Information Assurance Analyst

SMS is seeking an experience Information Assurance Analyst.

As a dynamic systems integrator, SMS offers proven solutions in engineering, operations, cybersecurity, and digital transformation. With expertise in modernizing and optimizing legacy infrastructure and systems, ensuring operational efficiency, and designing, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity.

SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers’ missions for more than 40 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Submit your resume today!

• JPEO AA ISSM –
• Tier II Dedicated Support Liaison to the 12 Dedicated Support Technicians within JPEO AA.  PM CAS, PM CCS, PM MAS, PD JS, PD JB, DOI AND JPEO AA HQ. 
• Monitoring/Validating required 8570.01 certifications, quarterly audits for Ft. Gordon.
• Monitoring/Validating AEP Basis Team Privileged Level Users (Tech I/II).
• Appointment Letters, AUPs, Certifications and Continuing Education tracking for all Privileged Level Dedicated Support Techs, including AEP Basis Team.
• NEC Project Lead for tracking and reporting of all tasks out of the NEC – Some examples: Annual security updates (21H2), IAVA compliance follow ups, Picatinny NEC projects: ie;  Current: Voice Modernization Task (NEC) – this can be pushed back to the NEC for their assistance.  Data incidents/spills. 
• eMass Admin/O-ISSM - continuous - SIPR mostly – Admin role: adding/removing people to eMass records, some troubleshooting.  O-ISSM role:  ensuring no errors are present for the record before moving packages forward to P-ISSM for review/approval. 
• Weekly NEC/Tenant Cyber Security meetings
• ATCTS Manager – daily.  Monitoring of annual DoD Cyber Awareness Challenge Training and IT User Agreements.  NEC runs a report each Monday for compliance – users on this list are given 48 hours to complete or be disabled.  Basically a weekly chase to make sure our users are not disabled.  I try to head this off each month by sending a monthly reminder to all folks with a suspense for that month.  (SOP Created to user monthly, or as needed). 
• Policy and guidance upon request – mostly related to 8501.01, AR25-2, AR25-1
• Lost or Stolen Government Furnished Equipment reporting
• A365 Entitlement Manager - continuous - mostly maintained by HQ.  Each PM/PD has a POC within their org.  Training available for DEPO and reporting.
• Information Technology (IT) Governance Approver – continuous.  All IT requirements must go through an IT Governance process for approval.  This process gathers the data needed for the ITAS Waiver submission.
• DD2875 system access requests-daily. NIPR/SIPR/ATAAPS/AEP/G-Invoicing/CPROBE to name a few. Verifying that the user has completed their DoD Cyber Awareness Challenge Training, has a user profile within the Army Training Certification Tracking System (ATCTS) and that their date of training is correct on the DD2875.  Sign – return.
• Information Technology Approval System (ITAS) Submitter – continuous.  From data gathered in approved IT GOV form, we submit an ITAS Waiver that is routed for approval to HQDA.
• Dell Ordering Portal Manager – continuous.  Training is available from DELL for this process. 
• Risk Management Internal Controls - annual requirement for testing of internal controls relating to AR25-1 and AR25-2
• Microsoft Visio and Project (above baseline Adobe Products as well) License Tracker – Tracking of all MS Project and Visio license counts for auditing.    Approval/tracking/auditing required. 
• Software License Survey- annual true up on MS Software Licenses

ADMIN Tasks:

• EXSUM Submission before 1000 each Thursday.  Gather information from G6 to submit to JPEO AA HQ for weekly report to Senior Leadership.
• QUAD Submission between 0900-1000 each Friday.  This weekly submission is data gathered from EXSUM submission and entered into AEP meSpace QUAD chart for weekly Staff Call.
• JPEO AA HQ NIPRnet System Access Requests for new employees onboarding (HQ ONLY).  Creation of ATCTS user profile, upload of DoD Cyber Awareness Challenge Training, and IT User Agreement.  Submission of ticket to AESD and upload of completed DD2875 to NEC repository.  (SOP Created). 

Ammunition Enterprise Portal (AEP)

• Transport forms – cyber security review of actions being taken within AEP.  Review, sign off of anything related to cybersecurity.  AEP does have a Cyber Security Specialist that will handle these.  I have been backfilling the POC. 
• Weekly Cyber Security Meetings with Basis Team
• Annual DEVCOM Personally Identifiable Information (PII) Training for AEP – annual training requirement and tracking of all DEVCOM that have access to PII within AEP.  Update to my current PPTX guidance annually and send out to the 700+ DEVCOM users for training certificates of completion to be returned and stored for AEP.  (AEP does have this on their radar to create a workflow for less manual tracking)
• Monthly Control Configuration Board (CCB) meeting.

• Must have Secret Clearance and meet the requirements to obtain a SIPR account. 
• MUST be able to obtain SIPR account – eMass, occasional tasker responses on SIPR.  
• Certification Requirements, per 8570.01. 
• Must hold a current CompTia Sec+CE and one of the IAM Level II Certifications in order to be appointed IAM/ISSM. 

SMS is an Equal Opportunity Employer.