Tetrad Digital Integrity LLC
Arlington, Virginia
Job Description Job Description Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. TDI is seeking a Firewall Engineer to support the Compartmented Enterprise Services Office (CESO) Task Order for the GIG Service Management - Operations II (GSM-O II) contract. We are looking for a professional with hands-on engineering and testing experience in virtualized and cloud environments. A skilled engineer knowledgeable and experienced in developing and implementing Firewall/Networking Security Solutions. With the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure information sharing to the community, into a more mature service offering to meet the DoD and IC community. The goal will be to manage the commercial cloud migration and fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service catalog for Defense Working Capital Fund (DWCF) Model. This position is onsite 5 days/week in Arlington, VA and requires an active TS/SCI clearance. RESPONSIBILITIES: Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers Provide Tier 3 support to members of the operations network administrations. Maintain all HW and SW components at vendor supported levels. Support mission-critical Continuity of Operations (COOP). Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements. Support the creation of network device performance and traffic utilization monthly reports. Develop and/or participate in After Action Reports (AARs) Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture. Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. Evaluate current technologies and processes associated with DISA CESO to identify gaps. Provide requirements and strategies for future cybersecurity operations. Active participant in meetings with DISA CESO and mission partner working groups. Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. QUALIFICATIONS: Bachelor's degree and 8+ years of directly relevant experience. Additionall experience may be considered in lieu of degree. 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles. Strong knowledge of Palo Alto concepts and best practices: Panorama Installation, HA Config, Template and Template Stacks Panorama Policy creation and push to group of Firewalls and Verify Push Palo Alto Route configuration, IPSec Site to Site VPN Config and Troubleshooting Palo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA Experience working in a high op-temp, Top Secret environment. 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) PAY RANGE: The anticipated salary range for this position is $115,000 - $125,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range. TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. "TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws." Powered by JazzHR K1XH2D1aKL
Job Description Job Description Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. TDI is seeking a Firewall Engineer to support the Compartmented Enterprise Services Office (CESO) Task Order for the GIG Service Management - Operations II (GSM-O II) contract. We are looking for a professional with hands-on engineering and testing experience in virtualized and cloud environments. A skilled engineer knowledgeable and experienced in developing and implementing Firewall/Networking Security Solutions. With the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure information sharing to the community, into a more mature service offering to meet the DoD and IC community. The goal will be to manage the commercial cloud migration and fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service catalog for Defense Working Capital Fund (DWCF) Model. This position is onsite 5 days/week in Arlington, VA and requires an active TS/SCI clearance. RESPONSIBILITIES: Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers Provide Tier 3 support to members of the operations network administrations. Maintain all HW and SW components at vendor supported levels. Support mission-critical Continuity of Operations (COOP). Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements. Support the creation of network device performance and traffic utilization monthly reports. Develop and/or participate in After Action Reports (AARs) Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture. Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. Evaluate current technologies and processes associated with DISA CESO to identify gaps. Provide requirements and strategies for future cybersecurity operations. Active participant in meetings with DISA CESO and mission partner working groups. Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. QUALIFICATIONS: Bachelor's degree and 8+ years of directly relevant experience. Additionall experience may be considered in lieu of degree. 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles. Strong knowledge of Palo Alto concepts and best practices: Panorama Installation, HA Config, Template and Template Stacks Panorama Policy creation and push to group of Firewalls and Verify Push Palo Alto Route configuration, IPSec Site to Site VPN Config and Troubleshooting Palo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA Experience working in a high op-temp, Top Secret environment. 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) PAY RANGE: The anticipated salary range for this position is $115,000 - $125,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range. TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. "TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws." Powered by JazzHR K1XH2D1aKL
Tetrad Digital Integrity LLC
Washington, Washington DC
