things forward regardless of personal interest in the task. 

Information Systems Application Security Engineer

Position Description: The Information Security Cloud Engineer will work seamlessly with the Security Engineer Lead to conduct security engineering activities. [Apply]

Years of Experience: 14 years

Education Requirements: Bachelor’s degree

Preferred Certifications: CISSP, CCNP, AWS SA, applicable MS certs

Responsibilities:

• Design, implement and monitor security measures for the protection of web sites, cloud networks and information privacy 

• Identify, define & implement system security requirements for cloud applications 

• Work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture in both private on premises and public cloud offerings. 

• Conduct assessments using COTS and other tools to ensure coding practices are followed and effective as well as identify risks.

• Design, architect, install, configure, harden, and remediate scanning issues for Cloud environment as well as support the development of strategies to respond to and recover from a security incident

• Validate that system and application design and architecture meet best practice Security standards

• Works closely with Census Bureau Systems project teams to assist in the migration of systems from their current environment into the hybrid TI infrastructure while ensuring the security, integrity and interoperability of the system as a whole. 

• Follows documented technical approaches to assess threats and residual risks, along with specifying the implementations required for the 2020 Decennial Census.

• Utilizes the organization tasking tracking database, framework and application to manage security operations and make the necessary reports based on due dates, assignments, coordination requirements, percent of completion, completion and archival. Devises solutions to operational problems within the capacity and operational limitations of installed equipment. 

• Analyzes Decennial change requests for security impacts and provide recommendations to the 2020 Census TI GPMO.

• Monitors and tracks security-related defects and resolutions; assigns tasks to the appropriate working group or individual. Coordinates and facilitates working groups and integrated process teams to achieve solution.

• Focuses on communications and networking needs between Cloud and on premises Data Centers, and Cloud and Internet (VPN) users

• Enables continuous monitoring to proactively survey, monitor, and track security-related defects and the status of their resolutions to report to the 2020 US Census GPMO.

• Works within a Sprint to ensure engineering features and enhancements include security requirements and meet Federal directives. Acts as a bridge between project teams or developers and security personnel, by being able to understand and interface in all areas. Identifies specific areas of concern related to securing sensitive data in a both a cloud and data center environment.

• Provides thought leadership to provide guidance and best practices for the implementation of SoS to support the 2020 Decennial Census.

• Provides expertise with Federal Requirements related to special classifications of data especially Title 13 and 26, FISMA, FedRAMP. NIST, etc.

• Generates documentation as required by the US Census.

Required Experience:

• Amazon Web Services (AWS) platform capabilities and best practices architectures,and engineering solutions within multiple Cloud Service Experience working in AWS via the CLI and management console.  Knowledge and experience architecting and configuring Virtual Private Clouds (VPCs)

• Experience and significant familiarity with Windows servers: Design, Configuration, and Administration of Windows 2008r2 and 2012. Knowledge of Active Directory, including Group Policies.

• Must have solid hands-on experience in Administering Microsoft Active Directory, Domain Controllers, and other like capabilities.

• Sets up administrator and service accounts and troubleshoot creates/updates and Maintains system documentation, interacts with users and evaluates vendor products, deep understanding of monitoring Windows Server and Services

• Strong knowledge of VMWare and Amazon Machine Images (AMI)

• Knowledge of system management tools 

• Security frameworks including , NIST SP 800-53, , , FISMA, FedRamp, HITRUST, or NIST CSF

• System administration and engineering experience

• Experience with SIEM, DLP, IDS, Forensics, Detection, Boundary Defense tools 

• High level scripting skills: Bash/Python/Ruby Expert knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)

• Acquisition, design, deployment, installation, maintenance, and usage of the Government Enterprise networks. 

• Operations for firewalls, routers and switches and the ability to formulate access control lists (ACLs) via the Command Line Interface (CLI). 

• Enterprise level security hardening for Windows, Linux, and SQL, Oracle, and RDS database solutions in accordance with Center for Internet Security (CIS) and Security Technical Implementation Technical Guides (STIGs)

• Continuity of operations (COOP) concepts and implementation for network related hardware failures including isolated and major outages. Monitors and controls the performance and status of the network resources.

• Development and implementation of vulnerability remediation strategies. Configuration and execution of vulnerability and web application scans. Customization compliance scans to meet agency established baselines.

