Today
Secret
Early Career (2+ yrs experience)
$67000 - $68000 per year
No Traveling
Unspecified
IT - Software
San Diego, CA (On-Site/Office)
Position Summary:
The Information Security Specialist will provide Public Key Infrastructure (PKI) security oversight, compliance auditing, cybersecurity support, and training for the Navy's Communications Security (COMSEC) and Key Management Infrastructure (KMI) programs. This role involves maintaining system security, coordinating with NMCI and ISSM/ISSO teams, ensuring continuous Authority to Operate (ATO) compliance, and executing cybersecurity operations for NCMS RA and LRA systems.
Key Responsibilities:
PKI Security & Compliance:
* Maintain PKI Registration Authority (RA) and Local Registration Authority (LRA) systems in alignment with ATO and Navy cybersecurity requirements.
* Perform operating system updates, patch management, and validate security scans using Assured Compliance Assessment System (ACAS) tools.
* Apply and maintain Security Technical Implementation Guides (STIGs).
* Monitor and review system logs, validate security controls, and conduct backups for PKI and LRA systems.
* Manage disaster recovery plans and system continuity strategies.
* Properly secure and archive PKI data and transfer to long-term storage per government policies.
* Coordinate with NMCI and other network operators for system troubleshooting and security-related incidents.
* Liaise with external LRA sites and ISSM/ISSO teams to maintain cybersecurity compliance and address system access issues.
Audit & Training Support:
* Conduct compliance audits in accordance with JFHQ-DODIN PKI Audit requirements.
* Track and manage audit findings and associated Plan of Action and Milestones (POA&M).
* Draft audit reports, schedule audit events, and ensure corrective actions are documented and completed.
* Perform Training and Assist Visits (TAVs) for PKI operations at various Navy locations.
* Develop and deliver classroom and on-site training for LRAs, Trusted Agents, System Administrators, and ISSOs.
* Update and maintain PKI standard operating procedures (SOPs), including network topology diagrams, system access guides, and process documentation.
Experience and Qualifications:
* Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field.
* 3+ years of experience in cybersecurity, PKI operations, or IT system security management.
* Knowledge of DoD CAC/smart card operations, PKI, and token management.
* Experience with ACAS scanning, patch management, and STIG implementation.
* Understanding of DoD 8520.02 (PKI and PK Enabling) policies.
* Ability to develop and conduct security training for technical personnel.
* Strong analytical, problem-solving, and written communication skills.
* Ability to work independently and manage multiple tasks.
* Must hold DoD 8140 Cybersecurity Workforce certification (e.g., 451 Intermediate or 461 Basic) on day one or within six months.
* JFHQ-DODIN PKI Auditor qualification, or 3+ years' experience as a Navy RA, LRA, or PKI ISSO.
Preferred Experience:
* Experience with Navy/Marine Corps Intranet (NMCI) systems and network security.
* Experience supporting enterprise-level PKI and COMSEC environments.
* Familiarity with Navy rank structure and organizational hierarchy.
Benefits: Rivet offers a comprehensive benefits package including a liberal vacation plan, a matching retirement program, and competitive salaries commensurate with skills and experience. For more information about our organization, please visit our web site at www.rivetopsllc.com.
Physical Requirements:
* Work may involve sitting or standing for extended periods of time. Position may require typing and reading from a computer screen. Must have sufficient mobility, including but not limited to bending, reaching, and kneeling to complete daily duties in a timely and efficient manner. There is a possibility that due to parking availability and location of work, walking moderate to long distance may be required. May include lifting to 25 pounds as necessary.
* Rivet Operations Company LLC reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing. Positions, functions and qualifications may vary depending on business needs.
* Rivet Operations Company LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics.
The Information Security Specialist will provide Public Key Infrastructure (PKI) security oversight, compliance auditing, cybersecurity support, and training for the Navy's Communications Security (COMSEC) and Key Management Infrastructure (KMI) programs. This role involves maintaining system security, coordinating with NMCI and ISSM/ISSO teams, ensuring continuous Authority to Operate (ATO) compliance, and executing cybersecurity operations for NCMS RA and LRA systems.
Key Responsibilities:
PKI Security & Compliance:
* Maintain PKI Registration Authority (RA) and Local Registration Authority (LRA) systems in alignment with ATO and Navy cybersecurity requirements.
* Perform operating system updates, patch management, and validate security scans using Assured Compliance Assessment System (ACAS) tools.
* Apply and maintain Security Technical Implementation Guides (STIGs).
* Monitor and review system logs, validate security controls, and conduct backups for PKI and LRA systems.
* Manage disaster recovery plans and system continuity strategies.
* Properly secure and archive PKI data and transfer to long-term storage per government policies.
* Coordinate with NMCI and other network operators for system troubleshooting and security-related incidents.
* Liaise with external LRA sites and ISSM/ISSO teams to maintain cybersecurity compliance and address system access issues.
Audit & Training Support:
* Conduct compliance audits in accordance with JFHQ-DODIN PKI Audit requirements.
* Track and manage audit findings and associated Plan of Action and Milestones (POA&M).
* Draft audit reports, schedule audit events, and ensure corrective actions are documented and completed.
* Perform Training and Assist Visits (TAVs) for PKI operations at various Navy locations.
* Develop and deliver classroom and on-site training for LRAs, Trusted Agents, System Administrators, and ISSOs.
* Update and maintain PKI standard operating procedures (SOPs), including network topology diagrams, system access guides, and process documentation.
Experience and Qualifications:
* Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field.
* 3+ years of experience in cybersecurity, PKI operations, or IT system security management.
* Knowledge of DoD CAC/smart card operations, PKI, and token management.
* Experience with ACAS scanning, patch management, and STIG implementation.
* Understanding of DoD 8520.02 (PKI and PK Enabling) policies.
* Ability to develop and conduct security training for technical personnel.
* Strong analytical, problem-solving, and written communication skills.
* Ability to work independently and manage multiple tasks.
* Must hold DoD 8140 Cybersecurity Workforce certification (e.g., 451 Intermediate or 461 Basic) on day one or within six months.
* JFHQ-DODIN PKI Auditor qualification, or 3+ years' experience as a Navy RA, LRA, or PKI ISSO.
Preferred Experience:
* Experience with Navy/Marine Corps Intranet (NMCI) systems and network security.
* Experience supporting enterprise-level PKI and COMSEC environments.
* Familiarity with Navy rank structure and organizational hierarchy.
Benefits: Rivet offers a comprehensive benefits package including a liberal vacation plan, a matching retirement program, and competitive salaries commensurate with skills and experience. For more information about our organization, please visit our web site at www.rivetopsllc.com.
Physical Requirements:
* Work may involve sitting or standing for extended periods of time. Position may require typing and reading from a computer screen. Must have sufficient mobility, including but not limited to bending, reaching, and kneeling to complete daily duties in a timely and efficient manner. There is a possibility that due to parking availability and location of work, walking moderate to long distance may be required. May include lifting to 25 pounds as necessary.
* Rivet Operations Company LLC reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing. Positions, functions and qualifications may vary depending on business needs.
* Rivet Operations Company LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics.
group id: 10125891
