17 jobs found

Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Training & development Tuition assistance Vision insurance Job Description SarelaTech is seeking an experienced Network Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, who will support an extensive digital modernization program critical to Defense Threat Reduction Agency (DTRA) in Fort Belvoir, VA. The Network Engineer will work closely with the Leidos and Government technical leadership team to help drive innovation, growth, and efficiencies within the I3TS portfolio. Primary Responsibilities: The Commercial Solutions for Classified (CSfC) Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries utilizing Cisco and Aruba IPsec/SSL VPNs and dynamic routing (BGP/OSPF) in strict compliance with NSA Capability Packages. In this role, you will author and tune Palo Alto NGFW security policies and IDS/IPS threat prevention signatures, implement enterprise network access control and 802.1X policies via Cisco ISE and Aruba ClearPass, integrate enterprise PKI/OCSP services and hardened NTP, and generate key engineering artifacts required for NSA CSfC PMO registration and compliance auditing. Architect, deploy, and maintain CSfC infrastructure operating within Black/Gray/Red networks. Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Mobile Access (MA), Multi-Sight (MSC) Capability Packages, with Campus Wireless LAN (WLAN) experience a bonus. Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Understanding of NIAP approved list and monitors for changes Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Capability Packages (MSC, MA, and CWLAN). Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Implement enterprise routing protocols (BGP, OSPF) alongside redundant outer and inner IPsec VPN tunnels across Cisco and Aruba appliances. Configure remote access SSL VPNs and ensure end-to-end traffic separation. Author, optimize, and audit Palo Alto Next-Generation Firewall (NGFW) security policies, App-ID, User-ID, and URL filtering. Configure and tune Palo Alto IDS/IPS threat signatures, anti-spyware, and vulnerability protection. Architect and manage Cisco Identity Services Engine (ISE) and Aruba ClearPass policy managers for 802.1X network access control, RADIUS/TACACS+ administration, posture assessment, and endpoint profiling. Integrate enterprise Public Key Infrastructure (PKI) components, managing X.509 certificate lifecycles, Certificate Authorities (CAs), CRL/OCSP validation, and hardened, authenticated Network Time Protocol (NTP) infrastructure. Prepare CSfC compliance artifacts, Key Management Plans (KMPs), Continuous Monitoring Plans (CMPs), and registration packages for NSA CSfC PMO submission. Required Qualifications: Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or related STEM degree program, and 12-15 years of relevant experience. Specific experience, education and training may be considered in lieu of degree. 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor enterprise environments Active TS/SCI Clearance Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP). Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP Proven expertise configuring Cisco (IOS-XE/ASR) and Aruba (Mobility Controllers/Gateways) IPsec and SSL VPNs, including IKEv2, Suite B/CNSA cryptography, and dynamic routing (BGP, OSPF). Demonstrated engineering experience with Palo Alto Networks firewalls (PAN-OS), Panorama central management, and advanced IDS/IPS inspection profiles. Hands-on deployment experience with both Cisco ISE and/or Aruba ClearPass implementing 802.1X, EAP-TLS authentication, and role-based access policies. Strong working knowledge of X.509 certificates, CA hierarchy integration, certificate revocation lists (CRLs), OCSP, and secure NTP stratum synchronization. Direct prior experience preparing and successfully registering NSA CSfC Capability Package solutions (Mobile Access, Multi-Site Connectivity, or Campus WLAN). Deep understanding of Commercial National Security Algorithm (CNSA) Suite requirements, post-quantum readiness considerations, and hardware security modules (HSMs). Familiarity with Ansible, for automating network device configuration backups, policy compliance checks, and certificate rotations. Certified in any of the following - Cisco CCNP/CCIE (Security or Enterprise), Palo Alto PCNSE, Aruba Certified ClearPass Expert (ACCX), or Aruba Certified Mobility Expert (ACMX).

Job Description Job Description About SimpliSafe We're a high-tech home security company that's passionate about protecting the life you've built and our mission of keeping Every Home Secure. And we've created a culture here that cares just as deeply about the career you're building. Ours is a no ego culture of collaboration and innovation where those seeking their next challenge can find big opportunities and make a huge impact on the lives of all those who we protect. We don't just want you to work here. We want you to grow and thrive here. We're embracing a hybrid work model that enables our teams to split their time between office and home. Hybrid for us means we expect our teams to come together in our state-of-the-art office on two core days, typically Tuesday, Wednesday, or Thursday - working together in person and choosing where they work for the remainder of the week. We all benefit from flexibility and get to use the best of both worlds to get our work done. Why are we hiring? Well, we're growing and thriving. So, we need smart, talented, and humble people who share our values to join us as we disrupt the home security space and relentlessly pursue our mission of keeping Every Home Secure. What You'll Do As an Enterprise Security Engineer, you will drive the security and governance for our corporate ecosystem. In this role, you will focus on hardening our core corporate environment, securing our enterprise data ecosystem, and assist in building the technical guardrails for our adoption of artificial intelligence. You'll report to the Manager of Enterprise Security and will partner closely with IT, Legal and business teams to ensure that our workforce remains agile, our corporate data remains protected, and our use of AI is both highly innovative and appropriately governed. Primary Responsibilities Secure the Corporate Application Ecosystem: Own the security configuration, threat modeling, and continuous monitoring of our enterprise applications, specifically hardening collaboration tools like Okta, Google Workspace, Slack, and the Atlassian suite (Jira/Confluence). Harden the Enterprise Fleet: Drive improvements in the configuration and management of our company devices, MacOS, Windows, Linux, iOS and Android. Govern Enterprise Data: Define and enforce security baselines and data governance strategies within our Corporate Applications & Data Platforms to protect sensitive enterprise data and ensure strict compliance and auditing. Build Guardrails for Secure AI Adoption: Use security frameworks for the standardization and safe deployment of LLMs and generative AI vendors, specifically securing internal and third-party integrations with our Enterprise AI tools while mitigating risks like data leakage and prompt injection. Risk & Vendor Assessments: Evaluate new corporate tools and AI integrations, translating technical risks into actionable business guidelines for cross-functional stakeholders. What You'll Bring 4+ years of experience in information security, with a background in hardening corporate applications, identity architecture, or data protection. Data Security Proficiency: Hands-on experience securing modern SaaS platforms, specifically managing access controls, data security policies and auditing. Zero-Trust & Conditional Access Fluency: Practical understanding of securing distributed workforces using Endpoint Context to enforce compliant device requirements. Familiarity with AI/LLM Security: Strong grasp of the practical strategies for safely implementing AI services like Anthropic without compromising enterprise data privacy. Collaborative Communication: An ability to articulate complex application and data risks clearly to both highly technical data engineers and non-technical business partners. Automation Mindset: Experience using scripting languages and infrastructure-as-code (e.g., Terraform, Python, Bash, or PowerShell) to automate security checks, access reviews, or configuration tracking. What Values You'll Share Customer Obsessed - Building deep empathy for our customers, putting them at the core of our work, and developing strong, long-term relationships with them. Aim High - Always challenging ourselves and others to raise the bar. No Ego - Maintaining a "no job too small" attitude, and an open, inclusive and humble style. One Team - Taking a highly collaborative approach to achieving success. Lift As We Climb - Investing in developing others and helping others around us succeed. Lean & Nimble - Working with agility and efficiency to experiment in an often ambiguous environment. What We Offer A mission- and values-driven culture and a safe, inclusive environment where you can build, grow and thrive A comprehensive total rewards package that supports your wellness and provides security for SimpliSafers and their families (For more information on our total rewards please click here ) Free SimpliSafe system and professional monitoring for your home. Employee Resource Groups (ERGs) that bring people together, give opportunities to network, mentor and develop, and advocate for change. The target annual base pay range for this role is $100,000 to $124,000 This target annual base pay range represents our good-faith estimate of what we expect to pay for this role. We use a market-based compensation approach to set our target annual base pay ranges and make adjustments annually. We carefully tailor individual compensation packages, including base pay, taking into consideration employees' job-related skills, experience, qualifications, work location, and other relevant business factors. Beyond base pay, we offer a Total Rewards package that may include participation in our annual bonus program, equity, and other forms of compensation, in addition to a full range of medical, retirement, and lifestyle benefits. More details can be found here. We're committed to fair and equitable pay practices, as well as pay transparency. We regularly review our programs to ensure they remain competitive and aligned with our values. We wholeheartedly embrace and actively seek applications from all individuals, no matter how they identify. We are committed to cultivating a diverse and inclusive workplace, and we believe our work is enriched when we incorporate a multitude of perspectives, backgrounds, and experiences. We want everyone who works here to thrive and contribute to not only our mission of keeping every home secure, but also to making our workplace safe and supportive for others. If a reasonable accommodation may be needed to fully participate in the job application or interview process, to perform the essential functions of a position, or to receive other benefits and privileges of employment, please contact .