• Experience with automating server configuration for security including logging, key changes, and system hardening.

Required Skills: 

• Deep technical understanding of operating systems, Cloud architecture and design, Active Directory (AD) application log consumables, systems design as well as superior knowledge of technical operations process and procedures

• Knowledge of encryption, key management and cryptology

• Understanding of the Amazon Web Services (AWS) Well Architected Framework

• Familiarity with the Risk Management Framework (NIST 800-37), Security Controls as described in NIST 800-35, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines

• Familiarity with performing threat modelling, risk analysis, root cause analysis, risk identification, and risk mitigation

• Experience planning and implementing secure networking practices such as: application segmentation, network segmentation, NAC and other access control testing/validation, updating access control SOPs

• Familiarity with a variety of web application protocols, web services (components including JavaScript, XML, JSON), scripting capabilities (Powershell, Python) software development frameworks, operating systems, and networking technologies. Understanding of various web application frameworks such as ASP.NET, J2EE

• Organizational Skills: Proven ability to plan and prioritize work, both their own and that of project team. Follows tasks to their logical conclusion. Understanding of project management principles and techniques (project plans, critical path, etc), ability to develop security project plans and work with development teams to integrate those into development schedules - in both waterfall and agile environments.  

o Team Work: Excels both autonomously and as part of a team. Prepared to challenge ideas within a group in a constructive way. Ability to influence others and move a team toward a common vision or goal.

o Leadership: Acute business acumen and understanding of organizational issues and challenges. Able to work effectively at all levels in an organization.

o Communications: Ability to interact with senior managers, junior staff, and business unit (non-technical) customers clearly and efficiently, both verbally and in writing. Able to present ideas in a variety of ways depending upon audience and context. Excellent active listening skills.

o Problem Solving: Natural inclination for planning strategy and tactics. Ability to analyze problems and determine root cause, generating alternatives, evaluating and selecting alternatives and implementing solutions.

Results oriented: Able to drive things forward regardless of personal interest in the task. 

Information Security Cloud Engineer

Position Description: The Information Security Cloud Engineer will work seamlessly with the Security Engineer Lead to conduct security engineering activities. [Apply]

Years of Experience: 14 years

Education Requirements: Bachelor’s degree

Preferred Certifications: CISSP, CCNP, AWS SA, applicable MS certs

Responsibilities:

• Design, implement and monitor security measures for the protection of web sites, cloud networks and information privacy 

• Identify, define & implement system security requirements for cloud applications 

• Work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture in both private on premises and public cloud offerings. 

• Conduct assessments using COTS and other tools to ensure coding practices are followed and effective as well as identify risks.

• Design, architect, install, configure, harden, and remediate scanning issues for Cloud environment as well as support the development of strategies to respond to and recover from a security incident

• Validate that system and application design and architecture meet best practice Security standards

• Works closely with Census Bureau Systems project teams to assist in the migration of systems from their current environment into the hybrid TI infrastructure while ensuring the security, integrity and interoperability of the system as a whole. 

• Follows documented technical approaches to assess threats and residual risks, along with specifying the implementations required for the 2020 Decennial Census.

• Utilizes the organization tasking tracking database, framework and application to manage security operations and make the necessary reports based on due dates, assignments, coordination requirements, percent of completion, completion and archival. Devises solutions to operational problems within the capacity and operational limitations of installed equipment. 

• Analyzes Decennial change requests for security impacts and provide recommendations to the 2020 Census TI GPMO.

• Monitors and tracks security-related defects and resolutions; assigns tasks to the appropriate working group or individual. Coordinates and facilitates working groups and integrated process teams to achieve solution.

• Focuses on communications and networking needs between Cloud and on premises Data Centers, and Cloud and Internet (VPN) users

• Enables continuous monitoring to proactively survey, monitor, and track security-related defects and the status of their resolutions to report to the 2020 US Census GPMO.

• Works within a Sprint to ensure engineering features and enhancements include security requirements and meet Federal directives. Acts as a bridge between project teams or developers and security personnel, by being able to understand and interface in all areas. Identifies specific areas of concern related to securing sensitive data in a both a cloud and data center environment.

• Provides thought leadership to provide guidance and best practices for the implementation of SoS to support the 2020 Decennial Census.

