A Square Group
Frederick, Maryland
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking an experienced Security Lead to own the Program security posture, compliance artifacts, and coordination with Program Security Oversight leadership. This role shares leadership of the security team with a Co-Lead and directs the work of the Information Security Specialist team, ensuring compliance documentation, vulnerability management, and ATO artifacts are complete, current, and defensible in a complex federal healthcare IT environment. The ideal candidate brings deep federal cybersecurity experience, a track record of leading security teams, and the judgment to represent the program's security posture to executive and government stakeholders. What You Will Do: Own Task 3 security management deliverables, including compliance documentation, risk register maintenance, and coordination with the Program Security Oversight Leader. Direct and coordinate the Information Security Specialist team, including workload distribution and quality oversight of security deliverables, alongside the Sr. Information Security Specialist (Co-Lead). Support Authorization to Operate (ATO) maintenance, continuous Assessment & Authorization (A&A) activities, and FISMA/FedRAMP compliance documentation for Client-managed systems. Author and review security documentation, including System Security Plans (SSPs), Risk Assessments, and Security Impact Analyses (SIA), prior to submission to Program Security Oversight leadership. Oversee vulnerability scanning, remediation tracking, and security findings reporting across enterprise tools; review results and recommended corrective actions from the Information Security Specialist team. Serve as the primary security point of contact with Program Security Oversight Leadership, and maintain collaborative relationships with federal ISSOs, CSPs (e.g., AWS, Azure), system owners, and vendors. Coordinate with the Tools Management team through the combined Security/Tools scrum cadence. Track and maintain the centralized Security Risk Register, map vulnerabilities to POA&Ms, and support FISMA/FedRAMP compliance efforts across the program. Provide guidance and privacy/security insight to Agile teams across projects, and support Privacy and Security Compliance through all stages of the systems development lifecycle (SDLC). Work within Client system repositories such as CFACTS and BOX. Oversee declared game day events, ensuring after-action reports and other required game day artifacts are completed by the security team. Develop and maintain standard operating procedures (SOPs) for repeatable security processes across the team. Perform additional duties as assigned by the Program Security Oversight Leader. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, Systems Engineering, or a related field (or equivalent professional experience). 8+ years of information security experience in a federal or enterprise environment, including team leadership. Experience with FISMA compliance, ATO processes, and continuous Assessment & Authorization (A working understanding of NIST 800-53/37. Experience co-leading or managing a multi-person security team, including workload distribution and quality oversight of deliverables. Working knowledge of vulnerability scanning and compliance/POA&M platforms, Jira, Confluence, and FISMA/ATO documentation standards and processes. Ability to obtain and maintain Program EUA access and required Public Trust clearance. Strong communication skills and ability to coordinate across multi-disciplinary teams and government stakeholders. Even Better: Prior Program or HHS security program experience strongly preferred. Relevant security certification (CISSP, CISM, CEH, CCNA Security, or Security+). Familiarity with federal control tracking systems (e.g., CFACTS and BOX). Working knowledge of cloud environments (AWS, Azure) and associated security controls. Exposure to pen testing, application security, and CDN security services (e.g., Akamai). Experience providing security and privacy input within Agile development environments. Knowledge about emerging industry or technology trends such as Artificial Intelligence (AI) frameworks. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking an experienced Security Lead to own the Program security posture, compliance artifacts, and coordination with Program Security Oversight leadership. This role shares leadership of the security team with a Co-Lead and directs the work of the Information Security Specialist team, ensuring compliance documentation, vulnerability management, and ATO artifacts are complete, current, and defensible in a complex federal healthcare IT environment. The ideal candidate brings deep federal cybersecurity experience, a track record of leading security teams, and the judgment to represent the program's security posture to executive and government stakeholders. What You Will Do: Own Task 3 security management deliverables, including compliance documentation, risk register maintenance, and coordination with the Program Security Oversight Leader. Direct and coordinate the Information Security Specialist team, including workload distribution and quality oversight of security deliverables, alongside the Sr. Information Security Specialist (Co-Lead). Support Authorization to Operate (ATO) maintenance, continuous Assessment & Authorization (A&A) activities, and FISMA/FedRAMP compliance documentation for Client-managed systems. Author and review security documentation, including System Security Plans (SSPs), Risk Assessments, and Security Impact Analyses (SIA), prior to submission to Program Security Oversight leadership. Oversee vulnerability scanning, remediation tracking, and security findings reporting across enterprise tools; review results and recommended corrective actions from the Information Security Specialist team. Serve as the primary security point of contact with Program Security Oversight Leadership, and maintain collaborative relationships with federal ISSOs, CSPs (e.g., AWS, Azure), system owners, and vendors. Coordinate with the Tools Management team through the combined Security/Tools scrum cadence. Track and maintain the centralized Security Risk Register, map vulnerabilities to POA&Ms, and support FISMA/FedRAMP compliance efforts across the program. Provide guidance and privacy/security insight to Agile teams across projects, and support Privacy and Security Compliance through all stages of the systems development lifecycle (SDLC). Work within Client system repositories such as CFACTS and BOX. Oversee declared game day events, ensuring after-action reports and other required game day artifacts are completed by the security team. Develop and maintain standard operating procedures (SOPs) for repeatable security processes across the team. Perform additional duties as assigned by the Program Security Oversight Leader. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, Systems Engineering, or a related field (or equivalent professional experience). 8+ years of information security experience in a federal or enterprise environment, including team leadership. Experience with FISMA compliance, ATO processes, and continuous Assessment & Authorization (A working understanding of NIST 800-53/37. Experience co-leading or managing a multi-person security team, including workload distribution and quality oversight of deliverables. Working knowledge of vulnerability scanning and compliance/POA&M platforms, Jira, Confluence, and FISMA/ATO documentation standards and processes. Ability to obtain and maintain Program EUA access and required Public Trust clearance. Strong communication skills and ability to coordinate across multi-disciplinary teams and government stakeholders. Even Better: Prior Program or HHS security program experience strongly preferred. Relevant security certification (CISSP, CISM, CEH, CCNA Security, or Security+). Familiarity with federal control tracking systems (e.g., CFACTS and BOX). Working knowledge of cloud environments (AWS, Azure) and associated security controls. Exposure to pen testing, application security, and CDN security services (e.g., Akamai). Experience providing security and privacy input within Agile development environments. Knowledge about emerging industry or technology trends such as Artificial Intelligence (AI) frameworks. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
A Square Group
Frederick, Maryland
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking a Tools Technical Lead to own the technical leadership of enterprise tools and platforms within a highly dynamic federal healthcare environment, carrying deep, hands-on responsibility for the enterprise toolset supporting Client development teams. This is one of the most institutionally critical roles on the program given the breadth of tooling under management, and the role carries an explicit expectation of thorough documentation and knowledge-sharing given the historical concentration of tooling knowledge in a single individual. As the Tools Technical Lead, you will direct the technical approach, architecture decisions, and troubleshooting for the Tools Management team while remaining hands-on with the administration, integration, automation, and continuous improvement of the broad suite of tools that enable Agile development, DevSecOps practices, and collaboration across multiple teams. This position requires a strong technical foundation across cloud infrastructure, DevSecOps tooling, identity management, and enterprise system integrations, along with the judgment and communication skills to lead a team and represent tooling matters to Client stakeholders. What You Will Do: Serve as the primary technical authority for the enterprise tooling stack; direct the Tools Management team's technical approach, architecture decisions, and troubleshooting for complex, cross-tool issues. Provide technical direction to and oversee the Tools Management team, including workload distribution, technical mentorship, and cross-training of Systems Engineers. Serve as the Client-facing technical lead for tooling matters and coordinate with the Security team during the combined Security/Tools scrum cadence. Support operations and maintenance activities for enterprise tools used by development and operations teams. Administer and maintain Atlassian Tooling, Jira including workflows, permissions, automation rules, custom fields, and system upgrades. Manage and support Confluence, including space administration, user access, templates, plugin management, and upgrades. Oversee GitHub Enterprise repositories, including access controls, branching strategies, integrations, and license management. Configure and maintain Slack integrations, user provisioning, and communication workflows across enterprise teams. Administer MiniOrange and OKTA for identity and access management, including SSO (SAML/OAuth), MFA, and enterprise integrations. Manage and support SonarQube, including installation, configuration, upgrades, permissions, and code quality enforcement. Lead troubleshooting and resolution for tooling-related incidents and outages, and serve as the escalation point for complex, cross-tool issues, including Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, and VictorOps. Perform tool upgrades, vulnerability checks, and compatibility assessments for plugins and integrations. Integrate enterprise tools with CI/CD pipelines and other systems to support secure and efficient development workflows. Support automation initiatives using tools such as Packer, Ansible, Selenium, and API-based frameworks. Assist in implementing DevSecOps and Infrastructure-as-Code practices using AWS, Terraform, and CloudFormation. Support monitoring and incident response activities using tools such as New Relic, Splunk, AWS CloudWatch, and similar platforms. Maintain comprehensive, current technical documentation of tool configurations, integrations, and dependencies, and develop SOPs and runbooks to support knowledge management and operational continuity, a designated priority for this role given the risk of concentrated, undocumented institutional knowledge. Ensure compliance with security requirements, including ATO support, API authentication, and Client governance processes. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience). 