Cybersecurity Engineer - Multiple Teams

We are seeking a Cybersecurity Engineer to provide Connection Approval (PPSM) and Agency-level Compliance with IT, Cyber Standards, and Strategy to join our team in support of a DoD customer.

Responsibilities Include:

• Connection Approval/PPSM Support:
  • Monitor PPSM support phone lines and mailbox
  • Develop and establish support requirements for data sharing to and from other repositories.
  • Manage the PPSM Registry Database User Accounts, PPSM Registry database system data entry, and data export to unique data formats to externals database administrators.
  • Deliver PPSM CCB/TAG Read Ahead to PPSM Community prior to each PPSM CCB/TAG meeting
  • Offer subject matter expertise at meetings and conferences; document insights via AAR or MFR
  • Design and implement PPSM system security measures and metrics
  • Monitor and manage communications and suspense task tracking
  • Conduct quality assurance reviews of reports, including DSAWG slides, TAG/CCB minutes, and FA reports
  • Manage PPSM phone and email systems (SIPRNet/NIPRNet) in accordance with SOPs.
  • Respond to inquiries and registration requests for ports, protocols, and services
  • Prepare and support monthly PPSM CCB/TAG meetings, including logistics, materials, and documentation
  • Maintain and update PPSM websites and publish official documents and reports
  • Provide monthly performance metrics to the Government
  • Develop technical papers on PPSM and cybersecurity-related topics
  • Support communication of deliverables with PPSM leadership and stakeholders 
  • Distribute TRPs, TAG comments, CCB vote results, and other documents as directed
  • Create graphics for PPSM meetings and presentations
  • Manage PPSM Registry user accounts, database entries, and external data exports
  • Process non-DoD PPSM registrations via Federal DMZ and NIPRNet Gateways
  • Identify and implement automation opportunities across PPSM processes.
• Agency-level Compliance with IT, Cyber Standards, and Strategy Support:
  • Apply knowledge of DoD assessment resources and policies to support the development of DISA cybersecurity directives and strategies.
  • Maintain cybersecurity policy content on DISA’s SPO site and alternate platforms.
  • Develop and maintain standardized procedures for drafting and finalizing policy documents.
  • Use DISA and DoD tools to generate high-quality compliance reports.
  • Monitor compliance activities, report anomalies or trends, and document lessons learned.
  • Coordinate working groups to address stakeholder feedback and resolve input from comment matrices.
  • Track and complete assigned action items from meetings and working groups in collaboration with relevant organizations.
  • Manage repositories for cybersecurity policy, governance documents, and reference materials.
  • Draft, revise, and finalize up to 10 policy documents annually (each up to 50 pages), including manuals, directives, and CONOPS.
  • Prepare up to 20 presentations, briefs, and reports per year on cybersecurity and cyber defense policy.
  • Participate in weekly meetings to support cybersecurity governance, policy, and compliance initiatives.
  • Implement required policy and process updates issued by USCYBERCOM, DoD CIO, and DISA.

Required Skills, Qualifications and Experience:

• Education and Certifications:
  • Bachelor's degree (IT-related field preferred), or equivalent experience.
  • DoD 8570 IA Technical (IAT) Level II certification
• Experience:
  • Two (2) years specifically working in cybersecurity policy development roles
  • Five (5) years of overall experience in cybersecurity or network security position
• Citizenship and Security Clearance:
  • US Citizenship is required.
  • Must have and maintain an active DoD Top Secret clearance
• Skills and Knowledge:
  • Demonstrable experience with network security, ports/protocols, firewalls, and boundary protection
  • Understanding of network architectures, LAN/WAN, TCP/IP, routing, and switching
  • Understanding of 8551.01, DISA security policies, and compliance monitoring
  • Understanding of Windows, Linux, and Unix environments
  • Strong understanding of TCP/IP, DNS, firewalls, NAT, VPNs, and routing protocols.
  • Demonstrable hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7, etc.) and experience configuring them for optimal performance
  • Advanced understanding of CVEs, CVSS scoring, and how to use resources like NVD or Exploit DB
  • Excellent written and verbal communication for technical documentation and stakeholder engagement Excellent written and verbal communication for technical documentation and stakeholder engagement
  • Experience drafting, reviewing, and interpreting security policies, procedures, standards, CONOPS, and governance documents
  • Proven ability to prepare technical documentation, strategic briefings, and governance materials for senior-level DoD boards
  • Proficient in applying knowledge management best practices using tools such as SharePoint, Confluence, or Wikis to enhance collaboration and information accessibility.
• Location:
  • Candidates must reside within a commutable distance of Ft. Meade, MD in order to work a full-time onsite schedule.

Preferred Qualifications:

• Advanced proficiency in PPSM Registry management, eMASS, and DISA DMZ Whitelist processes

The projected salary range for this position is $90,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.