5 jobs found

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Cloud Security Architect provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. The position serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment. Essential Duties and Responsibilities: Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments. Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations. Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking. Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk. Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions. Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation. Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms. Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability. Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders. Required Skills, Qualifications and Experience: Bachelor's degree or additional equivalent professional experience. 10+ years of related experience. DoD 8140 Work Role 652 - Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC. Must have and maintain a current DoD Top Secret clearance. Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly). Demonstrated cloud and cloud-native security architecture experience. Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking. Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53. Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements. Ability to translate compliance requirements into concrete technical engineering solutions. Experience evaluating architectures, system relationships, interfaces, and data flows. Strong consulting, communication, and presentation skills. Ability to support multiple systems and projects in a high-tempo environment. The projected salary range for this position is $150,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Cloud Security Architect provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. The position serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment. Essential Duties and Responsibilities: Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments. Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations. Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking. Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk. Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions. Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation. Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms. Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability. Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders. Required Skills, Qualifications and Experience: Bachelor's degree or additional equivalent professional experience. 10+ years of related experience. DoD 8140 Work Role 652 - Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC. Must have and maintain a current DoD Top Secret clearance. Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly). Demonstrated cloud and cloud-native security architecture experience. Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking. Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53. Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements. Ability to translate compliance requirements into concrete technical engineering solutions. Experience evaluating architectures, system relationships, interfaces, and data flows. Strong consulting, communication, and presentation skills. Ability to support multiple systems and projects in a high-tempo environment. The projected salary range for this position is $150,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description PositionTitle: Security Control Assessor (SCA) Primary Location : Arlington, VA and/or Mechanicsburg, Pennsylvania, with assignments in Arlington, Virginia, as required. Clearance Requirements: Active Secret Clearance We are seeking a Security Control Assessor (SCA) to join our team. In this critical role, you will be responsible for performing advanced, data-driven security assessments that go beyond simple compliance checks to provide a continuous, mission-focused understanding of cybersecurity risk. You will be a key partner to the Authorizing Official (AO), directly influencing ongoing authorization decisions for critical systems. Your work will be foundational to DSCA Risk Management Framework (RMF) and Cybersecurity Risk Management Framework (CSRMF) processes. If you are passionate about moving beyond checklists to perform real-world risk analysis and want to make a tangible impact on our nation's security posture, we encourage you to apply. Key Responsibilities: Strategic Assessment Planning : Develop and document transparent Security Assessment Plans (SAP) that clearly define the scope, methodology, resources, and timeline for evaluating system security controls. Continuous Security Monitoring : Conduct ongoing assessments of security controls, analyzing and correlating data from security scans, system logs, and automated monitoring tools to build a near real-time picture of system security posture. Actionable Risk Analysis : Provide risk analysis that prioritizes vulnerabilities and control deficiencies based on their direct and indirect impact on mission execution. You will use threat intelligence and system-specific context to distinguish significant risks from low-impact findings. Validation and Analysis : Interpret and validate the outputs of automated tools, Policy as Code (PaC) scripts, and traditional evidence. You will focus manual testing on non-automatable controls while performing high-level analysis on aggregated data to identify risk trends and systemic weaknesses. Authorization Artifact Development : Develop and maintain key authorization artifacts, including the Security Assessment Report (SAR) and Risk Assessment Report (RAR). You will provide critical risk input for the development and maintenance of the Plan of Action and Milestones (POA&M). Authorization Recommendation : Synthesize assessment findings and the overall residual risk posture of a system to develop a formal