Product Manager - Federal Certification Analyst

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. 
 

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Federal Certification Analyst, F5 

F5 is seeking a Federal Certification Analyst. The right candidate will have experience working with one or more external Federal Certification FIPS (Federal Information Processing Standards) - CC (Common Criteria), DodIN APL (Department of Defense Approved Product List), Consultants, Evaluation Labs, Government Schemas, and Certifying Bodies as well as product development teams.

 This role will provide support for series of Federal Certification Compliance Audit and Assessment efforts for FIPS, Common Criteria; DodIN APL, CsFC (Commercial Solutions for Classified), NIAP PCL (National Information Assurance Partnership Products Compliance List), in addition to interfacing with third-party auditors, Agency Sponsors, internal auditors, consultants, advisors and certifying bodies (DISA, and Common Criteria Certifiers).  This Analyst will serve as the point of contact for feedback from certifying bodies, ensuring timely feedback and quick remediation of issues wherever possible, and ensuring all stakeholders are kept up to date, including third-party schedules for certification specific milestones and deliverables.

The ideal candidate will have strong experience collaborating with product development teams and work closely with product management, including participation in certification-related meetings. They must have experience supporting third party test efforts remediation by creating JIRA tickets and driving the process to close, ensuring certification specific documentation is complete, including any necessary documentation reviews and providing feedback to necessary parties. Keep all stakeholders in the loop. Responsible for all SOW's (Statement of Work), and government CRADA’s (Cooperative Research and Development Agreement) onsite/offsite testing, testing at DoD facilities, and ordering and shipping equipment for upcoming evaluations and audits.

 ­­­

Job Duties and Responsibilities: 

·       Provide Support for Product Management Certifications for Software and Hardware.

·       Align with Procurement, Legal and security for third party onboarding activities for new third parties, or updates to current third parties.

·       Responsible for balancing third party Evaluation rotation (logically) to avoid single threading and unnecessary bottlenecks with third parties causing unnecessary delays to certification.

·       Third Party Gap Analysis Management (Schedule, Transition Official Reports into JIRA tickets).

·       Actively participate in all onsite evaluations.

·       Responsible for budgeting/ordering/shipping of physical equipment and tools to labs or onsite for timely testing prior to third party testing

·       Collaborate closely with PM (Product Management) / PD (Product Development) / Certification Architects across certification efforts. 

·       Track Certification Specific Status.

·       Open initiatives for issues opened by third parties which are gating certification.

·       The right candidate will have experience with business finances, such as invoice approval, tracking milestones against payments, and reconciliation.

·       Responsibility for maintaining the F5 Certification public-facing dashboard.

·       Create DISA Plan of Action and Mitigation (POA&M) Management for DodIN APL, drive third party approval and open Bugs for remediation (JIRA tickets) including Executive Level Docs.

·       Manage end to end process for DodIN APL, attending the Initial Contact Meetings, Briefings, and Readouts. 

·       Manage Product Management Certification Quarterly and Fiscal Budgets.

·       Drive 508 / VPAT (Voluntary Product Assessment Template) Compliance efforts for hardware and software to ensure compliance with Federal Law.

·       Responsible for identifying, building relationships and onboarding third party Evaluation labs for logical rotation to create options and minimize single threading and unnecessary bottlenecks for evaluations parties causing unnecessary delays to certification.

·       Own the Configuration Management of all Certification specific documents ensuring version and level control.

·       Create and Monitor JIRA and Confluence trackers and Dashboards Hardware and Software for Certifications.

·       Provide Support for documenting quarterly sales results for Ceertifications for Hardware and Software.

·       Open JIRA initiatives as required for the support of Federal Certifications

·       Manage contracts for third party advisors, consultants, and assessors ensuring business critical documentation is completed in a timely manner. 

·       Responsible for identifying, building relationships and onboarding third party Evaluation labs for logical rotation to create options and minimize single threading and unnecessary bottlenecks for evaluations parties causing unnecessary delays to certification.

·       Manage relationship with the DoDIN APL Consultant, ensuring shipment of appliances for pre-testing and required documentation is provided.

·       Responsible for budgeting/ordering/shipping of physical equipment and tools to labs or onsite for timely testing prior to third party testing

·       Collaborate closely with PM (Product Management) / PD (Product Development) / Certification Architects across certification efforts. 

·       Track CVE (Common Vulnerability Exposures) scores in association with certified product versions.

·       Collaborate on Slide preparation for Certified Products Steering Committee.

·       The right candidate will have experience with business finances, such as invoice approval, tracking milestones against payments, and reconciliation.

·       Lead Verification and Validation prep efforts and POA&M processing for DodIN APL.

Skills and Qualifications: 

·       Minimum of bachelor’s in business or engineering or 2+ years’ direct experience working with Federal Certifications

• Previous experience managing third party relationships with Evaluation Labs.
• Experience with certification documentation deliverables.
• Experience with third party testing schedules.
• Practical experience working with Federal Certifications including stakeholder management.
• Willingness to learn/adapt to new certifications as required.

• Travel as needed.

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.

F5 maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, geographic locations, and market conditions, as well as to reflect F5’s differing products, industries, and lines of business. The pay range referenced is as of the time of the job posting and is subject to change.

You may also be offered incentive compensation, bonus, restricted stock units, and benefits. More details about F5’s benefits can be found at the following link: https://www.f5.com/company/careers/benefits. F5 reserves the right to change or terminate any benefit plan without notice. 

Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com).

Equal Employment Opportunity

It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination.  F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com.