9 jobs found

This job posting is anticipated to remain open for 30 days, from 18-Aug-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview Edward Jones is seeking a Senior AI Security Technical Architect to continue to build upon a defined enterprise AI security strategy, ensuring artificial intelligence and generative AI capabilities are designed, deployed, and operated in a secure, compliant, and responsible manner. This role is responsible for aligning business objectives, technology strategy, and security architecture to enable AI innovation with clear guardrails. The Senior AI Security Technical Architect will establish standards, patterns, and governance across multiple AI usage models, including third party SaaS AI solutions, internally developed AI/ML platforms, and emerging agentic and autonomous AI systems. By grounding AI security practices in industry frameworks such as NIST AI Risk Management Framework (AI RMF) and MITRE ATLAS, this role ensures AI risks are proactively identified, communicated, and mitigated while supporting the firm's broader digital transformation, cloud adoption, and regulatory obligations. What You'll Do Own and evolve the enterprise AI security architecture and strategy, aligning business goals, technology platforms, and risk management practices. Assist in defining secure by design patterns and standards for AI/ML systems Establish and maintain AI specific security artifacts Ensure consistent adoption of NIST AI RMF, MITRE ATLAS, CIS, ISO 27001 across AI initiatives. Establish architectural governance and enforce adherence to AI security standards across product teams and platforms. Influence AI design decisions early in the lifecycle to reduce downstream risk and rework. Partner with enterprise stakeholders to balance speed of innovation with risk tolerance and regulatory expectations. Evaluate AI frameworks, agents, vector databases, and third party AI platforms for security posture and enterprise readiness. Recommend and rationalize AI security tooling as part of the broader enterprise security strategy. Monitor emerging AI threats, regulatory guidance, and industry best practices to inform security strategy and standards. What Experience You'll Need Bachelor's degree in Computer Science, Engineering, or related field, or equivalent practical experience. 12+ years of experience in cybersecurity engineering or architecture within a complex enterprise environment. 4+ years of hands on experience securing or reviewing AI/ML systems and platforms. Strong understanding of: LLM architectures, embeddings, and Retrieval Augmented Generation (RAG) patterns End to end ML pipelines (training validation deployment inference) AI model supply chain risks (model registries, containers, dependencies, open source components) Zero Trust and identity centric security models Cloud security across Azure, AWS, and GCP Proven ability to influence architecture decisions and lead cross functional initiatives at the enterprise level. Excellent communication skills, with the ability to engage senior technical and business leaders. What Could Set You Apart Security certifications such as CISSP, CISM, CCSP, or SANS certifications. Experience contributing to responsible AI practices, explainability, or bias mitigation initiatives. Experience securing AI platforms in regulated industries, particularly financial services. Background supporting advanced encryption, cryptographic agility, or post quantum readiness. Demonstrated experience in incident response and enterprise risk management. Understanding of various regulatory requirements and laws, including but not limited to NYDFS Cybersecurity Regulations and FINRA Regulations Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page . Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act. Edward Jones is prohibited from hiring individuals with certain specified criminal history as set forth in Section 3(a)(39) and 15(b)(4) and Rule 17a-3(a)(12) of the Securities and Exchange Act of 1934, and conducts background reviews consistent with FINRA Rule 3110(e). A copy of a notice regarding the provisions of the Los Angeles County Fair Chance Ordinance is available at: dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf .

Job Description Job Description Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver on a scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate need for a Network Engineer at the journeyman level who will be primarily responsible for supporting the AFLCMC Air Force Security Assistance Directorate at Wright Patterson AFB, OH. The Air Force Security Assistance Directorate (AFSAC) delivers airpower capabilities to strengthen international partnerships and advance national security by providing Foreign Military Sales (FMS) support to all United States (US) partner nations, world-wide. Responsibilities include, but are not limited to the duties listed below: Provide primary network configuration and maintenance support to WPAFB's Site AF JWICS Infrastructure, including on-site support to all SCIFs located on WPAFB requiring AF JWICS access via the WPAFB Site project. Provide remote AF JWICS network advisement to regionally co-located industry partners utilizing the WPAFB Site project and remote AF JWICS network assistance to geographically separated Government SCIFs responsible to the WPAFB SSO and SIO, with travel authorized if mission and budget demands allow. Perform design, configuration, installation, upgrades, monitoring, troubleshooting, and routine change management functions for WPAFB Site AF JWICS network infrastructure. Interface and coordinate with the WPAFB Site AF JWICS ISSM for cybersecurity policy and Risk Management Framework (RMF) control implementation. Interface and coordinate with 88 CS, NASIC, AF IC, 690 ISS, ACC/A25J, and other agencies as necessary. Develop processes, conduct investigative research, and perform trend analysis actions as directed by the DAO, CISO, ISSM, SIO, or appointed Government official. Manage cybersecurity network management and monitoring tools, including Infoblox, SolarWinds, GEMONE, ISE, and similar tools. Develop and draft network-related artifacts required for continued Authority to Operate (ATO) and higher headquarters-issued taskings. Assist information technology specialists with troubleshooting and maintenance of collateral LAN systems, including NIPR, SIPR, and related systems, as required. Perform cryptographic equipment maintenance, hardware upgrades and replacement, firmware updates, and system configuration changes remotely or in person as required for supported locations. Perform COMSEC Responsible Officer (CRO) duties for AFLCMC/IN customers located in Buildings 11, 20, and 556 only. Work with the Site ISSM to acquire an ATO and comply with continuous monitoring criteria. Requirements Must have an active or current Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility, Bachelor's or Master's Degree in a related field and at least three (3) years of experience in the respective technical / professional discipline being performed, three (3) of which must be in the DoD OR, seven (7) years of directly related experience with proper certifications as described in the PWS labor category performance requirements, five (5) of which must be in the DoD. Specialized knowledge and experience required . Position-appropriate certification/qualification for DoD 8140 primary work role code 441-Network Operations at Intermediate proficiency level, secondary work role code 451-System Administrator at Intermediate proficiency level, and third work role code 411-Technical Support Specialist at Intermediate proficiency level. Meet DoD 8140 criteria for foundational, residential, and continuous professional development to remain qualified, and maintain all certifications and training requirements in good standing as determined by DoD, DAF, and IC policy. Be familiar with current security policy and manuals, with the ability to work in a dynamic environment and effectively interact with DoD, military/civilian personnel, and industry partners. Possess a high degree of originality, creativity, and initiative requiring minimal supervision. Be able to lift up to 50 pounds. Be willing to travel within the organizational geographic Area of Responsibility (AOR), including potential ground and air transportation. Must be eligible for access to Special Access Program (SAP) information if required and be willing to submit to a counterintelligence polygraph. Must be able to maintain elevated privileged access to information technology systems. Must have the means to travel to and from required work locations to perform assigned tasks, as a Government vehicle is not available. Battery-operated vehicles are available for use on Area B if personnel meet minimum operating requirements. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national security and public well-being. Growth-Oriented Environment - Learn from technical leaders, innovate within Agentic AI, and mentor those around you in AI best practices. Culture of Empowerment - You'll be part of a team that values innovation, trust, collaboration, and mission success. Please join us, as together we build a better world one mission at a time powered by Technology and its People! Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development

