9 jobs found

This job posting is anticipated to remain open for 30 days, from 14-Sep-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: We are seeking a highly technical, hands-on Senior Non-Human Identity Engineer to lead the engineering, automation, onboarding, remediation, and operational management of non-human identities across the enterprise. This role is focused on the implementation and day-to-day engineering of machine identities, service accounts, workload identities, API credentials, certificates, secrets, and privileged application accounts supporting cloud, on-premises, and hybrid environments. This is not an architecture-only or governance-only position. The successful candidate will be expected to personally build solutions, write automation, troubleshoot authentication issues, onboard applications, integrate platforms, and drive remediation efforts. The engineer will work closely with application teams, DevOps, cloud engineering, cybersecurity, and infrastructure teams to ensure non-human identities are properly secured, monitored, and managed throughout their lifecycle. The ideal candidate combines deep IAM expertise with strong scripting, automation, cloud, and troubleshooting skills, and is comfortable operating in a fast-paced enterprise environment where hands-on execution is critical. What You'll Do: Engineer, implement, and support enterprise non-human identity solutions across cloud, on-premises, and hybrid environments. Develop and maintain automated provisioning, credential rotation, secret management, certificate lifecycle management, and deprovisioning processes. Perform onboarding and migration of service accounts, managed identities, workload identities, application accounts, and machine credentials into enterprise identity management platforms. Configure, deploy, and support privileged access controls for non-human identities using PAM and secrets management technologies. Work directly with development, application, and infrastructure teams to eliminate hardcoded credentials and replace legacy authentication methods with modern identity solutions. Design, build, and maintain automation using PowerShell, Python, REST APIs, Terraform, and other scripting or orchestration technologies. Integrate identity controls into CI/CD pipelines and DevSecOps workflows. Troubleshoot and resolve authentication, authorization, federation, certificate, token, and credential-related issues across enterprise applications. Support large-scale remediation initiatives involving dormant service accounts, excessive permissions, unmanaged secrets, and identity-related security vulnerabilities. Configure and administer identity platforms, including directory services, cloud identity providers, PAM solutions, certificate authorities, and secrets vaults. Monitor non-human identity activity and investigate suspicious authentication events, credential misuse, or policy violations. Conduct access reviews and entitlement analysis to ensure least-privilege principles are maintained. Create operational runbooks, implementation guides, engineering standards, and technical documentation. Partner with Security Operations and Incident Response teams during investigations involving machine identities and application credentials. Participate in after-hours support activities, major incident response, and maintenance activities when required. What Experience You'll Need: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or equivalent experience. 7+ years of hands-on experience in Identity and Access Management, Cybersecurity Engineering, Infrastructure Engineering, or Cloud Security. 5+ years of direct experience managing non-human identities, service accounts, application identities, workload identities, or machine authentication technologies. Strong hands-on experience administering Microsoft Entra ID, Active Directory, or similar identity platforms. Experience implementing and supporting secrets management, credential vaulting, and privileged access solutions. Strong scripting and automation skills using PowerShell, Python, Bash, or similar technologies. Experience working with OAuth 2.0, OpenID Connect, SAML, Kerberos, LDAP, certificates, and PKI technologies. Experience supporting Azure, AWS, Google Cloud, or multi-cloud environments. Ability to analyze logs, troubleshoot authentication failures, and resolve complex identity-related issues. Experience working within enterprise change management, incident management, and operational support processes. Strong verbal and written communication skills with the ability to collaborate across technical teams. What Could Set You Apart: Hands-on experience with CyberArk, HashiCorp Vault, Delinea, BeyondTrust, SailPoint, Microsoft Entra Workload Identities, or similar platforms. Experience managing certificate lifecycles and public/private key infrastructure. Experience securing Kubernetes, containers, microservices, and cloud-native applications. Familiarity with Infrastructure as Code technologies such as Terraform, Bicep, ARM, or CloudFormation. Experience with SIEM platforms and identity security monitoring. CISSP, CISM, Security+, Microsoft Identity and Access Administrator, CyberArk Defender/Sentry, or related certifications. Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. a text-decoration: none; color: ; tr th, tr td border: 1px solid ; tr th background-color: ; At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page . Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act. Edward Jones is prohibited from hiring individuals with certain specified criminal history as set forth in Section 3(a)(39) and 15(b)(4) and Rule 17a-3(a)(12) of the Securities and Exchange Act of 1934, and conducts background reviews consistent with FINRA Rule 3110(e). A copy of a notice regarding the provisions of the Los Angeles County Fair Chance Ordinance is available at: dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf .

Position: Azure Infrastructure Engineer (Ref: 18555) Location: Atlanta, GA USA, 30334 Salary: $65.00/hr. Duration: 11 Months 2 Days - Contract Openings: 1 Deadline: 07/31/2026 Description: Local Candidates Only Hybrid We are seeking a skilled Database Infrastructure Engineer to design, maintain, and optimize core enterprise database environments. In this role, you will serve as a key custodian of the data ecosystem, focusing heavily on automation, scheduling management, and infrastructure scaling. You will leverage scripting languages to automate routine maintenance, monitor system health, and orchestrate complex database jobs to ensure maximum uptime and peak performance across on-premises and cloud environments. Key Responsibilities Infrastructure Management: Design, configure, provision, and managing hardware/software configurations across Azure Cloud services and Windows Servers. Ensure compliance with data governance, state/federal data privacy regulations, and user permission management. Automated Job Management: Design, implement, and monitor automated database jobs, routine maintenance tasks, and ETL workflows. Scripting & Automation: Write and maintain robust scripts (SSIS, PowerShell, etc.) to automate DBA tasks, deployments, backups, and health checks. Performance Tuning: Proactively monitor system performance, identify bottlenecks, optimize queries, and manage indexing strategies. Troubleshoot complex hardware, software, and network issues. High Availability & Disaster Recovery (DR): Maintain and test robust DR strategies and failover protocols. Provide 24/7 support for mission-critical production systems as needed. Cross-Functional Collaboration: Support application development and data integration through application environment configuration, IIS administration, and the implementation of security and performance best practices. Qualifications & Requirements Education: Bachelors degree in Computer Science, Information Technology, or a related field. Location Requirement: Must be local to the Greater Metro Atlanta area for hybrid work arrangements. Database Platforms: Strong expertise in managing enterprise systems (MS SQL Server, Windows Server, Azure Cloud environments). Scripting Proficiency: Advanced knowledge of PowerShell and SSIS for database automation and pipeline orchestration. Infrastructure Knowledge: Solid understanding of storage systems, network architecture, and cloud infrastructure (primarily Azure). Troubleshooting: Strong analytical and problem-solving skills under pressure for critical production incidents. Preferred Skills & Certifications Experience with PowerApps, Power BI Services, and Power Automate. Familiarity with CI/CD pipelines, DevOps processes, and .NET applications. Professional certifications such as Microsoft Certified: Azure Database Administrator Associate or relevant Microsoft SQL Server credentials. Working Conditions: Location: Atlanta, GA (Hybrid Local candidates only) Position Type: Contract Work Schedule: Standard Business Hours (40 hours/week, 8 hours/day) Required / Desired Skills Bachelors degree in computer science, information technology, or a related field Required - 4 Years Expertise in managing enterprise systems (e.g., MS SQL Server, Windows Server, and Azure Cloud environment). Required - 7 Years Knowledge of scripting languages like PowerShell and SSIS for automation. Required - 7 Years Understanding of storage systems, network architecture, and cloud infrastructure (i.e. Azure). Required - 7 Years Excellent troubleshooting skills under pressure for critical production incidents. Required - 7 Years Certifications in relevant database technologies (e.g., Azure Database Administrator). (COPY REQUIRED) Required - 1 Years Certifications such as Microsoft Certified: Azure Database Administrator Associate, Microsoft SQL Server (COPY REQUIRED) Required - 1 Years Experience with PowerApps, Power BI Services, Power Automate. Required - 7 Years Familiarity with CI/CD pipelines, DevOps processes and .NET applications Required - 7 Years

Position: Sr. Azure Infrastructure Engineer (Ref: 18543) Location: Mechanicsville, VA USA, 23116 Salary: DOE Duration: 11 Months 7 Days - Contract Openings: 1 Deadline: 07/30/2026 Description: Location: Mechanicsville, VA (Hybrid) Work Arrangement: Hybrid Interview Type: In-Person Only We are seeking a highly experienced Senior Azure Infrastructure Engineer to lead the implementation, configuration, governance, and ongoing management of an enterprise Azure environment. This role is ideal for a senior-level engineer passionate about building secure, resilient, and scalable cloud platforms while setting the standard for cloud excellence. You will bring deep expertise in the Azure ecosystem, proven enterprise-grade operational experience, and the ability to provide technical leadership across cross-functional teams and to management. Key Responsibilities Cloud Infrastructure & Governance: Provide expert guidance on the design, implementation, configuration, and governance of Azure resources, networking, and security policies. Operations & Monitoring: Implement, maintain, and monitor mission-critical cloud resources in a large enterprise environment. Observability: Build meaningful observability solutions using Azure Monitor, Workbooks, Alerts, and related tooling. Migration & Deployment: Plan, lead, and execute