IA Engineer 3 (RMF Support Analyst)

The VA NOC defends, manages, and monitors the network operating status and cyber security posture of the VA by providing the day-to-day management, operation and configuration of the enterprise network infrastructure, Internet Gateways, the delivery of enterprise security systems and services, the monitoring and reporting of security incidents, the conduct of threat and vulnerability analysis, the validation of adequate security controls within the enterprise and the full range of functions across the spectrum of activities relating to incident management, incident response and enterprise network management.

The RMF Support Analyst guides program deliverables through Salient CRGT customer’s RMF Process, ensuring the deliverable achieves and maintains an Authorization to Operate (ATO) on schedule. The RMF Support Analyst effectively leverages their knowledge and familiarity with the RMF processes to secure the ATO by the required date, raising any concerns that may impact the ATO being granted and resolving any issues.

Using their thorough knowledge of cybersecurity principles, concepts, policy and regulations, the RMF Support Analyst performs the role of the System Steward to complete control implementation verbiage to ensure it is clear, concise, and accurately depicts how the security and privacy controls are met. The RMF Support Analyst will ensure that all documents and artifacts are appropriately associated as evidence to the relevant security controls and Control Correlation Identifier (CCIs). Additionally, the RMF Support Analyst will be responsible for supporting the system through the VA eMASS RMF Assess and Authorize Workflows.

The RMF Support Analyst will develop or revise existing system documentation to include plans, standards, and diagrams and ensure that plans are tested on an annual basis or when a significant/major change to the system occurs.

Qualifications

• Experience with the VA’s Governance, Risk and Compliance (GRC) tool, Enterprise Mission Assurance Support Service (eMASS).
• Experience with supporting system Assessment and Authorization (A&A) processes, including artifacts, control implementation details and test results, and Plans of Action and Milestones (POA&Ms).
• Experience in creating, managing, and maintaining ATO packages, implementation narratives and associated artifacts, POA&Ms, SOPs, and FISMA security documents.
• Experience with creating detail-oriented system documentation and able to professionally collaborate closely with Information System Owner (ISO), Information System Security Officer (ISSO), Area Managers, and other relevant stakeholders to execute system steward duties.
• Experience remediating findings based on the results of ongoing monitoring activities, assessment of risk, and outstanding items in the POA&M.
• Experience with uploading and managing of artifacts, initiating workflows, package submissions, and system inheritances.

Certifications

• VA IT Campus Enterprise Mission Assurance Support Service (eMASS) RMF Workflow Series (Steps 1 – 3) Computer Based Training.
• Defense Information Systems Agency (DISA) to provide eMASS Computer Based Training.
• eMASS Instructor Led Virtual Training (ILVT) to be obtained within 90 days of hire date, based on session availability.

Responsibilities

• Management of eMASS artifacts and upload relevant test results. Track reports, scans, and tasks assigned in eMASS. Gather and track POA&M reports, evidence documents. Assist with completing the eMASS record deliverables to achieve/maintain the authority to operate (ATO) and provide reports as required (monthly, quarterly, and annually).
• Assist with implementation plans, risk assessments, self-assessments, security control evaluations, and determining inheritance of security controls/Control Correlation Identifiers (CCIs).
• Assist with development/maintenance/review/validation of documentation, such as System Security Plans, Information System Contingency Plans, Disaster Recovery Plans, Incident Response Plans, Contingency Plan Test Results, Disaster Recovery Test Results, Privacy Impact Assessments, Privacy Threshold Analysis, Application Security Assessments, Interconnection Security Agreements, Memorandums of Understanding, Configuration Management Plans, Security Assessments, POAMs, Privacy Threshold Assessments (PTA), Privacy Impact Analysis (PIA).
• Attend training and meetings, analyze authorization documents and associated artifacts to identify gaps, establish a schedule to address outstanding authorization requirements, and coordinate directly with Project Manager and system stakeholders.

Bachelor's with 5 - 8 years (or commensurate experience)

Required Skills and Experience

• Clearance Required:

Preferred Skills and Experience

GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.

But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.

Posted Pay Range

The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an “at-will position” and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.