Senior Identity and Endpoint Engineer, Tier-3/4

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™

ASRC Federal is seeking a Senior Identity and Endpoint Engineer, Tier-3/4 to support an upcoming award in San Antonio, TX

Location: San Antonio, TX (On-Site)

Clearance: U.S. Citizen with active SECRET clearance

Summary: This contract will provide 24/7/365 operations support to the customer. Applicant must be able and willing to work on-call, shift, or surge if required. Must be flexible and able to travel when necessary. Will need a Real ID and current passport.

Work arrangement: This position will require on-site occupancy at or near the Ft Sam Houston location. Core hours are 6:00am - 6:00pm; exception being shift-work (surge) or on-call staff. Telework may be considered on a position-by-position bases with approval by the customer.

Responsibilities :

• This position conducts software and systems engineering and software systems research in order to develop new capabilities, ensuring cybersecurity is fully integrated. Conducts comprehensive technology research to evaluate potential vulnerabilities in cyberspace systems.
• Position requires management of personnel. Managerial responsibilities include but are not limited to, on-boarding & exiting assistance, timecard accounting, performance reviews, mentoring, and reporting.

Requirements :

• Must be a U.S. Citizen with active SECRET clearance
• Must be flexible to travel when necessary. Must have Real ID, and ability to obtain a U.S. Passport
• Must be a Team Player with the ability to work well independently with limited direction
• Must be self-motivated and provide excellent customer service

Education :

• Minimum of 6 years of relevant work experience with a BA/BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET accredited or CAE designated institution.

Required Certifications :

• Microsoft Certified: Cyber Security Architect Expert or Microsoft Certified: Azure Solutions Architect Expert

• Require at least one of the following certifications:
  • GIAC Cloud Security Essentials (GCLD)
  • CCE
  • COMPTIA Advanced Security Practitioner (CASP+)
  • Certified Ethical Hacker (CEH)

Must have the following areas of knowledge :

• Computer networking concepts and protocols, and network security methodologies
• Risk management processes (e.g., methods for assessing and mitigating risk)
• National and international laws, regulations, policies, and ethics as they relate to cybersecurity
• Cybersecurity principles
• Specific operational impacts of cybersecurity lapses
• Cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS)
• Cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments
• New and emerging information technology (IT) and cybersecurity technologies
• System life cycle management principles, including software security and usability
• Application vulnerabilities
• Cryptography and cryptographic key management concepts
• Penetration testing principles, tools, and techniques
• Industry technologies and how differences affect exploitation/vulnerabilities
• Information technology (IT) supply chain security and risk management policies, requirements, and procedures
• Local specialized system requirements (e.g., critical infrastructure/control systems that may not use standard information technology [IT]) for safety, performance, and reliability)
• Relevant laws, policies, procedures, or governance related to critical infrastructure
• Operations security and industry standard security models
• Software reverse engineering techniques
• Network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration
• Application firewall concepts and functions (e.g., Single point of authentication/audit/policy enforcement, message scanning for malicious content, data anonymization for PCI and PII compliance, data loss protection scanning, accelerated cryptographic operations, SSL security, REST/JSON processing)

Must have the following experience :

• Applying the systems engineering process; applying and incorporating information technologies into proposed solutions; and using scientific rules and methods to solve problems
• Researching current technology to understand capabilities of required system or network
• Researching and evaluating available technologies and standards to meet customer requirements
• Identifying cyber capabilities strategies for custom hardware and software development based on mission requirements
• Collaborating with stakeholders to identify and/or develop appropriate solutions technology
• Creating and utilizing mathematical or statistical models
• Designing the integration of technology processes and solutions, including legacy systems and modern programming languages
• Designing and developing new tools/technologies as related to cybersecurity
• Troubleshooting prototype design and processing issues throughout the product design, development, and pre-launch phases
• Identifying functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities
• Developing data management capabilities (e.g., cloud based, centralized cryptographic key management) to include support to the mobile workforce
• Designing or implementing cloud computing deployment models

Must have the ability to :

• Interface with users in a pleasant and tactful manner and coordinate several concurrent tasks
• Quickly learn new IT technologies
• Occasionally work non-standard hours as required
• Identify systemic security issues based on the analysis of vulnerability and configuration data
• Apply and incorporate information technologies into proposed solutions
• Create and utilize mathematical or statistical models
• Design the integration of technology processes and solutions, including legacy systems and modern programming languages
• Use scientific rules and methods to solve problems
• Design or implement cloud computing deployment models

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.