cloud migration initiatives, including moving workloads from on-premises environments to Azure. Backup & Disaster Recovery: Manage and optimize enterprise backup and disaster recovery operations; develop and maintain robust DR strategies to minimize downtime and protect critical data. Security & Vulnerability Management: Collaborate with security teams and utilize security tools such as Tenable to manage vulnerability remediation and strengthen overall security posture. Cross-Functional Collaboration: Work closely across IT domains including architecture, security, software development, and governance to support production applications and infrastructure. Leadership & Strategy: Mentor and cross-train engineers to foster a strong engineering culture, and confidently communicate technical recommendations, risks, and strategies to leadership. Required Qualifications & Experience Extensive, hands-on experience with Azure services, Terraform (IaC), cloud infrastructure design, security best practices, governance, and operational management. Strong networking background, including deep understanding of OSI model concepts, core network protocols, and network-level troubleshooting. Proven track record of executing on-premises to cloud migration projects in an enterprise setting. Demonstrated experience with observability tools (Azure Monitor, Alerts, Workbooks) and vulnerability remediation tools (e.g., Tenable). Strong sense of ownership with the ability to manage complex technical challenges from initial design through delivery. Clear, confident communication skills for presenting complex technical strategies to management and executive leadership. Preferred Qualifications Microsoft Certifications: Azure Administrator Associate, Azure Solutions Architect Expert, or equivalent. Networking Certifications: CompTIA Network+, CCNA, or equivalent. Required / Desired Skills Experience implementing, maintaining, monitoring, and providing guidance on resources & infrastructure in Microsoft Azure Required - 10 Years Experience with Terraform (highly preferred) or at a minimum, other IaC methods (ARM, Bicep, etc.) Required - 7 Years Experience planning and executing migrations from on-premises environments to Azure Required - 10 Years Experience working in mission-critical enterprise environments and implementing backup & DR strategies Required - 10 Years Experience implementing networking and security policies in Azure Required - 10 Years Experience using Azure Monitor for alerting, observability, and dashboards Required - 10 Years Experience with vulnerability remediation & working on security initiatives Required - 10 Years

Job Description Job Description Configuration Management Engineer Full Time, Fort Detrick, MD (Hybrid)SECRET Referral Bonus: $1000Sign On Bonus: up to $2,500.00Job Description:Semper Valens Solutions is looking for a Configuration Management Engineer to lead enterprise CM capability development for the Wideband Control Strategic Portfolio supporting critical DoD satellite communication systems. This role will design and implement modern CM infrastructure, establish unified processes across distributed teams, and drive digital transformation from legacy systems to enterprise CMDB architecture.This is a strategic infrastructure role, not a maintenance position. You'll architect solutions, build frameworks, and establish sustainable CM capabilities that position the organization for long-term success. The role requires technical depth in JIRA/Confluence CMDB design, strong stakeholder influence skills, and proven experience establishing CM processes in complex System of Systems environments.Key Responsibilities:Enterprise CMDB DevelopmentDesign and implement Configuration Management Database in JIRA for multi-domain System of Systems environmentArchitect CI taxonomy and identification schemes supporting integrated configuration visibilityEstablish baseline management frameworks and versioning strategiesDevelop relationship mapping enabling impact analysis and dependency trackingProcess Framework DesignCreate systematic change control workflows integrating with configuration item managementDesign change classification schemes with appropriate governance and approval structuresEstablish configuration audit frameworks supporting compliance and quality assuranceImplement lifecycle tracking for proactive technology refresh planningOrganizational EnablementTrain and mentor users across multiple Integrated Product Teams on CM tools and methodologiesDevelop comprehensive documentation supporting varied technical skill levelsBuild stakeholder alignment and drive adoption through expertise and demonstrated valueCreate sustainable CM capability through knowledge transfer and skill developmentStrategic LeadershipAdvance organizational CM maturity through measured capability improvementsEstablish metrics and reporting frameworks providing executive visibilityDefine accountability structures for configuration ownership and stewardshipLead digital transformation from legacy CM approaches to modern integrated systemsEducation/Experience Requirements:Bachelor 's degree in Engineering, Computer Science, Information Systems, or related technical field(OR Associate degree + 5 years relevant experience, OR relevant certifications + demonstrated experience)Specific experience with DoD processes and procedures is preferred.Willing to travel in performance of required work responsibilities.Clearance Requirement:DoD Secret Clearance required (active or eligible) Preferred Qualifications:Active Secret clearanceAWS, DevSecOps experienceOracle, SQL db, and or PostgreSQL experience SAE EIA-649B or DoD CM standards familiarityIL5 or classified environment experienceSystem of Systems (SoS) configuration managementSatellite systems or space operations domain knowledgeTechnology lifecycle and obsolescence managementCMII, ITIL Expert, or Atlassian certifications10+ years CM experienceAbout Semper Valens Solutions:Semper Valens Solutions, Inc. (SVS) is a Service-Disabled Veteran Owned Small Business (SDVOSB) providing Cost Effective Software and Systems Engineering, Field Support, Training and Full Life cycle Support Management to the DOD and VA community. At Semper Valens, our vision is to remain a creative, cutting edge and cost-effective solutions provider where our shared intellect, industry experience, and technology excellence, make a positive difference in our customer's success. Our solutions help bridge the gap between IT and business prioritizations to optimize budgets, risks, and operational processes. We search for outstanding technical professionals, hiring at all levels of the experience spectrum; intermediate, journeyman and senior. Consider us for your career plan. Semper Valens Solutions is an Equal Opportunity EmployerSemper Valens Solutions proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital/parental status, pregnancy/childbirth, or related conditions, physical or mental disability, genetic information, status as a Disabled Veteran, Recently Separated Veteran, Active-Duty Wartime or Campaign Badge Veteran, Armed Forces Services Medal, or any other characteristic protected by law. If you require a reasonable accommodation to apply for a position with Semper Valens Solutions through its online applicant system, please contact Semper Valens Solutions Human Resources Department at .Semper Valens Solutions is an affirmative action/equal opportunity employer - minorities, females, disabled, and protected veterans are urged to apply. Applicants have rights under Federal Employment Laws. All Jobs at Semper Valens Solutions:

Job Description Job Description Work Type: On-site / Hybrid - Ashburn, VA client site 3-5 days per week Industry Category: ServiceNow / Configuration Management Employment Type: Full-Time Contract Clearance Requirement: Limited CBP Background Investigation (BI) required prior to onboarding Position Overview Our client is seeking an experienced ServiceNow CMDB Implementation Specialist to support an enterprise-scale Configuration Management Database implementation. This position will support business-driven CMDB planning, organizational alignment, CI modeling, governance, data quality, and best-practice implementation. The specialist will work across application owners, IT operations, security, architects, platform administrators, and other stakeholders to define CMDB requirements, establish governance and data-quality standards, support integrations and testing, and drive adoption across the organization. Key Responsibilities Requirements and Analysis Elicit stakeholder needs across Application Owners, IT Operations, Security, and other groups to identify required CIs, critical attributes, and inter-CI relationships. Document business requirements into clear functional and non-functional artifacts, including use cases, user stories, and acceptance criteria. Analyze existing data sources and identify gaps, inconsistencies, and migration challenges associated with moving data into the CMDB. Data Model Design and Definition Define CMDB classes and attributes, including servers, applications, databases, enumeration values, and ownership fields, in collaboration with Architects and Platform Administrators. Establish CI relationships such as "runs on," "connects to," and "is composed of" to accurately represent the enterprise environment. Normalize and standardize data to promote CMDB consistency and integrity. Support CI lifecycle management and organizational CMDB ownership models. Process Definition and Integration Map CMDB-related Incident, Change, Problem, and Asset Management processes to ensure the CMDB effectively supports ITSM workflows. Define data-governance policies for data ownership, entry, updates, and quality assurance. Specify integration requirements for automated discovery tools, ticketing systems, monitoring platforms, and other enterprise data sources. Apply ServiceNow CSDM and service-mapping principles to support an effective enterprise CMDB structure. Data Quality, Validation, and Testing Define data-quality rules and metrics for accuracy, completeness, and consistency. Establish processes for ongoing CMDB monitoring, remediation, and continuous improvement. Plan and conduct User Acceptance Testing with business users. Develop test cases to validate functional requirements and expected business outcomes. Reporting and KPIs Identify reporting requirements and dashboards that provide environmental insights, decision support, and compliance monitoring. Define CMDB-enabled KPIs, including metrics such as Mean Time to Repair and change success rates. Establish standards for measuring CMDB health, data quality, and operational effectiveness. Training, Adoption, and Ongoing Support Develop CMDB training materials, standards, procedures, and supporting documentation. Deliver training sessions to user groups to drive adoption and proficiency. Provide ongoing support and clarification regarding CMDB functionality, processes, and data usage. Communication and Stakeholder Management Facilitate workshops to gather requirements, resolve conflicts, and establish cross-functional consensus. Lead stakeholder discussions and cross-team alignment sessions. Translate business requirements and technical concepts between business and technical teams. Collaborate across large, federated, or regulated organizational environments. Requirements Minimum Qualifications U.S. citizenship required. At least 10 years of overall information technology experience . Bachelor's or Master's degree. Four additional years of relevant experience may substitute for a Bachelor's degree, or two additional years of relevant experience may substitute for a Master's degree. At least 5 years of enterprise ITSM, CMDB, or Configuration Management experience , including demonstrated expertise in CMDB planning, modeling, governance, and data-quality frameworks. Experience designing CI classes, relationships, and lifecycle-management processes for complex organizations. Proficiency with ServiceNow CMDB, automated discovery, and CSDM . Strong understanding of service-mapping principles and organizational CMDB ownership models. Ability to lead workshops, stakeholder discussions, and cross-team alignment sessions. Excellent analytical, communication, documentation, facilitation, and standards-development capabilities. Experience working within large, federated, or regulated environments. Must be able to obtain the required Limited CBP Background Investigation (BI) prior to onboarding . Must be local to the Ashburn, Virginia area and willing to work from the client site 3-5 days per week . Must be legally authorized to work in the United States without employer sponsorship, now or in the future. Preferred Qualifications ITIL v4 or v5 certification. Prior federal contracting environment experience. Experience with enterprise architecture, IT operations, and data governance. Benefits Compensation $200,000-$230,000 per year as a W2 , negotiable for the right candidate. Benefits Medical insurance Dental insurance Vision insurance 401(k)

Job Description Job Description Description: Associate Network Security Engineer Cary, NC • Hybrid Our client is seeking an Associate Cybersecurity Engineer for a 12 month contract, with potential for permanent conversion, to support the Information Security organization. This role focuses on monitoring network security activities and operating and optimizing security infrastructure. The engineer will drive policy, rule, and architecture improvements to prevent and remediate incidents, perform security configuration changes, and collaborate with IT and business stakeholders on triage. The position emphasizes enterprise firewalls, SASE and ZTNA, identity and access management, Microsoft security tooling, and process development aligned to best practices and regulatory requirements. Rate : $42.00 - $48.00 per hour W2 Responsibilities: Monitor network security activities and maintain oversight of security infrastructure. Implement, monitor, and manage enterprise firewall solutions, including NGFW, to enforce network security policies. Operate and configure SASE capabilities including secure web gateways, ZTNA, and CASB. Execute security configuration changes and support incident prevention and remediation through policy, rule, and architecture optimization. Collaborate with IT and business stakeholders on security triage and operational support. Leverage Microsoft Security Suite such as Defender for Endpoint, Sentinel, and Entra/Azure AD across on premises and cloud environments. Develop and refine procedures, policies, and processes aligned with best practices and regulatory requirements. Recommend remediation measures to improve security posture and reduce risk. Communicate security concepts to cross functional teams and stakeholders. Perform other related duties as assigned. Experience Requirements: 3+ years in cloud or network security engineering, security operations, insider risk management, or security event management. Hands on experience with identity, firewall, cloud, and SIEM tools such as Microsoft Azure, Okta, Duo, Palo Alto, Fortinet, Zscaler, Windows Defender, OCI, and Sentinel. Ability to convey complex information risk and security issues in an actionable manner. Demonstrated judgment, urgency, ethical standards, regulatory awareness, customer service, and business integrity. Preferred proficiency with automation or scripting such as Ansible, Python, KQL, or PowerShell. Strong written and oral communication skills and the ability to work cross functionally with network, cloud, infrastructure, and application teams. Strong organizational skills with the ability to prioritize and deliver in a fast paced environment. Ability to accommodate approximately 5% travel. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve. Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and Affirmative Action Employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, color, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws. Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!