Authorization Recommendation Memo for leadership. ATO Lifecycle Management : Manage the program's overarching Authorization to Operate (ATO) schedule. This includes tracking all assessment activities, documentation milestones, and remediation efforts to ensure timely submission and maintenance of the system's authorization status. Tool and Data Management : Ensure all activities, evidence, and artifacts are meticulously managed and documented within the Enterprise Mission Assurance Support Service (eMASS). Required Qualifications: Experience : 5+ years of direct experience in cybersecurity, with a focus on security control assessment, risk management, or a related field. Knowledge : In-depth knowledge of the Risk Management Framework (RMF), NIST SP 800-53, and related publications. Familiarity with the DoD/Dow Cybersecurity Risk Management Framework (CSRMF) is highly desired. Technical Skills : Proven ability to analyze data from security tools, interpret scan results, and validate automated testing outputs. Experience with eMASS is required. Analytical Skills : Strong analytical and problem-solving skills, with the ability to understand system-specific context and articulate risk in clear, mission-focused terms. Communication : Excellent written and verbal communication skills, with experience drafting formal security assessment reports and briefing senior leadership. Clearance : Active Secret security clearance is required. Preferred Qualifications : Bachelor's degree in Cybersecurity, Information Technology, or a related discipline. Relevant certifications such as CISSP, CISM, CAP, or equivalent. Experience with Policy as Code (PaC) and automating security control validation. Experience managing ATO schedules and tracking POA&M remediation efforts. Work Location Work is performed within and outside the National Capital Region, primarily in Mechanicsburg, Pennsylvania, where most of the cybersecurity team is based, and in Arlington, Virginia. Duties requiring SIPR access must be completed at an approved DSCA facility. Compensation The anticipated pay range has yet to be determined. Actual compensation may vary based on location, responsibilities, contract affordability, education, knowledge, skills, competencies, experience, and market data. Compensation is one component of ODRG's total rewards package and is not a promise of specific pay. About ODRG Organizational Development Resource Group (ODRG), LLC, provides management consulting and professional services to Department of Defense, federal, commercial, and nonprofit organizations. Our consultants deliver strategic, implementation, and evaluation support designed to improve organizational effectiveness, workforce performance, process efficiency, and cost outcomes. Candidates may contact their recruiter to request a reasonable accommodation during the application or employment process; information provided will remain confidential and will be used only as needed to provide the accommodation.

Job Description Job Description PositionTitle: Security Control Assessor (SCA) Primary Location : Arlington, VA and/or Mechanicsburg, Pennsylvania, with assignments in Arlington, Virginia, as required. Clearance Requirements: Active Secret Clearance We are seeking a Security Control Assessor (SCA) to join our team. In this critical role, you will be responsible for performing advanced, data-driven security assessments that go beyond simple compliance checks to provide a continuous, mission-focused understanding of cybersecurity risk. You will be a key partner to the Authorizing Official (AO), directly influencing ongoing authorization decisions for critical systems. Your work will be foundational to DSCA Risk Management Framework (RMF) and Cybersecurity Risk Management Framework (CSRMF) processes. If you are passionate about moving beyond checklists to perform real-world risk analysis and want to make a tangible impact on our nation's security posture, we encourage you to apply. Key Responsibilities: Strategic Assessment Planning : Develop and document transparent Security Assessment Plans (SAP) that clearly define the scope, methodology, resources, and timeline for evaluating system security controls. Continuous Security Monitoring : Conduct ongoing assessments of security controls, analyzing and correlating data from security scans, system logs, and automated monitoring tools to build a near real-time picture of system security posture. Actionable Risk Analysis : Provide risk analysis that prioritizes vulnerabilities and control deficiencies based on their direct and indirect impact on mission execution. You will use threat intelligence and system-specific context to distinguish significant risks from low-impact findings. Validation and Analysis : Interpret and validate the outputs of automated tools, Policy as Code (PaC) scripts, and traditional evidence. You will focus manual testing on non-automatable controls while performing high-level analysis on aggregated data to identify risk trends and systemic weaknesses. Authorization Artifact Development : Develop and maintain key authorization artifacts, including the Security Assessment Report (SAR) and Risk Assessment Report (RAR). You will provide critical risk input for the development and maintenance of the Plan of Action and Milestones (POA&M). Authorization Recommendation : Synthesize assessment findings and the overall residual risk posture of a system to develop a formal Authorization Recommendation Memo for leadership. ATO Lifecycle Management : Manage the program's overarching Authorization to Operate (ATO) schedule. This includes tracking all assessment activities, documentation milestones, and remediation efforts to ensure timely submission and maintenance of the system's authorization status. Tool and Data Management : Ensure all activities, evidence, and artifacts are meticulously managed and documented within the Enterprise Mission Assurance Support Service (eMASS). Required Qualifications: Experience : 5+ years of direct experience in cybersecurity, with a focus on security control assessment, risk management, or a related field. Knowledge : In-depth knowledge of the Risk Management Framework (RMF), NIST SP 800-53, and related publications. Familiarity with the DoD/Dow Cybersecurity Risk Management Framework (CSRMF) is highly desired. Technical Skills : Proven ability to analyze data from security tools, interpret scan results, and validate automated testing outputs. Experience with eMASS is required. Analytical Skills : Strong analytical and problem-solving skills, with the ability to understand system-specific context and articulate risk in clear, mission-focused terms. Communication : Excellent written and verbal communication skills, with experience drafting formal security assessment reports and briefing senior leadership. Clearance : Active Secret security clearance is required. Preferred Qualifications : Bachelor's degree in Cybersecurity, Information Technology, or a related discipline. Relevant certifications such as CISSP, CISM, CAP, or equivalent. Experience with Policy as Code (PaC) and automating security control validation. Experience managing ATO schedules and tracking POA&M remediation efforts. Work Location Work is performed within and outside the National Capital Region, primarily in Mechanicsburg, Pennsylvania, where most of the cybersecurity team is based, and in Arlington, Virginia. Duties requiring SIPR access must be completed at an approved DSCA facility. Compensation The anticipated pay range has yet to be determined. Actual compensation may vary based on location, responsibilities, contract affordability, education, knowledge, skills, competencies, experience, and market data. Compensation is one component of ODRG's total rewards package and is not a promise of specific pay. About ODRG Organizational Development Resource Group (ODRG), LLC, provides management consulting and professional services to Department of Defense, federal, commercial, and nonprofit organizations. Our consultants deliver strategic, implementation, and evaluation support designed to improve organizational effectiveness, workforce performance, process efficiency, and cost outcomes. Candidates may contact their recruiter to request a reasonable accommodation during the application or employment process; information provided will remain confidential and will be used only as needed to provide the accommodation.

Job Description Job Description This position be on-site 4-5 days a week Job Summary The Release Train Engineer (RTE) will serve as a servant leader, coach, and facilitator for an Agile Release Train (ART) supporting Federal Government, Department of Defense (DoD), and government contractor programs. This role is responsible for leading SAFe execution, improving delivery flow, aligning teams and leadership, and driving Agile transformation across multiple divisions. The ideal candidate is a proactive servant leader with strong facilitation, communication, and organizational leadership skills who can build alignment across teams, leadership, and stakeholders. This role requires someone who can drive accountability, provide clear direction, effectively communicate priorities, and foster a culture of collaboration, transparency, and continuous improvement across the ART. Responsibilities Lead and facilitate core SAFe events (PI Planning, ART Syncs, Scrum of Scrums, System Demos, and Inspect & Adapt workshops). Coordinate cross-team/cross-division dependencies to ensure alignment and value delivery. Guide leadership, Agile teams, Scrum Masters, and Product Owners through SAFe adoption and Lean-Agile practices. Partner closely with teams to resolve operational roadblocks and foster self-organization. Establish standardized Agile processes and DevOps practices. Build and manage Jira/Confluence dashboards to track and communicate ART flow metrics, velocity, risks, and trends to leadership. Ensure ART execution aligns with Federal/DoD contractual milestones and compliance standards (FISMA, FedRAMP, NIST). Basic Qualifications 5+ years of Agile leadership experience (Scrum Master, Agile Coach, PM, or RTE) 2+ years specifically leading ARTs across multiple enterprise divisions. Experience using Jira, Azure DevOps or similar Agile lifecycle management tools U.S. Citizenship required Active/current Secret security clearance required or the ability to obtain and maintain a Secret security clearance. SAFe Release Train Engineer (RTE) certification required If applicable: If you are or have recently been employed by the U.S. Government, a post-employment ethics letter may be required if employment with VSolvit is offered Preferred Qualifications Prior experience navigating Federal Government, DoD, or government contractor programs. Familiarity with government compliance frameworks (NIST, FISMA, FedRAMP). Additional SAFe certifications (such as SAFe Program Consultant / SPC). Company Summary Join the VSolvit Team! Founded in 2006, VSolvit (pronounced 'We Solve It') is a technology services provider that specializes in cybersecurity, cloud computing, geographic information systems (GIS), business intelligence (BI) systems, data warehousing, engineering services, and custom database and application development. VSolvit is an award winning WOSB, CA CDB, MBE, WBE, and CMMI Level 3 certified company. We offer a customizable health benefits program that best meets the needs of its employees. Offering may include: medical, dental, and vision insurance, life insurance, long and short-term disability and other insurance products, Health Savings Account, Flexible Spending Account, 401K Retirement Plan options, Tuition Reimbursement, and assorted voluntary benefits. Our goal is to grow together and enjoy the work that we do as a team. VSolvit LLC is an Equal Opportunity/Affirmative Action employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status.