Maximus

Job-Specific Responsibilities:

• Provides high-level subject matter expertise for work described in the task.
• Applies principles, methods, and knowledge of specific functional areas of expertise to specific task order requirements. Provides advice on esoteric problems which require extensive knowledge of the Risk Management Framework. Designs and prepares technical reports, studies, and related documentation, makes charts and graphs to record results, prepares and delivers presentations, training, and briefings.
• Recognized for strong expertise in industry issues and trends. Utilizes functional area expertise, gained through direct industry experience, to assess the operational and functional baseline of an organization and its organizational components. Works with senior managers and executives to provide industry vision and strategic direction regarding their enterprise.
• Performs research and applies expertise and knowledge to technical projects, finding innovative, cost-effective means to improve techniques, procedures, and/or products and technologies.
• Collaborating with key stakeholders to ensure security engineering initiatives are aligned with the operational needs of the organization.
• Developing specifications to ensure risk, compliance, and assurance efforts conform with confidentiality, integrity, and availability requirements at the software application, system, and network environment level.
• Oversee security reviews and identifying security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.
• Performing risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.
• Planning and conducting security authorization reviews and assurance case development for initial installation of systems and networks
• Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Experience in one or more cloud computing services and technologies including but not limited to: AWS
• Providing oversight to the SAP Community on the latest vulnerabilities and identify remediation efforts
• Developing and implementing new security mechanisms for the SAP Ecosystem
• Identifying and selecting best-in-class threat prevent tools and software for the SAP Ecosystem
• Interacting with technical leads, developers, and system owners to ensure that all technical requirements are aligned with SAP guidance.
• Ability to travel 10% of the time to local and CONUS sites

Job-Specific Minimum Requirements:

• Due to contract requirements, candidates must possess an active TS/SCI clearance.
• A Master's degree is required for this position. 6 years of relevant work experience (or a bachelor’s degree and 2 additional years of work experience) may be considered in lieu of the Master’s degree requirement
• 15 or more years of related experience

Job-Specific Preferred Qualifications:

• DoD 8140 Level 2 (or higher) certification
• Cloud certification
• Understanding of DISA STIGs and Benchmarks