Systems Developer

• 416AAnalyze design constraints, analyze trade-offs and security design, and consider lifecycle support.Additional
• 431ABuild, assess, and modify product prototypes using working models or theoretical models.Additional
• 494Design and develop cybersecurity or cybersecurity-enabled products.Additional
• 500BDesign hardware, operating systems, or software applications to adequately address requirements.Core
• 501Design or integrate appropriate data backup capabilities into overall system designs, and ensure appropriate technical and procedural processes exist for secure system backups and protected storage of backup data.Additional
• 503ADesign to security requirements to ensure requirements are met for all systems and/or applications.Additional
• 516ADevelop testing and validation procedures and documentation.Additional
• 527Develop architectures or system components consistent with technical specifications.Additional
• 530ADevelop detailed design documentation for component and interface specifications to support system design and development.Core
• 531Develop Disaster Recovery and Continuity of Operations plans for systems under development and ensure testing prior to systems entering a production environment.Additional
• 542BDevelop risk mitigation strategies and cybersecurity countermeasures to address cost, performance, and security risks and to resolve vulnerabilities and recommend security changes to system or system components as needed.Additional
• 602Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.Additional
• 626AIdentify components or elements, allocate comprehensive functional components to include security functions, and describe the relationships between the elements.Additional
• 630Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find work-arounds for communication protocols that are not interoperable).Additional
• 632Identify and prioritize essential system functions or sub-systems required to support essential capabilities or business functions for restoration or recovery after a system failure or during a system recovery event based on overall system requirements for continuity and availability.Additional
• 648Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure recommended products are in compliance with organization's evaluation and validation requirements.Additional
• 659AImplement designs for new or existing system(s).Core
• 766APerform security reviews and identify security gaps in architecture.Additional
• 770Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.Additional
• 803Provide guidelines for implementing developed systems to customers or installation teams.Additional
• 808BProvide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials.Additional
• 809Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).Additional
• 850Store, retrieve, and manipulate data for analysis of system capabilities and requirements.Additional
• 856AProvide support to test and evaluation activities.Additional
• 860ATrace system requirements to design components and perform gap analysis.Additional
• 874Utilize models and simulations to analyze or predict system performance under different operating conditions.Additional
• 877AVerify stability, interoperability, portability, and/or scalability of system architecture.Additional
• 998AAnalyze user needs and requirements to plan and conduct system development.Additional
• 999ADevelop designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations).Additional
• 999CCollaborate on cybersecurity professionals to implement cybersecurity into designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).Core
• 1000AEnsure design and development activities are properly documented (providing a functional description of implementation) and updated as necessary.Core
• 1152AImplement and integrate systems engineering methodologies into development environment.Additional
• 2354Employ configuration management processes.Additional
• 5110Conduct a market analysis to identify, assess, and recommend commercial, GOTS, and open source products for use within a system and ensure recommended products are in compliance with organization's evaluation and validation requirements.Additional
• 5190Design and develop system administration and management functionality for privileged access users.Additional
• 5200ADesign, implement, assess, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.Additional
• 5400Incorporates risk-driven systems maintenance updates process to address system deficiencies (periodically and out of cycle).Additional

• 8AKnowledge of access authentication methods.Additional
• 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
• 25BKnowledge of encryption algorithms.Additional
• 27AKnowledge of cryptology.Additional
• 34Knowledge of database systems.Additional
• 38Knowledge of organization's enterprise information security architecture system.Core
• 42Knowledge of electrical engineering as applied to computer architecture, including circuit boards, processors, chips, and associated computer hardware.Additional
• 43AKnowledge of embedded systems.Additional
• 46Knowledge of fault tolerance.Additional
• 51Knowledge of how system components are installed, integrated, and optimized.Additional
• 52Knowledge of human-computer interaction principles.Additional
• 63AKnowledge of information systems and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).Core
• 64Knowledge of information security systems engineering principles.Core
• 65AKnowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression).Additional
• 70Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).Core
• 72Knowledge of local area and wide area networking principles and concepts including bandwidth management.Additional
• 75Knowledge of mathematics, including logarithms, trigonometry, linear algebra, calculus, and statistics.Additional
• 78Knowledge of microprocessors.Additional
• 79Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).Additional
• 81AKnowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.Additional
• 82AKnowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.Additional
• 90Knowledge of operating systems.Additional
• 92Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).Additional
• 94Knowledge of parallel and distributed computing concepts.Additional
• 98Knowledge of policy-based and risk adaptive access controls.Additional
• 100Knowledge of Privacy Impact Assessments.Additional
• 101Knowledge of process engineering concepts.Additional
• 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
• 109Knowledge of secure configuration management techniques.Core
• 110AKnowledge of security management.Additional
• 118Knowledge of software development models (e.g., Waterfall Model, Spiral Model).Core
• 119Knowledge of software engineering.Core
• 121Knowledge of structured analysis principles and methods.Additional
• 124BKnowledge of system design tools, methods, and techniques.Core
• 126Knowledge of system software and organizational design standards, policies, and authorized approaches (e.g., International Organization for Standardization [ISO] guidelines) relating to system design.Additional
• 129AKnowledge of system life cycle management principles.Core
• 130Knowledge of systems testing and evaluation methods.Core
• 133Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).Additional
• 144Knowledge of the systems engineering process.Core
• 177AKnowledge of countermeasure design for identified security risks.Additional
• 181BKnowledge of how detection technologies are used to detect host and network-based intrusions.Additional
• 191AKnowledge of development and application of security system access controls.Core
• 904AKnowledge of interpreted and compiled computer languages.Additional
• 1034AKnowledge of Personally Identifiable Information (PII) data security standards.Additional
• 1034BKnowledge of Payment Card Industry (PCI) data security standards.Additional
• 1034CKnowledge of Personal Health Information (PHI) data security standards.Additional
• 1037Knowledge of information technology (IT) supply chain security and risk management policies, requirements, and procedures.Additional
• 1038Knowledge of local specialized system requirements (e.g., critical infrastructure systems that may not use standard information technology [IT]) for safety, performance, and reliability.Additional
• 1073Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.Additional
• 1133Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).Additional
• 1141AKnowledge of an organization's information classification program and procedures for information compromise.Additional
• 1142Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).Additional
• 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
• 1158* Knowledge of cybersecurity principles.Core
• 1159* Knowledge of cyber threats and vulnerabilities.Core
• 3153Knowledge of circuit analysis.Additional
• 3307Knowledge of cybersecurity-enabled software products.Additional
• 3642Knowledge of various types of computer architectures.Core
• 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
• 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
• 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
• 7111* Knowledge of Zero Trust Security Model Principles.Core

• 173ASkill in integrating and applying policies that meet system security objectives.Additional
• 173BSkill in creating policies that enable systems to meet performance objectives (e.g., traffic routing, SLA's, CPU specifications).Additional
• 177Skill in designing countermeasures to identified security risks.Additional
• 179Skill in designing security controls based on cybersecurity principles and tenets.Additional
• 180Skill in designing the integration of hardware and software solutions.Additional
• 197Skill in discerning the protection needs (i.e., security controls) of information systems and networks.Additional
• 199Skill in evaluating the adequacy of security designs.Additional
• 224ASkill in the use of design modeling (e.g., unified modeling language).Additional
• 238ASkill in writing code in a currently supported programming language (e.g., Java, C++).Additional
• 1002BSkill in conducting reviews of technical systems.Additional
• 1073ASkill in network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.Additional
• 3687Skill in applying security controls.Additional
• 6945Skill in migrating workloads to, from, and among the different cloud computing service models.Additional

The DCWF Tool lists no abilities for this work role.