• Provides expertise with Federal Requirements related to special classifications of data especially Title 13 and 26, FISMA, FedRAMP. NIST, etc.

• Generates documentation as required by the US Census.

Required Experience:

• Amazon Web Services (AWS) platform capabilities and best practices architectures,and engineering solutions within multiple Cloud Service Experience working in AWS via the CLI and management console.  Knowledge and experience architecting and configuring Virtual Private Clouds (VPCs)

• Experience and significant familiarity with Windows servers: Design, Configuration, and Administration of Windows 2008r2 and 2012. Knowledge of Active Directory, including Group Policies.

• Must have solid hands-on experience in Administering Microsoft Active Directory, Domain Controllers, and other like capabilities.

• Sets up administrator and service accounts and troubleshoot creates/updates and Maintains system documentation, interacts with users and evaluates vendor products, deep understanding of monitoring Windows Server and Services

• Strong knowledge of VMWare and Amazon Machine Images (AMI)

• Knowledge of system management tools 

• Security frameworks including , NIST SP 800-53, , , FISMA, FedRamp, HITRUST, or NIST CSF

• System administration and engineering experience

• Experience with SIEM, DLP, IDS, Forensics, Detection, Boundary Defense tools 

• High level scripting skills: Bash/Python/Ruby Expert knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)

• Acquisition, design, deployment, installation, maintenance, and usage of the Government Enterprise networks. 

• Operations for firewalls, routers and switches and the ability to formulate access control lists (ACLs) via the Command Line Interface (CLI). 

• Enterprise level security hardening for Windows, Linux, and SQL, Oracle, and RDS database solutions in accordance with Center for Internet Security (CIS) and Security Technical Implementation Technical Guides (STIGs)

• Continuity of operations (COOP) concepts and implementation for network related hardware failures including isolated and major outages. Monitors and controls the performance and status of the network resources.

• Development and implementation of vulnerability remediation strategies. Configuration and execution of vulnerability and web application scans. Customization compliance scans to meet agency established baselines.

• Experience with automating server configuration for security including logging, key changes, and system hardening.

Required Skills: 

• Deep technical understanding of operating systems, Cloud architecture and design, Active Directory (AD) application log consumables, systems design as well as superior knowledge of technical operations process and procedures

• Knowledge of encryption, key management and cryptology

• Understanding of the Amazon Web Services (AWS) Well Architected Framework

• Familiarity with the Risk Management Framework (NIST 800-37), Security Controls as described in NIST 800-35, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines

• Familiarity with performing threat modelling, risk analysis, root cause analysis, risk identification, and risk mitigation

• Experience planning and implementing secure networking practices such as: application segmentation, network segmentation, NAC and other access control testing/validation, updating access control SOPs

• Familiarity with a variety of web application protocols, web services (components including JavaScript, XML, JSON), scripting capabilities (Powershell, Python) software development frameworks, operating systems, and networking technologies. Understanding of various web application frameworks such as ASP.NET, J2EE

• Organizational Skills: Proven ability to plan and prioritize work, both their own and that of project team. Follows tasks to their logical conclusion. Understanding of project management principles and techniques (project plans, critical path, etc), ability to develop security project plans and work with development teams to integrate those into development schedules - in both waterfall and agile environments.  

o Team Work: Excels both autonomously and as part of a team. Prepared to challenge ideas within a group in a constructive way. Ability to influence others and move a team toward a common vision or goal.

o Leadership: Acute business acumen and understanding of organizational issues and challenges. Able to work effectively at all levels in an organization.

o Communications: Ability to interact with senior managers, junior staff, and business unit (non-technical) customers clearly and efficiently, both verbally and in writing. Able to present ideas in a variety of ways depending upon audience and context. Excellent active listening skills.

o Problem Solving: Natural inclination for planning strategy and tactics. Ability to analyze problems and determine root cause, generating alternatives, evaluating and selecting alternatives and implementing solutions.

Results oriented: Able to drive things forward regardless of personal interest in the task. 

Active Cyber Defense Analyst

Position Description: The ACD Analyst will look through network flow, PCAP, logs, and sensors for evidence of cyber-attack patterns, hunt for Advanced Persistent Threats (APT).

