Information System Security Manager - Secret Clearance with Security Clearance

Information System Security Manager ISSM - San Antonio, Texas

This Position Is Contingent Upon Contract Award
Department of the Air Force
Air Force Research Laboratory - 711th Human Performance Wing
Tri-Service Research Laboratory, Building 3260
Number of Positions:

One full-time position (1.0 FTE; Estimated Total Compensation: $66.44 per hour.
Customer:

Air Force Research Laboratory (AFRL), 711th Human Performance Wing, Bioeffects Division.
Type of Employment:

Full-time.
Working Hours:

Normally Monday through Friday between 7:00 AM and 5:00 PM, not to exceed 40 hours per week. Primarily on-site at the Tri-Service Research Laboratory. Temporary alternate work locations may be assigned by the COR; general telework authorization is not specified.
Period of Performance:

Base period from November 30, 2026 through November 29, 2027, with a possible extension under FAR 52.217-8.
S. citizenship is required for contractor personnel requiring access to USAF bases, AFRL facilities, or Government IT networks unless a written waiver is approved by the Contracting Officer.
A current Secret clearance is highly desired. A Secret clearance is required for personnel who need classified-information or IT-II access; Travel:

No travel is anticipated. Any required travel would be added by separate bilateral modification.
The Information System Security Manager will lead cybersecurity and RMF support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting the Tri-Service Research Laboratory. The role performs DoD 8140 work role 722 functions and provides enterprise risk, authorization, compliance, vulnerability-management, access-control, audit, and advisory support.
Must possess a Bachelor of Science degree in Information Technology or Cybersecurity.
Must have at least five years of demonstrated RMF and cybersecurity experience, with no more than a three-consecutive-year lapse in cyberspace work.
Must meet applicable DoD Manual education, training, certification, and intermediate-level work-role requirements for the assigned labor category.
Must execute a nondisclosure agreement before the start of performance.
A current Secret clearance is highly desired and may be required before performing duties involving classified information, SIPRNet, or IT-II access.
Validate that administrative and technical personnel meet required baseline certifications and training before receiving elevated access.
Administer privileged-access agreements and conduct recurring audits of privileged accounts.
Advise senior management and the Authorizing Official regarding risk levels, security posture, vulnerabilities, mitigations, and changes affecting cybersecurity posture.
Direct and coordinate enterprise RMF, ATO, eMASS, STIG, vulnerability-management, audit, inspection, documentation, access-control, and remediation activities.
Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policy, and Risk Management Framework requirements.
Prepare and maintain system security plans, assessment reports, risk reports, topology diagrams, hardware/software inventories, standard operating procedures, and related evidence packages.
Use ACAS or other approved scanning tools to identify and assess vulnerabilities and maintain STIG checklists and documented remediation plans.
Support audits, inspections, configuration-management reviews, vulnerability assessments, cloud-security activities, and cybersecurity reporting.
Coordinate account onboarding and offboarding, DD Form 2875 workflows, workforce qualification tracking, user training, media destruction, agreements, and classified-media handling as assigned.
Provide cybersecurity consulting and customer support, participate in the AFRL Cybersecurity Working Group, prepare meeting minutes and action tracking, and brief Government and industry stakeholders.
Support cybersecurity pilot projects, Inspector General activities, documentation development, system discovery, and implementation of compliant technical solutions.
Protect classified, controlled, proprietary, and sensitive information and comply with OPSEC, security, public-release, network-access, and facility requirements.
Required Candidate Submission Documents
Resume not exceeding five pages and documenting the required five years of RMF/cybersecurity experience.
Copy of qualifying bachelors degree and current Security+ certification.
Evidence of applicable DoD work-role qualifications and current Secret clearance, if held.
Signed nondisclosure agreement by the start of performance and any security, identity, CAC, network-access, training, or onboarding documents requested by Fidelity Partners or the Government/client.
Fidelity Partners is an Inc. 5000 USA company that provides medical, technical, logistical, and administrative services to the federal government and commercial clients across the country. Fidelity offers competitive salaries and benefits packages.
Fidelity Partners provides equal employment opportunities without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected in accordance with applicable federal, state, and local laws (EOE).