Jr. Information Assurance Specialist

Work Where it Matters

Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At Suvi, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers’ missions safely, securely, and efficiently.

As a Suvi employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

SUVI Global Services is seeking a Jr. Information Assurance Specialist to support mission-critical federal programs and highly visible contracts.  This role supports the effort to ensure a secure computing environment.   The IAS works directly with government stakeholders and technical teams to provide clear direction, achievable goals that meet requirements, and tools to ensure confidentiality, integrity, and availability.  This role supports multiple federal initiatives and drives delivery of secure, scalable, and compliant solutions.  To join our team of outstanding professionals, apply today!

• Support troubleshooting and root-cause analysis of security incidents.
• Support security scans and remediation.
• Support efforts to identify and remediate security vulnerabilities and threats to assets.
• Research and assist in implementation of security policies, procedures and standard operating procedures according to best practices.
• Manage compliance by ensuring systems are compliant with NIST and/or DoD controls and requirements; to include creation of and/or updates to all associated FISMA/NIST documents
• Ability to work closely with multiple teams to achieve multiple ATOs.
• Strong oral and written communication.
• Ability to brief both management and team members about ATO processes.
• Manage multiple project’s timelines to include tracking POAMs to completion.
• Maintain and optimize processes revolving around security, data integrity and availability.
• Support the team by providing expertise and guidance.
• Build and maintain documentation on security policies, disaster recovery, continuity of operations plans, business impact analysis, risk registers, and SOPs.
• Drive 100% on time compliance.
• Understanding of security best practices and ability to implement NIST 800-53 in Cloud environments.
• Understanding of Security Technical Implementation Guides (STIG) is a plus.

• Must be a US Citizen able to obtain and maintain a government Secret clearance (active Secret preferred).
• Education and Experience:
  • Bachelor’s degree in information technology, Computer Science, Engineering, or related field; OR
  • 4+ years of military service in a technical role; OR
  • 4+ years of relevant experience.
• Strong written and verbal communication skills.
• Knowledge of secure development practices.
• Desire to learn how to implement or support NIST 800-53 controls.
• Desire to learn how to develop with SPFx, React, and TypeScript.

Desired Qualifications:

• Knowledge and certification of AWS and other cloud platforms such as GCP and Azure, or private platforms such as OpenShift.
• Familiarity with FedRAMP and zero-trust architecture.
• Experience operating within Agile, SAFe, or DevSecOps delivery environments.
• Entry-level expertise in SharePoint Online architecture, development, and administration.
• Ability to obtain security certifications such as Security+ or CISSP.