PPSM Analyst

Description

Seeking a PPSM Analyst with experience in information systems security, networking/infrastructure, ports, protocols, services, boundary protection, and technical risk analysis. The analyst will maintain PPS Registry information; perform CAL and firewall compliance reviews; assess vulnerabilities and risks associated with ports, protocols, and services; process CLSA, FA, Non-Standard Boundary/Port, and Banned Services Exception requests; correlate PPSM registrations with eMASS authorization packages; process enterprise change requests; track PPSM actions through completion; and support PPSM TAG/CCB activities, customer coordination, metrics, and Government reporting

\n

Primary Responsibilities

The PPSM Analyst will:

• \n
• Maintain J6 PPS Registry entries and ensure POC information and registrations are properly correlated with applicable J6 eMASS authorization packages and evaluated as part of the RMF authorization process.
• \n
• Review initiatives requiring modifications to ports and protocols and verify that requested PPS are permitted in accordance with the DoD Category Assurance List (CAL).
• \n
• Assess and provide recommendations regarding the risk associated with new or modified firewall rules.
• \n
• Conduct technical reviews of new and existing PPSM requirements and provide assessments supporting boundary protection improvements.
• \n
• Monitor DoD PPSM Registry registrations for discrepancies and support discrepancy resolution.
• \n
• Process and track:\n
  • \n
  • Component Local Service Assessments (CLSA)
  • \n
  • Further Action (FA) requests
  • \n
  • Non-Standard Boundary/Port Exception requests
  • \n
  • Banned Services Exception requests
  • \n
• \n
• Track PPSM CLSA packages through final DISA program approval or denial.
• \n
• Assess vulnerabilities and implementation strategies associated with protocols, services, ports, and application data services.
• \n
• Support requirements analysis, configuration management design, and vulnerability assessment/implementation strategies supporting DISA Boundary Protection and the DISA CAL.
• \n
• Ensure Enterprise Information System ports, protocols, and services are registered in the PPSM central registry and appropriately categorized against the CAL.
• \n
• Ensure non-standard requests are not deployed prior to required authorization.
• \n
• Ensure Information Systems represented in eMASS are captured in the PPSM Registry.
• \n
• Monitor and process customer requests through the Government ITSM tool for enterprise change requests.
• \n
• Coordinate with customers and project teams to ensure both standard and non-standard PPS requirements are understood and properly documented.
• \n
• Conduct recurring PPS Registry validation reviews to ensure entries remain valid and accurate.
• \n
• Provide status reports to Government leadership identifying review results, risks, discrepancies, and changes.
• \n
• Attend monthly PPSM TAG and CCB meetings and provide recommendations supporting authorization decisions.
• \n
• Support customer meetings and recurring work-status reviews as directed by Government leadership.
• \n

\n

Basic Qualifications

• \n
• \n

  Active DoD Secret clearance or higher - program can support up to TS/SCI

• \n
• \n

  DoD 8140: 652 Security Architect Intermediate (Includes: SecurityX, CISM, and multiple SANS certs)

• \n
• \n

  Bachelor's degree and 4+ years of prior experience; add'l experience may be considered in lieu of degree

• \n
• \n

  Demonstrated knowledge of the DoD Information Network and boundaries

• \n
• \n

  Demonstrated knowledge on requirements for processing internal and external PPSM requests to include Non-standard use for Authorizing Official (AO) and DoD PPSM approvals

• \n
• \n

  Demonstrate ability to conduct PPSM reviews and generate exception requests with appropriate risk assessment and recommended risk mitigations

• \n
• \n

  Demonstrate knowledge of DoD DMZ Whitelist registrations, Web Content Filtering and exception requirements

• \n
• \n

  Demonstrable skills in work ticket monitoring and prioritization

• \n
• \n

  Demonstrable skills in effective oral and written management, customer and team communication to include engagement

• \n
• \n

  Demonstrable skills In technical and workflow problem solving

• \n
• \n

  Demonstrable skills in exemplary customer service.

• \n
• \n

  Demonstrate knowledge of DoD DMZ Whitelist registrations and exception requirements

• \n

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Pay Range:Pay Range $87,100.00 - $157,450.00\n

\n

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

\n

About Leidos

\n

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

\n

Pay and Benefits

\n

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

\n

Securing Your Data

\n

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

\n

Commitment to Non-Discrimination

\n

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.