8+ years of experience supporting enterprise tools, systems engineering, or DevSecOps environments, including technical leadership of a multi-tool environment. Hands-on experience administering tools such as Jira, Confluence, GitHub, Slack, MiniOrange, OKTA, and/or SonarQube, along with the broader enterprise toolset (Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, VictorOps). Experience with identity and access management, including SSO, SAML, OAuth, and LDAP integrations. Familiarity with cloud environments (AWS preferred) and Infrastructure-as-Code practices. Experience with CI/CD tools (e.g., CloudBees, Jenkins) and automation frameworks. Demonstrated ability to document and transfer complex technical knowledge, a critical requirement for this role. Strong troubleshooting and problem-solving skills with the ability to support multiple systems simultaneously. Experience working in Agile/DevSecOps environments supporting development teams. Strong communication skills with the ability to interact with technical and non-technical stakeholders, including Client-facing coordination. Experience in a federal or large enterprise environment; Federal Healthcare support experience strongly preferred. Ability to obtain and maintain required public trust clearance. Even Better: Experience supporting federal government environments, particularly federal healthcare systems. Familiarity with NIST, FISMA, and ATO processes. Experience with containerization and orchestration technologies. Knowledge of monitoring and observability platforms (Datadog, New Relic, Splunk). Experience developing automation scripts and improving operational efficiency. Atlassian, AWS, or DevSecOps-related certifications. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking a Tools Technical Lead to own the technical leadership of enterprise tools and platforms within a highly dynamic federal healthcare environment, carrying deep, hands-on responsibility for the enterprise toolset supporting Client development teams. This is one of the most institutionally critical roles on the program given the breadth of tooling under management, and the role carries an explicit expectation of thorough documentation and knowledge-sharing given the historical concentration of tooling knowledge in a single individual. As the Tools Technical Lead, you will direct the technical approach, architecture decisions, and troubleshooting for the Tools Management team while remaining hands-on with the administration, integration, automation, and continuous improvement of the broad suite of tools that enable Agile development, DevSecOps practices, and collaboration across multiple teams. This position requires a strong technical foundation across cloud infrastructure, DevSecOps tooling, identity management, and enterprise system integrations, along with the judgment and communication skills to lead a team and represent tooling matters to Client stakeholders. What You Will Do: Serve as the primary technical authority for the enterprise tooling stack; direct the Tools Management team's technical approach, architecture decisions, and troubleshooting for complex, cross-tool issues. Provide technical direction to and oversee the Tools Management team, including workload distribution, technical mentorship, and cross-training of Systems Engineers. Serve as the Client-facing technical lead for tooling matters and coordinate with the Security team during the combined Security/Tools scrum cadence. Support operations and maintenance activities for enterprise tools used by development and operations teams. Administer and maintain Atlassian Tooling, Jira including workflows, permissions, automation rules, custom fields, and system upgrades. Manage and support Confluence, including space administration, user access, templates, plugin management, and upgrades. Oversee GitHub Enterprise repositories, including access controls, branching strategies, integrations, and license management. Configure and maintain Slack integrations, user provisioning, and communication workflows across enterprise teams. Administer MiniOrange and OKTA for identity and access management, including SSO (SAML/OAuth), MFA, and enterprise integrations. Manage and support SonarQube, including installation, configuration, upgrades, permissions, and code quality enforcement. Lead troubleshooting and resolution for tooling-related incidents and outages, and serve as the escalation point for complex, cross-tool issues, including Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, and VictorOps. Perform tool upgrades, vulnerability checks, and compatibility assessments for plugins and integrations. Integrate enterprise tools with CI/CD pipelines and other systems to support secure and efficient development workflows. Support automation initiatives using tools such as Packer, Ansible, Selenium, and API-based frameworks. Assist in implementing DevSecOps and Infrastructure-as-Code practices using AWS, Terraform, and CloudFormation. Support monitoring and incident response activities using tools such as New Relic, Splunk, AWS CloudWatch, and similar platforms. Maintain comprehensive, current technical documentation of tool configurations, integrations, and dependencies, and develop SOPs and runbooks to support knowledge management and operational continuity, a designated priority for this role given the risk of concentrated, undocumented institutional knowledge. Ensure compliance with security requirements, including ATO support, API authentication, and Client governance processes. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience). 8+ years of experience supporting enterprise tools, systems engineering, or DevSecOps environments, including technical leadership of a multi-tool environment. Hands-on experience administering tools such as Jira, Confluence, GitHub, Slack, MiniOrange, OKTA, and/or SonarQube, along with the broader enterprise toolset (Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, VictorOps). Experience with identity and access management, including SSO, SAML, OAuth, and LDAP integrations. Familiarity with cloud environments (AWS preferred) and Infrastructure-as-Code practices. Experience with CI/CD tools (e.g., CloudBees, Jenkins) and automation frameworks. Demonstrated ability to document and transfer complex technical knowledge, a critical requirement for this role. Strong troubleshooting and problem-solving skills with the ability to support multiple systems simultaneously. Experience working in Agile/DevSecOps environments supporting development teams. Strong communication skills with the ability to interact with technical and non-technical stakeholders, including Client-facing coordination. Experience in a federal or large enterprise environment; Federal Healthcare support experience strongly preferred. Ability to obtain and maintain required public trust clearance. Even Better: Experience supporting federal government environments, particularly federal healthcare systems. Familiarity with NIST, FISMA, and ATO processes. Experience with containerization and orchestration technologies. Knowledge of monitoring and observability platforms (Datadog, New Relic, Splunk). Experience developing automation scripts and improving operational efficiency. Atlassian, AWS, or DevSecOps-related certifications. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans