Security/Compliance SME
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security/compliance SME advancing Department of the Air Force ICAM capabilities for Koniag Government Services. Aligning Zero Trust architectures, ATO processes, and governance studies with DoD policy.
Responsibilities:
- Serve as the authoritative policy and compliance reference across three System Enhancement Studies
- Review and interpret Government-Furnished Information and applicable DoD, DAF, and Federal regulatory references
- Provide security and compliance guidance for CDO-L edge identity architecture, disconnected operations, break-glass access, PKI certificate validation, and synchronization methods
- Assess security posture management requirements for CDO-L edge node operations
- Evaluate and document Authority to Operate implications for classified NIPRNet and SIPRNet edge components
- Provide security and compliance guidance for NPE attribute schemas, governance workflows, credential management policies, and target architecture
- Review and validate NPE credential management governance, including credential rotation, secret vault storage, and hardcoded credential controls
- Assess Zero Trust Architecture alignment of NPE governance, workload identity, dynamic access control, and continuous authentication
- Define compliance requirements for NPE audit logging and monitoring, including SOC and ELICSAR integration and UEBA/AI-driven anomaly detection
- Guide JML transformation architecture, attribute sanitization, Microsoft Entra ID integration, event-driven group management, and administrator delegation
- Review and validate Leaver revocation architecture, including mailbox handling, DAF365 license reclamation, Entra ID token revocation, and Okta disablement sequencing
- Assess delegated provisioning against least-privilege, separation-of-duties, and audit-trail requirements
- Conduct cross-study compliance gap analysis and identify required controls, waivers, or ATO actions
- Contribute security and compliance sections and regulatory mappings to three Technical Study Reports
- Advise the Program Manager and Study Lead Engineers on emerging DoD and DAF cybersecurity policy developments
- Support draft Performance Work Statements for subsequent implementation Task Orders
- Verify assigned personnel hold required security clearances and notify the Government of status changes
Requirements:
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a related field from an accredited college or university
- 7+ years of experience in cybersecurity, information assurance, or security compliance in Defense or Federal government IT environments
- Demonstrated experience interpreting and applying DoD and Federal cybersecurity policy frameworks including NIST SP 800-53, NIST SP 800-63, DoDI 8520.04, DoDI 8510.01, and related mandates to enterprise IT system design and governance
- Experience supporting Authority to Operate (ATO) processes for Defense information systems, including RMF package development, security control assessment, and accreditation timeline management
- Active Secret security clearance, with final adjudication required prior to assignment
- Deep knowledge of DoD and Federal cybersecurity and identity management policy frameworks
- Strong understanding of Zero Trust Architecture principles and application to enterprise ICAM systems, disconnected edge environments, non-person entity governance, and identity lifecycle management
- Experience with DoD Risk Management Framework (RMF) and Authority to Operate (ATO) processes
- Knowledge of PKI-based authentication, certificate lifecycle management, DoD/DoW X.509 Certificate Policy, and Common Access Card (CAC) authentication security requirements
- Familiarity with Okta and SailPoint IdentityIQ
- Knowledge of DoD audit standards and log management requirements, including CJCSI 6510.01 and SIEM/SOC integration
- Experience performing compliance gap analysis and documenting findings in formal technical reports
- Ability to interpret and apply complex, conflicting regulatory requirements
- Experience advising technical engineers and architects on security and compliance requirements
- Strong technical writing skills for compliance assessments, regulatory mapping, technical study reports, and draft Performance Work Statements
- Ability to work collaboratively across cross-functional technical teams
- Exceptional written and oral communication skills in English
- Ability to obtain and maintain a Secret security clearance
Benefits:
- Medical, dental, and vision insurance
- 401(k) retirement plan
- Paid time off
- Paid parental leave
- Life and disability insurance
- Flexible spending accounts
- Commuter benefits
- Tuition reimbursement
Similar Jobs
Data Compliance Consultant
Consultant conformité Data chez Talan, groupe international de conseil en technologie et data. Audits, analyse réglementaire et pilotage de projets RGPD, LCB-FT et BCBS 239.
