Summary This NASA OIG IT Security Specialist oversees application software, networks, and enterprise architecture. The role drives risk assessments, policy development, disaster recovery, and executive briefings to secure critical mission data. Responsibilities Plan, schedule, execute, and validate patching across servers, workstations, and applications to ensure timely remediation of KEVs and other critical vulnerabilities. Coordinate and execute vulnerability remediation across servers and endpoints using tools such as BigFix, Nessus, and SentinelOne to resolve security findings. Create, modify, and remove system access; manage authentication controls; conduct account audits; support MFA and PIV initiatives; and maintain secure permission structures. Manage user accounts, permissions, and access to sensitive systems and data, ensuring proper authentication; remove access for terminated personnel; and maintain audit records. Design and maintain secure network and AWS GovCloud architectures, including firewalls, VPNs, segmentation, logging, high availability, disaster recovery, implement cloud security controls, and secure integration of new technologies. Lead evaluations of information system security features; develop certification and accreditation plans; document deficiencies; track corrective actions; and recommend improvements. Assess IT systems for vulnerabilities, track remediation of KEVs, and maintain continuous monitoring activities to ensure compliance with federal and agency security requirements. Provide expert advice and guidance to leadership, IT staff, and stakeholders on cybersecurity, IT procurements, and coordination with internal departments and external agencies. Requirements Conditions of Employment Qualifications Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work. To qualify for GS-14, you must have one year of directly related specialized experience equivalent to the GS-13 level: Remediates enterprise server vulnerabilities across cloud and on-premises environments by applying patches, hardening Linux and Windows systems, updating certificates, and resolving KEV, SOC, and POA&M findings using tools such as BigFix, AWS, and EDW services. Configures and supports AWS cloud services, including EC2, Instance Scheduler, GuardDuty, FSx, Airflow, and virtual desktop solutions; upgrades production and development environments; and troubleshoots major application outages through root cause analysis and service restoration. Administers access control and security workflows by managing user permissions, implementing MFA, coordinating system access changes, and addressing SSP and POA&M security requirements. Evaluates networking and cloud-related procurements by analyzing technical requirements, licensing, subscription costs, and compatibility to support secure and efficient enterprise IT operations. AND IF you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the four competencies listed below: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Your resume must include a clear and detailed narrative description, in your own words, of how you meet the required specialized experience. Experience statements copied from a position description, vacancy announcement or other reference material constitutes plagiarism and may result in disqualification and losing consideration for the job. Please visit https://www.nasa.gov/careers/how-to-apply/#Artificial-Intelligence to review NASA's guidance on the use of artificial intelligent (AI) or AI-assisted tools during the application process. Education Additional Information Additional selections may be made for similar positions across NASA within the local commuting area(s) of the location(s) identified in this announcement. By applying, you agree to have your application shared with interested selecting official(s) within NASA. CTAP/ICTAP will be cleared for any additional selection from this announcement. If you are applying for a GS-12 or higher level and are a current federal employee, you must meet applicable time-in-grade requirements to be considered eligible for this position. To be eligible, you must have completed a minimum of 52 weeks in a position no more than 1 grade lower than the advertised position. Please submit your SF-50 that shows Time-in-Grade eligibility and reflects your title, series, and grade. If your eligibility for both merit promotion and/or time-in-grade cannot be determined, your application will be rated ineligible. Note: Time-in-grade requirements also apply to applicants who have held a non-temporary, competitive service GS position in the past year. If you have special priority selection rights under the Agency Career Transition Assistance Program (CTAP) or the Interagency Career Transition Assistance Program (ICTAP), you must: - Indicate your eligibility when applying for a position. The questionnaire asks you to identify your ICTAP/CTAP eligibility. - Be well qualified for this position to receive consideration. Candidates rated in the 'Best Qualified' category are considered well-qualified. Please see 'How You Will Be Evaluated' for more information. - Submit proof that you meet the requirements for CTAP/ICTAP as indicated in 'Required Documents' For additional information about CTAP/ICTAP eligibility, click here - https://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/#ictap. Qualified NASA term employees who have term conversion eligibility (Term Appointments | NASA) under the NASA Flexibility Act of 2004 will be referred and considered equally with other NASA permanent employees under internal competitive placement procedures. Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. (https://appsupport-usastaffing.opm.gov/hc/en-us/sections/45063131363475-Reasonable-Accommodation-Information). Per Executive Order 14343, this position is not part of a bargaining unit.
