安全与合规管理员
Security & Compliance Administrator
**本职位取决于合同的授予**
SOSi 正在寻找一名安全与合规管理员，以支持为国防部客户构建结构化方法，进一步开发、集成并维护可扩展的联邦数据生态系统，从而提升互操作性、治理能力和以任务为导向的分析能力。该项目的主要目标是弥合国防部、情报界、跨部门以及非传统国际合作伙伴之间的运营差距，以实现实时信息共享、动态数据整合和任务定制的分析能力。
主要职责：
- 承包商需与机构网络安全团队合作，监控并验证 Kubernetes 和数据湖部署是否符合 RMF、NIST 800-53 和国防部 IL4/IL5 要求。
- 承包商需维护持续监控仪表盘，并对已部署的基础设施和工作负载进行漏洞扫描，支持机构的 ATO 流程和风险态势。
- 承包商需准备和更新系统安全文档，包括 SSP、SAR、POA&Ms，以反映其他工单下的架构、控制或风险状况的变化。
- 承包商需实施加密、日志记录和身份访问策略（IAM、RBAC、审计日志），以在基于 Kubernetes 的数据层中保持可追溯性和问责制。
- 承包商需提交安全与合规评估报告，总结控制措施的有效性、发现的问题及建议的补救措施。
- 需具备范围内的秘密级安全许可。
- 计算机科学、信息安全、网络安全或相关领域的学士学位，或在安全与合规岗位上有五年同等经验。
- 拟议人员需具备在基于云和本地环境中实施、监控和执行安全策略、框架和合规控制的知识和能力。
- 人员必须熟练掌握 NIST 800-53、FedRAMP、国防部 IL-4/5 安全政策和风险评估方法。
- 需要深入了解身份和访问管理（IAM）、安全监控工具（Splunk、SIEM 解决方案）、零信任架构和漏洞评估框架。
- 具备开展安全审计、评估系统是否符合国防部网络安全政策，并在云和混合环境中实施安全控制的经验。
- 具备安全相关经验
查看英文原文
**This position is contingent upon award of contract**
SOSi is seeking a Security & Compliance Administrator to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.
Essential Job Duties:
- The contractor shall monitor and validate Kubernetes and data lake deployments for compliance with RMF, NIST 800-53, and DoD IL4/IL5 requirements, in collaboration with agency cybersecurity teams.
- The contractor shall maintain continuous monitoring dashboards and conduct vulnerability scans of deployed infrastructure and workloads, supporting the agency’s ATO process and risk posture.
- The contractor shall prepare and update system security documentation—including SSPs, SARs, POA&Ms—to reflect changes to architecture, controls, or risk conditions under other work orders.
- The contractor shall enforce encryption, logging, and identity access policies (IAM, RBAC, audit logging) to maintain traceability and accountability across the Kubernetes-based data layer.
- The contractor shall submit the Security & Compliance Assessment Report, providing a summary of control effectiveness, findings, and recommended remediation actions.
- Active in scope secret clearance.
- Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or five (5) years of equivalent experience in security and compliance roles.
- Proposed personnel possess the knowledge and capability to implement, monitor, and enforce security policies, frameworks, and compliance controls across cloud-based and on-premises environments.
- Personnel must be proficient in NIST 800-53, FedRAMP, DoD IL-4/5 security policies, and risk assessment methodologies.
- Strong understanding of identity and access management (IAM), security monitoring tools (Splunk, SIEM solutions), zero-trust architecture, and vulnerability assessment frameworks is required.
- Experience in conducting security audits, assessing system compliance with DoD cybersecurity policies, and implementing security controls in cloud and hybrid environments.
- Experience with security automation, endpoint protection, and incident response processes is required.
Preferred Qualifications:
· Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or AWS Certified Security – Specialty.
Working Conditions
· Remote. Offsite.
Working at SOSi
All interested individuals will receive consideration and will not be discriminated against for any reason.
Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.
Originally posted on Himalayas