Job Description Job Description Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. Join TDI as we stand up a brand-new Agile development team at the forefront of federal IT modernization, delivering real digital transformation where it matters most. This is a rare ground-floor opportunity to architect, build, and integrate cutting-edge infrastructure solutions in support of some of our nation's most sensitive and critical missions. The Configuration Manager will ensure baseline control, deployment coordination, and release governance across a complex environment. This role blends hands on technical understanding with strong process leadership to coordinate delivery across engineering, DevOps, test, cyber, infrastructure, operations, product management, customer stakeholders, and partner teams. This is a fully onsite opportunity requiring a daily commute to the Washington, DC area. An active TS/SCI security clearance is required. RESPONSIBILITIES: Lead end to end configuration management across all environments (dev through IL5/IL6 production). Own CM plans, release procedures, baseline controls, governance models, and change workflows. Manage release calendars, cadences, readiness criteria, deployment windows, cutover and rollback planning, and post release validation. Coordinate release planning and execution across engineering, DevOps, cloud, data, test, cyber, IA, operations, network automation, service management, and customer teams. Facilitate release readiness reviews, configuration control boards, go/no go reviews, and retrospectives. Ensure release packages are complete, reviewed, documented, traceable, and approved (code, infrastructure changes, configs, test evidence, security scans, deployment instructions, rollback plans, release notes). Maintain traceability across requirements, defects, risks, and changes using Jira, Confluence, Bitbucket, and associated CI/CD tools. Manage configuration control for software, scripts, data pipelines, dashboards, integrations, IaC, automation workflows, interfaces, COTS/FOSS components, and runbooks. Maintain environment baselines for non prod, simulators, test environments, IL5/IL6 targets, and operational systems. Partner with DevOps to ensure CI/CD pipelines support controlled promotion with proper versioning, approval gates, automated tests, and artifact retention. Coordinate DoD aligned security requirements, STIG configurations, vulnerability remediation, privileged access controls, and audit evidence. Manage release impacts across mission critical capabilities (event processing, monitoring, cyber, automation, analytics, integrations). Oversee release and configuration coordination for AWS IL5/IL6 platforms and tools such as Elastic/Kibana, Kafka, Logstash, Databricks, ServiceNow, Watson AIOps, Jira, Confluence, Bitbucket, and network/cyber data sources. Identify and manage release risks, dependencies, blockers, environment constraints, and coordination gaps. Provide timely status reporting on scope, readiness, risks, defects, deployment progress, and outcomes. Develop release dashboards, metrics, decision briefs, and health indicators. Support audits, customer reviews, engineering reviews, and readiness assessments through accurate CM records and release evidence. Drive continuous improvement of CM and release processes. Provide CM and release training, mentoring, and guidance across engineering and operations teams. Coordinate with external partners and adjacent systems on integration planning, data dependencies, release alignment, and interoperability. QUALIFICATIONS: Active DoD TS/SCI security clearance. Ability to pass additional customer suitability screening(s) prior to start. Current Security+ or equivalent/higher. Bachelor's degree with 8+ years of relevant experience, or equivalent experience. Experience leading or supporting configuration management (CM), change management, deployment coordination, or baseline management for complex cloud, software, or mission systems, including developing CM/release plans, change control processes, deployment/rollback plans, and release documentation. Demonstrated experience leading cross-functional release planning, readiness, approval, deployment, and validation across multiple environments. Experience with Agile/DevOps workflows and tools, including Jira, Confluence, Bitbucket/Git, and related traceability and versioning tools. Familiarity with CI/CD, artifact management, branching strategies, automated testing, and promotion pipelines. Ability to understand complex systems and coordinate dependencies, risks, impacts, and stakeholder decisions. Strong communication and organizational skills, with the ability to manage multiple releases, anticipate issues, close actions, resolve gaps, and maintain discipline in fast-paced environments. PREFERRED QUALIFICATIONS: Experience with DoD network or cyber operations, including AWS/AWS GovCloud and IL5/IL6 environments. Experience supporting releases for data pipelines, analytics, observability, monitoring, automation, or service-management tools, including configuration management for IaC, COTS/FOSS, security configurations, APIs, dashboards, schemas, and deployment manifests. Experience with ServiceNow ITSM and change processes, including facilitating CCBs, CABs, and readiness or approval reviews. Experience supporting compliance, STIGs, vulnerability remediation, security scan evidence, or DoD cyber processes. PAY RANGE: The anticipated salary range for this position is $130,000 - $145,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range. TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. "TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws." Powered by JazzHR Z3pjx6EUEc
