H2 Performance Consulting is subject to the Vietnam Era Veteran's Readjustment Assistance Act as a Federal Contractor and is an Equal Opportunity/Affirmative Action Employer and strives to build a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status. Additionally, as mandated under Executive order 12989, H2 is required to verify employment eligibility of selected candidates through the Department of Labor’s - E-Verify.
H2 Performance Consulting (H2) is seeking a Package Submitting Office (PSO), Navy Qualified Validator (NQV). The Cloud PSO / NQV will be responsible for the below responsibilities supporting PEO Digital.
Package Submitting Office (PSO) is responsible for completing PSO Triage reviews for Risk Management Framework (RMF) Step 2 and Step 5. Tasks include: enforcing standardization, performing quality assurance reviews, supporting checkpoint meetings (when required), and submitting authorization packages to the Navy Authoring Official (NAO) for authorization decision in alignment with the latest RMF Process Guide (RPG).
Navy Qualified Validator (NQV) as an independent representative of the Security Control Assessor (SCA), is responsible for completed Validator reviews for RMF Step 4 in alignment with the RPG and SCA Risk Assessment Guide.
This position will primarily support Cloud authorizations under PEO Digital but may also support NMCI and ONE-NET type authorization, when needed.
The Navy Qualified Validator responsibilities will include:
· Perform quality assurance reviews for RMF Steps 2, 4, and 5 in alignment with the Navy RPG and SCA RAG.
· Must have experience with Navy Cloud authorizations including but not limited to the DoD Cloud Computing SRG, Cloud Service Models, Impact Levels, DISA Provisional Authorizations, FedRamp, and Inheritance.
· Perform all coordinating functions with the Information System Security Engineers (ISSE), Information System Security Manager (ISSM), PSO, SCA Liaisons and the NAO for Security Authorization Package review, processing requirements and issues.
· Works closely with the ISSE to execute vulnerability testing (ACAS, STIGS, etc.) and recommend remediations and/or mitigation strategies.
· Review control assessments to assess the current state. Ensure enough evidence is provided to support control compliance.
· Provide technical expertise for cloud technologies and guide the team on specific cloud requirements.
· Experienced in using Enterprise Mission Assurance Support Service (eMASS) for authorization reviews.
Required Qualifications:
· Secret Clearance Required
· Bachelor’s Degree or relevant experience
· Minimum 3 years applied Department of Navy cybersecurity, Assessment and Authorization (A&A) experience
· Navy Qualified Validator (NQV) certification in good standing.
Qualified candidates may submit their resume to the career section of our company website at http://www.h2pc.com. All resumes will be reviewed within 5 business days and those candidates we wish to further in the application process will be contacted via email/phone to schedule initial phone screens.