Job Description Job Description K2 is building the largest and highest-power satellites ever flown, unlocking performance levels previously out of reach across every orbit. Backed by over $1 billion in total funding from leading investors including Altimeter Capital, ICONIQ, Kleiner Perkins, Lightspeed Venture Partners, Redpoint Ventures, and T. Rowe Price - and with over $1 billion in signed contracts across commercial and US government customers, we're mass-producing the highest-power satellite platforms ever built for missions from LEO to deep space. The rise of heavy-lift launch vehicles is shifting the industry from an era of mass constraint to one of mass abundance, and we believe this new era demands a fundamentally different class of spacecraft. Engineered to survive the harshest radiation environments and to fully capitalize on today's and tomorrow's massive rockets, K2 satellites deliver unmatched capability at constellation scale and across multiple orbits. With multiple launches in 2027 and plans to scale to 100 satellites a year, we're Building Bigger - helping develop the solar system and build toward a Kardashev Type II (K2) civilization. If you are a motivated individual who thrives in a fast-paced environment and you're excited about contributing to the success of a high-growth Series D-funded company, we'd love for you to apply. The Role As K2's Crypto Engineer, you will own the architecture and design of our Type-1 cryptographic integrations across the spacecraft and ground segment. You will carry these designs cradle-to-grave - from concept and trade studies, through implementation and integration, to NSA certification and accreditation, and into on-orbit operations. You'll define how K2's satellites protect command, telemetry, and mission data; partner with NSA, government customers, and certification authorities; and ensure our COMSEC architecture meets the bar for national-security missions while fitting the pace and scale of a high-volume satellite production line. This is a foundational role: you'll set the cryptographic standards the rest of the program builds against. Responsibilities Own the end-to-end architecture and design of Type-1 cryptographic integrations across the spacecraft, payload, and ground segment Lead crypto designs from concept and trade studies through implementation, integration, certification, and on-orbit operations Define COMSEC architecture for command, telemetry, and mission data protection, including encryption, key management, and key loading approaches Serve as K2's primary technical interface to NSA, certification authorities, and government customers on cryptographic certification and accreditation Drive the certification and accreditation effort, developing the artifacts, test evidence, and documentation required to achieve and maintain approval to operate Partner with flight software, avionics, RF, ground, and security teams to integrate cryptographic functions into the broader system architecture Support COMSEC handling, key management planning, and operational procedures for on-orbit fleet operations Identify and mitigate cryptographic and supply-chain risks across design and production Establish reusable cryptographic standards, interfaces, and processes that scale across K2's satellite production line Qualifications Bachelor's degree or higher in electrical engineering, computer engineering, computer science, or a related discipline 5+ years of engineering experience with cryptographic systems, COMSEC, or secure communications Direct experience with NSA Type-1 cryptographic equipment, integration, and certification processes Working knowledge of key management, key loading, and COMSEC handling requirements Experience taking a hardware or system design through certification and accreditation to operational use Strong systems-level thinking with the ability to reason from first principles across hardware, software, and RF boundaries Ability to work in a fast-paced, autonomously driven, and demanding startup atmosphere with competing priorities and aggressive schedules Nice to Have Experience with spacecraft, satellite, or other space-system cryptographic integrations Familiarity with cryptographic modernization initiatives and current NSA-approved algorithms and equipment Experience with RMF/ATO, JSIG, or other accreditation frameworks Background in RF, link design, or secure command and telemetry systems Experience supporting on-orbit or fielded operations Additional Requirements Ability to travel up to 25% of the time Active Top Secret or Top Secret SCI clearance required; ability to obtain and maintain access to additional programs as needed Ability to work irregular business hours to support critical project timelines or operations This role requires access to information controlled under ITAR/EAR; applicants must be a U.S. Person as defined by applicable regulations Compensation and Benefits Base salary range for this role is $160,000 - $245,000 + equity in the company Salary will be based on several factors including, but not limited to: knowledge and skills, education, and experience level Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks If you don't meet 100% of the preferred skills and experience, we encourage you to still apply! Building a spacecraft unlike any other requires a team unlike any other and non-traditional career twists and turns are encouraged! If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know. Export Compliance As defined in the ITAR, "U.S. Persons" include