Job Description Job Description Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. Join TDI as we stand up a brand-new Agile development team at the forefront of federal IT modernization, delivering real digital transformation where it matters most. This is a rare ground-floor opportunity to architect, build, and integrate cutting-edge infrastructure solutions in support of some of our nation's most sensitive and critical missions. The Configuration Manager will ensure baseline control, deployment coordination, and release governance across a complex environment. This role blends hands on technical understanding with strong process leadership to coordinate delivery across engineering, DevOps, test, cyber, infrastructure, operations, product management, customer stakeholders, and partner teams. This is a fully onsite opportunity requiring a daily commute to the Washington, DC area. An active TS/SCI security clearance is required. RESPONSIBILITIES: Lead end to end configuration management across all environments (dev through IL5/IL6 production). Own CM plans, release procedures, baseline controls, governance models, and change workflows. Manage release calendars, cadences, readiness criteria, deployment windows, cutover and rollback planning, and post release validation. Coordinate release planning and execution across engineering, DevOps, cloud, data, test, cyber, IA, operations, network automation, service management, and customer teams. Facilitate release readiness reviews, configuration control boards, go/no go reviews, and retrospectives. Ensure release packages are complete, reviewed, documented, traceable, and approved (code, infrastructure changes, configs, test evidence, security scans, deployment instructions, rollback plans, release notes). Maintain traceability across requirements, defects, risks, and changes using Jira, Confluence, Bitbucket, and associated CI/CD tools. Manage configuration control for software, scripts, data pipelines, dashboards, integrations, IaC, automation workflows, interfaces, COTS/FOSS components, and runbooks. Maintain environment baselines for non prod, simulators, test environments, IL5/IL6 targets, and operational systems. Partner with DevOps to ensure CI/CD pipelines support controlled promotion with proper versioning, approval gates, automated tests, and artifact retention. Coordinate DoD aligned security requirements, STIG configurations, vulnerability remediation, privileged access controls, and audit evidence. Manage release impacts across mission critical capabilities (event processing, monitoring, cyber, automation, analytics, integrations). Oversee release and configuration coordination for AWS IL5/IL6 platforms and tools such as Elastic/Kibana, Kafka, Logstash, Databricks, ServiceNow, Watson AIOps, Jira, Confluence, Bitbucket, and network/cyber data sources. Identify and manage release risks, dependencies, blockers, environment constraints, and coordination gaps. Provide timely status reporting on scope, readiness, risks, defects, deployment progress, and outcomes. Develop release dashboards, metrics, decision briefs, and health indicators. Support audits, customer reviews, engineering reviews, and readiness assessments through accurate CM records and release evidence. Drive continuous improvement of CM and release processes. Provide CM and release training, mentoring, and guidance across engineering and operations teams. Coordinate with external partners and adjacent systems on integration planning, data dependencies, release alignment, and interoperability. QUALIFICATIONS: Active DoD TS/SCI security clearance. Ability to pass additional customer suitability screening(s) prior to start. Current Security+ or equivalent/higher. Bachelor's degree with 8+ years of relevant experience, or equivalent experience. Experience leading or supporting configuration management (CM), change management, deployment coordination, or baseline management for complex cloud, software, or mission systems, including developing CM/release plans, change control processes, deployment/rollback plans, and release documentation. Demonstrated experience leading cross-functional release planning, readiness, approval, deployment, and validation across multiple environments. Experience with Agile/DevOps workflows and tools, including Jira, Confluence, Bitbucket/Git, and related traceability and versioning tools. Familiarity with CI/CD, artifact management, branching strategies, automated testing, and promotion pipelines. Ability to understand complex systems and coordinate dependencies, risks, impacts, and stakeholder decisions. Strong communication and organizational skills, with the ability to manage multiple releases, anticipate issues, close actions, resolve gaps, and maintain discipline in fast-paced environments. PREFERRED QUALIFICATIONS: Experience with DoD network or cyber operations, including AWS/AWS GovCloud and IL5/IL6 environments. Experience supporting releases for data pipelines, analytics, observability, monitoring, automation, or service-management tools, including configuration management for IaC, COTS/FOSS, security configurations, APIs, dashboards, schemas, and deployment manifests. Experience with ServiceNow ITSM and change processes, including facilitating CCBs, CABs, and readiness or approval reviews. Experience supporting compliance, STIGs, vulnerability remediation, security scan evidence, or DoD cyber processes. PAY RANGE: The anticipated salary range for this position is $130,000 - $145,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range. TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. "TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws." Powered by JazzHR Z3pjx6EUEc