Location: Greenbelt, MD [Apply]

Years of Experience: 10 years

Education Requirements: Bachelors

Required Certifications: 1 of the following:

  • CERT Certified Computer Security Incident      Handler
  • Electronic Commerce Council Certified      Ethical Hacker (ECC)
  • GIAC Information Security Fundamentals      (GISF)
  • ISC2 Certified Information System Security      Professional (CISSP)

Preferred Certifications:

OSCP, CSSLP, GIAC (GPEN), GIAC (GWAPT), GIAC (GXPN), GIAC (GMOB), GIAC (GAWN), GIAC (GPYC), etc.

CFSR

CCNP, MCSE, RHCE

Responsibilities:

• The Windows Laptop Service Engineer is expected to design and support a Windows 10 laptop solution that:

o Integrates with an MDM for device management

o Leverages Windows Out-Of-The Box experience for easy deployment to end-users with no IT resources required at end-user distribution point.

o Leverages virus protection solution that meets Census security standards and is delivered without requiring VPN or domain access.

o Managed without the use/connection of Census on-prem Windows domain 

o Does not require VPN for security updates or software patching

o Receives OS updates without domain connectivity

o Provides system audit log information back to Census without domain connectivity.

• The Windows Laptop Service Engineer will:

o Collaborate with TCO and OIS to design solution which meets USCB network and security requirements

o Lead the ATO process from the Technical Integrator team

o Lead technical presentations for Review Board approvals.

o Ensures adequate infrastructure monitoring, reporting, and alerting systems are in place on the Laptop device. Identifies the need for new security technology solutions; designs, reviews and collaborates on the deployment of new solutions.

o Research new technology involving computer hardware and software to enhance the security posture.

o Solution validation and testing, ROI and deployment strategy; Interface with existing and new vendors relevant to Windows 10 laptop technology and security. Apply information and knowledge to an endpoint technology road map

o Apply best practices, strategies, methodologies, and approaches to systems administration tasks and complex projects

o Knowledge of methods that manage the distributed desktop environment including: platform OS, Group Policy, security deployment protecting corporate data and resources from virus, malware and hacking in a non-domain joined environment

o Demonstrated knowledge of infrastructure security, including windows, Unix/Linux, desktop/laptop.

o Experience working with Office productivity tools and desktop management tools is desired

o Lead the definition of the direction and strategy for office services architecture/design to ensure the operational needs are being addressed against aggressive schedules.

o Lead the development of action plans to design and implement solutions required to meet the 2020 Field Mobile Lister Laptop computing environment requirements 

o Designs and documents Laptop Services architecture and associated designs by analysing requirements; constructing workflow charts and diagrams; studying system capabilities; writing specifications.

o Provide enhancements or improvements to Laptop Services architecture by studying current designs and determining areas for improvement.

o Defines project requirements by identifying project milestones, phases, and elements; forming project team; establishing project budget.

o Monitors project progress by tracking activity; resolving problems; publishing progress reports; recommending actions.

o Maintains system protocols, architecture, requirements, and associated design documents by enforcing traceability, updating procedures, analyzing system and program changes.

o Maintains professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies

Preferred Qualifications for Position Include:

MCSA/MCSA, VCP, Cloud Computing, Network+

Required Skills: 

• Creates OS image/build packages, application packages and undertake OS installation/troubleshooting. 

• VDI (Virtual Desktop Infrastructure) managing the virtual image.

• Understands AD structures, Global Policies (GPOs), User permissions

• Extensive knowledge of Windows 7 — 10 and Server 2003 - 2012 R2

• Strong engineering skills in Windows server and desktop infrastructures

• Strong imaging and deployment skills

• Strong skills in patch management using WSUS and like technologies

• Automation and maintenance using Enterprise Management tools. SCCM preferred

• Software Packaging and deployment.

• Enterprise Management (SCCM, WSUS, Admin Studio)

• Exchange, SharePoint, Active Directory, 

• Hardware, virtualization, and enterprise storage skills

• Excellent written and verbal communication skills

• Intermediate level knowledge of VDI and supporting technologies required for the delivery of virtual desktop services

• Ability to plan, prioritize, organize, schedule and execute assignments

• Strong analytical skills, with strong problem-solving capability

• Excellent interpersonal, presentation and communication skills

• Ability to work independently and as a member of a team

• Ability to lead moderately complex initiatives and solutions

• Knowledge of cloud infrastructure environments such as Amazon AWS 

Processes.

• Experience identifying project milestones, phases, and elements; forming project teams; and establishing project budgets.

• Experience tracking project activity; resolving problems; publishing progress reports; recommending actions.

• Experience preparing technical reports by collecting, analyzing, and summarizing information and trends.

• Demonstrated professional and technical knowledge through participation at educational workshops; understanding of current professional publications; and evidence of established/robust personal networks

Risk Management Framework (RMF) Analyst

Position Description: The RMF Analyst will work seamlessly with the ISSM and other IT Security staff to conduct Authorization to Operate (ATO) activities. [Apply]

Years of Experience: 10 years

Education Requirements: Bachelor’s Degree

Preferred Certifications: CAP, Security+, CISSP, GSEC

Responsibilities:

• Oversee and actively manage relationships for assigned systems that may be contractor owned and contractor operated, ensuring vendors comply with agency security and privacy requirements.

• Actively coordinate with the infrastructure teams to plan, develop, implement and test security controls that meet Federal regulations, program objectives, operational needs and user experience required for the 2020 Census SoS, particularly data collection components. Support the integration of security across the SoS lifecycle.

• Lead the development and maintenance of security documentation such as the System Security Plan, Privacy Impact Assessment, Configuration Management Plan, Contingency Plan, Contingency Plan Test Report, POA&M, annual FISMA assessment, and incident reports.

• Assess vulnerabilities to ascertain if additional safeguards are needed and ensure systems are patched and security hardened at all levels of the “stack,” and monitor to ensure vulnerabilities are remediated as appropriate. Actively manage vulnerabilities mitigation commitments from the integration team.

• Assist in establishing rules for program/project vulnerability scans, risk analyses and security assessments which includes addressing controls defined by OMB A130 Appendix III, FIPS 199, NIST SP800-37, NIST SP800-53, NIST SP500-299 (Draft) for both business operations and technical implementation throughout the eSDLC for the SoS. 

• Analyze and define security requirements for information protection. Analyze Decennial change requests for security impacts and provide recommendations to the 2020 Census GPMO.

• Analyze change requests for security risk, monitor and track security-related defects and resolutions, and make recommendations to the 2020 Census GPMO.

• Execute with limited direction or conceptual direction, anticipating customer needs and proactively supporting those needs.

· Assist in establishing and implementing a Continuous Diagnostics and Mitigation (CDM) capability with integrated security controls for the 2020 Census SoS.

· Assist in establishing a continuous monitoring strategy to proactively survey, monitor, and track security-related defects and the status of their resolutions to report to the 2020 US Census GPMO.

· Review program/project vulnerability scan results and report findings to the 2020 US Census GPMO and monitor and track their assessment and subsequent resolution using automated scripts where necessary. 

· Monitor for security breaches and participate in incident response activities and investigation of security breaches. Specifically, traditional ISSO audit responsibilities.

· Capture ATO artefacts that support independent assessment activities. Consolidate ATO artefacts for input into the USCB Risk Management Processing System.

· Present status of RMF efforts to Government customer and program meetings as required.

Required Skills: 

· In-depth technical experience and security exposure with core technologies, including Cloud, Digital, Data Protection, User Management, Digital Mobility, Compliance, Application Security, Event Management, CDM

· Knowledge of FedRAMP and FISMA regulatory compliance requirements.

· Working knowledge of NIST SP800-53 Rev 4 controls, and implementation methodology with the ability to oversee traceability to the controls.

· Experience working throughout a complete IT Security life-cycle supporting a complex System of Systems. 

· Experience working as a compliance and security control planner and implementer.

· Adept at managing change control and technical working group.

· Thorough understanding of the security concepts and intricacies associated with Cloud Computing, Infrastructure, Data Protection, Digital Mobility, Application Security, and Regulatory Compliance.

· Ability to define and manage reporting and measurement systems for IT Security.

· Tools/Technology Experience: Functional knowledge of security tools for both Cloud environments and Data Center, including commercial and open source.

· Organizational Skills: Proven ability to plan and prioritize work, both their own and that of the project team. Ability to follows tasks to their logical conclusion and ensure that tasks and activities have been done to the right standard. Strong attention to detail.

· Team Work: Ability to enthuse and maintain team interest. Comfortable working both individually and as part of a team. Prepared to challenge ideas within a group in a constructive way. Ability to influence others and move a team toward a common vision or goal. Be recognized by customers as a key contributor. Friendly demeanor. Honest teammate.  

