- Plan, develop, implement, and maintain the AFLCMC Enterprise Sensitive Compartmented Information (SCI) Cyber Security program at Hill AFB.
- Implement and manage the AFLCMC Enterprise SCI Information System Accreditation Program at Hill AFB pursuant to the Risk Management Framework (RMF) per Intelligence Community Directive (ICD) 503, National Institute of Standards and Technology (NIST) Special Publications, and other regulations and policies.
- Provide Information System/Network Security Management for Organizational Projects.
- Perform duties as Communication Security and Information Technology Property Manager.

Conditions of employment

• U.S. Citizenship Required
• All new DCIPS employees are required to complete a two-year DCIPS trial period.
• If authorized, PCS will be paid IAW JTR and AF Regulations. If receiving an authorized PCS, you may be subject to completing/signing a CONUS agreement. More information on PCS requirements, may be found at: https://afciviliancareers.com/regulatory/
• This position is subject to provisions of the DoD Priority Placement Program
• Must be registered for Selective Service, see Legal and Regulatory Guide
• Disclosure of Political Appointments
• Direct Deposit: All federal employees are required to have direct deposit
• Advance in hire may be authorized if there is demonstrable proof provided on your resume
• Recruitment Incentive and/or Relocation Incentive may be authorized for this position
• Leave accrual may be authorized upon request
• This position is a Defense Civilian Intelligence Personnel Systems (DCIPS) position implemented under Section 504, Title V of Public Law 99-569, Intelligence Authorization Act for Fiscal Year 1987, as codified in Sec 1601, Chap 83 of Title 10 United
• DoD Components with DCIPS positions apply Veterans' Preference to preference eligible candidates as defined by Section 2108 of Title 5 USC, in accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005
• If you are a veteran claiming veterans' preference, as defined by section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package. For additional information on DCIPS, http://dcips.defense.gov/
• An advanced Information Technology degree is desirable.
• The employee may be required to work other than normal duty hours, which may include evenings, weekends, and/or holidays.
• This is a Centrally Managed position under the Comm and Info Career Field

Qualifications

In order to qualify, you must meet the quality experience requirements described in the Office of Personnel Management (OPM) Qualification Standards, Information Technology (IT) Management Series 2210 (Alternative A).

BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, considering the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

In addition to meeting the basic requirements above, to qualify for this position you must also meet the qualification requirements listed below:

EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: Direct experience serving as an Information Systems Security Manager (ISSM) or Information System Security Officers (ISSO) or Intelligence Community (IC) information systems; Proven, hands-on experience managing the full Assessment & Authorization (A&A) lifecycle using the Risk Management Framework (RMF); Demonstrated experience developing and maintaining core RMF documentation, including the System Security Plan (SSP), security control assessments, and managing a Plan of Action & Milestones (POA&M); and expertise in interpreting and implementing security controls from NIST SP 800-53 and ICD 503 within classified environments.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:
1. Expert knowledge of a full range of IT security principles, concepts, practices, new and emerging products and services (including systems software, database software, immediate access storage technology, and firewalls), and methods for evaluating risk and vulnerability, implementing mitigating improvement, disseminating IT security tools and procedures, and integration techniques.
2. Broad knowledge of IT INFOSEC security requirements for certification and accreditation, network operations and protocols, systems testing and evaluation, and performance management methods sufficient to plan and conduct security accreditation reviews for installed systems or networks and assess and advise on new revised security measures and countermeasures based on the results of accreditation reviews.
3. Expert knowledge of a broad range of telecommunications concepts and principles, operating modes, systems, media, equipment, equipment configuration, related software systems, advise on vulnerability to attack from a variety of sources (e.g., espionage, disruption of services, destructive programs/applications) and procedures methods for protection of systems and applications.
4. Knowledge of Cyberspace Workforce Management, extensive knowledge of existing cybersecurity policies, in-depth knowledge of the
Assessment and Authorization (A&A) process and advanced skills in the tools and technology to automate the processes.
5. Ability to communicate effectively, both orally and in writing, in order to produce technical reports and/or briefings for multiple forums and audiences and ability to make decisions independently in a self-directed manner in support of a team and/or organizational goals.

PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Additional Information:
This position has been designated by the Air Force as a Testing Designated Position(TDP) under the Air Force Civilian Drug Demand Reduction Program. Candidate must pass initial and periodic short notice drug testing. Illegal drug use by employees in sensitive positions presents a clear threat to the mission of the Air Force, national security, and public safety.

Cyberspace Qualification is a condition of employment. This position includes Cyberspace work as a paramount duty requirement. Per DoDM 8140.03, the incumbent must meet all foundational and resident qualification requirements. This Information Systems Security Manager (ISSM) position has a primary designation aligned with the Cyberspace Workforce Framework (CWF) Work Role Code 722 "Information Systems Security Manager" (Advanced Proficiency). The position also encompasses significant duties that align with WRC 805 "Cybersecurity Control Assessor" and WRC 801 "Program Manager." To meet foundational qualification requirements for the primary work role (722), candidates must demonstrate they meet the qualifications for this work role. This is typically accomplished by possessing an approved professional certification (e.g., CISSP, CISM, GSLC). However, in accordance with DoDM 8140.03, the hiring manager may also approve a candidate's qualification based on a combination of formal education, relevant training, and extensive, documented experience that is determined to be equivalent to the required certification. If not already qualified upon entry, the selected candidate will be required to meet all foundational qualification requirements for the primary work role within 9 months of assignment. Failure to achieve and maintain the proper Cyberspace Qualification may result in removal from this position.

Position is designated special-sensitive and requires eligibility to Sensitive Compartmented Information (SCI), other intelligence-related Specialist Sensitive information, or involvement in Top Secret Special Access Programs (SAP) to fully perform the duties and responsibilities of the position. A non-disclosure agreement must be signed.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine your eligibility, qualifications, and quality ranking for this position. Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

BASIS OF RATING: Your application will be rated under the Cut Point procedures based on the extent to which the quality, depth, and complexity of your experience and education relate to the qualification requirements. Additional points are not added for Veteran's Preference; however, Veteran's Preference is considered where applicable.

Best Qualified Group: Candidates in this category possess exceptional skills and experience to exceed well above the minimum requirements.
Fully Qualified Group: Candidates in this category possess good skills and experience above the minimum requirements.
Basically Qualified Group: Candidates in this category meet the minimum education and/or experience requirements.

Your responses to the questionnaire may be compared to the documents you submit. The documents you submit must support your responses to the online questionnaire. If your application contradicts or does not support your questionnaire responses, you will receive a rating of "not qualified" or "insufficient information" and you will not receive further consideration for this job.

Applicants who disqualify themselves will not be evaluated further.