• Monitors performance of production systems and ensures 24x7x365 availability to customers • Installs, configures, tunes, maintains, troubleshoots, and administers security updates and patches • Designs, installs, configures, tunes, and administers components and accounts within Microsoft Azure cloud • Ensures only allowed devices are connected to the network using Cisco Identity Services Engine (ISE) • Leads, plans, coordinates, and executes necessary IT engineering efforts and upgrades • Develops, documents, and maintains Disaster Recovery procedures

Role Description DecisionPoint Corporation is seeking a Senior Information Assurance (IA) Specialist / FISCAM-FIAR Subject Matter Expert (SME) to support our U.S. Transportation Command (USTRANSCOM) Integrated Booking System (IBS) program. This role leads cybersecurity, compliance, and audit readiness efforts, ensuring alignment with DoD Risk Management Framework (RMF), federal financial audit requirements, and enterprise security standards. The Senior IA Specialist serves as a key advisor on FISCAM (Federal Information System Controls Audit Manual) and FIAR (Financial Improvement and Audit Remediation) requirements, ensuring systems, processes, and controls meet audit and cybersecurity expectations. This role supports mission-critical transportation and logistics systems by integrating security, compliance, and audit readiness across the system lifecycle. The ideal candidate brings deep expertise in cybersecurity compliance, RMF, and financial audit frameworks, with the ability to lead efforts across technical, functional, and audit domains. Duties & Responsibilities - Serve as the FISCAM/FIAR SME, providing leadership on audit readiness, internal controls, and compliance activities - Lead cybersecurity efforts across the IBS program, ensuring compliance with DoD RMF, NIST, and federal audit requirements - Identify, assess, and mitigate security risks, threats, and vulnerabilities across the system lifecycle - Design and enforce secure system and application practices aligned with STIGs, OWASP, and DoD security standards - Lead development and maintenance of RMF accreditation packages, including ATO, ATC, and IATT artifacts - Ensure implementation of NIST SP 800-53 security controls and integration of security into the SDLC - Conduct and oversee security assessments, audits, and control validation activities - Perform and review vulnerability scans using tools such as Fortify, ACAS, and SCAP, ensuring timely remediation - Track and manage vulnerabilities, ensuring proper documentation and closure of findings - Maintain and manage POA&Ms and support remediation tracking and reporting - Develop and maintain security documentation within eMASS or other Government systems - Support continuous monitoring activities, including automated and manual security assessments - Provide audit support, including preparation of artifacts, responses to findings, and coordination with auditors - Ensure compliance with NIST SP 800-128 and security-focused configuration management practices - Collaborate with Government, financial, and technical teams to ensure alignment between system controls and audit requirements - Provide regular security metrics, reporting, and compliance status updates to stakeholders and leadership - Support secure system design, including encryption, logging, and secure communication protocols Qualifications - Active Secret Clearance - IAT Level II certification (CompTIA Security+ CE or higher preferred) - Minimum 7+ years of experience in Information Assurance, cybersecurity, or compliance within DoD environments - Demonstrated experience with FISCAM and FIAR audit requirements and audit readiness activities - Strong knowledge of DoD RMF processes and NIST SP 800-53 security controls - Experience developing and maintaining RMF accreditation documentation (ATO, SSPs, POA&Ms, etc.) - Experience with vulnerability scanning tools (Fortify, ACAS, SCAP or similar) - Strong understanding of secure coding practices, system hardening, and security architecture - Experience supporting continuous monitoring and security assessment activities - Knowledge of NIST SP 800-128 and configuration management security practices - Ability to lead compliance efforts across technical and functional teams - Strong analytical, problem-solving, and communication skills - Ability to operate in a fast-paced, mission-driven environment Requirements - Preferred: Experience supporting USTRANSCOM or DoD transportation/logistics systems - Preferred: Experience supporting financial systems or audit sustainment environments - Preferred: Familiarity with eMASS, PPSM, and DoD authorization processes - Preferred: Experience working in AWS GovCloud or cloud-based secure environments - Preferred: Advanced certifications such as CISSP, CISA, or CISM - Preferred: Experience integrating DevSecOps security practices into CI/CD pipelines Company Description DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.

• Strategic consulting, design and further development of IT security architectures (including hybrid cloud environments, Microsoft Entra ID) • Conducting security assessments, risk analyses and vulnerability assessments • Designing and implementing security solutions (e.g., firewalls, SIEM, Microsoft Defender) • Advising on Zero Trust models and modern identity concepts • Managing and providing technical oversight for security projects • Developing and delivering security awareness and technical training • Advising clients on secure IT practices and preventive measures • Close collaboration with clients, internal teams and, if applicable, sales • Documentation of security concepts and decision-making rationale

• Vertrieb unserer IT- und Cyber-Security-Leistungen im Mittelstand • Strukturierte Bedarfsermittlung entlang definierter Leitfäden • Beratung von Kunden zu standardisierten Lösungen und Services • Aufbau und Pflege einer Sales-Pipeline nach klaren Vorgaben • Zusammenarbeit mit Presales, Consulting und Delivery • Saubere Dokumentation und Forecasts im CRM • Arbeiten mit definierten KPIs (z. B. Pipeline, Abschlüsse, Aktivitäten)