KBRwyle Sr. Cyber Assessment & Authorization (A&A) Engineer/Analyst in North Charleston, South Carolina

Sr. Cyber Assessment & Authorization (A&A) Engineer/Analyst


Join a winning team! This is an exciting time at KBRwyle and here is a great opportunity to showcase your skills!

Position Description:

Primary responsibility is to perform tasks related to Assessment & Authorization (A&A) within the Defense Health Agency to ensure assigned DoD systems/Enclaves/Networks can obtain and maintain Authorization to Operate (ATO) and Authorization to Connect (ATC) certifications.Conduct risk and vulnerability assessments of information systems to identify vulnerabilities, risks, and protection needs.

This position will be a part of a team developing recommended courses of action needed to transition current policies and procedures to the Risk Management Framework (RMF) approved processes.

Provide solutions to complex problems that require the regular use of expertise and creativity. Problems are broadly defined and solutions require the continuation of specialized theories and knowledge. Serve as Subject Matter Expert (SME) on one or more technologies.


  • BA/BS in Information Systems Management, Computer Science or related discipline plus 6 years of experience. In lieu of formal education, at least 12 years of related experience. Specific contract requirements regarding education and experience will prevail.

  • Secret clearance. Candidates that do not have a clearance will undergo a government background investigation and must meet the requirements for access to sensitive government information if selected for position.

  • Travel: 25-35%

  • Must possess a CompTIA Security to start work

  • OS Certification/Approved Training completed within 180 days of hire

Additional Qualifications:

  • Experience with DIACAP and RMF in DHA a plus

  • Experience with Accreditation package management in eMASS a plus

  • Excellent customer service and organization skills

  • Excellent oral and written communication skills

Familiarity with Guidance:

  • Risk Management Framework

  • NIST 800 series policies & Guidance

  • NIST Federal Information Processing Standards (FIPS)

  • Department of Defense Instructions (DoDI)

  • Security Technical Implementation Guides (STIGs)

Familiarity with Toolsets/Technologies:

  • STIGViewer,

  • Vulnerator,

  • eMASS

  • Assured Compliance Assessment Solution (ACAS)

Knowledge in at least one in the following OS/Technologies

  • Windows

  • Linux/Unix

  • Network Devices

  • Databases – MS SQL , Oracle

  • VMWare – Virtualization

  • Web Services

  • Active Directory / Group Policy

  • Group Policy

  • Scripting

Job: Information Technology

Primary Location: US-US-SC-North Charleston

Other Locations: United States

Req ID: 1051292