Job Description Job Description We are seeking an experienced Cloud Network Security Engineer to own network connectivity between a federal government customer's on-premises infrastructure and its cloud environments, currently spanning Microsoft Azure and AWS. This is a fully onsite role in Washington, D.C. or Bethesda, MD. This is a senior, hands-on engineering role responsible for the configuration, troubleshooting, security, and lifecycle management of hybrid and multi-cloud network infrastructure. The engineer will serve as a primary technical bridge between the customer's on-premises network organization and cloud/platform teams. The ideal candidate combines deep traditional networking expertise with hands-on cloud networking and security experience and understands how network architecture, routing, security controls, and capacity constraints affect application and platform design. What You'll Do As a Cloud Network Security Engineer, you will: Configure and maintain hybrid and multi-cloud networking components, including virtual networks, gateways, site-to-site VPNs, and dedicated circuit connectivity across Azure and AWS. Manage technologies including Azure VNets, ExpressRoute, Virtual WAN, AWS VPCs, Transit Gateways, DNS, IPAM, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policies across cloud and enterprise platforms, including NSGs, Azure Firewall, Palo Alto, and Cisco. Perform firewall policy configuration, log analysis, and troubleshooting of complex connectivity and security issues. Design and optimize routing and traffic engineering using BGP, route tables, and user-defined routes, accounting for application traffic patterns, bandwidth constraints, and mission requirements. Manage DNS configurations, including Azure DNS and Private DNS Zones, and IP address management across Azure environments. Deploy and maintain Private Link and Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, availability, and security across on-premises and cloud environments. Develop and maintain Infrastructure-as-Code (IaC) to enable repeatable, auditable network configuration and deployment. Maintain network diagrams, technical documentation, and standard operating procedures. Respond to and resolve network incidents within established SLAs and coordinate with telecommunications carriers and colocation providers when necessary. Partner with security, infrastructure, application, and cloud teams to design network solutions for new workloads, migrations, and long-term multi-cloud initiatives. Required Qualifications Active Top Secret clearance with SCI eligibility. U.S. citizenship required. Bachelor's degree in a related technical field or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Strong understanding of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, BGP, and VPN technologies. CompTIA Security+ certification. Preferred Qualifications Hands-on experience with both Azure networking (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS networking (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups). Experience troubleshooting complex hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering enterprise firewall platforms, particularly Palo Alto and Cisco, including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code technologies such as Terraform, Bicep, ARM templates, or CloudFormation. Strong understanding of network security principles, including segmentation, least-privilege access, firewall policy management, and secure cloud connectivity. Demonstrated ability to independently own and lead network engineering efforts within a complex customer environment. Microsoft Certified: Azure Network Engineer Associate, Azure Administrator Associate, and/or AWS Certified Advanced Networking - Specialty. Experience with multi-region or multi-cloud architectures utilizing technologies such as Azure Virtual WAN, Azure Front Door, AWS Transit Gateway, or AWS Direct Connect. Experience with carrier cloud-connect or colocation solutions such as AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, or Digital Realty. Scripting and automation experience using PowerShell, Python, Azure CLI, or AWS CLI. Familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments, including FedRAMP and NIST 800-53. Compensation The estimated salary range for this position is $175,000 - $200,000 annually, based on market benchmarks within the Washington, D.C. metropolitan area. This range represents a good faith estimate and may vary depending on several factors, including the scope of the role, geographic location, education, certifications, technical skills, and overall relevant experience. Company Description Mission Bridge Partners is a federal talent advisory and government contracting staffing firm focused on connecting mission critical programs with mission-ready talent. We partner with prime contractors, growth focused federal integrators, and program delivery teams to build high performing workforces aligned with specialized contract requirements. We understand the complexities of the federal marketplace; proposal deadlines, key personnel commitments, clearance constraints, labor category compliance, and rapid task order ramp-ups. Our approach is defined by precision, responsiveness, and disciplined execution. From capture through delivery, Mission Bridge Partners operates as an extension of our clients' teams, reducing staffing risk, accelerating hiring timelines and strengthening program performance. Our expertise includes: • Cleared recruiting (Public Trust through TS/SCI) • Direct hire placement and talent acquisition support • Capture and proposal staffing strategy • Key personnel identification and commitment support • Tactical recruiting advisory for scaling GovCon organizations Our team brings decades of experience supporting federal programs across agencies including DHS, DOD, DOS, DOJ, HHS, and VA. We work with organizations that understand successful federal programs depend not only on capability, but on having the right people in place and ready to deliver from day one. Mission Bridge Partners Bridging mission demands with mission-ready talent. Company Description Mission Bridge Partners is a federal talent advisory and government contracting staffing firm focused on connecting mission critical programs with mission-ready talent. We partner with prime contractors, growth focused federal integrators, and program delivery teams to build high performing workforces aligned with specialized contract requirements. We understand the complexities of the federal marketplace; proposal deadlines, key personnel commitments, clearance constraints, labor category compliance, and rapid task order ramp-ups. Our approach is defined by precision, responsiveness, and disciplined execution. From capture through delivery, Mission Bridge Partners operates as an extension of our clients' teams, reducing staffing risk, accelerating hiring timelines and strengthening program performance. Our expertise includes: • Cleared recruiting (Public Trust through TS/SCI) • Direct hire placement and talent acquisition support • Capture and proposal staffing strategy • Key personnel identification and commitment support • Tactical recruiting advisory for scaling GovCon organizations Our team brings decades of experience supporting federal programs across agencies including DHS, DOD, DOS, DOJ, HHS, and VA. We work with organizations that understand successful federal programs depend not only on capability, but on having the right people in place and ready to deliver from day one. Mission Bridge Partners Bridging mission demands with mission-ready talent.

Vaco is partnering with a national retail organization to hire a Manager of Cybersecurity Operations to lead and mature core security operations programs across the enterprise. This is a hands-on leadership role overseeing SOC operations, vulnerability management, endpoint security, DLP, incident response, and security automation. This role is ideal for a cybersecurity leader who can operate at both the program and technical execution level. The team needs someone who can manage internal security talent, hold external MSSP partners accountable, improve alert handling and escalation processes, and build repeatable capabilities around detection, response, reporting, and automation. The environment is collaborative, fast-moving, and highly cross-functional, requiring someone who can communicate clearly across IT, GRC, engineering, and business teams. This position is based in Tempe, Arizona and requires onsite presence Monday through Thursday, with Fridays optional remote. What You'll Be Doing Manage and mature day-to-day SOC operations, including monitoring, alert triage, escalation, and incident response workflows Partner closely with an external MSSP to drive SLA accountability, improve alert quality, and ensure critical issues are escalated quickly Lead vulnerability management efforts across tools such as Rapid7, Defender, and related platforms, including prioritization, remediation tracking, and executive reporting Oversee endpoint security and management initiatives across Intune, Jamf, Defender, and related endpoint controls Drive improvements to SIEM and SOAR capabilities, including automation opportunities for level 1 response, alert enrichment, and repeatable playbooks Build and refine incident response processes, including playbooks, simulations, post-incident reviews, and lessons learned Partner with IT, GRC, engineering, and business stakeholders to improve security posture across the organization Support DLP strategy and monitoring to protect sensitive data across SaaS, cloud, and endpoint environments Use security metrics, scorecards, and framework alignment to communicate program maturity and areas for improvement Evaluate how AI can be used responsibly in security operations, including automation of response workflows and protection of AI-enabled systems Mentor and develop security team members while remaining hands-on with technical operations when needed Help define and operationalize security programs that reduce risk while supporting business velocity Required Experience 6 or more years of experience in cybersecurity, information security operations, incident response, infrastructure, or related technical security roles Proven experience managing or leading SOC operations, either in a corporate environment or MSSP setting Strong understanding of the end-to-end incident response lifecycle, from alert intake through containment, remediation, and post-incident review Hands-on experience with cybersecurity technologies such as MDR, EDR, SIEM, SOAR, vulnerability management, and endpoint security tools Experience maturing vulnerability management programs, including risk prioritization, remediation coordination, and reporting Experience partnering with or managing MSSP relationships and holding vendors accountable to performance expectations Strong understanding of security frameworks and compliance considerations such as NIST, CIS Controls, PCI, SOX, and CCPA Ability to lead without authority and collaborate effectively across IT, engineering, GRC, and business teams Experience managing high-pressure incidents and making informed decisions under time-sensitive conditions Understanding of AI concepts and their impact on cybersecurity operations, including AI-enabled threats and secure use of AI tools Bachelor's degree in a related field, or equivalent additional experience Nice to Have CISM, CISSP, or similar security certification Experience with Rapid7, Microsoft Defender, Intune, Jamf, Workato, or comparable security and automation tools Experience building SOAR workflows or security automation playbooks Familiarity with cloud security controls across AWS, Azure, or GCP Experience in SaaS-heavy environments Experience with DLP program ownership or data protection initiatives Background supporting retail, consumer-facing, or high-growth business environments Compensation & Benefits Salary range: $150,000 to $160,000 base, depending on experience Bonus potential and other financial incentives Comprehensive benefits package available If you are a hands-on cybersecurity operations leader who can mature SOC processes, improve vulnerability and endpoint programs, and build practical automation across a growing security environment, we would welcome the opportunity to connect. Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets . click apply for full job details

