Lead Information Assurance (IA) Security Administrator

Lead Information Assurance (IA) Security Administrator

Location: San Antonio, TX

Clearance Required: Public Trust (ADP/IT-II); Tier 3 Investigation (NACLC)

Lead Information Assurance Analyst

The Lead Information Assurance Analyst will serve as the senior contractor lead for all Information Assurance (IA) and cybersecurity compliance activities supporting the Defense Health Agency (DHA) under the Domain and Directory Services Branch (DDSB) task order. As Key Personnel, this individual is responsible for overseeing system-level security control assessments, ensuring Risk Management Framework (RMF) compliance, and leading the contractor IA team—including subordinate Security Control Assessors, Vulnerability Analysts, and IT Program Auditors.

This position plays a critical role in enabling DHA’s ability to maintain Authorization to Operate (ATO) statuses across its global hybrid IT environment by driving policy alignment, risk mitigation, and continuous monitoring.

Key Responsibilities

• Serve as the primary IA technical lead and advisor across all DDSB cybersecurity compliance operations
• Conduct and oversee system-level Security Control Assessments (SCAs) in accordance with DoD RMF and NIST 800-53 guidelines
• Develop and maintain enterprise-level Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and supporting RMF artifacts in eMASS
• Lead coordination with Information Systems Security Managers (ISSMs), Information System Security Officers (ISSOs), system owners, and DHA’s cybersecurity governance team
• Track and manage POA&M resolution efforts, ensuring timely closure of findings and risk acceptance where applicable
• Ensure subordinate IA team members execute daily vulnerability management, compliance scanning, and documentation tasks aligned with DHA policy
• Support performance reporting related to PRS metrics tied to IA activities, ATO sustainment, and risk posture improvement

Qualifications

• Extensive knowledge of NIST 800-53, DoDI 8510.01, and RMF implementation guidance
• Experience leading IA teams supporting complex DoD environments
• Expertise with eMASS workflows, DISA STIGs, and continuous monitoring frameworks
• Strong collaboration and communication skills to interface with ISSMs, PMs, and technical stakeholders

Education & Certification Requirements (per DoD 8140 Qualification Matrices)

1) Microsoft Certified: Azure Administrator Associate or Windows Server Hybrid Administrator Associate

2) Any of the following...

• Academic Education: Bachelor’s degree in information technology, Cybersecurity, or a related discipline.
• OR Baseline: GLSC or CISSP
• OR DoD/Military Training: A-150-1980 or A-150-1202 or A-150-1203 or A-150-1250 or WSS 011 or WSS 012