Description
Leidos Corporate Information Security Office (CISO), reporting through the Digital Sector, is seeking a Cyber Infrastructure Support Lead to work with our Concord, MA team.
The Cyber Infrastructure Support Lead is a primarily hands-on technical role responsible for supporting and enhancing the enterprise IT environment across both Windows and Linux platforms with a focus on system reliability, performance, and security. The role includes leadership responsibilities involving team coordination, mentorship, and serving as the primary Information Technology (IT) decision maker.
Primary Responsibilities
- Administer and maintain Windows and Linux systems in a secure, stable, and scalable manner
- Automate routine tasks using scripting
- Collaborate with IA, engineering, and operations teams to deliver IT services
- Continuous upkeep, monitoring, analysis, and response to Information System, network, and security events
- Develop procedures and documentation to ensure compliance with Configuration Management (CM) for security-relevant IS software, hardware, and firmware
- Develop, implement, and enforce Information Security Policies and Procedures
- Document compliance activities in accordance with the governing authority-approved authorization package
- Ensure proper protection and/or corrective measures have been taken when an incident or vulnerability has been discovered
- Ensure records are maintained for workstations, servers, software, routers, firewalls, network switches, and other relevant hardware/equipment throughout the information system's life cycle
- Evaluate proposed changes or additions to the information system and advise senior site leadership of the security relevance
- Help prioritize work, coordinate tasks, and drive accountability within the team
- Lead/conduct security IS education and training
- Mentor other engineers in the art of cybersecurity and secure software development practices
- Monitor system health, respond to incidents, and implement long-term fixes
- Participate and remain active within the Change Control Board (CCB) process
- Participate and remain active within local Scrum Boards
- Participate in internal/external security audits/inspections; perform risk assessments and Continuous Monitoring
- Provide technical guidance and mentorship to junior administrators (≈20% leadership)
- Support compliance and security requirements (patching, STIGs, audits, etc.)
Basic Qualifications
- Must currently hold an active TOP SECRET clearance
- Bachelor's degree and 8–12 years of related experience in Information Systems, Computer Science, or a related field, or a master's with 6–10 years of related experience
- Detailed understanding of the Risk Management Framework (RMF), NIST, ICD, and CNSS standards
- Must currently hold DoDM 8140 IAT Level II certification
- Experience with compliance scanning tools (e.g., SCAP) and vulnerability scanning tools (e.g., ACAS)
- Familiarity with network technologies (LAN & WAN) and best practices within a classified environment, including crypto and key management
- Good writing and verbal presentation skills
- Hands-on experience with DISA Security Technical Implementation Guide (STIG) implementation and management
Preferred Qualifications
- Additional desired certifications include CISSP, CCNA, CCSP, MCSE, and/or SANS GIAC
- Detailed understanding of Risk Management Framework (RMF)
- DoD IS knowledge and experience
- Experience developing and delivering modern software, including microservices, containers, and hybrid cloud architectures
- Experience with ServiceNow RMF Workflow Management Tool
- Experience with Windows and Linux
- Familiarity with administering Microsoft SharePoint, including site collection configuration, permissions management, and document library/list administration
- Knowledge of agile development processes and DevOps tools such as Jira, Bitbucket, Confluence
- Knowledge of software development lifecycle concepts: Scaled Agile Framework (SAFe), DevOps, Continuous Integration (CI), and Continuous Deployment (CD)
- Security hardening scripting/automation experience
- Strong knowledge of secure coding practices and vulnerability/quality scanning tools (e.g., Fortify, SonarQube)
- Understanding of SIPR Connected DCSA Accredited Information systems