Network Engineer DETAILS Location: Chesapeake, VA 23322 (onsite 5-days per week) Position Type: 6M Contract Hourly / Salary: to $60W2 JOB SUMMARY Vaco is currently seeking a Network Engineer for a 6M Contract that is located in Chesapeake, VA (onsite 5-days per week). The Network Engineer will support and enrich the enterprise network infrastructure within a large production environment. The Network Engineer will maintain and troubleshoot Layer 2 and foundational Layer 3 networking technologies, supporting switching, VLAN segmentation, trunking, wireless connectivity, and network access services while ensuring reliable day-to-day operations. The Network Engineer will work closely with existing network teams to assist with network implementation, configuration, troubleshooting, and operational support across wired and wireless environments. The ideal Network Engineer will possess strong switching fundamentals, practical networking experience, and the ability to support enterprise connectivity, security, and infrastructure initiatives while contributing to the overall stability and performance of the network environment. Enterprise Network Operations - Supporting / Maintaining Critical Network Infrastructure via Configuration / Monitoring / Troubleshooting / Resolution of Connectivity Issues Across Switching / Routing / Wireless / Access Layer Technologies Layer 2 Network Administration - Managing VLAN Architecture / Trunking / Spanning Tree / Authentication Services / Switch Configurations Ensuring Secure / Reliable Network Communications Network Troubleshooting / Incident Response - Investigating / Resolving Performance / Availability / Connectivity Issues via Systematic Analysis of Switching / Routing / Wireless / Endpoint Communication Paths Wireless / Access Network Support - Supporting WiFi Connectivity / Access Layer Deployments / Network Access Services Delivering Consistent User / Device Connectivity Across Enterprise Locations Network Implementation / Change Management - Supporting Network Upgrades / Equipment Deployments / Configuration Changes / Infrastructure Enhancements Following Established Change Control Processes Cross-Technology Infrastructure Support - Collaborating with Network / Security / Infrastructure Teams to Support Integrated Solutions Across Routing / Firewalls / Wireless Networking / Network Access Control (NAC) Technologies JOB REQUIREMENTS Enterprise Network Engineering (5+ years hands-on) - Supporting Enterprise Network Infrastructure Across Campus / Branch / Data Center Environments Layer 2 Networking Expertise (strong experience) - VLAN Design / Trunking / Spanning Tree / Port Security / Authentication Services / Switch Provisioning / Enterprise Access Layer Operations Routing / Layer 3 Fundamentals (working knowledge) - Routing Protocols / Technologies (Static Routing / OSPF / Default Routing / Inter-VLAN Routing / Route Redistribution Fundamentals) Cisco Switching Infrastructure - Configuring / Managing / Troubleshooting Cisco Catalyst Switching Platforms in Large Enterprise Environments Wireless Networking Support - Supporting Enterprise Wireless Infrastructure (WLAN Deployments / SSIDs / Authentication Services / Client Connectivity Troubleshooting / RF Fundamentals) Network Troubleshooting / Incident Resolution (advanced) - Troubleshooting Switching / Routing / Wireless / Client Connectivity Issues via Structured Root Cause Analysis Methodologies Network Access Control (NAC) - Supporting NAC Technologies (Authentication / Authorization / Device Access Policies / Endpoint Connectivity Management) Network Security Fundamentals (understanding) - Enterprise Security Concepts (ACLs / Segmentation / Network Access Controls / Secure Connectivity Best Practices) Infrastructure Monitoring / Operations - Utilizing Network Monitoring / Alerting / Performance Management Tools to Maintain Operational Stability / Resolve Infrastructure Issues Proactively Change Management / Network Implementations - Supporting Network Deployments / Hardware Refreshes / Configuration Changes / Infrastructure Upgrades Following Established Change Control Processes Documentation / Operational Standards - Creating / Maintaining Network Documentation (Diagrams / Runbooks / Configuration Standards / Support Procedures) Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Key Responsibilities GCP Foundation, Landing Zones & Infrastructure-as-Code Cloud Architecture & Automation: Design, build, and maintain enterprise GCP infrastructure using Terraform/Terragrunt, enforcing Infrastructure-as-Code (IaC) and GitOps practices for all cloud environments. Landing Zone Governance: Own the configuration and security baseline of GCP Organization structures, Projects, Folders, Resource Hierarchies, and IAM roles/permissions using least-privilege principles. Network & Hybrid Connectivity: Configure and maintain GCP Shared VPCs, VPC Service Controls (VPC-SC), Cloud Interconnect, Cloud VPN, Cloud DNS, Firewall Rules, and load balancers to support secure, low-latency hybrid connectivity between GCP services, Apigee X, and Oracle Exadata / JDE ERP environments. Apigee X & Oracle Exadata / JDE ERP Integration Support Apigee X Platform Engineering: Provision, configure, and maintain Apigee X runtime environments, API gateways, PSC (Private Service Connect) attachments, and load balancers in accordance with enterprise security baselines. Oracle Exadata & JDE Interconnect: Engineer and maintain high-performance, resilient hybrid network topology (Cloud Interconnect/Partner Interconnect) linking GCP applications and Apigee gateways directly to Oracle Exadata database systems and JDE backend services. API Security & Traffic Controls: Work alongside Integration Architects to enforce mTLS, VPC Service Controls, rate limiting, and secure endpoints across Apigee X, GCP microservices, and Exadata/JDE integration boundaries. Containerization, Compute & Serverless GKE & Kubernetes Management: Deploy, secure, and operate Google Kubernetes Engine (GKE) clusters powering enterprise Spring Boot microservices, AI workloads, and internal developer platforms. Serverless Execution: Configure and support serverless workloads using Cloud Run, Cloud Functions, and App Engine, optimizing performance and latency for transactional database and API flows. Platform Reliability: Build automated deployment pipelines using GitHub Actions or Cloud Build to support seamless infrastructure provisioning and application cutovers. FinOps & Cloud Cost Optimization Cost Allocation & Visibility: Establish FinOps standards across GCP projects, implementing label/tagging enforcement, budget alerts, and showback/chargeback reporting for business units. Resource Tuning: Analyze resource utilization (Compute Engine, GKE, Cloud SQL, BigQuery) to right-size instances, optimize committed use discounts (CUDs), and eliminate unused infrastructure. Security, Compliance & Observability Cloud Security Posture: Implement CISO security standards, including GCP Secret Manager, KMS, mTLS, SAST/DAST container vulnerability scanning, and binary authorization. Observability Baseline: Build and maintain centralized logging, monitoring, and distributed tracing across all GCP environments, Apigee instances, and Exadata/JDE connectivity paths using Google Cloud Operations Suite (Cloud Logging, Cloud Monitoring, Cloud Trace). Minimum Requirements Experience: 10+ years of enterprise IT/infrastructure experience, with at least 4+ years dedicated to designing, engineering, and operating production environments on Google Cloud Platform (GCP). Apigee & Database/ERP Interconnect: Hands-on experience provisioning and supporting Apigee X / Apigee Edge environments and managing hybrid interconnectivity to high-performance database infrastructure (Oracle Exadata) and enterprise ERP systems (JD Edwards). IaC & Automation Mastery: Expert-level hands-on skills with Terraform, Git, and CI/CD pipelines (GitHub Actions, Cloud Build, or GitLab CI). Kubernetes & Containers: Strong experience deploying and managing production Google Kubernetes Engine (GKE) clusters and Docker containerized applications. GCP Networking & Security: Deep understanding of GCP VPC networking, Shared VPCs, Private Service Connect (PSC), VPC Service Controls, Cloud Interconnect, IAM, and GCP security controls. Scripting: Proficiency in Python, Bash, or Go for cloud automation and tooling development. FinOps Understanding: Practical experience implementing cloud cost optimization, quota management, and resource right-sizing strategies. Technical Skills Google Cloud Services: GKE, Cloud Run, Cloud SQL, BigQuery, Cloud Storage, VPC Service Controls, Secret Manager, IAM, Cloud Logging, Cloud Monitoring, Cloud Trace. API Management & Hybrid Database/ERP: Apigee X, Apigee Edge, Private Service Connect (PSC), Cloud Interconnect, Oracle Exadata database connectivity, JD Edwards (JDE) hybrid interconnectivity. Infrastructure-as-Code: Terraform, Terragrunt, Helm, Docker, Kubernetes. Networking & Security: Shared VPC, Cloud VPN, Cloud Interconnect, Firewalls, mTLS, OAuth 2.0, KMS, Least Privilege IAM. CI/CD & DevOps: GitHub Actions, Cloud Build, GitHub Advanced Security (GHAS), Git, Linux/Unix administration. Scripting & Tooling: Python, Bash, Go, gcloud CLI. Certifications & Education Certifications: Google Professional Cloud Architect or Google Professional Cloud DevOps Engineer (required or to be obtained within 6 months). Education: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent practical experience. About McKesson Medical-Surgical McKesson Medical-Surgical (MMS), which is expected to become Wellverse in early 2027, is a subsidiary and publicly reported segment of the McKesson Corporation. MMS distributes medical-surgical supplies, pharmaceuticals, diagnostic equipment and supplies, along with other solutions and services to virtually every type of healthcare setting and provider outside of the traditional hospital. These markets - often referred to as Alternate Care or Non-Acute Care - include physician offices, surgery centers, long-term care providers, laboratories, home health and hospice agencies, health systems, government facilities and online marketplaces and retailers. Alternate Care markets are growing rapidly and MMS is proud to be a leader in this space. With a team of approximately 8,000 employees, a network of 15 distribution centers and approximately 900 delivery vehicles, we collaborate with more than 2,200 leading manufacturers and serve over 200,000 customer accounts across the U.S. Our catalog includes more than 270,000 SKUs of branded and private-label medical-surgical products - from bandages to specialty pharmaceuticals and COVID-19 tests. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $115,300 - $192,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities . click apply for full job details

