Senior Information Systems Security Officer

Job Description

The Applied Physics Laboratory (APL) has an outstanding opportunity for a Senior Information Systems Security Officer (Sr. ISSO) to join the Security Department.

About this Opportunity:

Reporting to the Information Systems Security Manager, the Senior Information Systems Security Officer will efficiently manage APL-UW classified information systems security resources while maintaining complete security compliance and effective information systems operations. The primary job duties will be to lead journeyman-level IT team members in support of classified information systems security operations.

In addition, this position is responsible for developing, implementing, and managing effective and efficient information systems security practices that comply with continually evolving national security laws, federal policies, regulations, and guidelines. The incumbent will support classified information systems operating within multiple accredited environments while ensuring the confidentiality, integrity, and availability of sensitive government information.

Additionally, the incumbent will serve as a formal member of the APL Insider Threat Program (ITP) management hub, responsible for identifying and collecting potential threat factors that could adversely affect classified information systems or national security information.

The incumbent will continuously integrate information gathered from a variety of technical, operational, and security sources into APL-UW information systems security practices while coordinating directly with the ISSM. The incumbent will also maintain a functional working relationship with the CSSO to ensure information systems security remains aligned with personnel security, physical security, industrial security, and compartmented security requirements. Coordination with the University's Facility Security Officer (FSO) will be maintained, as appropriate, to ensure consistency across the University's classified security program.

Key Responsibilities:

Technical Security Operations (45% FTE):

• Support the ISSM to ensure APL-UW's JWICS, SIPRNet, and classified enclaves maintain strict compliance with IC, DoD, DISA, DCSA, University, and customer requirements.
• Act as the Network SME guiding the modernization and hands-on administration of classified infrastructure, including managing domain controllers, SANs, and deploying Active Directory GPOs.
• Administer security tools (HBSS, ESS, ACAS, STIGs) to assess vulnerabilities, validate controls, and interface directly with the Cyber Security Service Provider (CSSP).
• Serve as the primary systems administrator for testing, packaging, and deploying critical software updates and security patches across all enterprise operating systems and appliances.
• Enforce user compliance, troubleshoot network operations, and maintain Continuous Monitoring and Risk Scoring (CMRS) records.

Classified Security Systems (25% FTE):

• Establish, operate, and maintain accredited classified processing environments to ensure strict compliance with applicable IC, DoD, DCSA, University, and customer security requirements.
• Ensure lifecycle protection of JWICS, SIPRNet, and other classified systems by enforcing security procedures, conducting documented weekly checks, and performing required periodic inspections.
• Perform air-gapped system administration for Windows and RHEL, manually deploying patches, STIG configurations, audit logging, and disaster recovery backups.
• Partner with the ISSM and CSSO to maintain System Security Plans (SSPs) and strictly integrate information systems with personnel, physical, and industrial security requirements.

System Certification and Accreditation (10% FTE):

• Implement network, application, and access controls, maintaining meticulous Configuration Management (CM) for all security-relevant hardware and software according to government and University requirements.
• Coordinate the system authorization process for DoD, IC, and DCSA programs by updating required Certification and Accreditation (C&A) documentation and working with the ISSM to validate approved controls.

Policy and Procedure Administration (10% FTE):

• Collaborate with the ISSM to enforce the classified security program, developing and presenting comprehensive security education, awareness training, and operational guidance to all system users.
• Conduct periodic security self-inspections, certify protection measures to government sponsors, and partner with the CSSO to seamlessly integrate IT policies with personnel, physical, and industrial security protocols.

Risk Analysis (10% FTE):

• Perform comprehensive risk analyses on security-relevant changes, providing actionable recommendations to mitigate emerging vulnerabilities and investigating anomalies that deviate from established baselines.
• Monitor system, firewall, and IDS logs to investigate anomalous access or malicious activity, serving as an active member of the APL Insider Threat Program (ITP) management hub.

Required Qualifications:

To be considered for this opportunity, your application must demonstrate you meet both the minimum qualifications and additional qualifications listed below. Equivalent education and/or experience may substitute for minimum qualifications except when there are legal requirements, such as a license, certification, and/or registration.

Minimum Qualifications:

Bachelor's degree in Information Systems Management, Computer Science, Computer Engineering, Cybersecurity, or a closely related discipline and a minimum of four (4) years of progressively responsible experience as a Network Engineer, Network Administrator, Systems Administrator, Information Systems Security Officer (ISSO), or in a comparable information systems security position requiring industry-recognized technical certifications.

