Journeyman Cybersecurity Engineer

Overview

Journeyman Cybersecurity Engineer

LOCATION: Tinker AFB, OK

JOB STATUS: Full-time

CLEARANCE:Top Secret

TRAVEL: Limited, as needed

Astrion has an exciting opportunity for a Journeyman Cybersecurity Engineer located at the Tinker AFB in Oaklahoma providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG).

The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities.

REQUIRED QUALIFICATIONS / SKILLS:

• Citizenship: Must be a US citizen
• Must have and be able to maintain an active Top Secret clearance
• Experience supporting legacy, nonstandard, isolated, or non-AFNET-connected systems is highly desirable.
• The selected candidate should be prepared to assume immediate responsibility for a high-volume ATO recovery effort, including assessment of approximately 2,000 remaining CCIs and development of SSP implementation narratives.
• Candidates should demonstrate the ability to work through incomplete documentation, aging artifacts, unresolved site dependencies, and large compliance backlogs while maintaining an accurate, auditable record in eMASS.
• The candidate must be able to communicate material risks clearly, particularly risks associated with ATO submission timelines, expiring coverage documentation, missing artifacts, and external tasker dependencies.

PREFERRED QUALIFICATIONS / SKILLS:

• Education: Bachelor's degree in a professional engineering discipline from an ABET-accredited educational program and at least 7 years of experience in the respective technical/professional discipline, 3 of which must be in the DoD.

• Certifications: Security +

• Understanding of cybersecurity in DoD cloud infrastructure.

• Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.

• Expereinece with systems analysis and eMASS

• Strong ability to communicate technical topics effectively in both written and verbal forms.

• Prior experience with DAF authorization processes, CSSP coordination, POA&M remediation, and Security Plan development is strongly preferred.

TECHNICAL SKILLS:

• STIG compliance

• Risk Management Framework (RMF) implementation and documentation.

• DoD cybersecurity policies and compliance.

• System Authorization and Accreditation (A&A) processes.

• DoD cloud infrastructure security.

• Agile development methods including CI/CD, DevSecOps, and DevOps.

• Security risk, vulnerability, and contingency planning.

• PKI management and access control.

• Classified material handling and accountability.

INTERPERSONAL SKILLS:

• Strong verbal and written communication skills for both technical and non-technical audiences.

• Ability to collaborate with government, contractor, and industry stakeholders.

• Effective problem-solving and analytical thinking.

• Ability to work independently and manage multiple priorities in a fast-paced environment.

• Adaptability to evolving program requirements and security challenges.

RESPONSIBILITIES:

Duties include, but not limited to:

• Assist in the development of security documentation including System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and other required system security engineering artifacts.

• Support RMF Authorization and Accreditation (A&A) activities, ensuring compliance with DoD and Air Force cybersecurity policies.

• Manage system user accounts, ports/protocols, PKI requirements, and access control lists.

• Implement and track system security updates, configurations, and vulnerability remediation in accordance with DoD requirements.

• Conduct risk and vulnerability assessments; recommend security policies, contingency plans, and disaster recovery procedures.

• Participate in system/network design to ensure alignment with security policies.

• Provide leadership in analyzing and integrating cybersecurity requirements into system design and operations.

• Review and assess the implementation of RMF security controls across system architecture, documentation, and design artifacts.

• Collaborate with stakeholders to ensure RMF A&A approval by all Authorizing Officials.

• Maintain and audit databases for classified information, visits, and clearances.

• Support classified material handling, accountability, and compliance with security classification guides.

• Develop and deliver security awareness training and education programs.

• Prepare and review acquisition security documentation and ensure compliance with CDRLs.

• Plan and implement security-related surveys, assessments, and evaluations throughout the program life cycle.