U.S. citizens, lawful permanent residents (i.e., Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a "U.S. Person." The person hired for this role will have access to information and items controlled by U.S. export control regulations, including the export control regulations outlined in the International Traffic in Arms Regulation (ITAR). The person hired for this role must therefore either be a "U.S. person" as defined by 22 C.F.R. 120.15 or otherwise eligible for a federally issued export control license. Equal Opportunity K2 Space is an Equal Opportunity Employer; employment with K2 Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Job Description Job Description About the Company : Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service. Security Engineer - Network & Identity: The Security Engineer (Network & Identity) is a hands-on engineering role within the IT team responsible for designing, implementing, securing, and automating Sungrow USA's network security, PKI and certificate management, and identity & access infrastructure across on-premises, cloud, and SaaS environments. This role serves as the technical owner for network security architecture, cryptographic services, certificate lifecycle management, authentication, and access controls. The position focuses on Zero Trust security, network segmentation, certificate-based authentication, and identity protection to reduce organizational risk and enable secure business operations and platform ownership rather than SOC operations, threat monitoring, or incident response. Essential Duties and Responsibilities: Network Security Design, implement, and maintain secure enterprise network architectures across corporate offices, data centers, cloud platforms, and remote workforce environments. Architect network segmentation, Zero Trust access controls, and secure connectivity standards using Fortinet and Zscaler security solutions. Develop and maintain Zero Trust architectures across network, identity, endpoint, application, and cloud environments. Design and administer secure remote access using Zscaler Private Access, VPN technologies, and identity-aware access controls. Manage firewall policies, network security controls, routing security, DNS security, and hybrid-cloud connectivity. Design and support Network Access Control architectures using IEEE 802.1X, RADIUS, and certificate-based authentication. Assess network security posture, develop remediation plans, and drive continuous security improvements. Cryptography, PKI & Certificate Management Own the enterprise PKI, cryptography, and certificate lifecycle management architecture, standards, and governance program. Design and manage certificate-based authentication and machine identity solutions for users, devices, servers, applications, cloud workloads, and network infrastructure across Azure, AWS, and hybrid environments. Implement and maintain certificate lifecycle automation using Microsoft Cloud PKI, Keyfactor, CyberArk Certificate Manager, EJBCA, DigiCert, AppViewX, or comparable platforms. Manage certificate issuance, enrollment, discovery, deployment, monitoring, renewal, revocation, auditing, and compliance across the enterprise. Design and support cryptographic services and certificate-based security controls, including TLS/mTLS, code signing, PKI trust hierarchies, certificate-based authentication, SCEP, PKCS, and machine identities. Establish PKI and cryptographic standards, key management practices, and security controls to support Zero Trust, regulatory compliance, and enterprise security requirements. Troubleshoot and resolve complex certificate, cryptographic, trust chain, authentication, and secure communications issues across enterprise systems and applications. Identity & Access Define authentication and authorization standards for workforce, partner, application, service, and machine identities. Design, implement, and maintain Microsoft Entra ID architecture, tenant governance, and identity security controls. Develop, test, and enforce Conditional Access policies and Zero Trust access controls. Implement and maintain MFA, passwordless authentication, phishing-resistant authentication, and Microsoft Entra ID Protection capabilities. Design and support enterprise SSO and federation integrations using SAML, OAuth 2.0, OpenID Connect, and SCIM. Implement least-privilege and risk-based access models across enterprise platforms. Administer RBAC, administrative separation, Microsoft Entra Privileged Identity Management, and least-privilege access controls. Govern application registrations, service principals, enterprise applications, API permissions, and managed identities. Support B2B collaboration, guest-user governance, external workforce access, and third-party identity integrations. Design and implement security controls across Microsoft Azure and AWS environments. Apply least privilege, RBAC, encryption, secrets management, and secure configuration standards to on-prem and cloud resources. Automate identity provisioning and deprovisioning, access governance, certificate management, configuration validation, and security operations. Create reusable secure-by-default templates and reduce manual administration through automation and orchestration Conduct access reviews, entitlement certifications, and