Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Senior Security Specialist with governance, risk, and compliance (GRC) expertise to lead Authority to Operate (ATO) work for a federal customer's new cloud services. You will guide customer cloud environments on AWS, Azure, Google Cloud, and Oracle Cloud through the NIST Risk Management Framework, from control mapping and System Security Plans to third-party assessment and continuous monitoring. You will work with cloud engineers, customer security teams, and Authorizing Officials. You will make sure every landing zone, pipeline, and shared service is built to meet NIST SP 800-53 Rev 5, FedRAMP, and customer security requirements, and that it stays compliant once in production. Key Responsibilities Lead ATO preparation for cloud services under NIST SP 800-37 (RMF), NIST SP 800-53 Rev 5, and FedRAMP Moderate/High processes. Develop and maintain System Security Plans, control implementation statements, Customer Responsibility Matrices, and CSP control-inheritance documentation. Coordinate with a Third-Party Assessment Organization (3PAO): support Security Assessment Plans and Reports (SAP/SAR), gather evidence, facilitate interviews, and respond to findings. Manage Plans of Action and Milestones (POA&Ms): track gaps, owners, and remediation dates in ServiceNow and help engineering teams close findings. Run continuous monitoring with CSP-native and third-party tools (AWS Security Hub, Microsoft Defender for Cloud, GCP Security Command Center, OCI Cloud Guard, Prisma Cloud) and produce monthly compliance reports. Prioritize vulnerabilities using CVSS, exploitability, and customer risk ratings. Review architectures, IaC templates, and CI/CD pipelines for alignment with Zero Trust (NIST SP 800-207), CIS Benchmarks, and customer security standards. Help develop incident response playbooks mapped to MITRE ATT&CK and take part in tabletop exercises. Brief customer security leadership and present security posture at monthly Security & Compliance reviews. Qualifications Required Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. At least 9 years of information security experience, including implementing and managing security controls and leading ATO efforts. Deep working knowledge of the NIST RMF (SP 800-37) and NIST SP 800-53 Rev 5 control families. Hands-on experience writing SSPs and managing SAP/SAR and POA&M processes with a 3PAO or agency assessor. Experience performing continuous security assessments and monitoring in cloud environments. Strong technical writing skills and the ability to brief senior government stakeholders. Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications CISSP, CISM, CGRC (formerly CAP), CRISC, or CCSP certification. Experience with FedRAMP Moderate or High authorizations for multi-cloud environments. Experience with OSCAL-based security documentation and GRC platforms (e.g., ServiceNow IRM/GRC, Xacta, eMASS). Familiarity with agency-specific security frameworks built on NIST SP 800-53. Experience with CSPM tools and Splunk-based security monitoring. Prior support of a civilian federal agency. Additional Information All your information will be kept confidential according to EEO guidelines.
11/06/2026
Full time
Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Senior Security Specialist with governance, risk, and compliance (GRC) expertise to lead Authority to Operate (ATO) work for a federal customer's new cloud services. You will guide customer cloud environments on AWS, Azure, Google Cloud, and Oracle Cloud through the NIST Risk Management Framework, from control mapping and System Security Plans to third-party assessment and continuous monitoring. You will work with cloud engineers, customer security teams, and Authorizing Officials. You will make sure every landing zone, pipeline, and shared service is built to meet NIST SP 800-53 Rev 5, FedRAMP, and customer security requirements, and that it stays compliant once in production. Key Responsibilities Lead ATO preparation for cloud services under NIST SP 800-37 (RMF), NIST SP 800-53 Rev 5, and FedRAMP Moderate/High processes. Develop and maintain System Security Plans, control implementation statements, Customer Responsibility Matrices, and CSP control-inheritance documentation. Coordinate with a Third-Party Assessment Organization (3PAO): support Security Assessment Plans and Reports (SAP/SAR), gather evidence, facilitate interviews, and respond to findings. Manage Plans of Action and Milestones (POA&Ms): track gaps, owners, and remediation dates in ServiceNow and help engineering teams close findings. Run continuous monitoring with CSP-native and third-party tools (AWS Security Hub, Microsoft Defender for Cloud, GCP Security Command Center, OCI Cloud Guard, Prisma Cloud) and produce monthly compliance reports. Prioritize vulnerabilities using CVSS, exploitability, and customer risk ratings. Review architectures, IaC templates, and CI/CD pipelines for alignment with Zero Trust (NIST SP 800-207), CIS Benchmarks, and customer security standards. Help develop incident response playbooks mapped to MITRE ATT&CK and take part in tabletop exercises. Brief customer security leadership and present security posture at monthly Security & Compliance reviews. Qualifications Required Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. At least 9 years of information security experience, including implementing and managing security controls and leading ATO efforts. Deep working knowledge of the NIST RMF (SP 800-37) and NIST SP 800-53 Rev 5 control families. Hands-on experience writing SSPs and managing SAP/SAR and POA&M processes with a 3PAO or agency assessor. Experience performing continuous security assessments and monitoring in cloud environments. Strong technical writing skills and the ability to brief senior government stakeholders. Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications CISSP, CISM, CGRC (formerly CAP), CRISC, or CCSP certification. Experience with FedRAMP Moderate or High authorizations for multi-cloud environments. Experience with OSCAL-based security documentation and GRC platforms (e.g., ServiceNow IRM/GRC, Xacta, eMASS). Familiarity with agency-specific security frameworks built on NIST SP 800-53. Experience with CSPM tools and Splunk-based security monitoring. Prior support of a civilian federal agency. Additional Information All your information will be kept confidential according to EEO guidelines.
Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description Position Summary: TechSur is seeking a Cybersecurity / cATO Lead to support secure software development, continuous monitoring, authorization artifacts, and operationalization of Continuous Authorization to Operate for the EXIM Online modernization program. This role will help embed security and compliance into DevSecOps pipelines, engineering workflows, runtime operations, and authorization decision support. Key Responsibilities Develop and maintain cATO roadmap materials, control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages. Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and continuous monitoring outputs. Support secure SDLC implementation aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices. Support ATO documentation, SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings. Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to maintain continuous authorization readiness. Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability. Qualifications Required Qualifications 5+ years of cybersecurity, compliance, risk management, or federal authorization experience. Export-Import Bank Cyber experience is REQUIRED. Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection. Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development. Ability to translate security and compliance requirements into practical engineering controls, pipeline evidence, and measurable risk reduction. Experience coordinating with ISSOs, security assessors, engineering teams, program managers, and Government authorization stakeholders. Experience supporting cATO or continuous authorization programs. Security+, CISSP, CISM, CAP, CGRC, AWS Security Specialty, or equivalent certification. Experience with federal cloud, Zero Trust, EO 14028, SSDF, software supply chain security, or automated evidence collection. Additional Information All your information will be kept confidential according to EEO guidelines.
11/06/2026
Full time
Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description Position Summary: TechSur is seeking a Cybersecurity / cATO Lead to support secure software development, continuous monitoring, authorization artifacts, and operationalization of Continuous Authorization to Operate for the EXIM Online modernization program. This role will help embed security and compliance into DevSecOps pipelines, engineering workflows, runtime operations, and authorization decision support. Key Responsibilities Develop and maintain cATO roadmap materials, control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages. Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and continuous monitoring outputs. Support secure SDLC implementation aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices. Support ATO documentation, SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings. Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to maintain continuous authorization readiness. Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability. Qualifications Required Qualifications 5+ years of cybersecurity, compliance, risk management, or federal authorization experience. Export-Import Bank Cyber experience is REQUIRED. Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection. Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development. Ability to translate security and compliance requirements into practical engineering controls, pipeline evidence, and measurable risk reduction. Experience coordinating with ISSOs, security assessors, engineering teams, program managers, and Government authorization stakeholders. Experience supporting cATO or continuous authorization programs. Security+, CISSP, CISM, CAP, CGRC, AWS Security Specialty, or equivalent certification. Experience with federal cloud, Zero Trust, EO 14028, SSDF, software supply chain security, or automated evidence collection. Additional Information All your information will be kept confidential according to EEO guidelines.
Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description Position Overview We are seeking an experienced Release Train Engineer (RTE) to lead SAFe implementation, coordinate Agile Release Train (ART) activities, and manage cross-functional project delivery. The ideal candidate will have experience in enterprise Agile transformation, project planning, risk management, stakeholder engagement, and delivery coordination, preferably in a government or federal environment. The RTE will serve as a servant leader and facilitator for the ART while applying project management best practices to ensure alignment with organizational goals, predictable delivery, effective resource utilization, and continuous improvement. Key Responsibilities Lead SAFe transformation initiatives, assess Agile maturity, and develop improvement plans to strengthen Lean-Agile adoption. Coach Scrum Masters, Product Owners, Agile teams, and leadership on SAFe principles, practices, and continuous improvement. Facilitate SAFe ceremonies, including PI Planning, ART Sync, Scrum of Scrums, System Demos, and Inspect & Adapt workshops. Coordinate multiple Agile teams, manage cross-team dependencies, remove impediments, and ensure alignment with ART objectives and delivery commitments. Partner with the Lean-Agile Center of Excellence (LACE) and organizational leaders to align SAFe practices with enterprise goals and governance. Mentor teams and reinforce SAFe framework compliance throughout the organization. Develop and maintain project plans, integrated schedules, release calendars, roadmaps, milestones, and delivery forecasts. Manage project scope, timelines, resources, risks, issues, dependencies, and change requests to support successful project execution. Monitor project progress, delivery metrics, and schedule variances; implement corrective actions and escalate risks as needed. Coordinate resource and capacity planning, and support budget tracking and cost reporting where applicable. Establish project governance, maintain RAID logs and project documentation, and provide regular status reports and executive updates. Collaborate with Product Management, Business Owners, project sponsors, and technical stakeholders to align priorities and manage expectations. Support compliance, governance, and contractual requirements, particularly in government or regulated environments. Drive continuous improvement, promote DevOps and continuous delivery practices, and improve delivery predictability and quality. Qualifications Qualifications Experience 10+ years of relevant experience in Agile delivery, Release Train Engineering, project management, or program coordination. Significant experience in SAFe implementation, enterprise Agile transformation, and coordinating multiple Agile teams. Experience in project planning, scheduling, risk management, resource coordination, stakeholder communication, and delivery reporting. Government, federal, or regulated-environment experience preferred. Certifications Required: SAFe Scrum Master (SSM) or equivalent relevant SAFe certification, such as SAFe Program Consultant (SPC). Preferred: Project Management Professional (PMP ) certification. SAFe Release Train Engineer (RTE) or other relevant SAFe certifications. Education Bachelor's degree in Information Technology, Computer Science, Business Administration, Project Management, or a related field preferred. Additional Information All your information will be kept confidential according to EEO guidelines.
11/03/2026
Full time
Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description Position Overview We are seeking an experienced Release Train Engineer (RTE) to lead SAFe implementation, coordinate Agile Release Train (ART) activities, and manage cross-functional project delivery. The ideal candidate will have experience in enterprise Agile transformation, project planning, risk management, stakeholder engagement, and delivery coordination, preferably in a government or federal environment. The RTE will serve as a servant leader and facilitator for the ART while applying project management best practices to ensure alignment with organizational goals, predictable delivery, effective resource utilization, and continuous improvement. Key Responsibilities Lead SAFe transformation initiatives, assess Agile maturity, and develop improvement plans to strengthen Lean-Agile adoption. Coach Scrum Masters, Product Owners, Agile teams, and leadership on SAFe principles, practices, and continuous improvement. Facilitate SAFe ceremonies, including PI Planning, ART Sync, Scrum of Scrums, System Demos, and Inspect & Adapt workshops. Coordinate multiple Agile teams, manage cross-team dependencies, remove impediments, and ensure alignment with ART objectives and delivery commitments. Partner with the Lean-Agile Center of Excellence (LACE) and organizational leaders to align SAFe practices with enterprise goals and governance. Mentor teams and reinforce SAFe framework compliance throughout the organization. Develop and maintain project plans, integrated schedules, release calendars, roadmaps, milestones, and delivery forecasts. Manage project scope, timelines, resources, risks, issues, dependencies, and change requests to support successful project execution. Monitor project progress, delivery metrics, and schedule variances; implement corrective actions and escalate risks as needed. Coordinate resource and capacity planning, and support budget tracking and cost reporting where applicable. Establish project governance, maintain RAID logs and project documentation, and provide regular status reports and executive updates. Collaborate with Product Management, Business Owners, project sponsors, and technical stakeholders to align priorities and manage expectations. Support compliance, governance, and contractual requirements, particularly in government or regulated environments. Drive continuous improvement, promote DevOps and continuous delivery practices, and improve delivery predictability and quality. Qualifications Qualifications Experience 10+ years of relevant experience in Agile delivery, Release Train Engineering, project management, or program coordination. Significant experience in SAFe implementation, enterprise Agile transformation, and coordinating multiple Agile teams. Experience in project planning, scheduling, risk management, resource coordination, stakeholder communication, and delivery reporting. Government, federal, or regulated-environment experience preferred. Certifications Required: SAFe Scrum Master (SSM) or equivalent relevant SAFe certification, such as SAFe Program Consultant (SPC). Preferred: Project Management Professional (PMP ) certification. SAFe Release Train Engineer (RTE) or other relevant SAFe certifications. Education Bachelor's degree in Information Technology, Computer Science, Business Administration, Project Management, or a related field preferred. Additional Information All your information will be kept confidential according to EEO guidelines.
Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Senior DevSecOps Technical Lead to support DOL OCIO/ETA SWARAS application operations, secure software delivery, release/configuration management, CI/CD pipeline management, automated testing, vulnerability remediation, and moderate enhancements across a federal enterprise application ecosystem. This role is the primary technical lead for application sustainment, production stability, Tier 3 escalations, release execution, and secure SDLC implementation. Key Responsibilities Maintain and enhance SWARAS applications supporting WOTC, LARAS, LEARS, SWARPD, and related ETA reporting workflows. Build, monitor, and troubleshoot CI/CD pipelines using Jenkins, GitLab, Maven, Ant, and automated testing tools. Support production application O&M, defect resolution, code/configuration updates, COTS customization, scripts, automation, and release deployments. Support Java 8/11/21, Spring Boot, IBM WebSphere, AWS-hosted environments, Linux/Windows platforms, and application integrations using tools such as SOAP UI and WinSCP. Coordinate with the DBA, ISSO, Help Desk Lead, and Program Manager to resolve Tier 3 incidents, perform root cause analysis, and support P1/P2 production escalations. Integrate secure development practices into the SDLC, including code reviews, static/dynamic analysis, vulnerability testing, and pre-production validation. Support Agile delivery activities in Jira and Confluence, including sprint planning, backlog refinement, release planning, and deployment documentation. Qualifications Required Qualifications 8+ years of federal application support, DevSecOps, software sustainment, or production application support experience. Hands-on experience with Jenkins, GitLab, Maven/Ant, Java, Spring Boot, WebSphere, AWS, Linux/Windows, and automated testing. Experience directly supporting Department of Labor IT projects and applications is REQUIRED. Experience supporting FISMA Moderate applications and secure SDLC practices, including vulnerability remediation and production release controls. Experience supporting ServiceNow ticket workflows and Tier 2/Tier 3 escalation processes in a federal IT environment. U.S. Citizenship and ability to obtain and maintain DOL Public Trust suitability. Prior DOL OCIO, ETA, SWARAS, UIDBMS, OATS, or DOL enterprise application support experience. AWS Developer, AWS SysOps, Security+, Linux+, DevOps, GitLab, Jenkins, or Java certification. Experience with Splunk, SolarWinds, JMeter, Power BI, ServiceNow, and Section 508/WCAG remediation support. Additional Information All your information will be kept confidential according to EEO guidelines.
09/26/2026
Full time
Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Senior DevSecOps Technical Lead to support DOL OCIO/ETA SWARAS application operations, secure software delivery, release/configuration management, CI/CD pipeline management, automated testing, vulnerability remediation, and moderate enhancements across a federal enterprise application ecosystem. This role is the primary technical lead for application sustainment, production stability, Tier 3 escalations, release execution, and secure SDLC implementation. Key Responsibilities Maintain and enhance SWARAS applications supporting WOTC, LARAS, LEARS, SWARPD, and related ETA reporting workflows. Build, monitor, and troubleshoot CI/CD pipelines using Jenkins, GitLab, Maven, Ant, and automated testing tools. Support production application O&M, defect resolution, code/configuration updates, COTS customization, scripts, automation, and release deployments. Support Java 8/11/21, Spring Boot, IBM WebSphere, AWS-hosted environments, Linux/Windows platforms, and application integrations using tools such as SOAP UI and WinSCP. Coordinate with the DBA, ISSO, Help Desk Lead, and Program Manager to resolve Tier 3 incidents, perform root cause analysis, and support P1/P2 production escalations. Integrate secure development practices into the SDLC, including code reviews, static/dynamic analysis, vulnerability testing, and pre-production validation. Support Agile delivery activities in Jira and Confluence, including sprint planning, backlog refinement, release planning, and deployment documentation. Qualifications Required Qualifications 8+ years of federal application support, DevSecOps, software sustainment, or production application support experience. Hands-on experience with Jenkins, GitLab, Maven/Ant, Java, Spring Boot, WebSphere, AWS, Linux/Windows, and automated testing. Experience directly supporting Department of Labor IT projects and applications is REQUIRED. Experience supporting FISMA Moderate applications and secure SDLC practices, including vulnerability remediation and production release controls. Experience supporting ServiceNow ticket workflows and Tier 2/Tier 3 escalation processes in a federal IT environment. U.S. Citizenship and ability to obtain and maintain DOL Public Trust suitability. Prior DOL OCIO, ETA, SWARAS, UIDBMS, OATS, or DOL enterprise application support experience. AWS Developer, AWS SysOps, Security+, Linux+, DevOps, GitLab, Jenkins, or Java certification. Experience with Splunk, SolarWinds, JMeter, Power BI, ServiceNow, and Section 508/WCAG remediation support. Additional Information All your information will be kept confidential according to EEO guidelines.