Cyber Security Engineer

About the role

Akima Global Technology is seeking a Cyber Security Engineer to support Identity, Credential, and Access Management (ICAM) operations for the NASIC enterprise. The role ensures secure, controlled, and auditable access to information systems, networks, applications, and data across NIPRNet, SIPRNet, and JWICS environments while enforcing principles such as least privilege, need-to-know, separation of duties, and continuous account validation.

Responsibilities

• Review and validate requests for privileged and administrative access to NASIC information systems, networks, applications, services, and data, ensuring requested privileges align with assigned mission responsibilities.
• Verify personnel performing DoD cyberspace work roles possess required qualifications, certifications, training, and workforce designations per DoD 8140-series requirements and applicable Air Force and NASIC cybersecurity policies.
• Review System Authorization Access Requests (DD Form 2875) and provide authorization or validation of cybersecurity workforce qualifications when applicable.
• Conduct monthly DoDM 8140.03 Cyberspace Workforce Compliance Reviews and identify personnel who do not meet established qualification, certification, training, or continuing-education requirements.
• Identify, document, track, validate, and report cybersecurity workforce qualifications and certifications for military, DoD civilian, and contractor personnel performing cyberspace work roles.
• Apply the principle of least privilege by ensuring users and system processes receive only the access and permissions required to accomplish authorized organizational and mission functions.
• Evaluate requests for elevated access and recommend approval, denial, reassignment, modification, suspension, or removal of privileges based on mission requirements, security policy, workforce qualifications, and organizational need.
• Deny or recommend denial of privileged access for personnel who lack required qualifications, authorization, need-to-know, or documented operational justification.
• Administer and maintain privileged, administrative, and service accounts across NASIC enterprise environments, including account enablement, disablement, modification, periodic review, and removal.
• Support the management and oversight of approximately 690 administrative and service accounts distributed across JWICS, Secret, and NIPRNet environments.
• Process and coordinate administrative account requests and ensure requests are accurately documented, validated, approved, and completed within established organizational timelines.
• Maintain visibility and accountability of personnel possessing elevated privileges throughout the NASIC enterprise.
• Review existing account privileges on a recurring basis to ensure access continues to reflect current organizational, mission, and business requirements.
• Support identity and access management services that protect NASIC information systems, DoD electronic resources, applications, services, and data from unauthorized access.
• Support identity-management capabilities associated with person entities and Non-Person Entities (NPEs), including service, system, and application accounts.
• Process and coordinate Data Loss Prevention (DLP) waiver requests, firewall requests, privileged-access actions, and other cybersecurity account-management activities required by NASIC, AFIN, or the 88th Air Base Wing.
• Respond to applicable Mission Tasking Orders (MTOs), Task Orders (TOs), cybersecurity directives, and other actions issued by AFIN, the 88th Air Base Wing, or designated Government cybersecurity authorities.
• Maintain working knowledge of applicable cybersecurity instructions, manuals, regulations, technical orders, Mission Tasking Orders, Task Orders, supplements, and policy updates affecting NASIC enterprise access management and cybersecurity operations.
• Coordinate with system owners, system administrators, ISSMs, ISSOs, cybersecurity personnel, workforce managers, and Government stakeholders to resolve access, qualification, and account-management issues.
• Document operational justification for network or system access when elevated access is required to support compelling mission or operational requirements.
• Develop, maintain, and provide ICAM metrics, compliance information, account status information, and ad hoc reports as requested by Government leadership.
• Identify access-control deficiencies, expired qualifications, excessive privileges, inactive accounts, inappropriate permissions, or other cybersecurity risks and coordinate corrective actions.
• Support continuous improvement of NASIC privileged-access and identity-management processes to improve cybersecurity compliance, accountability, auditability, and overall cyber hygiene.
• Maintain accurate records and supporting documentation sufficient to demonstrate compliance with DoD, Department of the Air Force, NASIC, and local cybersecurity requirements during inspections, assessments, audits, and compliance reviews.
• Perform additional cybersecurity engineering, identity-management, access-control, and cyber-hygiene duties as required to support the security and operational effectiveness of the NASIC enterprise.

Qualifications

• Possess and maintain an active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance and maintain eligibility for access to classified information and systems as required by the position.
• Possess and maintain an Information Assurance Management (IAM) Level II certification in accordance with applicable Department of Defense and Department of the Air Force cybersecurity workforce requirements, including AFMAN 17-1303, DoDD 8140.01, and applicable DoD 8570.01-M requirements.
• Completion of formal training, education, or equivalent professional development related to the assessment, authorization, accreditation, and cybersecurity management of DoD or Intelligence Community information systems under the Risk Management Framework (RMF).
• Minimum of one year of experience serving as an Information System Security Officer (ISSO), Information System Security Manager (ISSM), or in a comparable cybersecurity role supporting the authorization and accreditation of DoD or Intelligence Community information systems under the RMF.

Benefits

• Medical, dental, vision, and life insurance.
• 401(k) retirement savings plan.
• Range of other voluntary benefits.
• Paid Time Off (PTO) for regular full-time and part-time employees.

Pay

$90,000–$100,000