Job Description Job Description Palo Alto Firewall Engineer / SME (PCNSE) Location: Springfield, VA - on siteTime Type: Full time, ExemptClearance Required to Start: Active TS/SCI (U.S. citizenship required)Additional Requirement: Must be able to obtain and maintain a U.S. Government polygraphTravel: Up to 15%, local and CONUSSalary Range: $117,000 - $128,000 Own the Palo Alto estate - legacy iron through Prisma and Panorama.RISA is hiring a Palo Alto SME to be the focal point for every Palo Alto task, operation, and project on the Network Security Services team supporting an Intelligence Community customer. The work spans both ends of the estate: PA-3000 and PA-5000 hardware refreshes and legacy CLI on one side, Prisma Access, VM-Series, and Cortex on the other. You will talk to the owner here, not a recruiting queue.What You Will DoServe as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise.Lead the design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack.Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms.Run Panorama for centralized policy management across a fleet of physical and virtual firewalls.Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire.Own configuration management processes and SOPs for all Palo Alto platforms.Mentor junior engineers and act as the escalation point for complex troubleshooting.Liaise with contract, customer, and government DAA on network security status, policies, and procedures.What You'll BringU.S. citizenship and an active TS/SCI.Ability to successfully obtain and maintain a U.S. Government polygraph.Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10.7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments.Active PCNSE certification.DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start.Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement.Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP.Panorama template and device-group inheritance across a hybrid fleet.Advanced BGP, OSPF, IPSec VPN, and NAT.Nice to HavePCNSC or Prisma Certified SASE Professional (PCSAE).Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs.Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy.Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA.About RISARolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down.BenefitsMedical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays.RISA is an Equal Opportunity Employer.

Job Description Job Description About the Company : Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service. Security Engineer - Network & Identity: The Security Engineer (Network & Identity) is a hands-on engineering role within the IT team responsible for designing, implementing, securing, and automating Sungrow USA's network security, PKI and certificate management, and identity & access infrastructure across on-premises, cloud, and SaaS environments. This role serves as the technical owner for network security architecture, cryptographic services, certificate lifecycle management, authentication, and access controls. The position focuses on Zero Trust security, network segmentation, certificate-based authentication, and identity protection to reduce organizational risk and enable secure business operations and platform ownership rather than SOC operations, threat monitoring, or incident response. Essential Duties and Responsibilities: Network Security Design, implement, and maintain secure enterprise network architectures across corporate offices, data centers, cloud platforms, and remote workforce environments. Architect network segmentation, Zero Trust access controls, and secure connectivity standards using Fortinet and Zscaler security solutions. Develop and maintain Zero Trust architectures across network, identity, endpoint, application, and cloud environments. Design and administer secure remote access using Zscaler Private Access, VPN technologies, and identity-aware access controls. Manage firewall policies, network security controls, routing security, DNS security, and hybrid-cloud connectivity. Design and support Network Access Control architectures using IEEE 802.1X, RADIUS, and certificate-based authentication. Assess network security posture, develop remediation plans, and drive continuous security improvements. Cryptography, PKI & Certificate Management Own the enterprise PKI, cryptography, and certificate lifecycle management architecture, standards, and governance program. Design and manage certificate-based authentication and machine identity solutions for users, devices, servers, applications, cloud workloads, and network infrastructure across Azure, AWS, and hybrid environments. Implement and maintain certificate lifecycle automation using Microsoft Cloud PKI, Keyfactor, CyberArk Certificate Manager, EJBCA, DigiCert, AppViewX, or comparable platforms. Manage certificate issuance, enrollment, discovery, deployment, monitoring, renewal, revocation, auditing, and compliance across the enterprise. Design and support cryptographic services and certificate-based security controls, including TLS/mTLS, code signing, PKI trust hierarchies, certificate-based authentication, SCEP, PKCS, and machine