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Key Responsibilities GCP Foundation, Landing Zones & Infrastructure-as-Code Cloud Architecture & Automation: Design, build, and maintain enterprise GCP infrastructure using Terraform/Terragrunt, enforcing Infrastructure-as-Code (IaC) and GitOps practices for all cloud environments. Landing Zone Governance: Own the configuration and security baseline of GCP Organization structures, Projects, Folders, Resource Hierarchies, and IAM roles/permissions using least-privilege principles. Network & Hybrid Connectivity: Configure and maintain GCP Shared VPCs, VPC Service Controls (VPC-SC), Cloud Interconnect, Cloud VPN, Cloud DNS, Firewall Rules, and load balancers to support secure, low-latency hybrid connectivity between GCP services, Apigee X, and Oracle Exadata / JDE ERP environments. Apigee X & Oracle Exadata / JDE ERP Integration Support Apigee X Platform Engineering: Provision, configure, and maintain Apigee X runtime environments, API gateways, PSC (Private Service Connect) attachments, and load balancers in accordance with enterprise security baselines. Oracle Exadata & JDE Interconnect: Engineer and maintain high-performance, resilient hybrid network topology (Cloud Interconnect/Partner Interconnect) linking GCP applications and Apigee gateways directly to Oracle Exadata database systems and JDE backend services. API Security & Traffic Controls: Work alongside Integration Architects to enforce mTLS, VPC Service Controls, rate limiting, and secure endpoints across Apigee X, GCP microservices, and Exadata/JDE integration boundaries. Containerization, Compute & Serverless GKE & Kubernetes Management: Deploy, secure, and operate Google Kubernetes Engine (GKE) clusters powering enterprise Spring Boot microservices, AI workloads, and internal developer platforms. Serverless Execution: Configure and support serverless workloads using Cloud Run, Cloud Functions, and App Engine, optimizing performance and latency for transactional database and API flows. Platform Reliability: Build automated deployment pipelines using GitHub Actions or Cloud Build to support seamless infrastructure provisioning and application cutovers. FinOps & Cloud Cost Optimization Cost Allocation & Visibility: Establish FinOps standards across GCP projects, implementing label/tagging enforcement, budget alerts, and showback/chargeback reporting for business units. Resource Tuning: Analyze resource utilization (Compute Engine, GKE, Cloud SQL, BigQuery) to right-size instances, optimize committed use discounts (CUDs), and eliminate unused infrastructure. Security, Compliance & Observability Cloud Security Posture: Implement CISO security standards, including GCP Secret Manager, KMS, mTLS, SAST/DAST container vulnerability scanning, and binary authorization. Observability Baseline: Build and maintain centralized logging, monitoring, and distributed tracing across all GCP environments, Apigee instances, and Exadata/JDE connectivity paths using Google Cloud Operations Suite (Cloud Logging, Cloud Monitoring, Cloud Trace). Minimum Requirements Experience: 10+ years of enterprise IT/infrastructure experience, with at least 4+ years dedicated to designing, engineering, and operating production environments on Google Cloud Platform (GCP). Apigee & Database/ERP Interconnect: Hands-on experience provisioning and supporting Apigee X / Apigee Edge environments and managing hybrid interconnectivity to high-performance database infrastructure (Oracle Exadata) and enterprise ERP systems (JD Edwards). IaC & Automation Mastery: Expert-level hands-on skills with Terraform, Git, and CI/CD pipelines (GitHub Actions, Cloud Build, or GitLab CI). Kubernetes & Containers: Strong experience deploying and managing production Google Kubernetes Engine (GKE) clusters and Docker containerized applications. GCP Networking & Security: Deep understanding of GCP VPC networking, Shared VPCs, Private Service Connect (PSC), VPC Service Controls, Cloud Interconnect, IAM, and GCP security controls. Scripting: Proficiency in Python, Bash, or Go for cloud automation and tooling development. FinOps Understanding: Practical experience implementing cloud cost optimization, quota management, and resource right-sizing strategies. Technical Skills Google Cloud Services: GKE, Cloud Run, Cloud SQL, BigQuery, Cloud Storage, VPC Service Controls, Secret Manager, IAM, Cloud Logging, Cloud Monitoring, Cloud Trace. API Management & Hybrid Database/ERP: Apigee X, Apigee Edge, Private Service Connect (PSC), Cloud Interconnect, Oracle Exadata database connectivity, JD Edwards (JDE) hybrid interconnectivity. Infrastructure-as-Code: Terraform, Terragrunt, Helm, Docker, Kubernetes. Networking & Security: Shared VPC, Cloud VPN, Cloud Interconnect, Firewalls, mTLS, OAuth 2.0, KMS, Least Privilege IAM. CI/CD & DevOps: GitHub Actions, Cloud Build, GitHub Advanced Security (GHAS), Git, Linux/Unix administration. Scripting & Tooling: Python, Bash, Go, gcloud CLI. Certifications & Education Certifications: Google Professional Cloud Architect or Google Professional Cloud DevOps Engineer (required or to be obtained within 6 months). Education: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent practical experience. About McKesson Medical-Surgical McKesson Medical-Surgical (MMS), which is expected to become Wellverse in early 2027, is a subsidiary and publicly reported segment of the McKesson Corporation. MMS distributes medical-surgical supplies, pharmaceuticals, diagnostic equipment and supplies, along with other solutions and services to virtually every type of healthcare setting and provider outside of the traditional hospital. These markets - often referred to as Alternate Care or Non-Acute Care - include physician offices, surgery centers, long-term care providers, laboratories, home health and hospice agencies, health systems, government facilities and online marketplaces and retailers. Alternate Care markets are growing rapidly and MMS is proud to be a leader in this space. With a team of approximately 8,000 employees, a network of 15 distribution centers and approximately 900 delivery vehicles, we collaborate with more than 2,200 leading manufacturers and serve over 200,000 customer accounts across the U.S. Our catalog includes more than 270,000 SKUs of branded and private-label medical-surgical products - from bandages to specialty pharmaceuticals and COVID-19 tests. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $115,300 - $192,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities . click apply for full job details

Summary The Senior Data Integration Engineer is responsible for the design, development, and operation of the data integration and ingestion processes that deliver partner and internal data into our analytics environment. The role owns the flow of data from source acquisition through the curated data warehouse tables consumed by reporting platforms, operational systems, and business analysts. This is a senior, hands-on engineering position spanning the full integration lifecycle: acquiring data from a wide range of external partner and internal systems, validating and conditioning that data on arrival, transforming it into the structures that support analysis and operations, and operating those processes reliably in production. The role is concerned equally with building new integrations and with the continued performance, accuracy, and timeliness of those already in service. A central objective of the position is to advance reusable, well-instrumented integration patterns that shorten the time required to onboard new data sources and that improve the reliability and transparency of data delivery to the business. The Senior Data Integration Engineer will also contribute substantially to the planned modernization of our data platform, evaluating and recommending tooling, architecture, and migration approach for leadership consideration. The role sets technical direction and development standards for data integration work and collaborates closely with data architects, business analysts, stakeholders across the organization, and the technical contacts of our external data partners. Essential Duties and Responsibilities This list of duties and responsibilities is not all inclusive and may be expanded to include other duties and responsibilities as management may deem necessary from time to time. Design, develop, and maintain data integration processes that acquire data from partner and internal sources, including flat file transfers over SFTP, REST API endpoints, and direct database connections. Develop reusable, configuration-driven ingestion patterns that reduce the effort and elapsed time required to onboard new partner data feeds. Develop and maintain the T-SQL transformation logic that carries data from landing and staging layers through to the curated warehouse tables supporting reporting, operational systems, and analyst queries. Design ingestion processes to be idempotent and safely re-runnable, incorporating automated retry and restart behavior for failed executions. Implement automated validation and quarantine processes so that records failing business-defined quality rules are isolated, reported, and prevented from reaching downstream consumers. Implement data quality rules defined by the business, including schema validation, reconciliation, row count and threshold checks, and anomaly detection. Establish monitoring, logging, and alerting for pipeline execution state, data freshness, and load completion, and automate the communication of ingestion status to stakeholders. Diagnose and resolve production data incidents, determine root cause, coordinate remediation, and document preventive measures through runbooks and post-incident review. Contribute to dimensional data model design in collaboration with the data architect and senior team members. Establish and maintain version control, code review, and repeatable deployment practices for database and pipeline code. Define and uphold development standards for data integration work through code review and technical guidance. Evaluate and recommend tooling, architecture, and sequencing for the platform modernization effort for leadership consideration. Migrate established integration workflows to modernized patterns incrementally and without disruption to production operations. Maintain documentation of data feeds, dependencies, lineage, ownership, and escalation paths. Perform all work involving protected health information in accordance with HIPAA requirements, including least-privilege access, secure transmission and storage of partner data, and the exclusion of PHI from logs and non-production environments. Coordinate with partner technical contacts, as needed, to resolve file format, schema, and connectivity questions. Provide occasional off-hours support for critical data load failures or production support rotations as needed to support timely response to critical data issues. Support AI and machine learning initiatives by maintaining reliable, secure, and well-governed data pipelines and datasets used for model development, testing, deployment, monitoring, and ongoing performance evaluation. Maintain confidentiality of information processed & follow company policies and procedures. Qualifications Requires six (6) or more years of professional data engineering, data operations, data platform operations, or related experience. Bachelor's degree in Computer Science, Engineering, Information Systems, or related field, or equivalent professional experience preferred. Experience leading teams and developing supervisory staff preferred. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Other qualifications include: Advanced T-SQL development skills, including: Set-based rewriting of row-by-row and cursor-based logic. MERGE, upsert, and slowly changing dimension load patterns. Window functions and complex analytic queries. Execution plan analysis, index strategy, statistics management, and resolution of performance issues such as parameter sniffing. Transaction management and structured error handling within stored procedures, including correct rollback behavior on partial failure. Demonstrated proficiency in Python for data engineering applications, including API-based data acquisition, file parsing and format handling, data validation, and the development of packaged, scheduled jobs. Familiarity with common data libraries such as requests and pandas is expected. Demonstrated experience acquiring and integrating data from heterogeneous sources, including delimited, fixed-width, JSON, and XML file formats; REST APIs requiring authentication, pagination, and rate-limit handling; and direct database connectivity. Proficiency with Git and collaborative development workflows, including branching, pull requests, and code review. A code-first development approach, with integration logic authored and maintained in T-SQL and Python under source control. Ability to analyze pipeline and query performance and to improve the reliability, scalability, and cost efficiency of data workloads. Strong written communication skills, with the ability to produce runbooks, technical documentation, and incident reports, and to convey the business impact of technical issues to non-technical stakeholders. Strong problem-solving skills, attention to detail, and demonstrated ownership of production systems. Experience with Microsoft Azure data services such as Azure Data Factory or Microsoft Fabric, or comparable cloud orchestration platforms. Experience migrating on-premises SQL Server integration workloads to a cloud platform. Experience with dimensional modeling and data warehouse design. Experience designing and rationalizing SQL Server Agent job dependencies and scheduling. Experience establishing version control, code review, and repeatable deployment practices for database code. Experience implementing CI/CD pipelines for database projects. Experience handling protected health information under HIPAA, or comparably regulated data under an equivalent framework preferred. Experience with healthcare or pharmacy data, including claims, eligibility, prescription, or delivery data preferred. Familiarity with data governance, metadata management, and data lineage practices. Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. (The phrases "occasionally," "regularly," and "frequently" correspond to the following definitions: "Occasionally" means up to 1/3 of working time, "regularly" means between 1/3 and 2/3 of working time, and "frequently" means 2/3 and more working time.) While performing the duties of this job, the employee is frequently required to sit; talk or hear; and use hands to handle, or touch objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee would rarely need to lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Work Environment The position is a hybrid position with 2 - 3 days office presence in Milwaukee, WI required. The colleague may perform work-related travel on rare occasions (less than 10%) with an emphasis on travel for impact. . click apply for full job details

Summary The Senior Data Integration Engineer is responsible for the design, development, and operation of the data integration and ingestion processes that deliver partner and internal data into our analytics environment. The role owns the flow of data from source acquisition through the curated data warehouse tables consumed by reporting platforms, operational systems, and business analysts. This is a senior, hands-on engineering position spanning the full integration lifecycle: acquiring data from a wide range of external partner and internal systems, validating and conditioning that data on arrival, transforming it into the structures that support analysis and operations, and operating those processes reliably in production. The role is concerned equally with building new integrations and with the continued performance, accuracy, and timeliness of those already in service. A central objective of the position is to advance reusable, well-instrumented integration patterns that shorten the time required to onboard new data sources and that improve the reliability and transparency of data delivery to the business. The Senior Data Integration Engineer will also contribute substantially to the planned modernization of our data platform, evaluating and recommending tooling, architecture, and migration approach for leadership consideration. The role sets technical direction and development standards for data integration work and collaborates closely with data architects, business analysts, stakeholders across the organization, and the technical contacts of our external data partners. Essential Duties and Responsibilities This list of duties and responsibilities is not all inclusive and may be expanded to include other duties and responsibilities as management may deem necessary from time to time. Design, develop, and maintain data integration processes that acquire data from partner and internal sources, including flat file transfers over SFTP, REST API endpoints, and direct database connections. Develop reusable, configuration-driven ingestion patterns that reduce the effort and elapsed time required to onboard new partner data feeds. Develop and maintain the T-SQL transformation logic that carries data from landing and staging layers through to the curated warehouse tables supporting reporting, operational systems, and analyst queries. Design ingestion processes to be idempotent and safely re-runnable, incorporating automated retry and restart behavior for failed executions. Implement automated validation and quarantine processes so that records failing business-defined quality rules are isolated, reported, and prevented from reaching downstream consumers. Implement data quality rules defined by the business, including schema validation, reconciliation, row count and threshold checks, and anomaly detection. Establish monitoring, logging, and alerting for pipeline execution state, data freshness, and load completion, and automate the communication of ingestion status to stakeholders. Diagnose and resolve production data incidents, determine root cause, coordinate remediation, and document preventive measures through runbooks and post-incident review. Contribute to dimensional data model design in collaboration with the data architect and senior team members. Establish and maintain version control, code review, and repeatable deployment practices for database and pipeline code. Define and uphold development standards for data integration work through code review and technical guidance. Evaluate and recommend tooling, architecture, and sequencing for the platform modernization effort for leadership consideration. Migrate established integration workflows to modernized patterns incrementally and without disruption to production operations. Maintain documentation of data feeds, dependencies, lineage, ownership, and escalation paths. Perform all work involving protected health information in accordance with HIPAA requirements, including least-privilege access, secure transmission and storage of partner data, and the exclusion of PHI from logs and non-production environments. Coordinate with partner technical contacts, as needed, to resolve file format, schema, and connectivity questions. Provide occasional off-hours support for critical data load failures or production support rotations as needed to support timely response to critical data issues. Support AI and machine learning initiatives by maintaining reliable, secure, and well-governed data pipelines and datasets used for model development, testing, deployment, monitoring, and ongoing performance evaluation. Maintain confidentiality of information processed & follow company policies and procedures. Qualifications Requires six (6) or more years of professional data engineering, data operations, data platform operations, or related experience. Bachelor's degree in Computer Science, Engineering, Information Systems, or related field, or equivalent professional experience preferred. Experience leading teams and developing supervisory staff preferred. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Other qualifications include: Advanced T-SQL development skills, including: Set-based rewriting of row-by-row and cursor-based logic. MERGE, upsert, and slowly changing dimension load patterns. Window functions and complex analytic queries. Execution plan analysis, index strategy, statistics management, and resolution of performance issues such as parameter sniffing. Transaction management and structured error handling within stored procedures, including correct rollback behavior on partial failure. Demonstrated proficiency in Python for data engineering applications, including API-based data acquisition, file parsing and format handling, data validation, and the development of packaged, scheduled jobs. Familiarity with common data libraries such as requests and pandas is expected. Demonstrated experience acquiring and integrating data from heterogeneous sources, including delimited, fixed-width, JSON, and XML file formats; REST APIs requiring authentication, pagination, and rate-limit handling; and direct database connectivity. Proficiency with Git and collaborative development workflows, including branching, pull requests, and code review. A code-first development approach, with integration logic authored and maintained in T-SQL and Python under source control. Ability to analyze pipeline and query performance and to improve the reliability, scalability, and cost efficiency of data workloads. Strong written communication skills, with the ability to produce runbooks, technical documentation, and incident reports, and to convey the business impact of technical issues to non-technical stakeholders. Strong problem-solving skills, attention to detail, and demonstrated ownership of production systems. Experience with Microsoft Azure data services such as Azure Data Factory or Microsoft Fabric, or comparable cloud orchestration platforms. Experience migrating on-premises SQL Server integration workloads to a cloud platform. Experience with dimensional modeling and data warehouse design. Experience designing and rationalizing SQL Server Agent job dependencies and scheduling. Experience establishing version control, code review, and repeatable deployment practices for database code. Experience implementing CI/CD pipelines for database projects. Experience handling protected health information under HIPAA, or comparably regulated data under an equivalent framework preferred. Experience with healthcare or pharmacy data, including claims, eligibility, prescription, or delivery data preferred. Familiarity with data governance, metadata management, and data lineage practices. Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. (The phrases "occasionally," "regularly," and "frequently" correspond to the following definitions: "Occasionally" means up to 1/3 of working time, "regularly" means between 1/3 and 2/3 of working time, and "frequently" means 2/3 and more working time.) While performing the duties of this job, the employee is frequently required to sit; talk or hear; and use hands to handle, or touch objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee would rarely need to lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Work Environment The position is a hybrid position with 2 - 3 days office presence in Milwaukee, WI required. The colleague may perform work-related travel on rare occasions (less than 10%) with an emphasis on travel for impact. . click apply for full job details

