Assessment and Authorization Engineer B-2 01.06.17

Overview

At Credence, we support our clients' mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for warfighters and secure our nation for a better future.

We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc. 5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that by focusing on the success of our clients, team members, and partners, we all achieve greater success.

Credence has an immediate opening for an Assessment and Authorization Engineer at the senior level to support the B-2 Division who is responsible for the modernization, test, production, fielding and sustainment of B-2 aircraft and related systems. The B-2 is a high demand, low density fleet that is 20+ years old, is undergoing numerous concurrent acquisitions to solve obsolescence issues, and delivers critical aerial denial/anti-access and nuclear capabilities at Whiteman AFB, MO.

Responsibilities include, but are not limited to the duties listed below:

• Implement and support Joint Special Access Program (SAP) Implementation Guide (JSIG), JSIG-related Risk Management Framework (RMF), and Information Protection (IP) concepts and processes for classified information systems.
• Design and recommend systems security controls and technical, personnel, and management solutions to satisfy information protection requirements, incorporating defense-in-depth, risk assessment, and systems life cycle principles.
• Assist in ensuring implementation of security measures for classified information systems in accordance with DoD directives, JSIG, RMF, NISPOM, and facility procedures.
• Support testing and evaluation of new operating systems, software, and hardware requested for use on information systems.
• Develop, implement, and maintain procedures to ensure JSIG, RMF, and NISPOM compliance; perform weekly information system audits; and notify Government Information Assurance Managers of risks and possible mitigations when full compliance is not possible.
• Conduct ongoing security reviews and tests of B-2 information systems to verify security features and operating controls are functional and effective.
• Use security-related software to detect malicious code, viruses, intruders, and other threats, as appropriate.
• Provide technical expertise to assist in applying and implementing JSIG requirements into the security structure of B-2 information systems.
• Support the maintenance and development of System Security Plans (SSPs), sanitization procedures, and program-designed hardware reviews.
• Assess, research, and recommend approval of hardware and software to the B-2 Government Information Assurance Manager.
• Produce and review documentation for the B-2 Program Office in support of acquisition, sustainment, information assurance, cybersecurity, and IA policy/procedure compliance activities.
• Provide technical expertise on computers, avionics systems, and information assurance support for B-2 modernization and sustainment efforts.
• Support coordination of security approval for sanitization and secured handling procedures for avionics line replaceable units, special laboratory equipment, and Special Test Equipment (STE).
• Assist in ensuring B-2 information systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
• Assist in ensuring all users have required security clearances, authorization, need-to-know, and awareness of security responsibilities prior to being granted access to information systems.
• Report security-related incidents to the B-2 Government Information Assurance Manager and initiate approved protective or corrective measures when security incidents or vulnerabilities are discovered.
• Support periodic reviews to ensure compliance with SSPs and maintain configuration management documentation for security-relevant B-2 information system software, hardware, and firmware.
• Monitor system recovery processes to confirm security features and procedures are properly restored.
• Assist in ensuring all B-2 information system security documentation is current and accessible to properly authorized individuals.
• Notify the B-2 Government Information Assurance Manager when systems no longer process intelligence or SAP information, or when changes may affect B-2 WSSC information system accreditation.
• Ensure system security requirements are addressed throughout all phases of the system life cycle and support authorization of software, hardware, and firmware prior to implementation.
• Implement security controls and safeguards, including management, personnel, operational, and technical controls, to support integrity, availability, and confidentiality in accordance with OMB Circular A-130 and NIST SP 800-53 Rev. 4.
• Apply information security best practices and industry standards to protect data from unauthorized access, use, disclosure, destruction, modification, or disruption in accordance with NIST SP 800-115.
• Evaluate privacy and security economics, security options, cost-benefit analysis, break-even analysis, and life cycle cost considerations to recommend effective and efficient security measures in accordance with NIST SP 800-65 Rev. 1.
• Evaluate physical security measures designed to prevent unauthorized physical access to buildings, facilities, resources, and stored information, including conceptual attack diagrams and hostile act resistance considerations.
• Support security assessment and authorization activities by applying knowledge of DoD RMF processes, information security requirements, security solutions, and DoD information system security management.
• Assist in integrating program protection engineering processes to mitigate and manage risks from foreign collection, design vulnerability, supply chain exploitation or insertion, battlefield loss, and unauthorized or inadvertent disclosure throughout the acquisition life cycle.
• Prepare and maintain the B-2 Program Protection Plan (PPP), including identification and criticality analysis for Critical Program Information (CPI) and critical technology protection.
• Serve as a program focal point for threat analysis and assessment activities required by the DoD acquisition community, including support to System Threat Assessment Report/System Threat Assessment preparation, evaluation, maintenance, and validation.
• Apply vulnerability assessment procedures, tools, and techniques to identify system vulnerabilities, assess severity, recommend mitigations or countermeasures, and support program protection processes.
• Support risk assessment methodology activities to identify, assess, and mitigate potential program impacts.
• Support program protection countermeasure implementation, including anti-tamper techniques and documentation, information assurance management, software assurance, supply chain risk management, and security management requirements across the acquisition life cycle.
• Apply familiarity with DoDI 5200.39 and horizontal protection techniques to support consistent classification, export control, foreign disclosure, anti-tamper, information assurance, and physical security standards for Critical Program Information.
• Apply familiarity with the 2011 National Defense Authorization Act to support development and incorporation of technology protection features during R&D and international acquisition considerations.
• Apply understanding of DoD, Air Force, and common engineering/scientific principles, processes, and procedures to improve performance and sustainability of existing and future Air Force and joint service weapon systems.
• Translate AFGSC and ACC requirements into weapon system requirements used to design, develop, fabricate, test, evaluate, field, and deploy weapon systems, subsystems, and equipment.
• Support requirements development, technology needs, action plans, and policies necessary to improve and retain manufacturing, operations, re-manufacturing, and demilitarization/disposal capabilities for USAF weapon systems.
• Assist with technical and mission analyses of current and future operational requirements, system concept development, technological/trade-off assessments, materiel solution analyses, and design reviews.
• Provide rapid response engineering support through problem identification, impact assessment, and development of corrective actions for critical supportability issues.
• Develop draft documentation and presentation materials as requested or required by programmatic cost, schedule, and performance limits.
• Produce and review technical evaluations, engineering studies, acquisition strategies, requirements documents, systems engineering artifacts, cybersecurity documentation, security authorization packages, program protection documentation, test and evaluation plans, and related program/technical documents.
• Support project team meetings, working groups, and technical reviews, including SRR, SFR, PDR, CDR, IDR, TRR, SVR, TCM, TIMs, FCA, PCA, PRR, PMR, and other applicable reviews.
• Analyze equipment and software deficiencies; recommend corrective actions; and develop, integrate, and test equipment and software deficiency solutions.
• Assist the Government in engineering evaluations of prime and subcontractor recommendations for operational and support issues, including ACSNs, ECPs, CCPs, FAA bulletins, modification proposals, DMSMS, program risk, and related documents.
• Serve in an advisory role for program source selections on engineering-related requirements, as required.
• Support development and evaluation of IMP, IMS, Systems Engineering Detail Schedule, and engineering cost estimates.
• Support system safety engineering activities, including mishap risk assessments, contractor safety proposal and analysis evaluations, safety concern reviews, and resolution of high-priority safety issues.
• Support disciplined engineering activities to assure Operational Safety, Suitability, and Effectiveness (OSS&E), including LCSE process implementation, OSS&E compliance, baseline document updates, metric reporting, and coordination with other organizations.
• Assess System Engineering Plan (SEP) implementation status throughout program operations and notify the Air Force of shortfalls or gaps requiring corrective action.
• Apply MIL-HDBK-516C Airworthiness Certification Criteria to aircraft systems and subsystems; support Air Force Integrity Programs; maintain and update critical safety item lists; and monitor airworthiness certification for B-2 Division aircraft.
• Support the Air Force in establishing Hardness Maintenance/Hardness Surveillance in accordance with Defense Nuclear Agency-H-93-140 and implementing Air Force Pamphlet 91-118 nuclear weapon system safety design and evaluation criteria.

