• performs a variety of routine project tasks applied to specialized Cybersecurity problems • involves integration of electronic processes or methodologies to resolve total system problems • analyzes information security requirements • provides security engineering support for planning, design, development, testing, demonstration, and integration of information systems

• Design, implement, and maintain SAP roles and authorizations. • Administer users, access, and authorizations. • Troubleshoot authorization issues using SU53, STAUTHTRACE, SUIM, SU24. • Perform Segregation of Duties (SoD) analyses and support compliance initiatives. • Support internal and external audits related to SAP security. • Manage incidents, requests, and changes using ServiceNow. • Participate in implementation, migration, hypercare, and improvement projects. • Coordinate activities with offshore and onsite teams, and business stakeholders. • Participate in governance meetings and periodic security reviews. • Ensure compliance with operational SLAs and KPIs.

Role Description The Cybersecurity Assessment & Authorization (A&A) Subject Matter Expert (SME) executes DoD/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, and serves as a Subject Matter Expert for systems undergoing the Risk Management Framework (RMF) process. The Cybersecurity Assessment & Authorization SME possesses an understanding of how security controls identified in NIST SP 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA, including: - Large and small enclaves - Cloud Hosted Services - Operational Technology - AIS applications - Outsourced IT processes The SME determines the residual risk of identified vulnerabilities and evaluates the potential impact on a system's current or future authorization while briefing senior management on the progress and results of systems undergoing the RMF process. Qualifications - Five (5) years of relevant C&A experience - Risk Management Framework (RMF) and NIST C&A experience - DoD cybersecurity experience - Experience assessing security controls and conducting authorization reviews for large, complex organizations - Experience supporting Authorization to Operate (ATO) packages and RMF documentation preferred - DoD Approved 8570/8140 Baseline Certification: Category IAM Level III - Active Secret clearance with a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI investigation at the time of proposal submission Location Although position is remote, candidates must reside within 150 miles of one of the following DLA locations: - Battle Creek, MI - Columbus, OH - New Cumberland, PA - Philadelphia, PA - Fort Belvoir, VA (HQ) - Richmond, VA

• Lead the assessment, scoping, and architectural design of strategic RACF and USS security project solutions • Define target-state architectures and technical designs • Support deployment of security solutions • Assess technical feasibility and trade-offs of proposed solutions • Collaborate with various teams to gather requirements • Create and maintain security monitoring, automation, and reporting solutions • Monitor, analyze, and report on key performance indicators