Cyber Security Engineer

Cyber Security Engineer

Akima Global Technology is looking for a Cyber Security Engineer to work at Wright Patterson AFB, Ohio. To join our team of outstanding professionals, apply today!

The Cybersecurity Engineer supports Identity, Credential, and Access Management (ICAM) operations for the NASIC enterprise, ensuring secure, controlled, and auditable access to information systems, networks, applications, and data across NIPRNet, SIPRNet, and JWICS environments. The Cybersecurity Engineer is responsible for validating privileged-access requirements, administering elevated accounts, verifying cyberspace workforce qualifications, and ensuring access privileges remain aligned with mission requirements and Department of Defense (DoD) cybersecurity policies.

The Cybersecurity Engineer works closely with Government cybersecurity personnel, system administrators, Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), workforce managers, and other technical stakeholders to ensure administrative and service accounts are properly authorized, provisioned, maintained, reviewed, and removed throughout the account lifecycle.

The position supports the principles of least privilege, need-to-know, separation of duties, and continuous account validation while maintaining visibility of privileged users operating within the NASIC enterprise. The Cybersecurity Engineer also supports DoD cyberspace workforce compliance activities, cybersecurity reporting, network access requests, Data Loss Prevention (DLP) waivers, firewall requests, and other actions required to maintain the cyber hygiene and security posture of the Air Force Information Network (AFIN).

Responsibilities

• Review and validate requests for privileged and administrative access to NASIC information systems, networks, applications, services, and data, ensuring requested privileges are appropriate for assigned mission responsibilities.
• Verify personnel performing DoD cyberspace work roles possess the required qualifications, certifications, training, and workforce designations in accordance with DoD 8140-series requirements and applicable Air Force and NASIC cybersecurity policies.
• Review System Authorization Access Requests (DD Form 2875) and provide authorization or validation of cybersecurity workforce qualifications when applicable.
• Conduct monthly DoDM 8140.03 Cyberspace Workforce Compliance Reviews and identify personnel who do not meet established qualification, certification, training, or continuing-education requirements.
• Identify, document, track, validate, and report cybersecurity workforce qualifications and certifications for military, DoD civilian, and contractor personnel performing cyberspace work roles.
• Apply the principle of least privilege by ensuring users and system processes receive only the access and permissions required to accomplish authorized organizational and mission functions.
• Evaluate requests for elevated access and recommend approval, denial, reassignment, modification, suspension, or removal of privileges based on mission requirements, security policy, workforce qualifications, and organizational need.
• Deny or recommend denial of privileged access for personnel who lack required qualifications, authorization, need-to-know, or documented operational justification.
• Administer and maintain privileged, administrative, and service accounts across NASIC enterprise environments, including account enablement, disablement, modification, periodic review, and removal.
• Support the management and oversight of approximately 690 administrative and service accounts distributed across JWICS, Secret, and NIPRNet environments.
• Process and coordinate administrative account requests and ensure requests are accurately documented, validated, approved, and completed within established organizational timelines.
• Maintain visibility and accountability of personnel possessing elevated privileges throughout the NASIC enterprise.
• Review existing account privileges on a recurring basis to ensure access continues to reflect current organizational, mission, and business requirements.
• Support identity and access management services that protect NASIC information systems, DoD electronic resources, applications, services, and data from unauthorized access.
• Support identity-management capabilities associated with person entities and Non-Person Entities (NPEs), including service, system, and application accounts.
• Process and coordinate Data Loss Prevention (DLP) waiver requests, firewall requests, privileged-access actions, and other cybersecurity account-management activities required by NASIC, AFIN, or the 88th Air Base Wing.
• Respond to applicable Mission Tasking Orders (MTOs), Task Orders (TOs), cybersecurity directives, and other actions issued by AFIN, the 88th Air Base Wing, or designated Government cybersecurity authorities.
• Maintain working knowledge of applicable cybersecurity instructions, manuals, regulations, technical orders, Mission Tasking Orders, Task Orders, supplements, and policy updates affecting NASIC enterprise access management and cybersecurity operations.
• Coordinate with system owners, system administrators, ISSMs, ISSOs, cybersecurity personnel, workforce managers, and Government stakeholders to resolve access, qualification, and account-management issues.
• Document operational justification for network or system access when elevated access is required to support compelling mission or operational requirements.
• Develop, maintain, and provide ICAM metrics, compliance information, account status information, and ad hoc reports as requested by Government leadership.
• Identify access-control deficiencies, expired qualifications, excessive privileges, inactive accounts, inappropriate permissions, or other cybersecurity risks and coordinate corrective actions.
• Support continuous improvement of NASIC privileged-access and identity-management processes to improve cybersecurity compliance, accountability, auditability, and overall cyber hygiene.
• Maintain accurate records and supporting documentation sufficient to demonstrate compliance with DoD, Department of the Air Force, NASIC, and local cybersecurity requirements during inspections, assessments, audits, and compliance reviews.
• Perform additional cybersecurity engineering, identity-management, access-control, and cyber-hygiene duties as required to support the security and operational effectiveness of the NASIC enterprise.

Qualifications

• Possess and maintain an active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance and maintain eligibility for access to classified information and systems as required by the position.
• Possess and maintain an Information Assurance Management (IAM) Level II certification in accordance with applicable Department of Defense and Department of the Air Force cybersecurity workforce requirements, including AFMAN 17-1303, DoDD 8140.01, and applicable DoD 8570.01-M requirements.
• Completion of formal training, education, or equivalent professional development related to the assessment, authorization, accreditation, and cybersecurity management of DoD or Intelligence Community information systems under the Risk Management Framework (RMF).
• Minimum of one year of experience serving as an Information System Security Officer (ISSO), Information System Security Manager (ISSM), or in a comparable cybersecurity role supporting the authorization and accreditation of DoD or Intelligence Community information systems under the RMF.