• Must be a United States Citizen.
• Must possess a Department of Defense (DoD) SECRET security clearance at the time of hire. The incumbent must be eligible for, and able to obtain and maintain, access to Sensitive Compartmented Information (SCI) and other classified information required to support assigned responsibilities.
• Must possess a current DoD 8140 Baseline Information Assurance Technical (IAT) Level III certification or obtain the required certification within the timeframe established by applicable DoD policy.

A federal security clearance is required to hold this position. The person hired into this position must be a U.S. citizen and successfully obtain and continue to maintain a Department of Defense (DOD) Personnel Security Clearance. The process for obtaining a DOD Security Clearance can be viewed using the following links: Processing Applicants (dcsa.mil) or General Investigations and Clearance Processes (dcsa.mil)

Applicants who do not meet these qualifications WILL NOT be forwarded to the Hiring Department.

Preferred Qualifications:

• Must demonstrate technical proficiency with secure network architectures, network routing and switching technologies, Microsoft Windows and Red Hat Enterprise Linux operating systems, virtualization technologies, and information systems security technologies supporting accredited classified information systems.
• Must possess experience supporting or administering classified information systems operating within the Department of Defense (DoD), Intelligence Community (IC), or other accredited classified environments.
• Must possess experience in incident response, vulnerability management, security event analysis, intrusion detection technologies, and implementation of cybersecurity best practices.
• Must possess working knowledge of Department of Defense (DoD), Intelligence Community (IC), Defense Counterintelligence and Security Agency (DCSA), and applicable federal cybersecurity and information systems security requirements, including the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and related security policies.
• Must demonstrate the ability to communicate effectively, both orally and in writing, with senior government officials, University leadership, technical personnel, customers, and non-technical users.
• Must demonstrate the ability to work independently, exercise sound judgment, manage multiple priorities, and make timely decisions supporting classified information systems and organizational mission requirements.
• Must possess the ability to develop technical documentation, security procedures, and information systems security guidance supporting accredited classified information systems.

About APL:

The Applied Physics Laboratory is a research unit at the University of Washington. Our research expertise is in ocean physics and engineering, ocean and medical acoustics and imaging, polar science, remote sensing, and signal processing. We conduct research and development that is sponsored by a variety of federal and state agencies and take great pride in our long-standing status as a US Navy-designated University Affiliated Research Center (UARC). Our work takes place not only on the University of Washington campus and medical centers, but in field locations around the world - at sea, in the air, and on polar ice caps. We apply rigorous scientific inquiry and engineering excellence in pursuit of solutions to important problems for the good of our region, nation, and world.

We are focused on building and sustaining a laboratory where all students, staff, and collaborators can realize success. We believe every member of our team enriches our research enterprise by exposing us to a broad range of ways to understand and engage with the world, identify challenges, and discover, design, and deliver solutions. We invite you to explore our laboratory, to find answers to Common Questions about the University's application process, and to See Yourself at APL.

Compensation, Benefits and Position Details

Pay Range Minimum:

$125,004.00 annual

Pay Range Maximum:

$140,364.00 annual

Other Compensation:

• Benefits:

For information about benefits for this position, visit https://www.washington.edu/jobs/benefits-for-uw-staff/

Shift:

First Shift (United States of America)

Temporary or Regular?

This is a regular position

FTE (Full-Time Equivalent):

100.00%

Union/Bargaining Unit:

Not Applicable

About the UW

Working at the University of Washington provides a unique opportunity to change lives - on our campuses, in our state and around the world.

UW employees bring their boundless energy, creative problem-solving skills and dedication to building stronger minds and a healthier world. In return, they enjoy outstanding benefits, opportunities for professional growth and the chance to work in an environment known for its diversity, intellectual excitement, artistic pursuits and natural beauty.

Our Commitment

The University of Washington is committed to fostering an inclusive, respectful and welcoming community for all. As an equal opportunity employer, the University considers applicants for employment without regard to race, color, creed, religion, national origin, citizenship, sex, pregnancy, age, marital status, sexual orientation, gender identity or expression, genetic information, disability, or veteran status consistent with UW Executive Order No. 81.

To request disability accommodation in the application process, contact the Disability Services Office at 206-543-6450 or dso@uw.edu.

Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law.