Security Engineer II

The tasks for this person will be, but not limited to, the following:

• Applies systems analysis and design techniques to complex computer systems in a broad area such as financial management; engineering, or accounting, logistics planning and material management; core IT/IM support service, etc.
• Produces innovative solutions for a variety of complex problems.
• Maintains and modifies complex systems or develops new subsystems such as an integrated production scheduling, inventory control, or cost analysis in which every item of each type is automatically processed through the full system of records.
• Guides users in formulating requirements; advises on alternatives and on the implications of new or revised data processing systems; analyzes resulting user project proposals, identifies omissions and errors in requirements and conducts feasibility studies; recommends optimum approach and develops system design for approved projects. Interprets information and informally arbitrates between system users when conflicts exist.
• May serve as lead analyst in a design subgroup, directing and integrating the work of lower-level analysts responsible for several programs.
• Employ technical writing skills to author after action reports, Risk Management Framework control assessments, course of action analysis, and other technical assessments.

5 years' relevant experience in the following:

• Knowledge of Technical assessments to ensure compliance with policies and reviews and required evaluations to ensure compliance with Financial Information Systems Management Act (FISMA) policies.
• Experience with Technical Interchange Meetings (TIMs), Technical Exchange Meetings (TEMs) on a wide range of PMO engineering topics. Experience conducting Program Engineering Milestone Reviews, e.g., System Requirements Review, Design Reviews, Test Readiness Reviews, Operational Readiness Reviews and Incident Report Working Groups
• Able to conduct Technical Reviews of development Contractor-produced deliverables
• Ability to create, review, and maintain PMO program architecture artifacts in DODAF or Government approved format and analyze system architectures to recommended enhancements to improve system performance; assess acquisition solutions for conformity, fit options, and purpose to the assigned program's targeted architectural solution(s)
• Knowledge of sustainment/deployment/implementation approaches and ability to assess and recommended improvements to system availability and user experience
• Understanding of hardware and/or software (COTS/GOTS) to meet system specifications using recognized estimating approaches to support government cost estimates
• Possesses skills to ensure all technical approaches/recommendations are in harmony with USTRANSCOM Enterprise System Engineering and Architecture strategies and vision
• Experienced in risk identification, analysis, mitigation and reporting. Able to offer options to manage or reduce risk.
• Able to interface with IT engineers to resolve program specific data quality issues as they occur.
• Knowledge of Agile methodologies, framework (Scaled, Scrum and Kanban), and tools (Jira, Confluence)
• Able to understand DevSecOps framework as it integrates security into all phases of the Software Development Lifecycle (SDLC)
• Knowledge of Risk Management Framework (RMF) processes and implementation
• Familiarity with Amazon Web Services (AWS) Console and Services to include S3, RDS, CloudWatch, EC2, and ECR
• Familiarity with Cloud Tools such as Artifactory and GitLab
• Knowledge of Nessus/ACAS Scan Reports

Education/Certifications:

• Bachelor's in Engineering or Computer Science or equivalent
• IAWIP Certification: IAM I/IAT II
• Agile Certifications (Scaled, Scrum or Kanban) preferred but not required
• AWS Certifications (Certified Cloud Practitioner) preferred but not required
• Basic Splunk Query Experience preferred but not required