(Job ID# ASM25ITL618)
Location: Hampton, Virginia
Job Type: Full-time
Description
AS&M has an exciting opportunity for a Distributed Active Archive Center (DAAC) Information Technology Lead to join the team in Hampton, Virginia, supporting the Research, Science, and Engineering Services (RSES) contract at NASA Langley Research Center.
The successful candidate will provide HSPD-12/SMART ID credential administration and support to NASA Security and Badge and Pass operations by performing the following tasks.
Responsibilities
Conduct comprehensive risk assessments and manage continuous monitoring efforts for both on-premises and cloud environments.
Understanding of Amazon Web Services (AWS)
Oversee physical security and network security measures for on-premises infrastructure, including firewalls, VPNs, and IDS/IPS systems.
Lead incident response efforts.
Perform regular vulnerability assessments and manage patching processes.
Drive cloud security posture management (CSPM) initiatives.
Manage identity and access management (IAM) strategies, including the implementation of MFA, SSO, and privileged access management (PAM) solutions.
Ensure continuous compliance with government regulations, preparing systems for internal and external audits.
Collaborate with DevOps and IT teams to integrate security into CI/CD pipelines, leveraging Infrastructure as Code (IaC) tools such as Terraform, Ansible and/or CloudFormation.
Qualifications
Proof of U.S. Citizenship is required for this position.
Must be able to complete a U.S. government background investigation.
Requisition Qualifications
5+ years of Linux/Unix System Administration experience (Windows Administration alone is not sufficient)
3+ years of experience with Tape Libraries, Tape Drives, and Storage Area Networks
Required Qualifications
Bachelor’s degree in computer science or related degree.
5 – 10 years’ experience in an enterprise systems environment as a system administrator and security agent.
Ability to represent systems through good communication skills (orally and in well—documented plans) with customers, including ISSO and OCIO
Knowledge and understanding of LINUX environments (filesystems, storage, architecture).
Understanding/familiarity with OpenShift.
Expertise in securing physical, virtual, and containerized infrastructures in a hybrid environment.
Proficiency with vulnerability management tools such as Nessus, AWS Inspector, or OpenVAS.
Experience with endpoint security, network security, and firewall management.
Experience with SIE integration and incident response in complex environments.
Experience leading or coordinating compliance audits and ensuring ongoing compliance with federal regulations.
Familiarity with “DevSecOps” practices and securing CI/CD pipelines in an on-premises and cloud environment.
Knowledge of configuration management protocols to lead relevant activities and ensure up-to-date inventory of systems, software, and libraries.
Strong leadership and communication skills to work effectively with cross-functional teams.
Experience with coordinating with stakeholders within and outside the organization.
Ability to support multiple objectives, track own work and provide updates to stakeholders.
Ability to set priorities and meet deadlines.
Proficient user of Microsoft Excel, Outlook, and Word
Preferred Qualifications
Certified Information Systems Security Professional (CISSP)
Previous experience with NASA or other US government agency and
Knowledge of Federal Information Security Management Act (FISMA) controls
Experience with keeping up with industry standards and implementing System Administration (SA) best practices in a Linux environment.
Certified Kubernetes Security Specialist (CKS)
Certified Information Systems Auditor (CISA)
Familiarity with Scaled Agile Framework (SAFe) with certification
Strong knowledge of identity management, MFA, and RBAC for hybrid environments.
Excellent communication skills.
Self-starter who can work independently or as part of a team.
Ability to work with stakeholders in a hybrid environment.
How to Apply?
Details about our company are available at www.asm-usa.com, and details about job openings at www.asm-usa.com/jobs.
Please e-mail your completed AS&M application and a detailed resume to asmjobs (at) asm-usa.com. Mention the Job ID#.
AS&M application is available at our website: https://www.asm-usa.com/apply.
*** AS&M is an equal opportunity, affirmative action employer ***