identity governance activities. Education or Desired License and Certificates: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent professional experience. Microsoft Certified: Identity and Access Administrator Associate (SC-300) preferred. Microsoft Certified: Azure Security Engineer Associate (AZ-500) preferred. CCNA, Fortinet, Zscaler, AWS Security, CISSP, CISM, Terraform, or relevant PKI certification preferred Preferred Experience & Qualifications: 5+ years of experience in security engineering, identity & access management (IAM), network security, cloud security, or a related enterprise IT discipline. Hands-on experience with Microsoft Entra ID, including Conditional Access, MFA, SSO, Identity Protection, PIM, RBAC, identity governance, and modern authentication protocols (SAML, OAuth, OpenID Connect, SCIM). Experience designing, implementing, and securing enterprise identity, privileged access, and machine identity solutions across hybrid and multi-cloud environments. Hands-on experience with Fortinet, Zscaler (ZIA/ZPA), Zero Trust architectures, least-privilege access models, and network security controls. Experience designing and operating enterprise PKI, certificate lifecycle management, certificate-based authentication, and machine identity platforms such as Keyfactor, DigiCert, EJBCA, AppViewX, CyberArk Certificate Manager, or similar solutions. Experience securing Azure and AWS environments, including identity, networking, encryption, secrets management, logging, and security monitoring. Experience with PAM and IGA platforms such as CyberArk, Delinea, BeyondTrust, SailPoint, Saviynt, or similar technologies. Experience integrating identity, network, cloud, and security telemetry with SIEM and security operations platforms. Strong automation and Infrastructure as Code skills using PowerShell, Python, Microsoft Graph API, REST APIs, Terraform, or similar technologies. Strong troubleshooting skills across authentication, federation, certificates, PKI, network security, cloud access, application integrations, and enterprise identity services. Knowledge of cybersecurity and compliance frameworks including SOC 2, ISO/IEC 27001, NIST CSF, NIST 800-63, CIS Controls, Zero Trust, and NERC CIP. Competencies: Mandarin fluency preferred but not required. Strong analytical, troubleshooting, and problem-solving skills. Ability to work independently and collaboratively in a fast-paced environment. Excellent communication, stakeholder management, and technical documentation skills. Strong organization, attention to detail, initiative, and ownership. Ability to balance security, reliability, usability, scalability, and business requirements. Proactive approach to automation, standardization, and continuous improvement. Travel 5%-20% Work Location and Status: Full time, Hybrid at any Sungrow USA office in Phoenix, Costa Mesa, or Houston No visa sponsorship Compensation: Compensation commensurate with experience Competitive salary and annual bonus eligibility Comprehensive benefits package including health, dental, vision, and retirement plans Strong personal and company growth opportunities Sungrow is an equal opportunity employer. Due to strong interest in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.

Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Training & development Tuition assistance Vision insurance Job Description SarelaTech is seeking an experienced Network Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, who will support an extensive digital modernization program critical to Defense Threat Reduction Agency (DTRA) in Fort Belvoir, VA. The Network Engineer will work closely with the Leidos and Government technical leadership team to help drive innovation, growth, and efficiencies within the I3TS portfolio. Primary Responsibilities: The Commercial Solutions for Classified (CSfC) Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries utilizing Cisco and Aruba IPsec/SSL VPNs and dynamic routing (BGP/OSPF) in strict compliance with NSA Capability Packages. In this role, you will author and tune Palo Alto NGFW security policies and IDS/IPS threat prevention signatures, implement enterprise network access control and 802.1X policies via Cisco ISE and Aruba ClearPass, integrate enterprise PKI/OCSP services and hardened NTP, and generate key engineering artifacts required for NSA CSfC PMO registration and compliance auditing. Architect, deploy, and maintain CSfC infrastructure operating within Black/Gray/Red networks. Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Mobile Access (MA), Multi-Sight (MSC) Capability Packages, with Campus Wireless LAN (WLAN) experience a bonus. Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Understanding of NIAP approved list and monitors for changes Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Capability Packages (MSC, MA, and CWLAN). Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Implement enterprise routing protocols (BGP, OSPF) alongside redundant outer and inner IPsec VPN tunnels across Cisco and Aruba appliances. Configure remote access SSL VPNs and ensure end-to-end traffic separation. Author, optimize, and audit Palo Alto Next-Generation Firewall (NGFW) security policies, App-ID, User-ID, and URL filtering. Configure and tune Palo Alto IDS/IPS threat signatures, anti-spyware, and vulnerability protection. Architect and manage Cisco Identity Services Engine (ISE) and Aruba ClearPass policy managers for 802.1X network access control, RADIUS/TACACS+ administration, posture assessment, and endpoint profiling. Integrate enterprise Public Key Infrastructure (PKI) components, managing X.509 certificate lifecycles, Certificate Authorities (CAs), CRL/OCSP validation, and hardened, authenticated Network Time Protocol (NTP) infrastructure. Prepare CSfC compliance artifacts, Key Management Plans (KMPs), Continuous Monitoring Plans (CMPs), and registration packages for NSA CSfC PMO submission. Required Qualifications: Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or related STEM degree program, and 12-15 years of relevant experience. Specific experience, education and training may be considered in lieu of degree. 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor enterprise environments Active TS/SCI Clearance Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP). Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP Proven expertise configuring Cisco (IOS-XE/ASR) and Aruba (Mobility Controllers/Gateways) IPsec and SSL VPNs, including IKEv2, Suite B/CNSA cryptography, and dynamic routing (BGP, OSPF). Demonstrated engineering experience with Palo Alto Networks firewalls (PAN-OS), Panorama central management, and advanced IDS/IPS inspection profiles. Hands-on deployment experience with both Cisco ISE and/or Aruba ClearPass implementing 802.1X, EAP-TLS authentication, and role-based access policies. Strong working knowledge of X.509 certificates, CA hierarchy integration, certificate revocation lists (CRLs), OCSP, and secure NTP stratum synchronization. Direct prior experience preparing and successfully registering NSA CSfC Capability Package solutions (Mobile Access, Multi-Site Connectivity, or Campus WLAN). Deep understanding of Commercial National Security Algorithm (CNSA) Suite requirements, post-quantum readiness considerations, and hardware security modules (HSMs). Familiarity with Ansible, for automating network device configuration backups, policy compliance checks, and certificate rotations. Certified in any of the following - Cisco CCNP/CCIE (Security or Enterprise), Palo Alto PCNSE, Aruba Certified ClearPass Expert (ACCX), or Aruba Certified Mobility Expert (ACMX).

We are looking for an Embedded Software Development Manager to lead the team building and scaling VirtSat - Leo's virtual satellite simulation platform. KSS enables developers and pipelines across Leo to create, provision, and test virtual satellites, ground gateways, customer terminals, and TT&C antennas on EC2 bare-metal infrastructure running KVM/QEMU. You will own the Graviton virtualization layer and lead the team responsible for VM lifecycle, LRU boot, subsystem provisioning, and software deployment for every virtual entity in the constellation. You'll work at the intersection of cloud infrastructure, embedded Linux, and satellite operations - leading the team that builds the platform every Leo satellite software release is tested on before launch. Key job responsibilities Lead a team of embedded engineers building and operating the Graviton bare-metal virtualization layer (KVM/QEMU VM management, subsystem provisioning, health monitoring, and fault recovery) Partner with 10+ client teams across satellite, ground, networking, and security organizations to drive VirtSat adoption Drive platform reliability to 99.96% availability with optimized latency (target: Own the custom AMI pipeline, provisioning scripts, and plugin framework that deploy satellite software onto emulated LRUs Scale the platform to 4K+ concurrent virtual entities Hire, develop, and retain top embedded engineering talent Define technical roadmap for fidelity improvements (HSM crypto emulation, EFUSE emulation, CAN bus simulation, error injection frameworks) Reduce HITL dependency by expanding the scope of tests that run on VirtSat Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. BASIC QUALIFICATIONS - 5+ years of people management, managing engineers experience - Experience with embedded systems, Linux systems programming, or virtualization (KVM/QEMU) - Experience building and operating distributed systems at scale (AWS services - EC2, ECS, Step Functions, DynamoDB) - Experience with infrastructure-as-code (CDK, CloudFormation) - Track record of hiring, developing, and retaining strong engineering teams - BS/MS in Computer Science, Electrical Engineering, or equivalent PREFERRED QUALIFICATIONS - Experience managing teams that own both service infrastructure and embedded/guest-OS layers - Experience with ARM64/Graviton bare-metal instances - Experience with QEMU device emulation or custom QEMU plugins - Experience with network virtualization (WireGuard, Transit Gateway, IPAM) - Familiarity with satellite systems, HITL test environments, or simulation platforms - Experience with embedded Linux (Yocto, systemd, device trees, boot processes) - Experience with CI/CD pipelines, automated testing (Hydra, Spock), and developer tooling - Experience with Rust for systems programming - Experience with certificate provisioning, secure boot, or HSM interfaces Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at . USA, WA, Redmond - 184 200.00 USD annually