Information Assurance (IA) Security Administrator | Security Control Assessor

Location: San Antonio, TX

Clearance Required: Public Trust (ADP/IT-II); Tier 3 Investigation (NACLC)

Program Overview

The Defense Health Agency’s Domain and Directory Services Branch (DDSB) supports the global IT infrastructure that underpins medical readiness for the Army, Navy, and Air Force. This includes sustaining both on-premise and cloud-based environments serving over 200,000 users and 250,000 end-user devices across 250 sites worldwide. DDSB manages core identity, access, and directory services essential to mission-critical healthcare delivery within the Military Health System. Team members contribute to a broad range of IT operations and modernization efforts that directly impact service members, veterans, and their families. This is a high-impact environment supporting both peacetime healthcare and wartime readiness across the DoD medical enterprise.

Summary

IA Security Control Assessor will serve as a key cybersecurity compliance expert responsible for evaluating and validating DHA information systems against Risk Management Framework (RMF) requirements to support ongoing Authorization to Operate (ATO) efforts.

Key Responsibilities

• Conduct security control assessments (SCAs) using DoD RMF and NIST guidelines.
• Develop and maintain Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and supporting documentation.
• Provide expert analysis of control implementations and their effectiveness across DHA systems.
• Coordinate with Information Systems Security Managers (ISSMs), ISSOs, and system owners to track and close findings.
• Support Plan of Action and Milestones (POA&M) development and remediation efforts.

Qualifications

• Knowledge of NIST 800-53, DoDI 8510.01, and eMASS workflows.
• Experience in cybersecurity compliance and control assessment.

Education & Certification Requirements (per DoD 8140 Qualification Matrices)

1) Microsoft Certified: Azure Administrator Associate or Windows Server Hybrid Administrator Associate

2) Any of the following...

• Academic Education: Bachelor’s degree in information technology, Cybersecurity, or a related discipline.
• OR Baseline: GLSC or CISSP
• OR DoD/Military Training: A-150-1980 or A-150-1202 or A-150-1203 or A-150-1250 or WSS 011 or WSS 012