Job Description:
AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the US Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.
The Moonshot program needs a ISSE/ISSO III to help ensure all aspects of the Moonshot program are secure and fully operational.
AT&T has an opening for ISSE/ISSO III to support the Moonshot Program, in Northern Virginia. This position will work with other Moonshot technicians, engineers and security personnel and with our Prime to integrate multiple networks.
Required Clearance: TS/SCI with Poly (#polygraph)
Required Qualifications:
10 years of IA and no degree or 9 years and an Associates degree or 7 years and a Bachelors or 5 years and a Masters’ degree
For 8570 compliance, must be able to obtain the CISSP certification within 6 months of hire or
other 8570 Level III Certification may qualify for substitution.
Establish and maintain an Information Assurance program. (CDRL B006)
Ensure security and information assurance (IA) policies, principles, and practices are an integral element of the daily operating environment and the delivery of services.
Create, maintain, and following an IT/IA plan (CDRL B006).
Utilize the NRO Risk Management Framework (RMF) process to establish, obtain Government approval and maintain the IA posture of all MSP assets.
Include all IA and security related milestones, recurring activities and updates in the IMS (CDRL C010) Information Assurance Documentation and Implementation.
Maintain the necessary documentation and ensure each Subscriber Interconnection Security Agreement (SISA) reflects the current control allocations.
Have a single Authorized Asset for each classification of Services delivered. In accordance with the IASD, the assets Shall be characterized as:
High, High, High for TS SCI Infrastructure; with individual Subscriber implementation tailored based on Subscriber validated need.
Engineer, develop, and implement IT solution/Information Systems (IS) that satisfy [Redacted]'s baseline security requirements for protecting the confidentiality, integrity, and availability according to the IA Standards Document (IASD) or subsequent guidance.
Engineer, develop, and implement applicable and effective protection mechanisms to:
a. Reduce risk to the government infrastructure by implement mitigations approved by the Government
b. Ensure that Subscribers’ infrastructure does not pose a risk to the MSP
c. Ensure that any Subscriber does not post a risk to other Subscribers’ infrastructure
Implement TS SCI Services in compliance with Intelligence Overlay B (Int-B).
Implement SECRET services in compliance with the Classified Information Overlay.
Publish the IA controls provided by the MSP’s Assets and Identify those controls that are inheritable by Subscribers WWT/AT&T Teaming Agreement.
Maintain the MSPs IA assets in their approved IA posture.
Shall create and maintain a SISA for each Subscriber’s system (authorized asset) signed by the MSP and the Subscriber that delineates the boundaries and responsibilities of the MSP’s Asset and the Subscriber’s Asset as applicable. (CDRL C005)
Shall include in the SISA any security relevant permissions or responsibilities granted to the Subscriber.
Shall review and update (with signatures) each SISA at least annually or if there is a change to boundaries or responsibilities.
AT&T will consider for employment qualified applicants in a manner consistent with the requirements of federal, state and local laws. AT&T is an Affirmative Action/Equal Opportunity Employer and we are committed to hiring a diverse and talented workforce. EOE/AA/M/F/D/V
