Information Technology Specialist (Security)

Information Technology Specialist (Security)
NATIONAL AERONAUTICS AND SPACE ADMINISTRATION
Headquarters, NASA
Office of Inspector General (OIG), Office of Management (OM)
Apply
Print
Share
Save
Summary
This job is open to
Duties
Requirements
How you will be evaluated
Required documents
How to apply
Summary

This NASA OIG IT Security Specialist oversees application software, networks, and enterprise architecture. The role drives risk assessments, policy development, disaster recovery, and executive briefings to secure critical mission data.

Learn more about this agency
This job is open to

Internal to an agency
Current federal employees of the hiring agency that posted the job announcement.
Clarification from the agency

You may apply if you are a current NASA OIG employee with career/career conditional tenure in the Competitive Service (You must submit an SF-50 that reflects current employment with NASA OIG and career/career-conditional tenure (Tenure field is 1 or 2); AND status in the competitive service (Position Occupied field is 1); VRA, Schedule A for individuals with disabilities; NASA OIG term employees eligible under NASA OIG Term Conversation authority, and CTAP/RPL employees.

Videos
Duties

Plan, schedule, execute, and validate patching across servers, workstations, and applications to ensure timely remediation of KEVs and other critical vulnerabilities.
Coordinate and execute vulnerability remediation across servers and endpoints using tools such as BigFix, Nessus, and SentinelOne to resolve security findings.
Create, modify, and remove system access; manage authentication controls; conduct account audits; support MFA and PIV initiatives; and maintain secure permission structures.
Manage user accounts, permissions, and access to sensitive systems and data, ensuring proper authentication; remove access for terminated personnel; and maintain audit records.
Design and maintain secure network and AWS GovCloud architectures, including firewalls, VPNs, segmentation, logging, high availability, disaster recovery, implement cloud security controls, and secure integration of new technologies.
Lead evaluations of information system security features; develop certification and accreditation plans; document deficiencies; track corrective actions; and recommend improvements.
Assess IT systems for vulnerabilities, track remediation of KEVs, and maintain continuous monitoring activities to ensure compliance with federal and agency security requirements.
Provide expert advice and guidance to leadership, IT staff, and stakeholders on cybersecurity, IT procurements, and coordination with internal departments and external agencies.
Requirements

Conditions of employment
This position is open to U.S. citizens, nationals or those who owe allegiance to the U.S.
Current Federal employees must meet qualifications, time in grade, and 90 days after competitive appointment requirements by the closing date of the announcement.
This position requires the incumbent to obtain and maintain a TOP SECRET security clearance.
Must pass a pre-employment drug screening and background investigation. This position will be subject to random drug testing after the applicant is hired.
If selected, you will be required to complete a financial disclosure statement.
Qualifications

Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work.

To qualify for GS-14, you must have one year of directly related specialized experience equivalent to the GS-13 level:

Remediates enterprise server vulnerabilities across cloud and on-premises environments by applying patches, hardening Linux and Windows systems, updating certificates, and resolving KEV, SOC, and POA&M findings using tools such as BigFix, AWS, and EDW services.
Configures and supports AWS cloud services, including EC2, Instance Scheduler, GuardDuty, FSx, Airflow, and virtual desktop solutions; upgrades production and development environments; and troubleshoots major application outages through root cause analysis and service restoration.
Administers access control and security workflows by managing user permissions, implementing MFA, coordinating system access changes, and addressing SSP and POA&M security requirements.
Evaluates networking and cloud-related procurements by analyzing technical requirements, licensing, subscription costs, and compatibility to support secure and efficient enterprise IT operations.
AND

IF you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the four competencies listed below:
Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public,