· Leadership: Acute business acumen and understanding of organizational issues and challenges. Able to work effectively at all levels in an organization.  Able to lead efforts and mentor junior staff.

· Communications: Ability to communicate clearly and effectively to team members and clients, verbally and in writing. Able to present ideas in a variety of ways depending upon audience and context. Excellent active listening skills. Willing to use alternate means of communication in order to keep their project moving when bottlenecks are present.

· Problem Solving: Natural inclination for planning strategy and tactics. Ability to analyze problems and determine root cause, generating alternatives, evaluating and selecting alternatives and implementing solutions.

Results oriented: Able to drive things forward regardless of personal interest in the task. 

Virtual Desktop Integration Architect

Position Description: The VDI Architect provides subject matter expertise in support of critical infrastructure projects; with experience designing, implementing, and Tier 3 Operation Support for the Enterprise Desktop and VDI Virtualization Technologies. The architect will be responsible for developing architectures, designs, and implementation and verification plans.

Location: Greenbelt, MD [Apply]

Responsibilities:

· Provide engineering leadership and subject matter expertise in the evaluation, development, and documentation of the Virtual Desktop Infrastructure and hosted/streamed applications

· Maintains current knowledge of relevant hardware and software applications as assigned. Participates in special projects as required

· Build and maintain product and service standards for VDI capabilities that align with technology strategies

· Assist in the development of requirements, design specifications, and security considerations for the field office physical architecture

· Define and obtain approval of the Physical Architecture from the Customer when required

· Provide network requirements to support business and operational activities (e.g., data networks, backbone/core networks, storage networks, software defined networking, and interoperability with IPv4 and IPv6, external connectivity to cloud) 

· Provide network services, desktop services, office print services, and shared services needed to support Customer operations in all remote locations

· Collaborate with Office Service Architect to support design for replica remote office production environments which simulate the environments found at remote offices for testing purposes

· Support implementation and maintain remote office replica of production environments 

· Assist in the assessment of the current state of the office services architecture/design

· Lead implementation of VDI infrastructure solution

· Close collaborate with infrastructure architecture and engineering teams to meet program ATO and implementation schedule

· Lead the definition of the direction and strategy for VDI design to ensure the operational needs are being addressed against aggressive schedules

· Oversee end to end System Development Life Cycle (SDLC) of VDI architecture/design through to system deployment and operations

· Designs and documents VDI architecture and associated designs by analysing requirements; constructing workflow charts and diagrams; studying system capabilities; writing specifications.

· Provide enhancements or improvements to Office Services architecture by studying current designs and determining areas for improvement.

· Maintains professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies

Required Skills: 

· Technical certifications a plus – VMware VCP, Citrix CCP, Citrix CCE, Microsoft MCSA, Cloud computing 

· 5 years or more as a Lead VDI Systems Engineer or Chief Engineer on a Large-Scale Mission Critical System of Systems Development and Integration Program.

Expert level knowledge of VDI and supporting technologies required for the delivery of virtual desktop services 

· Experience integrating workplace technologies including but not limited to Printing, Email, Collaboration tools, MDM, Wi-Fi, and Identity management

· Broad knowledge of data and infrastructure technologies such as storage, virtualization, and directory services

· Knowledge of architecture frameworks and methods

· Ability to plan, prioritize, organize, schedule and execute assignments

· Strong analytical skills, with strong problem-solving capability

· Excellent interpersonal, presentation and communication skills

· Ability to work independently and as a member of a team

· Ability to lead moderately complex initiatives and solutions

· Knowledge of cloud infrastructure environments such as Amazon AWS 

· Experience developing and integrating complex systems through the full system development life cycle

· Experience designing and documenting architecture and associated designs by analyzing requirements; constructing workflow charts and diagrams; studying required capabilities; writing specifications

· Experience developing process/control changes by identifying gaps/issues/areas for improvement; and writing improved processes.

· Experience tracking project activity; resolving problems; publishing progress reports; recommending actions.

· Experience preparing technical reports by collecting, analyzing, and summarizing information and trends.

· Demonstrated professional and technical knowledge through participation at educational workshops; understanding of current professional publications; and evidence of established/robust personal networks