Summary The Senior Data Integration Engineer is responsible for the design, development, and operation of the data integration and ingestion processes that deliver partner and internal data into our analytics environment. The role owns the flow of data from source acquisition through the curated data warehouse tables consumed by reporting platforms, operational systems, and business analysts. This is a senior, hands-on engineering position spanning the full integration lifecycle: acquiring data from a wide range of external partner and internal systems, validating and conditioning that data on arrival, transforming it into the structures that support analysis and operations, and operating those processes reliably in production. The role is concerned equally with building new integrations and with the continued performance, accuracy, and timeliness of those already in service. A central objective of the position is to advance reusable, well-instrumented integration patterns that shorten the time required to onboard new data sources and that improve the reliability and transparency of data delivery to the business. The Senior Data Integration Engineer will also contribute substantially to the planned modernization of our data platform, evaluating and recommending tooling, architecture, and migration approach for leadership consideration. The role sets technical direction and development standards for data integration work and collaborates closely with data architects, business analysts, stakeholders across the organization, and the technical contacts of our external data partners. Essential Duties and Responsibilities This list of duties and responsibilities is not all inclusive and may be expanded to include other duties and responsibilities as management may deem necessary from time to time. Design, develop, and maintain data integration processes that acquire data from partner and internal sources, including flat file transfers over SFTP, REST API endpoints, and direct database connections. Develop reusable, configuration-driven ingestion patterns that reduce the effort and elapsed time required to onboard new partner data feeds. Develop and maintain the T-SQL transformation logic that carries data from landing and staging layers through to the curated warehouse tables supporting reporting, operational systems, and analyst queries. Design ingestion processes to be idempotent and safely re-runnable, incorporating automated retry and restart behavior for failed executions. Implement automated validation and quarantine processes so that records failing business-defined quality rules are isolated, reported, and prevented from reaching downstream consumers. Implement data quality rules defined by the business, including schema validation, reconciliation, row count and threshold checks, and anomaly detection. Establish monitoring, logging, and alerting for pipeline execution state, data freshness, and load completion, and automate the communication of ingestion status to stakeholders. Diagnose and resolve production data incidents, determine root cause, coordinate remediation, and document preventive measures through runbooks and post-incident review. Contribute to dimensional data model design in collaboration with the data architect and senior team members. Establish and maintain version control, code review, and repeatable deployment practices for database and pipeline code. Define and uphold development standards for data integration work through code review and technical guidance. Evaluate and recommend tooling, architecture, and sequencing for the platform modernization effort for leadership consideration. Migrate established integration workflows to modernized patterns incrementally and without disruption to production operations. Maintain documentation of data feeds, dependencies, lineage, ownership, and escalation paths. Perform all work involving protected health information in accordance with HIPAA requirements, including least-privilege access, secure transmission and storage of partner data, and the exclusion of PHI from logs and non-production environments. Coordinate with partner technical contacts, as needed, to resolve file format, schema, and connectivity questions. Provide occasional off-hours support for critical data load failures or production support rotations as needed to support timely response to critical data issues. Support AI and machine learning initiatives by maintaining reliable, secure, and well-governed data pipelines and datasets used for model development, testing, deployment, monitoring, and ongoing performance evaluation. Maintain confidentiality of information processed & follow company policies and procedures. Qualifications Requires six (6) or more years of professional data engineering, data operations, data platform operations, or related experience. Bachelor's degree in Computer Science, Engineering, Information Systems, or related field, or equivalent professional experience preferred. Experience leading teams and developing supervisory staff preferred. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Other qualifications include: Advanced T-SQL development skills, including: Set-based rewriting of row-by-row and cursor-based logic. MERGE, upsert, and slowly changing dimension load patterns. Window functions and complex analytic queries. Execution plan analysis, index strategy, statistics management, and resolution of performance issues such as parameter sniffing. Transaction management and structured error handling within stored procedures, including correct rollback behavior on partial failure. Demonstrated proficiency in Python for data engineering applications, including API-based data acquisition, file parsing and format handling, data validation, and the development of packaged, scheduled jobs. Familiarity with common data libraries such as requests and pandas is expected. Demonstrated experience acquiring and integrating data from heterogeneous sources, including delimited, fixed-width, JSON, and XML file formats; REST APIs requiring authentication, pagination, and rate-limit handling; and direct database connectivity. Proficiency with Git and collaborative development workflows, including branching, pull requests, and code review. A code-first development approach, with integration logic authored and maintained in T-SQL and Python under source control. Ability to analyze pipeline and query performance and to improve the reliability, scalability, and cost efficiency of data workloads. Strong written communication skills, with the ability to produce runbooks, technical documentation, and incident reports, and to convey the business impact of technical issues to non-technical stakeholders. Strong problem-solving skills, attention to detail, and demonstrated ownership of production systems. Experience with Microsoft Azure data services such as Azure Data Factory or Microsoft Fabric, or comparable cloud orchestration platforms. Experience migrating on-premises SQL Server integration workloads to a cloud platform. Experience with dimensional modeling and data warehouse design. Experience designing and rationalizing SQL Server Agent job dependencies and scheduling. Experience establishing version control, code review, and repeatable deployment practices for database code. Experience implementing CI/CD pipelines for database projects. Experience handling protected health information under HIPAA, or comparably regulated data under an equivalent framework preferred. Experience with healthcare or pharmacy data, including claims, eligibility, prescription, or delivery data preferred. Familiarity with data governance, metadata management, and data lineage practices. Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. (The phrases "occasionally," "regularly," and "frequently" correspond to the following definitions: "Occasionally" means up to 1/3 of working time, "regularly" means between 1/3 and 2/3 of working time, and "frequently" means 2/3 and more working time.) While performing the duties of this job, the employee is frequently required to sit; talk or hear; and use hands to handle, or touch objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee would rarely need to lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Work Environment The position is a hybrid position with 2 - 3 days office presence in Milwaukee, WI required. The colleague may perform work-related travel on rare occasions (less than 10%) with an emphasis on travel for impact. . click apply for full job details

Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Training & development Tuition assistance Vision insurance Job Description SarelaTech is seeking an experienced Network Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, who will support an extensive digital modernization program critical to Defense Threat Reduction Agency (DTRA) in Fort Belvoir, VA. The Network Engineer will work closely with the Leidos and Government technical leadership team to help drive innovation, growth, and efficiencies within the I3TS portfolio. Primary Responsibilities: The Commercial Solutions for Classified (CSfC) Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries utilizing Cisco and Aruba IPsec/SSL VPNs and dynamic routing (BGP/OSPF) in strict compliance with NSA Capability Packages. In this role, you will author and tune Palo Alto NGFW security policies and IDS/IPS threat prevention signatures, implement enterprise network access control and 802.1X policies via Cisco ISE and Aruba ClearPass, integrate enterprise PKI/OCSP services and hardened NTP, and generate key engineering artifacts required for NSA CSfC PMO registration and compliance auditing. Architect, deploy, and maintain CSfC infrastructure operating within Black/Gray/Red networks. Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Mobile Access (MA), Multi-Sight (MSC) Capability Packages, with Campus Wireless LAN (WLAN) experience a bonus. Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Understanding of NIAP approved list and monitors for changes Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Capability Packages (MSC, MA, and CWLAN). Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Implement enterprise routing protocols (BGP, OSPF) alongside redundant outer and inner IPsec VPN tunnels across Cisco and Aruba appliances. Configure remote access SSL VPNs and ensure end-to-end traffic separation. Author, optimize, and audit Palo Alto Next-Generation Firewall (NGFW) security policies, App-ID, User-ID, and URL filtering. Configure and tune Palo Alto IDS/IPS threat signatures, anti-spyware, and vulnerability protection. Architect and manage Cisco Identity Services Engine (ISE) and Aruba ClearPass policy managers for 802.1X network access control, RADIUS/TACACS+ administration, posture assessment, and endpoint profiling. Integrate enterprise Public Key Infrastructure (PKI) components, managing X.509 certificate lifecycles, Certificate Authorities (CAs), CRL/OCSP validation, and hardened, authenticated Network Time Protocol (NTP) infrastructure. Prepare CSfC compliance artifacts, Key Management Plans (KMPs), Continuous Monitoring Plans (CMPs), and registration packages for NSA CSfC PMO submission. Required Qualifications: Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or related STEM degree program, and 12-15 years of relevant experience. Specific experience, education and training may be considered in lieu of degree. 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor enterprise environments Active TS/SCI Clearance Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP). Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP Proven expertise configuring Cisco (IOS-XE/ASR) and Aruba (Mobility Controllers/Gateways) IPsec and SSL VPNs, including IKEv2, Suite B/CNSA cryptography, and dynamic routing (BGP, OSPF). Demonstrated engineering experience with Palo Alto Networks firewalls (PAN-OS), Panorama central management, and advanced IDS/IPS inspection profiles. Hands-on deployment experience with both Cisco ISE and/or Aruba ClearPass implementing 802.1X, EAP-TLS authentication, and role-based access policies. Strong working knowledge of X.509 certificates, CA hierarchy integration, certificate revocation lists (CRLs), OCSP, and secure NTP stratum synchronization. Direct prior experience preparing and successfully registering NSA CSfC Capability Package solutions (Mobile Access, Multi-Site Connectivity, or Campus WLAN). Deep understanding of Commercial National Security Algorithm (CNSA) Suite requirements, post-quantum readiness considerations, and hardware security modules (HSMs). Familiarity with Ansible, for automating network device configuration backups, policy compliance checks, and certificate rotations. Certified in any of the following - Cisco CCNP/CCIE (Security or Enterprise), Palo Alto PCNSE, Aruba Certified ClearPass Expert (ACCX), or Aruba Certified Mobility Expert (ACMX).