Compliance Associate – Medicare/ACA
Compliance Associate supporting Medicare/ACA regulatory operations at Senior Market Sales. Managing investigations, audits, marketing approvals, training, and compliance reporting.
Regulatory Representative
Regulatory Representative managing Globalstar’s satellite communications compliance and licensing. Coordinating FCC, ITU, spectrum, export-control, and agency matters across global markets.
Manager, Governance, Risk & Compliance
Senior GRC leader scaling Doppel’s security, privacy, compliance, and AI governance program. Owning certifications, enterprise risk, controls, customer trust, and a growing GRC team.
Compliance Assurance Manager
Compliance Assurance Manager leading quality monitoring, regulatory controls, and compliance training. Supporting Sumer’s Hubs and teams in maintaining high standards across its compliance programme.
Regulatory and Start Up Specialist, Portuguese Speaker
Regulatory and Start Up Specialist enabling clinical trial site activation in Spain for Precision for Medicine, a global clinical research organization. Managing submissions, contracts, budgets, and essential documents.
Regulatory and Site Start-Up Specialist
Regulatory and Site Start-Up Specialist supporting clinical trial submissions and site activation in Taiwan. Coordinating authorities, ethics committees, essential documents, and cross-functional study teams.
Consultant, Accreditation Compliance
Accreditation compliance consultant supporting Navitus’ pharmacy benefit manager quality programs. Leading audits, accreditation readiness, corrective actions, and stakeholder education.
SCRM Compliance SME
SCRM compliance expert securing federal technology supply chains for Accenture Federal Services. Developing policies, assessments, controls, and audit evidence across 500+ projects.
Regulatory Specialist – Canada
Local Regulatory specialist supporting Health Canada lifecycle submissions for biologic and small molecule rare disease products. Providing Canadian regulatory intelligence and coordinating Health Canada interactions.
CMC Regulatory Consultant, Biologics
CMC Regulatory Consultant supporting biologic and rare-disease product submissions to Health Canada. Managing Canadian life-cycle regulatory activities, CMC authoring, and regulatory intelligence for Syneos Health clients.
Senior DOT Compliance Instructor
Senior DOT compliance instructor training commercial drivers and overseeing fleet compliance for SOLV Energy’s utility-scale energy infrastructure projects. Fully remote with 70–80% travel to field locations.
Senior Regulatory Affairs Program Lead – MedTech Surgery
Regulatory Affairs Lead advancing Johnson & Johnson’s OTTAVA robotic instruments and accessories approvals. Developing global strategies, authoring FDA submissions, and guiding product teams.
Senior Regulatory Affairs Specialist
Senior Regulatory Affairs Specialist advancing regulatory strategy for Eko Health’s FDA-cleared AI stethoscopes, ECG hardware, and digital health platforms. Leading QMS remediation and global market submissions.
Senior Compliance Analyst
Senior Compliance Analyst investigating escalated Medicare Advantage sales and marketing compliance cases for Devoted Health. Recommending corrective actions, improving workflows, and supporting compliance analysts.
Senior Compliance Analyst – Healthcare Regulatory Compliance
Senior Compliance Analyst safeguarding Cuvo Health’s telehealth MSO infrastructure across US healthcare regulations. Auditing physician arrangements, FMV compensation, licensing, and multi-state compliance.
Senior Regional Compliance Officer
Senior Compliance Officer overseeing MoneyGram agent AML/CFT and anti-fraud compliance across Australia and New Zealand. Acting as Deputy Compliance Officer and liaising with regulators and law enforcement.
VP, Policy and Regulatory Strategy
VP leading Circle’s Latin American policy, licensing, and regulatory strategy. Shaping market expansion for digital-asset payments and blockchain financial infrastructure.
Government Compliance Technical Specialist
Government compliance specialist advancing FedRAMP, TX-RAMP, and IRAP programs for BeyondTrust’s identity security SaaS. Automating evidence collection and managing cloud compliance documentation and remediation.
Regulatory Consultant – Submission Manager, Veeva RIM
Regulatory Consultant managing Veeva Vault RIM submission plans and regulatory publishing for Syneos Health’s life sciences clients. Supporting Vertex submission managers with project tracking and coordination.