IT Cybersecurity Specialist (Security Architect) (DIRECT HIRE)

3 days left

Employer
USAJobs
Location
District of Columbia, D.C
Posted
Sep 13, 2019
Closes
Sep 21, 2019
Function
IT, Security Engineer
Hours
Full Time
Duties

Summary

For more information on the Department of Justice and the United States Attorneys' Offices, visit www.justice.gov/usao/ .

As needed, additional positions may be filled using this announcement.
Learn more about this agency

Responsibilities

If selected, you will serve as the Security Architect (SA) for the Executive Office for the United States Attorneys (EOUSA), reporting directly to the Program Manager for Security Architecture and Engineering (PM-SAE) on all EOUSA Security Architecture and Engineering initiatives.
  • Design enterprise and systems security throughout the development life cycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.
  • Work with the Security Architecture and Engineering Program lead in developing requirements for the EOUSA Enterprise Security Architecture.
  • Develop EOUSA's Enterprise Security Architecture in support of EOUSA and all 94 USAOs comprising roughly 15,000 users, 25,000 plus endpoints, three Core Enterprise Facilities, one Enterprise Data Center, two commercial cloud providers, and 250 work sites spanning both the continental United States and territories.
  • Ensure the seamless integration between Organizational On-premise, Departmental, and Commercial Cloud Security Architecture and associated services.
  • Oversee a number of security solutions comprising the EOUSA Security Architecture including computer protection components (e.g., hardware firewalls, encryption, antivirus, host-based white listing, threat intelligence integration, advanced threat defense, endpoint detection and response).
  • Coordinate the implementation of physical or logical sub-networks that separate EOUSA/USAO internal local area network (LAN) from other untrusted networks.
  • Oversee host/network access control mechanisms (e.g., trusted network access control capabilities) and oversees the integration of enterprise firewalls, demilitarized zones, encryption with additional network security solutions including host-based IDS, network IDS/IPS, Cloud Access Security Brokers (CASB), honey pots, and other perimeter protection solutions as necessary).
  • Ensure the integration of EOUSA Cloud Security Solutions (e.g. VPC Transit) as well as Department required solutions IAW with DOJ Cloud Secure Configuration Guide AWS and Azure.


Travel Required

Not required

Supervisory status
No

Promotion Potential
13

Requirements

Conditions of Employment

  • You must be a United States Citizen or National.
  • Background investigation, credit check, and drug test required.
  • You must be registered for Selective Service, if applicable.
  • If selected, you may be required to complete a one year probationary period.
  • You must meet all qualification requirements upon the closing date of this announcement.


Qualifications

GS-13: To be eligible at the GS-13 level in federal service, you must have ONE year of specialized experience equivalent to the GS-12 in federal service. Specialized experience is defined as developing, maintaining and evolving large scale and complex organizational security architectures; managing existing and new security solutions within the portfolio ensuring maximum integration and insuring security data standardization and exchange in support of advanced security analytics and business intelligence. In addition, you must have IT-related experience demonstrating each of the four competencies listed: Attention to Detail, Customer Service, Oral Communication, and Problem Solving.
Examples of specialized experience may include:
Applying network security architecture concepts including topology, protocols, components, and associated principles (e.g., application of defense-in-depth).
Designing, implementing and maintaining organizational security architectures supporting On-premise, Commercial Cloud and Hybrid enterprise environments.
Designing, implementing and maintaining an organizational defense-in-depth security architecture.
Ensuring cyber resiliency and trustworthiness in support of organizational enterprise networks.
Applying software related information technology (IT) security principles and methods (e.g., modularization, layering, abstraction, data hiding, simplicity/minimization).
Designing, developing and implementing security architecture solutions and services.
Familiarization with designing and implementing endpoint protection components (e.g., hardware firewalls, encryption, antivirus, host-based white listing, threat intelligence integration)
Implementing physical or logical sub-networks that separate organizational internal local area network (LAN) from other untrusted networks.
Designing, implanting and maintaining host/network access control mechanisms (e.g., trusted network access control capabilities).
Designing, implementing and maintaining enterprise firewalls, demilitarized zones, encryption with additional network security solutions including host-based IDS, network IDS/IPS, Cloud Access Security Brokers (CASB), honey pots, and other perimeter protection solutions.
Designing, implementing and maintaining Commercial Cloud, Private Cloud and Hybrid Cloud security solutions including third party security solutions within Amazon Web Services and Microsoft Azure Commercial and Government Clouds.

Interagency Career Transition Assistance Plan (ICTAP)- The ICTAP provides eligible displaced Federal competitive service employees with selection priority over other candidates for competitive service vacancies. If your agency has notified you in writing that you are a displaced employee eligible for ICTAP consideration, you may receive selection priority if: 1) this vacancy is within your ICTAP eligibility; 2) you apply under the instructions in this announcement; and 3) you are found eligible and qualified for this vacancy. To be eligible and qualified, you must satisfy all eligibility and qualification requirements for the vacant position as outlined in this announcement. You must provide proof of eligibility to receive selection priority. Such proof may include a copy of your written notification of ICTAP eligibility or a copy of your separation personnel action form. Additional information about ICTAP eligibility is at: http://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/ .