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description Description: MDVIP: Transforming Primary Care, One Patient at a Time MDVIP is a national leader in personalized healthcare, empowering over 425,000 members to achieve their health and wellness goals through a network of more than 1,400 concierge primary care physicians. Our program emphasizes preventive medicine, offering comprehensive screenings, advanced diagnostics, and individualized wellness plans. Recognized as a Great Place to Work since 2018, MDVIP is committed to excellence in patient care and employee satisfaction. Position Summary The Network Security Engineer is an individual contributor role reporting to the Sr. Network Operations Manager. This is a contract-to-perm position (6-month contract), based in Boca Raton, FL (Hybrid), supporting the Boca Raton and Atlanta (ATL) data centers. This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization's on-premises and hybrid infrastructure. The Network Security Engineer sustains a predictable remediation cadence across recurring security obligations - including monthly patching, zero-day response, vulnerability remediation, OS hardening, and cloud security score - while maintaining core platform services that underpin 24/7 operational reliability. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads and existing staffing, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments is completed on schedule. Key Responsibilities Security Remediation & Compliance Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs; work with Project Managers, technology stack owners, and third-party resources to ensure timely delivery. Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments. Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere). Perform vulnerability remediation and OS/system hardening in line with established security baselines and audit requirements. Maintain a remediation burndown and support reporting on patch/vulnerability KPIs, including critical remediation timelines and cloud security score. Core Platform & Infrastructure Ownership Track Azure Security Score trends and drive remediation of flagged recommendations, providing regular posture reporting to leadership and audit stakeholders. Manage the full PKI infrastructure/SSL certificate lifecycle, including issuance, renewal, tracking, and remediation of expiring or non-compliant certificates, and manage key vault rotations for critical cloud-hosted applications. Utilize automation tools to deploy required machine certificates across the organization. Manage syslog retention and forwarding across on-premises and cloud infrastructure, supporting the Security team's SIEM ingestion, correlation, and compliance reporting needs. Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning. Review and administer security tools to harden network edge security, including next generation firewalls, SD-WAN, and switching, striving for zero trust networks. Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass. Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls. Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices. Review and secure SDLC servers and hosted applications, both on-premises and in Azure, applying measures to keep all public endpoints secure. Operational Reliability & Risk Reduction Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables. Identify and reduce single-point-of-failure risk by documenting procedures and cross-training across PKI, AD, cloud access, segmentation, and patching functions. Partner with the Azure DevOps and Security teams to align on-prem/hybrid remediation with broader cloud governance and security initiatives. Escalate emerging risks, audit exceptions, and outage-driving conflicts between operational and remediation priorities to leadership. Key Competencies Analytical: synthesizes complex or diverse technical information, using intuition and experience to complement data. Collaboration: openly partners with security operations, DevOps, and business stakeholders, valuing diverse perspectives and building productive relationships. Communication: listens and responds effectively to stakeholder needs; writes and speaks clearly and persuasively. Initiative and personal accountability: identifies and creates solutions independently, sets and meets deadlines, and reports timely and prepared. Problem solving/decision making: thinks strategically, drawing on diverse sources to identify issues, risks, and trends and determine optimal, timely solutions. Strong troubleshooting skills and the ability to manage competing priorities between reactive operational work and scheduled remediation projects. Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours. Ability to travel periodically between the Boca Raton, FL and Atlanta (ATL) data centers as needed. Requirements: Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Security, or a related field; at least five (5) years of related business experience in network security, systems engineering, or infrastructure operations in an enterprise environment, or an equivalent combination of education and professional experience. Hands-on experience with both on-premises and cloud infrastructure platforms, including vulnerability management, patch management, and OS hardening across Windows and/or Linux server environments. Experience with PKI/SSL certificate lifecycle management and IAM/PAM tools (e.g., BeyondTrust or equivalent). Experience partnering with security operations/SIEM teams to onboard new log sources and ensure reliable syslog delivery from network infrastructure. Working knowledge of hybrid Active Directory/Microsoft Entra ID environments and familiarity with network segmentation concepts and tools (e.g., Illumio or comparable micro-segmentation platforms). Experience supporting audit and compliance remediation cycles, such as HIPAA assessments, SRAs, or penetration test findings. Proficiency with firewalls and network security appliances (Palo Alto, Fortinet, Cisco Meraki, Cisco switches), SD-WAN/next-generation firewall administration, and wireless security/NAC (Cisco wireless, HPE Aruba ClearPass). This is a hybrid role based in Boca Raton, FL, with periodic on-site support required at the Boca Raton and Atlanta (ATL) data centers. At no time may work be performed, or computer systems accessed, from outside of the U.S. Preferred Qualifications Vendor-specific certifications, Microsoft Azure, Security+, CISSP, GIAC, or an equivalent security certification. Scripting/automation experience (e.g., PowerShell) for remediation and hardening tasks. Why Join MDVIP? Be part of a mission-driven organization leading innovation in personalized healthcare. Drive transformation and growth in a dynamic, fast-paced environment. Competitive Compensation: Attractive base salary complemented by performance-based incentives. Comprehensive Benefits: Health, dental, vision insurance, and retirement plans. Professional Development: Access to ongoing training and leadership development programs. Positive Work Environment: Consistently recognized as a Great Place to Work , fostering a culture of collaboration and excellence. MDVIP is an Equal Opportunity Employer and is committed to fostering an inclusive and diverse workplace. We welcome applicants of all backgrounds and do not discriminate based on race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other protected status. We believe that diversity and inclusion drive innovation and strengthen our company culture. If you require accommodations during the application or interview process, please let us know, and we will be happy to assist. Pay Transparency: Our compensation reflects the cost of labor across appropriate US geographic markets. Pay is based on several factors including but not limited to market location and may vary depending on job-related knowledge, skills, and education/training and a candidate's work experience. Hired applicants are offered annual incentive compensation programs, subject to applicable eligibility requirements . click apply for full job details

Job Description Job Description Description: Location: Tri-Cities, WA Travel: Up to 20% Reports To: Corporate VP of IS The IS Specialist III serves as the primary on-site technology leader supporting a multi-site operation of 50-200 users. This role ensures stable, secure, and efficient IT operations while coordinating closely with the Corporate IS team for advanced engineering, development, cybersecurity, and infrastructure initiatives. This is a senior-level technical generalist role combining Windows infrastructure support, business systems reporting, project coordination, industrial systems integration, and local technical leadership. The position is hands-on and part of the broader corporate IS team, which includes senior infrastructure engineers, developers, helpdesk, and junior development resources. Duties Infrastructure & Systems Operations (Primary Focus) Serve as the local lead for Windows-based infrastructure (Windows 10/11, Microsoft 365, Active Directory, core software platforms, hardware systems, and web services). Coordinate with the corporate infrastructure team on network support, backup and disaster recovery, endpoint management, and server lifecycle planning. Escalate complex issues appropriately while maintaining local ownership and accountability. Maintain documentation of systems, diagrams, configurations, and asset inventories. Assist with user provisioning, workstation deployments, and site-level hardware standards. Project Coordination & Implementation Lead site-level technology projects from requirements gathering through deployment. Coordinate with corporate developers and infrastructure engineers on larger initiatives. Manage timelines, vendor engagement, testing, and deployment activities. Evaluate new software and hardware solutions and provide structured recommendations. Assist with task estimation, prioritization, ROI evaluation, and project documentation. Hardware Integration & Operational Support Support integration of industrial or facility systems with enterprise IT infrastructure. Coordinate system integration between hardware platforms and internal software applications. Maintain appropriate segmentation between operational and corporate systems. Security & Compliance Support Ensure local systems adhere to corporate cybersecurity policies. Support NIST 800-171 and Sarbanes-Oxley-aligned controls in coordination with Corporate IS. Assist with audits through documentation, evidence gathering, and change control support. Promote secure configuration standards and end-user security best practices. Business Systems Lead & Reporting Participate in the SDLC for waste tracking, procurement, accounting, asset management, and ancillary information systems initiatives. Develop and maintain SQL queries and SQL Server reports (SQL, SSRS, RDL). Partner with operations to develop business requirements, validate system designs, update system documentation, and oversee implementation. Assist with data validation, testing, and minor integrations. Requirements: 10+ years of progressive IT experience in systems administration, infrastructure, or business systems roles; OR a four-year related degree with 5+ years of relevant experience. Strong Microsoft ecosystem experience (Windows Server/Client, Active Directory). Solid SQL experience (query writing, stored procedures, SSRS development). Experience supporting multi-site or distributed operations. Ability to manage technical priorities independently in an operational environment. Strong written and verbal communication skills across technical and non-technical stakeholders. Prefered Experience Experience in regulated or industrial environments. Experience with .NET, Go, JavaScript, C#, or other development environments. Familiarity with waste tracking, ERP, or accounting systems. Working knowledge of network fundamentals (firewalls, VLANs, VPN). Experience coordinating technical projects. Understanding of API integrations and data exchange models. This role serves as a senior embedded technical leader and operational bridge between site operations and Corporate IS. It provides hands-on technical support, business systems insight, and practical project leadership while leveraging centralized corporate expertise for deep engineering and development functions.