identities. Establish PKI and cryptographic standards, key management practices, and security controls to support Zero Trust, regulatory compliance, and enterprise security requirements. Troubleshoot and resolve complex certificate, cryptographic, trust chain, authentication, and secure communications issues across enterprise systems and applications. Identity & Access Define authentication and authorization standards for workforce, partner, application, service, and machine identities. Design, implement, and maintain Microsoft Entra ID architecture, tenant governance, and identity security controls. Develop, test, and enforce Conditional Access policies and Zero Trust access controls. Implement and maintain MFA, passwordless authentication, phishing-resistant authentication, and Microsoft Entra ID Protection capabilities. Design and support enterprise SSO and federation integrations using SAML, OAuth 2.0, OpenID Connect, and SCIM. Implement least-privilege and risk-based access models across enterprise platforms. Administer RBAC, administrative separation, Microsoft Entra Privileged Identity Management, and least-privilege access controls. Govern application registrations, service principals, enterprise applications, API permissions, and managed identities. Support B2B collaboration, guest-user governance, external workforce access, and third-party identity integrations. Design and implement security controls across Microsoft Azure and AWS environments. Apply least privilege, RBAC, encryption, secrets management, and secure configuration standards to on-prem and cloud resources. Automate identity provisioning and deprovisioning, access governance, certificate management, configuration validation, and security operations. Create reusable secure-by-default templates and reduce manual administration through automation and orchestration Conduct access reviews, entitlement certifications, and identity governance activities. Education or Desired License and Certificates: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent professional experience. Microsoft Certified: Identity and Access Administrator Associate (SC-300) preferred. Microsoft Certified: Azure Security Engineer Associate (AZ-500) preferred. CCNA, Fortinet, Zscaler, AWS Security, CISSP, CISM, Terraform, or relevant PKI certification preferred Preferred Experience & Qualifications: 5+ years of experience in security engineering, identity & access management (IAM), network security, cloud security, or a related enterprise IT discipline. Hands-on experience with Microsoft Entra ID, including Conditional Access, MFA, SSO, Identity Protection, PIM, RBAC, identity governance, and modern authentication protocols (SAML, OAuth, OpenID Connect, SCIM). Experience designing, implementing, and securing enterprise identity, privileged access, and machine identity solutions across hybrid and multi-cloud environments. Hands-on experience with Fortinet, Zscaler (ZIA/ZPA), Zero Trust architectures, least-privilege access models, and network security controls. Experience designing and operating enterprise PKI, certificate lifecycle management, certificate-based authentication, and machine identity platforms such as Keyfactor, DigiCert, EJBCA, AppViewX, CyberArk Certificate Manager, or similar solutions. Experience securing Azure and AWS environments, including identity, networking, encryption, secrets management, logging, and security monitoring. Experience with PAM and IGA platforms such as CyberArk, Delinea, BeyondTrust, SailPoint, Saviynt, or similar technologies. Experience integrating identity, network, cloud, and security telemetry with SIEM and security operations platforms. Strong automation and Infrastructure as Code skills using PowerShell, Python, Microsoft Graph API, REST APIs, Terraform, or similar technologies. Strong troubleshooting skills across authentication, federation, certificates, PKI, network security, cloud access, application integrations, and enterprise identity services. Knowledge of cybersecurity and compliance frameworks including SOC 2, ISO/IEC 27001, NIST CSF, NIST 800-63, CIS Controls, Zero Trust, and NERC CIP. Competencies: Mandarin fluency preferred but not required. Strong analytical, troubleshooting, and problem-solving skills. Ability to work independently and collaboratively in a fast-paced environment. Excellent communication, stakeholder management, and technical documentation skills. Strong organization, attention to detail, initiative, and ownership. Ability to balance security, reliability, usability, scalability, and business requirements. Proactive approach to automation, standardization, and continuous improvement. Travel 5%-20% Work Location and Status: Full time, Hybrid at any Sungrow USA office in Phoenix, Costa Mesa, or Houston No visa sponsorship Compensation: Compensation commensurate with experience Competitive salary and annual bonus eligibility Comprehensive benefits package including health, dental, vision, and retirement plans Strong personal and company growth opportunities Sungrow is an equal opportunity employer. Due to strong interest in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.