• Plan, schedule, execute, and validate patching across servers, workstations, and applications to ensure timely remediation of KEVs and other critical vulnerabilities.
• Coordinate and execute vulnerability remediation across servers and endpoints using tools such as BigFix, Nessus, and SentinelOne to resolve security findings.
• Create, modify, and remove system access; manage authentication controls; conduct account audits; support MFA and PIV initiatives; and maintain secure permission structures.
• Manage user accounts, permissions, and access to sensitive systems and data, ensuring proper authentication; remove access for terminated personnel; and maintain audit records.
• Design and maintain secure network and AWS GovCloud architectures, including firewalls, VPNs, segmentation, logging, high availability, disaster recovery, implement cloud security controls, and secure integration of new technologies.
• Lead evaluations of information system security features; develop certification and accreditation plans; document deficiencies; track corrective actions; and recommend improvements.
• Assess IT systems for vulnerabilities, track remediation of KEVs, and maintain continuous monitoring activities to ensure compliance with federal and agency security requirements.
• Provide expert advice and guidance to leadership, IT staff, and stakeholders on cybersecurity, IT procurements, and coordination with internal departments and external agencies.

Conditions of employment

• This position is open to U.S. citizens, nationals or those who owe allegiance to the U.S.
• Current Federal employees must meet qualifications, time in grade, and 90 days after competitive appointment requirements by the closing date of the announcement.
• This position requires the incumbent to obtain and maintain a TOP SECRET security clearance.
• Must pass a pre-employment drug screening and background investigation. This position will be subject to random drug testing after the applicant is hired.
• If selected, you will be required to complete a financial disclosure statement.

Qualifications

Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work.

To qualify for GS-14, you must have one year of directly related specialized experience equivalent to the GS-13 level:

• Remediates enterprise server vulnerabilities across cloud and on-premises environments by applying patches, hardening Linux and Windows systems, updating certificates, and resolving KEV, SOC, and POA&M findings using tools such as BigFix, AWS, and EDW services.
• Configures and supports AWS cloud services, including EC2, Instance Scheduler, GuardDuty, FSx, Airflow, and virtual desktop solutions; upgrades production and development environments; and troubleshoots major application outages through root cause analysis and service restoration.
• Administers access control and security workflows by managing user permissions, implementing MFA, coordinating system access changes, and addressing SSP and POA&M security requirements.
• Evaluates networking and cloud-related procurements by analyzing technical requirements, licensing, subscription costs, and compatibility to support secure and efficient enterprise IT operations.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.