Note: The job is a remote job and is open to candidates in USA. Koniag Professional Services LLC is seeking a Security Specialist, Mid-Level to support the Department of Health and Human Services in developing a secure Human Capital Management solution. The role involves maintaining security documentation, collaborating with stakeholders, conducting security testing, and ensuring compliance with federal cybersecurity standards.

Responsibilities

Maintain and develop security documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), POAMs, and ATO-related artifacts to support HRIT consolidation under the GRC framework.
Collaborate with application stakeholders and Scrum teams to define and implement security requirements, promote Agile best practices, and ensure secure, timely delivery of Human Capital Management (HCM) solutions.
Conduct security testing and validation prior to production deployment; identify vulnerabilities, recommend mitigations, and document findings for remediation.
Monitor and report on security compliance status across HRIT implementations spanning multiple applications.
Participate in working groups and configuration control boards to align security efforts with broader HRIT consolidation goals.
Contribute to the Target State Roadmap, providing input on software security architecture and contingency planning.
Engage with clients regarding system requirements, interface specifications, and design documentation for HRIT modules.
Support deliverable refinement through peer reviews and stakeholder collaboration.
Support change management, incident resolution, and continual service improvement to resolve functional system issues.
Provide technical issue resolution and communicate complex security concepts clearly to non-technical audiences.
Demonstrate strong communication, coordination, and client relationship skills during regular engagements.
Supporting the integration of HSPD-12 authentication into enterprise applications, including support for Entra ID (formerly Azure Active Directory) as a federated identity provider.

Skills

Over six years of experience in information security, preferably in ISSO or similar roles.
Skilled in preparing and managing Federal security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs).
Proven experience supporting federal government projects.
Demonstrated knowledge of GRC processes and their application in secure system development and compliance.
Active Public Trust
Deep understanding of information security principles, NIST Special Publications, and federal compliance frameworks relevant to Human Capital Management (HCM) systems.
Proven experience updating and maintaining system security documentation, including support for Authorization to Operate (ATO) processes.
Skilled in identifying security risks and developing practical mitigation strategies across diverse technical environments.
Demonstrated expertise in Governance, Risk, and Compliance (GRC), backed by a current privileged user certification (e.g., Security+ CE, CAP, CISSP, or equivalent).
Strong communication skills with the ability to convey complex security concepts to both technical and non-technical audiences.
Adept at interpreting and applying technical standards, contributing to enterprise platform roadmaps and integrated module planning.
Capable of working independently, managing tasks efficiently, and meeting deadlines with minimal oversight.
Advanced problem-solving abilities to identify process gaps and recommend best-practice solutions.
Experience with enterprise platforms including Archer, PeopleSoft, Workday, Oracle Fusion, Power BI, JIRA, ServiceNow, and USA Staffing systems.
Ability to support both as-is and to-be enterprise architecture, contributing to scalable and secure system design.
Proficiency in Microsoft Office Suite tools such as Excel, Word, Visio, and MS Project for documentation, planning, and analysis.
Strong time management and prioritization skills to optimize productivity and consistently meet deadlines.
Working knowledge of Section 508 Compliance standards.

Education Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field.

Benefits

Health, dental and vision insurance
401K with company matching
Flexible spending accounts
Paid holidays
Three weeks paid time off

Company Overview

Koniag was incorporated on June 23, 1972, to manage the land and financial assets on behalf of the corporation. It was founded in 1972, and is headquartered in Kodiak, Alaska, USA, with a workforce of 1001-5000 employees. Its website is https://www.koniag.com.

[Remote] Security Specialist, Mid-Level (REMOTE)

Job Type