Education, Requirements and Qualifications:

• Must have a Top-Secret clearance.
• Must have an ABET accredited Master's or Doctorate Degree in a related field and ten (10) years of experience in the respective technical/professional discipline being performed, five (5) years of which must be in the DoD;
• OR must have an ABET accredited bachelor's degree in a related field and twelve (12) years of experience in the respective technical/professional discipline being performed, five (5) years of which must be in the DoD;
• For engineering positions, must have successfully completed an undergraduate degree with a major in engineering from a college or university with an ABET-accredited engineering program for the degree requirements of the position, such as electrical, mechanical, or aerospace engineering. Degrees in engineering technology are not considered qualifying for these positions.
• For computer science positions, it is recommended that the candidate have successfully completed an undergraduate or graduate degree with a major in computer science from a college or university with an ABET-accredited computer science program.
• For engineering and computer science positions, the degree must have been received in the year of, or any year after, the original date of accreditation.
• Must be a certified systems security professional with at least five (5) years of experience implementing JSIG or JSIG-related RMF concepts and processes used to identify Information Protection needs.
• Must be knowledgeable in the design of systems and security controls, including technical, personnel, and management solutions to satisfy security requirements.
• Must meet all prerequisites necessary to enable the Government to grant a DoD Directive 8570 baseline certification commensurate with the position description and tasking responsibilities.
• Should have experience with certification authority and designated approving authority processes.

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Maternity, Paternity)
• Short Term & Long Term Disability
• Training & Development