For additional information on direct hire opportunities with the Air Force please click here.

DUTIES:

• Oversees the cybersecurity program for the Information Technology Division within the Sentinel Systems Directorate, including managing info security implications within the program to include strategic, personnel, infrastructure, requirements, policy enforcement, emergency planning, security awareness, and other resources.
• Leads a diverse team of cybersecurity subject matter experts in developing and managing a portfolio of Approval to Operate (ATO) packages; implementing the Risk Management Framework (RMF); reviewing Bodies of Evidence (BOE) and identifying/mitigating cybersecurity vulnerabilities.
• Coordinates with Authorizing Officials (AOs) to ensure ATO is maintained, and risks are mitigated to include issues associated with Cross Domain Solutions (CDS), Interconnection Security Agreements (ISA), Foreign Ownership Control or Influence (FOCI), Security Impact Analysis (SIA) reports.
• Develops and maintains business, systems, and information processes to support enterprise mission needs; translates technology and environmental conditions (i.e., law and regulation) into IT rules and requirements that describe baseline and target architectures.
• Develops cyberspace plans, strategy, and policy to support and align with organizational cyberspace missions and initiatives.
• Conducts threat and vulnerability assessments and determines deviations from acceptable configurations or policies. Assesses the level of risk and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations.
• Provides IT leadership on all cybersecurity activities to include cost, schedule, and performance impacts of accreditation timeline.
• Serves as consultant and technical expert to junior technical staff and program managers, senior subject matter specialists and/or agency officials on information systems security.
• Develops and presents technical briefings and reports to senior leaders for technical cyber topics as directed.
• Engages with geographically dispersed stakeholders to ensure Sentinel cybersecurity activities are successfully planned, coordinated, and executed.
• Ensures consistent application of policies and standards across all technology projects, systems, and services.
• Ensures appropriate treatment of risk, compliance, and assurance from internal and external perspectives.
• Develops and enhances an information security management framework.

SKILLS:

• At least 8-12 years of relevant experience with day-to-day operations of a cybersecurity program is typically required. (Candidates at this level should have Certified Information Security Systems Professional (CISSP) or similar certification, equivalent education, or experience as outlined in the position's Work Role Qualification Matrix (Reference: DOD MANUAL 8140.03, Cyberspace Workforce Qualification and Management Program).
• Strong experience in overseeing, evaluating, and supporting the documentation, validation, assessment, and authorization processes necessary to assure that existing and new IT systems meet the organization's cybersecurity and risk requirements is highly valued.
• Comprehensive understanding of the DoD RMF (with implementation of multiple cyber control features) is highly desirable.
• Experience in conducting and/or evaluating penetration testing, vulnerability and risk assessments, security policy development, and risk mitigation procedures is preferred.
• Experience in Cloud computing/Elastic computing and network architecture across virtualized environments is highly desirable.
• Strong background in Digital Engineering (DE), Model Based Systems Engineering (MBSE), and cyber accreditation processes/procedures is highly valued.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST is preferred.
• Strong leadership, innovative thinking, employee mentorship, teamwork, and excellent communication skills to effectively interface with internal and external stakeholders at all levels as well as the independence, assertiveness, self-reliance, with a high level of personal integrity to get the job done is desirable.
• Experience developing, implementing, and monitoring a strategic, comprehensive enterprise information security and IT risk management programs and risk assessments is desired.
• Specific experience in software development using Scaled AGILE or other best-in-class development practices is desired.

Conditions of employment

• U.S. Citizenship Required
• Telework may be authorized.
• PCS expenses if authorized will be paid IAW JTR and Air Force Regulations, more information on PCS benefits/requirements may be found at the following link: https://afciviliancareers.com/regulatory/
• Employee must be able to obtain and maintain a Top Secret security clearance and will be required to handle and safeguard sensitive and/or classified information in accordance with regulations to reduce potential compromise.
• Locations are not negotiable. The actual duty locations available may be located on the Air Force Civilian Service website.
• Random drug testing may be required depending upon the position being filled.
• Supervisory requirements may be required depending upon the position being filled.
• New hires are required to meet the appropriate qualifications for the specific position being filled, per DoD Manual 8140.03 dated 15 Feb 2023, Cyberspace Workforce Qualification and Management Program within 2 years of appointment.
• For additional information on direct hire opportunities with the Air Force please go to https://afciviliancareers.com/find-a-job/
• Review the required Knowledge, Skills, Abilities, and Tasks (KSATs) for the Cyber Work Role, at https://dl.dod.cyber.mil/wp-content/uploads/dcwf/ElementsMap/story.html
• This position is currently designated as a Critical Acquisition Position; the employee is required to sign a three-year service agreement.
• Employee must meet Defense Acquisition Workforce Improvement Act (DAWIA) requirements, which includes achieving Engineering and Technical Management or an Information Technology Practitioner certification category within 24 months after appointment.
• In accordance with the Ethics in Government Act, 1978, employee may be required to file an OGE Form 450, Confidential Financial Disclosure Report, upon appointment and will be required to file annually.
• Your resume is key to evaluating your skills, knowledge, and abilities: be clear and specific when describing experience. If using Microsoft Word, please use 2018 or a more recent version, as MS Word 97-2003 documents are no longer viewable.
• This position may require work to be performed during hours outside the normal duty schedule.
• This position requires IAM Level III certification as required by DoDI 8570 and AFMAN 17-1303 (formerly AFMAN 33-285), CYBERSECURITY WORKFORCE IMPROVEMENT PROGRAM and is coded C0K.
• Subject to Temporary Duty Assignment (TDY): Approximately 10 days per year.