Job Description Job Description Business Technology Integrators (BTI) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) with more than 25 years of experience delivering innovative and reliable IT and engineering solutions to the Federal Government. BTI supports mission-critical programs across defense and civilian agencies, with core expertise in cybersecurity, program management, enterprise IT, and technical oversight services. Position Overview The Intermediate AV/VTC Specialist will provide audiovisual, video teleconferencing, collaboration-platform, and multimedia production support for the Equal Employment Opportunity Commission. This position supports the configuration, operation, maintenance, and troubleshooting of AV/VTC systems within a distributed enterprise environment similar in size and complexity to the EEOC. The ideal candidate will have at least six years of relevant experience supporting audiovisual technologies, video production equipment, conferencing platforms, and integrated multimedia systems. The specialist will support live meetings, virtual conferences, presentations, broadcasts, and other mission-related events while ensuring high-quality audio, video, and collaboration services. Key Responsibilities Configure, operate, maintain, and troubleshoot audiovisual, video teleconferencing, and multimedia production equipment. Provide technical and operational support for Microsoft Teams, Zoom, Poly RealPresence, and Cisco video conferencing systems and endpoints. Set up and support virtual meetings, hybrid meetings, executive conferences, presentations, live events, and video teleconferences. Perform pre-event system checks and confirm that cameras, microphones, displays, speakers, conferencing platforms, and network connections are operating correctly. Monitor live meetings and events, quickly identifying and resolving audio, video, connectivity, or equipment issues. Provide video editing and post-production services for recorded meetings, training materials, presentations, and organizational communications. Operate video switchers, professional cameras, recording equipment, and related production technologies. Support camera placement, framing, lighting, recording, and live video production activities. Develop and edit graphics, animations, motion graphics, presentation materials, and other visual media. Perform audio mixing and configure microphones, speakers, amplifiers, and other sound-reinforcement equipment. Configure and support digital signal processing systems used for audio routing, optimization, and control. Operate and maintain AV control systems, projection systems, video walls, digital displays, and LED display technologies. Diagnose and resolve hardware, software, signal-routing, audio-quality, video-quality, and platform-integration issues. Perform preventive maintenance, firmware updates, equipment testing, and routine system inspections. Coordinate with IT, networking, facilities, communications, and event-support personnel to ensure reliable service delivery. Assist end users, presenters, executives, and meeting organizers with the proper use of AV/VTC systems. Maintain equipment inventories, system configurations, maintenance records, technical documentation, and standard operating procedures. Escalate complex technical issues to senior AV/VTC personnel, vendors, or appropriate support teams. Follow EEOC security, accessibility, operational, and information-technology policies and procedures. Minimum Qualifications A minimum of six years of experience providing AV/VTC support in an enterprise or federal environment similar in size, scope, and complexity to the EEOC. Demonstrated experience configuring, operating, maintaining, and troubleshooting AV and multimedia production equipment. Hands-on experience supporting Microsoft Teams, Zoom, Poly RealPresence, and Cisco video conferencing technologies. Experience with video editing, post-production, video switching, and camera operations. Experience with graphic design, animation, and motion-graphics development. Knowledge of professional audio mixing, microphone systems, signal routing, and sound-reinforcement technologies. Experience with digital signal processing, AV control systems, projection systems, video displays, and LED display technologies. Ability to support live, virtual, and hybrid meetings in a time-sensitive environment. Strong troubleshooting, customer-service, organization, and communication skills. Ability to communicate technical information clearly to both technical and nontechnical users. Ability to work independently and collaboratively with IT teams, government personnel, vendors, and other stakeholders. Ability to lift, move, install, and position AV equipment as required. Preferred Qualifications Associate's or bachelor's degree in Audiovisual Technology, Broadcast Production, Communications, Information Technology, Multimedia Production, or a related discipline. Experience supporting a federal government agency or a geographically distributed organization. Experience with enterprise conference rooms, executive briefing rooms, training rooms, auditoriums, and live-event environments. AVIXA Certified Technology Specialist certification, such as CTS, CTS-I, or CTS-D. Manufacturer certifications involving Poly, Cisco, Crestron, Extron, QSC, Biamp, or similar AV technologies. Familiarity with Section 508 accessibility requirements and federal information-security standards. Core Competencies AV/VTC system operation and troubleshooting Microsoft Teams, Zoom, Poly, and Cisco support Live and hybrid meeting support Video editing and post-production Video switching and camera operation Graphic design and motion graphics Professional audio mixing Digital signal processing AV control and projection systems LED and digital display technologies Preventive maintenance and documentation Customer and executive-level support Choose a Description from the Library LocationCountry - Multiple Countries -AfghanistanAland IslandsAlbaniaAlbertaAlgeriaAndorraAngolaAnguillaAntarcticaAntigua and BarbudaArgentinaArmeniaArubaAustraliaAustriaAzerbaijanBahamasBahrainBangladeshBarbadosBelarusBelgiumBelizeBeninBermudaBhutanBoliviaBosnia and HerzegovinaBotswanaBouvet IslandBrazilBritish ColumbiaBritish Indian Ocean TerritoryBrunei DarussalamBulgariaBurkina FasoBurundiCambodiaCameroonCanadaCape VerdeCayman IslandsCentral African RepublicChadChileChinaChristmas IslandCocos (Keeling) IslandsColombiaComorosCongoCongo, The Democratic Republic of theCook IslandsCosta RicaCôte d' IvoireCroatiaCubaCyprusCzech RepublicDenmarkDjiboutiDominicaDominican RepublicEcuadorEgyptEl SalvadorEquatorial GuineaEritreaEstoniaEthiopiaFalkland Islands (Malvinas)Faroe IslandsFederated States Of MicronesiaFijiFinlandFranceFrench GuianaFrench PolynesiaFrench Southern TerritoriesGabonGambiaGeorgiaGermanyGhanaGibraltarGreat BritainGreeceGreenlandGrenadaGuadeloupeGuamGuatemalaGuernseyGuineaGuinea - BissauGuyanaHaitiHeard Island and McDonald IslandsHoly See (Vatican City State)HondurasHong KongHungaryIcelandIndiaIndonesiaIran, Islamic Republic ofIraqIrelandIsle of ManIsraelItalyJamaicaJapanJerseyJordanKazakhstanKenyaKiribatiKorea, Democratic People's Republic ofKosovoKuwaitKyrgyzstanLao People's Democratic RepublicLatviaLebanonLesothoLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacaoMacedonia, Republic ofMadagascarMalawiMalaysiaMaldivesMaliMaltaManitobaMarshall IslandsMartiniqueMauritaniaMauritiusMayotteMexicoMoldovaMonacoMongoliaMontenegroMontserratMoroccoMozambiqueMyanmarNamibiaNauruNepalNetherlandsNetherlands AntillesNew BrunswickNew CaledoniaNew ZealandNewfoundland and LabradorNicaraguaNigerNigeriaNiueNorfolk IslandNorthern Mariana IslandsNorthwest TerritoriesNorwayNova ScotiaNunavutOmanOntarioPakistanPalauPalestinian Territory, OccupiedPanamaPapua New GuineaParaguayPeruPhilippinesPitcairnPolandPortugalPrince Edward IslandPuerto RicoQatarQuebecReunionRomaniaRussian FederationRwandaSaint BarthélemySaint HelenaSaint Kitts and NevisSaint LuciaSaint Martin (French part)Saint Pierre and MiquelonSaint Vincent and the GrenadinesSamoaSan MarinoSao Tome and PrincipeSaskatchewanSaudi ArabiaSenegalSerbiaSeychellesSierra LeoneSingaporeSlovakiaSloveniaSolomon IslandsSomaliaSouth AfricaSouth Georgia and the South Sandwich IslandsSouth KoreaSouth SudanSpainSri LankaSudanSurinameSvalbard and Jan MayenSwazilandSwedenSwitzerlandSyrian Arab RepublicTaiwanTajikistanTanzania, United Republic ofThailandTimor- LesteTogoTokelauTongaTrinidad and TobagoTunisiaTurkeyTurkmenistanTurks and Caicos IslandsTuvaluUgandaUkraineUnited Arab EmiratesUnited KingdomUnited StatesUnited States Minor Outlying IslandsUruguayUzbekistanVanuatuVenezuelaViet NamVirgin IslandsWallis and FutunaWestern SaharaYemenYukonZambiaZimbabwe Street Address Powered by JazzHR ktfBlmglPp