Information Assurance Specialist

About This Role

An Information Assurance Specialist manages security compliance, architectural safeguards, and systems hardening across enterprise environments. This role involves analyzing NIST SP 800-53 Rev 5 and FedRAMP basic categorizations to manage shared security responsibilities with external providers. The ideal candidate will drive technical hardening initiatives by developing and implementing security baselines rooted in CIS Benchmarks, and will have deep technical proficiency in deploying security policies across on-premises and modern environments using Microsoft Group Policy Objects (GPOs) and Microsoft Intune.

Responsibilities

• Implement, manage, and enforce robust security baselines and benchmarks such as CIS Benchmarks and Azure Foundations across enterprise endpoints and server infrastructure
• Support and audit Active Directory Group Policy Objects (GPOs) to enforce least privilege, disable insecure legacy protocols, and harden on-premises Windows environments
• Translate traditional GPOs into modern cloud management frameworks using Microsoft Intune Settings Catalogs, Administrative Templates, and Endpoint Security configurations
• Align technical configuration baselines directly with overarching Information Assurance (IA) frameworks, ensuring that GPO and Intune policy maps cleanly to auditable compliance controls
• Identify, evaluate, and categorize security risks within organizational systems by analyzing technical configurations against established frameworks (such as NIST SP 800-30 or FedRAMP risk assessments)
• Guide stakeholders in determining and integrating baseline security requirements, advise on viability of alternative approaches
• Propose remediation/mitigating controls and recommendations to stakeholders and management to minimize risk
• Lead security team engagements to build and mature processes to produce written Standard Operating Procedures (SOP) with a focus on improvement to FERC’s Information Assurance processes, methodologies, and communication methods
• Other duties as assigned

Requirements

• Bachelor’s degree or equivalent work experience in related field
• Minimum of 3–5 years of experience aligning infrastructure with NIST SP 800-53 Rev 5 or FedRAMP security control frameworks
• Proven track record authoring and deploying hardening guidance using CIS Benchmarks including Azure Foundations
• Technical proficiency understanding and managing Microsoft Group Policy Objects (GPOs) and Microsoft Intune configuration policies
• Strong understanding of cloud networking architecture, including NSGs, VNet segmentation, Azure Firewall, WAF, and Private Link
• Strong understanding of Azure RBAC policies, configuring logging/monitoring solutions, and implementing data protection mechanisms
• Ability to articulate ideas to both technical and non-technical audiences through excellent written and oral communication skills