System Integrity Engineer

Position: System Integrity Engineer

Location: Hill AFB, UT

Security Clearance Required: TS/SCI must be eligible for SAP.

Position Type/Standard Work Hours: Full-time/40 hours per week

Summary/Objective:

This role will provide support to the Air Force Life Cycle Management Center (AFLCMC) Fighter/Bomber Directorate (AFLCMC/WW) at Hill AFB, UT. The program’s mission responsibility is to develop, produce, deploy, modernize, and support United States (U.S.) and coalition partner F-16 fighter aircraft weapon systems and subsystems.

Primary Responsibilities:

• Support to assure compliance to the most current revision of the security directives applicable to PIT, Platform Information Technology Interconnection (PITI) and non-PIT systems being supported to include DoD Information Assurance Certification and Accreditation Process (DIACAP), DoDI 8500.2, Director of Central Intelligence Directive (DCID) 6/3 Manual, Joint Air Force - Army - Navy (JAFAN) 6/3 Manual, NIST 800-53, directives/guidance identified in the Program Protection Plan (PPP) and/or MIL- HDBK-516B Expanded.

• Provide IA support to assigned systems to includes developing, modifying, reviewing, or coordinating PIT determination packages, IAS, IAP, SSP, artifacts for program reviews and RFPs. Assist with the execution of the IA RMF to support A&A of assigned systems. Assist with evaluating the technical implementation of the security design to ascertain that security software, hardware, and firmware features affecting confidentiality, integrity, availability, accountability, and non-repudiation have been implemented as documented in the DCID 6/3, JAFAN/6/3, NIST 800-53, and/or DoDI 8500.2.

• Review required program office artifacts and make recommendations to support IA RMF analysis and recommendation to the program office. Assist to develop a A&A report and a A&A presentation for each required system to include IATT, IATO ATO, and Authority to Connect (ATC).

• Manage, plan, document and conduct Independent Verification & Validation (IV&V) of security requirements for weapon systems.
• Assist with evaluating the technical implementation of the security design to ascertain that security software, hardware and firmware features affecting confidentiality, integrity, availability, accountability, and non-repudiation have been implemented as documented in the DCID 6/3, JAFAN/6/3, NIST 800-53, and/or DoDI 8500.2 and that the features perform properly. Document and report IV&V test plans, results, anomaly reports, recommendations, activity reports and other special reports as required.

• Support IA site audits to verify architecture analysis, IA requirements and controls, verify mitigation actions, witness IA testing and evaluation, and to support final approval for IATT, IATO, and/or ATO/ATC. Document and report IA site audit findings and recommendations to the Program Office.

• Review and make recommendations to the Systems Engineering AT Certifying Officials regarding critical technologies requiring protection, PPP, AT plans, techniques, threats/vulnerabilities, risk, and results.
• Support monitoring and evaluating AT efforts for impacts to the program and provide recommendations to the PM. Assist to review the program’s Critical Program Information/ Critical Technology (CPI/CT) list.
• Support the program office SE Team and the AT DoD Executive Agent to produce new CPI/CT lists.
• Ensure that AT events are incorporated into the SEP and IMS. Support to identify and document the threat, vulnerability, attack scenarios, impacts if exploited and the exploitation timeline.

• Assist with identifying the software pedigree and quality assurance issues and document the results. Support software security analysis to assess the vulnerabilities and risks. Assist to document and report results to the PM and the Certification Authority Representative. Assist with developing an approach for performing operational SWA sensitivity analysis. Assist with developing SWA test metrics for inputs to the TEMP. Provide support to conduct risk assessment.

• Assist with performing hardware security analysis to assess the vulnerabilities and risks.

• Assist the Program Office with OSS&E and Communication, Navigation and Surveillance/ Air Traffic Management (CNS/ATM) airworthiness assessment for certification to ensure that DoD aircraft are safe and that they meet the requirements of the FAA in the U.S. and the International Civil Aviation Organization (ICAO). The Contractor shall assist to submit written reports, including but not limited to technical evaluation reports, white papers, and comment matrices on the above technical areas to the program office.

• Support the development of PIT process and PIT guidance for the program office.

• Assist in developing, reviewing, or assisting the U.S. Government and other supporting Contractors, to identify any “sensitive” media that should not be placed into the public domain (e.g., Classified, For Official Use Only (FOUO)), as well as ensuring applicable Distribution Statement, Handling and Destruction Notice, Warning Statement (for technical information with space/military application under the ITAR or the Export Administration Regulations (EAR) for dual-use technologies), along with the expanded exemption statement are applied IAW AFI 61-204, and DoD 5400.7-R.

• Assist to properly mark, properly handle, secure, and dispose of any sensitive media in the Contractor’s immediate control. Advise or alert the U.S. Government, and other supporting contractors of these requirements, for any sensitive media received which is not appropriately marked.

• Support all training (classroom and computer based) and keep accurate records of completed training.

• Support cryptography analysis.

• Assist to conduct Supply Chain Risk Management (SCRM). Assist in developing and documenting SCRM plans and implementation activities in appropriate acquisition and security documents, including but not limited to the acquisition strategy, SEP, PPP, and SSP.

Required Education and/or Experience:

• Bachelor’s in computer engineering, electrical engineering or computer science or Bachelor’s in information assurance or information systems.
• Degree must be from a college or university with an Accreditation Board of Engineering and Technology (ABET) accredited engineering program(s). To find out if a school has an ABET accreditation, go to ABET accredited schools .
• Minimum of ten (10) years of systems engineering, systems security engineering, or IA experience; three (3) of which must be in the DoD.
• Must possess and maintain a current Certified Information System Security Professional (CISSP) certification. Recommend expertise in state of a system where it is performing its intended functions without being degraded or impaired by changes or disruptions in its internal or external environments (systems integrity) and IA.

Supervisory Responsibilities:

This position does not supervise the work of others.

Work Environment:

This job operates in a professional office environment. This role routinely uses standard office equipment.

Physical Demands:

Must be able to operate a computer and other standard office equipment. Must be able to remain in a stationary position, 80%.

Travel:

Very little.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and/or activities may change at any time with or without notice.

BTAS Benefits:

A comprehensive benefits program, including paid time off, federal holidays, health coverage, 401K plan with generous company match is offered to all full-time employees.

AAP / EEO Statement:

BTAS is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

BTAS is an E-Verify program participant.