Summary
This is a Washington Air National Guard Title 32 Excepted Service Unit Technician position: IT SPEC (INFOSEC) Location: 194th Communications Squadron Camp Murray, Washington 98430 Air National Guard Units Appointment Type: Temporary, indefinite, excepted service Advertised as: ENLISTED May be used to fill one or more vacancies. *Ensure you read this announcement in its entirety, complete all application requirements, and your USA Jobs profile name is accurate*
Duties
A GS-2210-11, IT SPEC (INFOSEC): Serves as the Wing Information Assurance Manager. Applies Information Technology (IT) security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and information processed throughout the system's life cycle. Establishes and publishes base-wide policy to manage the INFOSEC (also known as COMPUSEC) program and provides advice and guidance in its implementation and in procedures used in the development and operation of systems. Assists all base organizations in the development of their individual INFOSEC program. Disseminates information and ensures computer security practices are adhered to by all functional areas. Reviews, analyzes, and validates certification and accreditation (C&A) packages. Continuously identifies and analyzes threats and vulnerabilities to the information systems to maintain an appropriate level of protection. Ensures computer software designs address information system security requirements. Accomplishes risk analysis, security testing, and certification due to modifications or changes to computer systems. Evaluates, assesses, or locally tests and approves all hardware, software, and firmware products that provide security features prior to use on any accredited information system or network. Certifies all software prior to installation and use on communications and computer systems. Executes computer security plans and enforces mandatory access control techniques such as trusted routers, bastion hosts, gateways, firewalls, or other methods of information systems protection. Manages the Network Security Program. Maintains required information assurance certification IAW DoD 8570.01-M, Federal Information Security Management Act of 2002, Clinger Cohen Act of 1996. Implements and advises on IT security policies and procedures to ensure protection of information transmitted to the installation, among organizations on the installation, and from the installation using Local Area Networks (LAN), Wide Area Networks (WAN), the World Wide Web, or other communications modes. Utilizes current and future multi-level security products collectively to provide data integrity, confidentiality, authentication, non-repudiation, and access control of the LAN. Reports to MAJCOM, Air Force Communications Agency, National Security Agency, and Air Force Computer Emergency Response Team all incidents involving viruses, tampering, or unauthorized system entry. Serves as the Communications Security (COMSEC) Manager for all cryptographic activities including managing the Cryptographic Access Program (CAP). Formulates and develops communications security criteria and requirements for inclusion in mobility, contingency, and exercise plans. Maintains accountability for sensitive cryptographic materials and related COMSEC information. Oversees issuance of COMSEC materials. Maintains COMSEC inventory. Prepares and evaluates written plans for emergency actions and ensures personnel are fully qualified in the execution of plans. Investigates COMSEC security incidents to determine the possibility of compromise to COMSEC materials and ensures documentation and reporting to appropriate channels Implements and manages the Electronic Key Management System (EKMS) program. This includes system configuration and operation of the Local Management Device, Data Transfer Device, and Key Processor. Initializes the system, performs system backups, determines operator access, and control functions (privilege management), reloads and configures the operating system's parameters. Installs or oversees installation of local COMSEC account hardware and software, including training alternates in the AFEKMS operations. Adheres to management control plan requirements by conducting self inspection and staff assistance visits. Resolves identified discrepancies. Other duties as assigned.(temporary, minor, or incidental tasks)
Requirements
MILITARY REQUIREMENTS: Military Grades: E5 - E6 Desired Military Assignments: 1D715 - Applicants need not be assigned to the position or possess the AFSC to apply or be considered for selection. Selected applicant must be assigned to a compatible Military position and attain AFSC within 1 year of appointment action. - May be required to successfully complete a trial period. - Participation in direct deposit is mandatory. - Males born after 31 December 1959 must be registered for Selective Service. - Must maintain membership in the WA Air National Guard for continued employment. - Must be able to obtain and maintain the appropriate security clearance of the position. - This position is covered by the Domestic Violence Misdemeanor Amendment (30 Sep 96) of the Gun Control Act (Lautenberg Amendment) of 1968. An individual convicted of a qualifying crime of domestic violence may not perform the duties of this position. - Position requires ability to establish effective professional working relationships with coworkers and customers, contributing to a cooperative working environment and successful accomplishment of the mission. - May occasionally be required to work other than normal duty hours; overtime may be required. - The duties and responsibilities of your job may significantly impact the environment. You are responsible to maintain awareness of your environmental responsibilities as dictated by legal and regulatory requirements, your organization, and its changing mission.
Education
Education Requirements: High School Diploma or GED Degree Required:N/A Degree Required to qualify with Education Only (No Specialized Experience):N/A You must provide transcripts or other documentation to support your Educational claims. To receive credit for Education, you must provide documentation of proof that you meet the Education requirements for this position. If you are selected for a vacancy that requires a specific degree and/or coursework you will be required to provide official transcripts prior to appointment. Substitution of Education for Specialized Experience: Degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or degree that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems or networks. Ph.D. or equivalent doctoral degreeor3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree
How you will be evaluated
Once the announcement has closed, your resume and supporting documentation will be used to determine if you meet the qualifications listed on this announcement. If you are minimally qualified, your resume and supporting documentation will be compared to your responses on the assessment questionnaire to determine your level of experience. If you rate yourself higher than is supported by your application package, your responses may be adjusted and/or you may be excluded from consideration for this position. You may also be excluded from consideration if you indicate that you are unwilling to accept the lower grade and a determination is made that you are not qualified at the higher grade. If you are found to be among the top qualified candidates, you will be referred to the selecting official for employment consideration. Verbiage displayed on your resume or application must contain your own words. You may refer to position descriptions, as well as the general and specialized experience located within the vacancy announcement, to assist with describing work experiences; however, resumes or applications received in verbatim will not be considered. In your resume you will need to address the general and specialized experience listed above. Please use as much detail as needed, giving dates (months and years) of the experience, position title and how the experience was gained. This information is needed to determine if you are qualified for the position. Your qualifications will be evaluated on the following competencies (knowledge, skills, abilities, and other characteristics). NOTE: You do not have to respond to the KSA's separately but your resume should contain sufficient information to demonstrate possession of the KSA's. Knowledge of a full range of IT security principles, methods, regulations, policies, products and services sufficient to develop specifications to ensure compliance with security requirements at the LAN level and to plan and coordinate the delivery of an IT security awareness training program for end users at all levels at the installation. Knowledge of a full range of IT security requirements for certification and accreditation; network operations and protocols; systems testing and evaluation; and performance management methods sufficient to implement and coordinate activities designed to ensure, protect, and restore IT systems, services, and capabilities. Knowledge of a wide range of IT and communication computer security techniques, requirements, methods, sources, and procedures in INFOSEC, EKMS, EMSEC, and secure voice (e.g., STE, Secure VoIP) Automated Software security. Knowledge of the EKMS program and related hardware and software, including knowledge of operating systems, local COMSEC Management Software, relational data base management systems, computer-communications software. Knowledge of a broad range of telecommunications equipment, operating techniques, concepts, principles, practices, requirements, methods, sources, and procedures (including familiarity with approaches used by telecommunications organizations in other agencies and/or the private sector) sufficient to manage the Communications Security (COMSEC) program, and the Cryptographic Access Program to interpret policy originating from higher organizational levels and to analyze and resolve difficult and complex telecommunications security problems where telecommunications knowledge is paramount.