​GovCIO is seeking a Senior Cybersecurity Network Defense Administrator (Information Assurance Engineer – Senior) to perform a variety of network defense activities for government operations. The role is focused on managing, maintaining, and reporting on compliance posture using critical DoD tools and security guidelines.

• ​Location: Remote, based out of Radford, VA.
• ​Type: Full-Time (Pending contract award).
• ​Clearance: Secret (Mandatory).
• ​Required Experience: High School with 9+ years (or commensurate experience) in Cybersecurity and Network Defense related areas.
• ​Required Certification: Cybersecurity Certification (e.g., Security+/CISSP/etc.)

​Key Responsibilities: Compliance Tool Management and Security Auditing

​The administrator’s primary function is to ensure the network is continuously monitored, compliant, and hardened against vulnerabilities.

• ​Vulnerability & Compliance: Manage ACAS infrastructure, configuration, scanning, reporting, and analysis in accordance with the DISA ACAS Best Practices Guide. Perform STIG Compliance scanning and reporting.
• ​Endpoint Security: Manage Army Endpoint Security Solution (AESS) Site Reviewer activities.
• ​Access Management: Manage DISA Whitelist and PKI Tokens. Handle in-processing and out-processing tasks.
• ​Policy Review: Provide Ports, Protocols, & Services Management (PPSM) support and review proposed configuration changes for security impact.
• ​Documentation & Remediation: Participate in SW Assurance reviews to ensure ACAS findings are remediated or appropriately documented via eMASS POA&M.

​Required and Preferred Expertise

• ​Mandatory Technical Experience:
  • ​ACAS management (infrastructure, configuration, scanning, reporting).
  • ​Proficiency in managing AESS Site Reviewer activities.
  • ​Experience with DISA Whitelist management and PKI Token management.
  • ​Strong understanding of DoD STIGs and STIG Compliance scanning.
  • ​Experience providing PPSM support.
• ​Preferred Experience:
  • ​Familiarity with DISA ACAS Best Practices Guide and NETCOM policies.
  • ​Familiarity with DISA Continuous Monitoring and Risk Scoring (CMRS).
  • ​Experience with incident response activities and understanding of Continuity of Operations Plans (COOP).