Qualifications

For additional information on direct hire opportunities with the Air Force please click here.

In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions, Individual Occupational Requirements (IOR) for the GS-2210, Information Technology (IT) Management Series, 2210 (Alternative A) Series.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:
1. Expert knowledge and ability to provide technical leadership and project/program oversight over highly complex cyberspace, information technology (IT), and knowledge management (KM) activities. Skill in developing new theories, concepts, principles, standards, and methods in the specialty area(s).
2. Skill in conducting substantial coordination among a variety of organizations and high-level managers to identify and integrate internal and external program issues affecting the organization or agency, such as integrating IT programs with other programs of equivalent scope and complexity as well as those involving other technical, financial, organizational, and administrative factors. Ability to collaborate at appropriate levels with organizations both inside and outside AFMC, the Air Force, DoD and its agencies, and the Federal Government.
3. Knowledge of personnel management, EEO, and safety and security regulations, practices, and procedures. Skill in planning, organizing, and directing the functions (as well as mentoring, motivating, and appraising the staff) of an organization through subordinate supervisors. Ability to develop, implement, evaluate, and improve processes and procedures to monitor the effectiveness, efficiency, and productivity of the organization.
4. Knowledge of DoD financial planning and programming processes, Federal budget cycles, project/program management, acquisition planning, and contracting methodologies sufficient to identify and defend requirements, integrate activities, and lead teams to meet cyberspace, IT, and KM mission requirements throughout the command and in inter-agency environments. Ability to analyze, plan, and adjust work operations of multiple organizational segments to meet program requirements, goals, and objectives within available resources.
5. Knowledge of current and new cyber/IT systems architectures, life-cycle processes, integration and interoperability, design operations and configuration, facilities, practices and methodology across the Government, private industry, and academia. Ability to advise other IT experts throughout the agency or in other agencies on a variety of situations and issues that involve applying or adapting new theories, concepts, principles, standards, methods, or practices, that are developed by the employee or result from the employee's leadership.
6. Skill and ability to speak and write effectively, to address highly complex technical and controversial issues(frequently in terms understandable to non-technical personnel), serve as senior consultant to agency management officials, prepare and give briefings, chair meetings, lead task forces, and prepare reports and statements for senior military (General Officer/SES), government, and private sector management officials.

This is a DoD Cyber Workforce position and is assigned the following Cyber Work Role Codes and Proficiency Levels:

• 651 (Enterprise Architect) (Proficiency Level: Intermediate)
• 752 (Cyber Policy and Strategy Planner) (Proficiency Level: Expert)
• 612 (Security Control Assessor). (Proficiency Level: Expert)

Information Technology Specialist candidates do not have a positive education requirement, but the role of this NH-04 position would typically favor those with a bachelor's degree in an Information Technology related field. Master's degree is preferred.

This is a Critical Acquisition Position (CAP). Unless specifically waived by the appropriate Component Official (i.e., the Director of Acquisition Career Management for the Component, the Service Acquisition Executive, or the Service Secretary) or if the employee is "grandfathered" under 10 U.S.C. l 736(c)(l ), the following are statutorily mandated requirements (Reference 10 U.S.C. 1733 and1737):

• Employee must be a member of the Acquisition Corps.

Acquisition Professional Development Program (APDP): his is a Critical Acquisition Position (CAP). Unless specifically waived by the appropriate component official, i.e., the Director of Acquisition Career Management for the component, the Service Acquisition Executive, or the Service Secretary, the following are statutorily mandated requirements.
(1) Selectee must execute a written agreement to remain in Federal service in this position for at least three years. In signing such agreement, the employee does not forfeit any employment rights, nor does such agreement alter any other terms or conditions of employment.
(2) The selectee must meet, or be capable of achieving the APDP certification as designated on the position description within the defined grace period for that certification level after assignment.
(3) This position also requires employee to engage in acquisition continuous learning activities achieving 80 Continuous Learning Points every 24 months.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

For additional information on direct hire opportunities with the Air Force please click here.