Career Transition Assistance Plan (CTAP)- The CTAP provides eligible surplus and displaced competitive service employees in the Department of Justice with selection priority over other candidates for competitive service vacancies. If your Department of Justice component has notified you in writing that you are a surplus or displaced employee eligible for CTAP consideration, you may receive selection priority if: 1) this vacancy is within your CTAP eligibility, 2) you apply under the instructions in this announcement, and 3) you are found eligible and qualified for this vacancy. To be eligible and qualified, you must satisfy all eligibility and qualification requirements for the vacant position as outlined in this announcement. You must provide a copy of your written notification of CTAP eligibility with your application. Additional information about CTAP eligibility is at: http://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/ .

Education

Additional information

Payment of relocation expenses will not be authorized.

Relocation incentive may be considered as appropriate based on qualifications.

The Department of Justice offers a comprehensive benefits package that includes, in part, paid vacation; sick leave; holidays; telework; life insurance; health benefits; and participation in the Federal Employees Retirement System.

Veterans' Preference - Since Direct Hire Recruitment Authority is being used, traditional Veterans' Preference rules do not apply. Qualified preference eligibles will be given full consideration for this position. While veterans' preference does not apply in Direct Hire Authority, preference eligibles can submit their supporting documentation listed as Optional in the Required Documentation section of this vacancy announcement.

Selective Service: If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System, or are exempt from having to do so under the Selective Service Law. See www.sss.gov .

Reasonable Accommodation Statement: Federal Agencies must provide reasonable accommodation to applicants with disabilities, where appropriate. Applicants requiring reasonable accommodation for any part of the application and hiring process should contact the hiring agency directly. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.

EEO Statement: The United States Government does not discriminate in employment on the basis of race, color, religion, sex, national origin, political affiliation, sexual orientation, marital status, status as a parent, genetic information, disability, age, membership or nonmembership in an employee organization, or on the basis of personal favoritism.

How You Will Be Evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your resume and all supporting documentation you submit, to include your responses to the Occupational Questionnaire, will be used to determine whether you meet the minimum job qualifications listed in this announcement. If you rate yourself higher than what is supported by the documentation you submit, you may be excluded from consideration for this job. If it is determined you meet minimum qualification requirements, you will be referred to the selecting official. Under the provisions of the Direct Hire Authority, category rating and veterans' preference do not apply; therefore, your responses to the assessment questionnaire will not be used to determine a scored rating. Instead, all applicants that are determined to meet minimum qualifications, as defined by this vacancy announcement, will be referred to the selecting official for consideration.

Qualified, eligible CTAP and ICTAP applicants will be referred to the selecting official under the selection priority placement program. If you are basically qualified for this job, your resume and supporting documentation will be compared to your responses to the Occupational Questionnaire. If you rate yourself higher than what is supported by your application materials, your responses may be adjusted and/or you may be excluded from consideration for this job.

The Occupational Questionnaire will take you approximately 10 minutes to complete.

Background checks and security clearance

Security clearance
Other

Drug test required
Yes

Position sensitivity and risk
Special-Sensitive (SS)/High Risk

Trust determination process
Suitability/Fitness

Required Documents

You must provide a complete Application Package which includes:

- Required: Your responses to the Online Occupational Questionnaire (This is completed automatically during the apply online process).

- Required: Your resume showing relevant experience and dates (for full consideration you must include day/month/year) of employment and work schedule for each (e.g., part-time XX hours per week or full-time) (cover letter optional).). Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

- Required, if applicable: CTAP/ICTAP documentation to include a copy of a separation notice or other proof of eligibility for priority selection; a copy of an SF-50, Notification of Personnel Action, showing current position, grade, promotion potential, and duty location; AND a copy of your most recent performance appraisal.

- Optional , if applicable: Veterans' Preference documentation.
Member Copy 4 of your DD-214 (Certificate of Release or Discharge from Active Duty); or if you are a current Active Duty member, a certification on appropriate military branch letterhead that indicates: 1) your service dates, 2) expected discharge or release date from active duty with a release/discharge date no later than 120 days from the closing date of this announcement, and 3) the character of service (e.g., Honorable); or other official documentation (e.g., documentation of receipt of a campaign badge or expeditionary medal) that shows your military service was performed under honorable conditions. If you are a disabled veteran, a Purple Heart recipient, or widow/widower if a veteran, the spouse of a disabled veteran or the parent of a disabled or deceased veteran, a Standard Form (SF) 15, "Application for 10-Point Veteran Preference" dated October 2013 and the required documentation identified on the reverse side of the SF-15 to support your preference claim.

If you are relying on your education to meet qualification requirements:

Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education .

Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.

Similar jobs