Information Technology Manager - Mission Environments

Master's degree + minimum 6 years of relevant experience; or Bachelor's degree in a related specialized area or equivalent relevant experience + minimum 8 years of relevant experience.

CLEARANCE REQUIREMENTS:
Department of Defense Secret security clearance is required at time of hire. Must be able to obtain a TS/SCI security clearance. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.

The IT Manager – Secure Mission Environments is responsible for planning, implementing, and maintaining secure IT systems that operate within regulated defense and government contracting environments. The role bridges day-to-day IT operations with compliance program obligations under CMMC, NIST SP 800-171, RMF, and CUI handling requirements. The incumbent will serve as the primary point of accountability for software asset management, system security, and regulatory readiness across enclave environments.

IT Operations & Software Asset Management

• Direct personnel management (4 FTEs)
• Timecard management & direct charge compliance
• Coordinate with vendors and internal stakeholders for enclave management duties
• Hands-on System Administration duties as needed to cover for vacancies, PTO, etc.
• CUI & Classified Enclave Oversight

CMMC & NIST SP 800-171 Compliance

• Maintain and continuously improve the System Security Plan (SSP) in alignment with NIST SP 800-171 Rev 2/3 and CMMC Level 2/3 practices
• Track and remediate Plan of Action & Milestones (POA&M) items, ensuring timely closure prior to assessment windows
• Coordinate with the Assessor Organization (C3PAO or government assessor) for CMMC assessments; prepare evidence packages and conduct readiness reviews
• Implement access control, media protection, audit & accountability, and configuration management controls per CMMC practice families
• Conduct periodic self-assessments and gap analyses; maintain the SPRS score submission

CUI Program Management

• Define, document, and enforce CUI category boundaries across all IT systems, shared drives, collaboration platforms, and cloud environments
• Implement and audit CUI marking, handling, transmission, and destruction procedures in accordance with 32 CFR Part 2002 and NIST SP 800-171
• Train staff on CUI identification and handling requirements; track training completion
• Investigate and report CUI spillage incidents; coordinate with the FSO and program security officers as required
• Maintain a CUI registry and ensure systems processing CUI are covered by active ATOs or equivalent authorization

Risk Management Framework (RMF)

• Lead or support RMF authorization activities (categorization, selection, implementation, assessment, authorization, monitoring) for IT systems operating under DoD/Federal oversight
• Maintain security authorization packages (SSP, SAR, POA&M, ATO artifacts) and ensure continuous monitoring obligations are met
• Coordinate with ISSOs, ISSMs, and AOs to manage system risk posture and residual risk acceptance decisions
• Integrate RMF activities with the broader corporate IT roadmap
• Produce and deliver Security Assessment Reports (SARs) and Control Implementation Summaries (CIS) for government review

IT Security & Infrastructure

• Manage endpoint security, patch management, and vulnerability remediation across classified and unclassified enterprise environments
• Oversee identity and access management (IAM) policies, including MFA, least-privilege enforcement, and periodic access reviews
• Administer network segmentation between CUI-scoped and non-CUI environments; enforce boundary protection controls
• Coordinate incident response activities; maintain and test the Incident Response Plan (IRP)
• Evaluate and implement security tools, SIEM integrations, and automated compliance monitoring capabilities

Stakeholder Engagement & Leadership

• Act as the primary IT compliance liaison to DCSA, government program offices, prime contractors, and corporate leadership
• Brief leadership on compliance posture, risk exposure, and program impacts on a regular cadence
• Lead local cross-functional coordination between IT, Engineering, Finance, Legal, and Program Management on compliance-impacting decisions
• Mentor junior IT staff on security practices, tool administration, and compliance requirements

#CJ3

General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team!

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans