Job Description Job Description Network Security Engineer II Location - Onsite, Irvine, CA Grade: 8 Company Overview Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group. At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations. If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation. What You Will Be Doing The Security Architecture and Engineering team within the CISO organization is seeking a Network Security Engineer II to help design, implement, operate, and continuously improve enterprise network security controls. This role will focus on technologies including Web Application Firewalls, Network Access Control, IDS, and IPS, while partnering closely with the IT Networking team to ensure secure, reliable, and scalable network services. This is an onsite role, five days per week, based in our Irvine office. The key responsibilities of this role are as described below: The Network Security Engineer II will be responsible for supporting and maintaining critical network security platforms across the enterprise. Responsibilities include: Administer, monitor, and optimize Web Application Firewall platforms to protect internet-facing and internal applications. Support and maintain Network Access Control technologies, including device profiling, policy enforcement, segmentation support, and exception handling. Operate and tune Intrusion Detection and Intrusion Prevention Systems to improve detection accuracy and reduce false positives. Partner with the IT Networking team on secure network design, routing, switching, firewall, segmentation, and connectivity initiatives. Assist other Security and IT teams by reviewing security events, alerts, logs, and traffic patterns to identify potential threats or misconfigurations. Assist with the implementation of network security architecture standards, hardening guidelines, and secure configuration baselines. Participate in incident response activities related to network-based threats, unauthorized access, or suspicious traffic. Develop and maintain documentation, including network security diagrams, platform runbooks, standard operating procedures, and change records. Support vulnerability remediation efforts related to network infrastructure, application exposure, and security control gaps. Perform policy reviews and rulebase hygiene for WAF, NAC, IDS, and IPS technologies. Participate in change management activities, including risk assessment, implementation planning, testing, and post-change validation. Collaborate with security operations, infrastructure, application, and compliance teams to support business and regulatory requirements. Assist with lifecycle management for network security tools, including upgrades, patching, certificate management, integrations, and capacity planning. Provide technical recommendations to improve visibility, segmentation, access control, and threat prevention across the environment. Basic Qualifications: Experience: 8+ years of network security, infrastructure security, and/or security engineering. Practical and demonstrated experience working Web Application Firewalls, Network Access Control platforms, IDS/IPS technologies, Firewalls or secure network gateways in platforms by Cisco, Palo Alto, Trend Micro, Gigamon, Trellix, etc. Education: Bachelor's degree in Cybersecurity, Information Technology, Computer science or a related field. Technical Expertise: Advanced level knowledge of networking concepts, including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, VPNs, and network segmentation. Experience analyzing logs, packet captures, alerts, and network traffic to troubleshoot issues or investigate security events. Familiarity with common network and application-layer attack techniques. Experience supporting production environments and following change management processes. Strong troubleshooting, documentation, and communication skills. Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination. Schedule: This is an onsite position requiring presence in the Irvine office five days per week. Some after-hours or weekend work may be required for planned maintenance, incident response, or critical security changes. Preferred Qualifications: Experience: Experience with enterprise WAF policy tuning, bot protection, API protection, or application security rule sets. Experience with NAC deployment models, including 802.1X, MAC authentication bypass, posture assessment, guest access, and device profiling. Familiarity with SIEM, SOAR, vulnerability management, endpoint security, or cloud security tools. Scripting or automation experience using Python, PowerShell, APIs, or infrastructure-as-code tools. Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as Security+, Network+, CCNA, CCNP Security, PCNSE, CISSP, GSEC, GCIH, or vendor-specific certifications. Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication. Team Culture: The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed. Base Salary Range: $100,000 - 130,000 Powered by JazzHR FgOdYKZ9EK
10/23/2026
Full time
Job Description Job Description Network Security Engineer II Location - Onsite, Irvine, CA Grade: 8 Company Overview Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group. At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations. If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation. What You Will Be Doing The Security Architecture and Engineering team within the CISO organization is seeking a Network Security Engineer II to help design, implement, operate, and continuously improve enterprise network security controls. This role will focus on technologies including Web Application Firewalls, Network Access Control, IDS, and IPS, while partnering closely with the IT Networking team to ensure secure, reliable, and scalable network services. This is an onsite role, five days per week, based in our Irvine office. The key responsibilities of this role are as described below: The Network Security Engineer II will be responsible for supporting and maintaining critical network security platforms across the enterprise. Responsibilities include: Administer, monitor, and optimize Web Application Firewall platforms to protect internet-facing and internal applications. Support and maintain Network Access Control technologies, including device profiling, policy enforcement, segmentation support, and exception handling. Operate and tune Intrusion Detection and Intrusion Prevention Systems to improve detection accuracy and reduce false positives. Partner with the IT Networking team on secure network design, routing, switching, firewall, segmentation, and connectivity initiatives. Assist other Security and IT teams by reviewing security events, alerts, logs, and traffic patterns to identify potential threats or misconfigurations. Assist with the implementation of network security architecture standards, hardening guidelines, and secure configuration baselines. Participate in incident response activities related to network-based threats, unauthorized access, or suspicious traffic. Develop and maintain documentation, including network security diagrams, platform runbooks, standard operating procedures, and change records. Support vulnerability remediation efforts related to network infrastructure, application exposure, and security control gaps. Perform policy reviews and rulebase hygiene for WAF, NAC, IDS, and IPS technologies. Participate in change management activities, including risk assessment, implementation planning, testing, and post-change validation. Collaborate with security operations, infrastructure, application, and compliance teams to support business and regulatory requirements. Assist with lifecycle management for network security tools, including upgrades, patching, certificate management, integrations, and capacity planning. Provide technical recommendations to improve visibility, segmentation, access control, and threat prevention across the environment. Basic Qualifications: Experience: 8+ years of network security, infrastructure security, and/or security engineering. Practical and demonstrated experience working Web Application Firewalls, Network Access Control platforms, IDS/IPS technologies, Firewalls or secure network gateways in platforms by Cisco, Palo Alto, Trend Micro, Gigamon, Trellix, etc. Education: Bachelor's degree in Cybersecurity, Information Technology, Computer science or a related field. Technical Expertise: Advanced level knowledge of networking concepts, including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, VPNs, and network segmentation. Experience analyzing logs, packet captures, alerts, and network traffic to troubleshoot issues or investigate security events. Familiarity with common network and application-layer attack techniques. Experience supporting production environments and following change management processes. Strong troubleshooting, documentation, and communication skills. Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination. Schedule: This is an onsite position requiring presence in the Irvine office five days per week. Some after-hours or weekend work may be required for planned maintenance, incident response, or critical security changes. Preferred Qualifications: Experience: Experience with enterprise WAF policy tuning, bot protection, API protection, or application security rule sets. Experience with NAC deployment models, including 802.1X, MAC authentication bypass, posture assessment, guest access, and device profiling. Familiarity with SIEM, SOAR, vulnerability management, endpoint security, or cloud security tools. Scripting or automation experience using Python, PowerShell, APIs, or infrastructure-as-code tools. Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as Security+, Network+, CCNA, CCNP Security, PCNSE, CISSP, GSEC, GCIH, or vendor-specific certifications. Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication. Team Culture: The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed. Base Salary Range: $100,000 - 130,000 Powered by JazzHR FgOdYKZ9EK
Billable Hours: 80% of worked hours Travel: Minimal The Cybersecurity Engineer to serve as a subject matter expert in many areas of security, able to describe and document in business terms the impact of security policies, standards, and architecture. This person plays a vital dual role in our organization, with time being spent facilitating our Cybersecurity offering as well as focusing on CMMC Compliance. The Cybersecurity Engineer provides security direction to the business and project stakeholders to ensure that security is a key focus for all projects and new business initiatives, as well as technical expertise on assigned clients, tickets, and CMMC Compliance projects. ESSENTIAL FUNCTIONS: Project engagement during the initiation, requirements, and design stages to ensure that security has been considered and is included into the design at the appropriate level based on the risks Security review and design of complex applications and technologies Evaluation and maintenance of security system plans and procedures to safeguard internal information systems Researching and recommendation/implementation of changes to procedures and systems to enhance security aligned with corporate policies Accountable for ensuring that key risks and issues are identified, addressed and resolved in a manner that satisfies the business Perform security risk assessments to determine level of security services to include: Document Customers' Systems Liaison between ComTec and Cybersecurity Vendors Weekly review and analysis of Cybersecurity Reports ADDITIONAL RESPONSIBILITIES: Monitor assigned tickets and tasks and provide service or escalation as necessary. Develop tasks & milestones for security projects. Able to translate business and non-functional requirements to establish security controls so that a proper security design can be architected and to document the security solution for communication and publication. Demonstrated analytical skills - continuously identifies problems, collect or interpret data, establish facts, anticipate obstacles, and develops plans to resolve; strong problem-solving skills while communicating in a clear and succinct manner effectively evaluating information and data to make decisions. Proven understanding of the current vulnerabilities, response, and mitigation strategies used in Cybersecurity. Experience of designing and incorporating technical security controls that align to NIST 800-171, and/or CMMC. Prepared to challenge business and IT colleagues and have the "difficult conversations" where needed in the interests of the company. Demonstrated customer focus - evaluate decisions through the eyes of the customer; build strong customer relationships and create processes from the customer viewpoint. Able to operate as a highly independent worker and as part of a strong team/collaborative approach. Accurately enter and maintain ticket information including notes and resolution. Adhere to departmental policies for reporting and managing requests and change controls. Maintain daily timesheet and expense report entries and submit them accurately and timely. Other duties as required. TECHNICAL SKILLS: Strong background in security architecture including a deep knowledge of IT network security (secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design) and cloud-based technologies. Strong background in Network Engineering including a deep understanding of Windows Server architecture, Windows Virtualization, Networking, Backup Solutions, and Disaster Recovery Strong background in Microsoft security architecture including a deep knowledge of server and workstation security. Ability to troubleshoot server based software issues with: Microsoft Windows Server operating systems On Premise Microsoft Exchange and hosted Microsoft Office 365 Microsoft Remote Desktop Services Microsoft Hyper-V and VMWare Enterprise EDR and MDR solutions Enterprise class backup solutions Knowledgeable of various server/workstation peripherals such as NAS/SAN solutions. In depth knowledge of workstation/server hardware and software troubleshooting abilities Strong understanding of networking equipment such as Switches, Firewalls, and Wireless Access Points SOFT SKILLS & ABILITIES: Strong written and verbal communication skills. Pleasant and professional demeanor in all client and internal communications. Ability to multi task. Independent worker and able to work effectively on daily tasks without direct supervision. Strong organization skills and ability to operate efficiently throughout daily tasks. Work well with clients at all levels, from executive to IT to end user. EDUCATION, EXPERIENCE, & KNOWLEDGE: (5) years working in Information Technology (2) years in Cybersecurity (1) year in CMMC compliance Information Security Qualifications such as CISSP, CISM, CISA, and ISSAP, a plus. Certified CMMC Professional (CCP) Familiarity with NIST SP 800-171, or 800-53 Vulnerability Management ADDITIONAL REQUIREMENTS: Ability to schedule for evening or weekend work occasionally Valid driver's license in your state of residence and reliable personal vehicle WORK ENVIRONMENT/PHYSICAL DEMANDS: Use of computer and office equipment Ability to remain calm in stressful situations Performs all administrative functions expected at this level Compensation details: 00 Yearly Salary PI7ce9a2201b8b-9557
10/23/2026
Full time
Billable Hours: 80% of worked hours Travel: Minimal The Cybersecurity Engineer to serve as a subject matter expert in many areas of security, able to describe and document in business terms the impact of security policies, standards, and architecture. This person plays a vital dual role in our organization, with time being spent facilitating our Cybersecurity offering as well as focusing on CMMC Compliance. The Cybersecurity Engineer provides security direction to the business and project stakeholders to ensure that security is a key focus for all projects and new business initiatives, as well as technical expertise on assigned clients, tickets, and CMMC Compliance projects. ESSENTIAL FUNCTIONS: Project engagement during the initiation, requirements, and design stages to ensure that security has been considered and is included into the design at the appropriate level based on the risks Security review and design of complex applications and technologies Evaluation and maintenance of security system plans and procedures to safeguard internal information systems Researching and recommendation/implementation of changes to procedures and systems to enhance security aligned with corporate policies Accountable for ensuring that key risks and issues are identified, addressed and resolved in a manner that satisfies the business Perform security risk assessments to determine level of security services to include: Document Customers' Systems Liaison between ComTec and Cybersecurity Vendors Weekly review and analysis of Cybersecurity Reports ADDITIONAL RESPONSIBILITIES: Monitor assigned tickets and tasks and provide service or escalation as necessary. Develop tasks & milestones for security projects. Able to translate business and non-functional requirements to establish security controls so that a proper security design can be architected and to document the security solution for communication and publication. Demonstrated analytical skills - continuously identifies problems, collect or interpret data, establish facts, anticipate obstacles, and develops plans to resolve; strong problem-solving skills while communicating in a clear and succinct manner effectively evaluating information and data to make decisions. Proven understanding of the current vulnerabilities, response, and mitigation strategies used in Cybersecurity. Experience of designing and incorporating technical security controls that align to NIST 800-171, and/or CMMC. Prepared to challenge business and IT colleagues and have the "difficult conversations" where needed in the interests of the company. Demonstrated customer focus - evaluate decisions through the eyes of the customer; build strong customer relationships and create processes from the customer viewpoint. Able to operate as a highly independent worker and as part of a strong team/collaborative approach. Accurately enter and maintain ticket information including notes and resolution. Adhere to departmental policies for reporting and managing requests and change controls. Maintain daily timesheet and expense report entries and submit them accurately and timely. Other duties as required. TECHNICAL SKILLS: Strong background in security architecture including a deep knowledge of IT network security (secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design) and cloud-based technologies. Strong background in Network Engineering including a deep understanding of Windows Server architecture, Windows Virtualization, Networking, Backup Solutions, and Disaster Recovery Strong background in Microsoft security architecture including a deep knowledge of server and workstation security. Ability to troubleshoot server based software issues with: Microsoft Windows Server operating systems On Premise Microsoft Exchange and hosted Microsoft Office 365 Microsoft Remote Desktop Services Microsoft Hyper-V and VMWare Enterprise EDR and MDR solutions Enterprise class backup solutions Knowledgeable of various server/workstation peripherals such as NAS/SAN solutions. In depth knowledge of workstation/server hardware and software troubleshooting abilities Strong understanding of networking equipment such as Switches, Firewalls, and Wireless Access Points SOFT SKILLS & ABILITIES: Strong written and verbal communication skills. Pleasant and professional demeanor in all client and internal communications. Ability to multi task. Independent worker and able to work effectively on daily tasks without direct supervision. Strong organization skills and ability to operate efficiently throughout daily tasks. Work well with clients at all levels, from executive to IT to end user. EDUCATION, EXPERIENCE, & KNOWLEDGE: (5) years working in Information Technology (2) years in Cybersecurity (1) year in CMMC compliance Information Security Qualifications such as CISSP, CISM, CISA, and ISSAP, a plus. Certified CMMC Professional (CCP) Familiarity with NIST SP 800-171, or 800-53 Vulnerability Management ADDITIONAL REQUIREMENTS: Ability to schedule for evening or weekend work occasionally Valid driver's license in your state of residence and reliable personal vehicle WORK ENVIRONMENT/PHYSICAL DEMANDS: Use of computer and office equipment Ability to remain calm in stressful situations Performs all administrative functions expected at this level Compensation details: 00 Yearly Salary PI7ce9a2201b8b-9557
Job Description Firm Background Roc360 is a financial services and asset management platform for residential property investors in the United States. The firm connects fragmented loan markets with institutional capital through a branchless network of third-party originators, brokers, and in-house sales teams to originate loans to property investors who buy, rehab, resell, and/or rent properties. The firm originates and services multiple business-purpose loan products ("BPLs"), via various sales channels which, together with ancillary service offerings, provide an end-to-end experience that drives repeat customer transactions and profitability. The firm's loan products include residential transitional bridge loans ("RTLs") (including single and multi-family properties) and Rental Loans (including single and multi-family property rentals and rental portfolios). Founded in 2014, Roc360 is headquartered in NYC, has approximately 450 team members globally across five countries over three continents, and can originate loans in 46 states and Washington, D.C. The firm's founders have worked together for over 25 years and most of its senior management team has also enjoyed a long tenure at the firm. Through its proprietary technology-enabled Third-Party Originator and Direct-to-Borrower lending channels and strong brand recognition, the firm has funded over $20bn in loans since its inception. Position Summary As a Full Stack Tech Lead, you'll own the technical direction of a core product team while remaining deeply embedded in the codebase. You'll lead a small group of engineers from architecture discussions to production deployments, balancing strategic thinking with hands-on execution. This is a high-impact, high-visibility role for someone who is equally comfortable reviewing a pull request and presenting a system design. Responsibilities Lead and mentor a team of engineers, conducting code reviews, setting technical standards, and fostering a culture of quality and continuous improvement Architect and build scalable backend services using Java and Spring Boot, following microservices best practices Design and develop RESTful APIs that power our web and mobile lending platform Collaborate with product managers and stakeholders to translate business requirements into robust, maintainable technical solutions Contribute to frontend development (React) when needed, bridging the full stack to unblock your team Champion engineering best practices including testing, CI/CD, observability, and documentation Drive technical roadmap planning and participate in sprint ceremonies as a key voice in Agile/Scrum processes Diagnose and resolve complex production issues, leading root cause analysis and post-mortems Qualifications Required 5-15 years of professional software engineering experience, with a strong foundation in Core Java and Spring frameworks (Spring Boot, Spring MVC, Spring Data) Proven experience leading or mentoring engineering teams in a fast-paced product environment Expert-level REST API design and implementation skills Solid command of relational databases and SQL (PostgreSQL, MySQL, or Oracle) including query optimization and schema design Experience with Git-based version control workflows (Bitbucket, GitLab, or GitHub) Deep understanding of object-oriented design principles, data structures, and Java Collections Hands-on experience with Agile/Scrum methodologies including sprint planning, backlog grooming, and Jira Strong communication skills - you can translate technical complexity for non-technical stakeholders and write clearly Frontend development experience with React, TypeScript, HTML, and CSS - you can own the full stack when needed Preferred Experience designing or operating microservices architectures in production Familiarity with NoSQL databases (MongoDB, DynamoDB, Redis, etc.) Exposure to cloud platforms (AWS, GCP, or Azure) and containerization (Docker, Kubernetes) Background in fintech, lending, or real estate technology Familiarity with AI/LLM technologies (e.g. OpenAI GPT, Anthropic Claude, LangChain) and an interest in applying them to automate workflows or enhance product experiences Core Tech Stack Java / Spring Boot REST APIs PostgreSQL / SQL React Microservices Git / CI-CD Roc360 is an Equal Opportunity Employer. We respect and endeavor to empower individuals and support the diverse cultures, perspectives, skills, and experiences within our workforce.
10/23/2026
Full time
Job Description Firm Background Roc360 is a financial services and asset management platform for residential property investors in the United States. The firm connects fragmented loan markets with institutional capital through a branchless network of third-party originators, brokers, and in-house sales teams to originate loans to property investors who buy, rehab, resell, and/or rent properties. The firm originates and services multiple business-purpose loan products ("BPLs"), via various sales channels which, together with ancillary service offerings, provide an end-to-end experience that drives repeat customer transactions and profitability. The firm's loan products include residential transitional bridge loans ("RTLs") (including single and multi-family properties) and Rental Loans (including single and multi-family property rentals and rental portfolios). Founded in 2014, Roc360 is headquartered in NYC, has approximately 450 team members globally across five countries over three continents, and can originate loans in 46 states and Washington, D.C. The firm's founders have worked together for over 25 years and most of its senior management team has also enjoyed a long tenure at the firm. Through its proprietary technology-enabled Third-Party Originator and Direct-to-Borrower lending channels and strong brand recognition, the firm has funded over $20bn in loans since its inception. Position Summary As a Full Stack Tech Lead, you'll own the technical direction of a core product team while remaining deeply embedded in the codebase. You'll lead a small group of engineers from architecture discussions to production deployments, balancing strategic thinking with hands-on execution. This is a high-impact, high-visibility role for someone who is equally comfortable reviewing a pull request and presenting a system design. Responsibilities Lead and mentor a team of engineers, conducting code reviews, setting technical standards, and fostering a culture of quality and continuous improvement Architect and build scalable backend services using Java and Spring Boot, following microservices best practices Design and develop RESTful APIs that power our web and mobile lending platform Collaborate with product managers and stakeholders to translate business requirements into robust, maintainable technical solutions Contribute to frontend development (React) when needed, bridging the full stack to unblock your team Champion engineering best practices including testing, CI/CD, observability, and documentation Drive technical roadmap planning and participate in sprint ceremonies as a key voice in Agile/Scrum processes Diagnose and resolve complex production issues, leading root cause analysis and post-mortems Qualifications Required 5-15 years of professional software engineering experience, with a strong foundation in Core Java and Spring frameworks (Spring Boot, Spring MVC, Spring Data) Proven experience leading or mentoring engineering teams in a fast-paced product environment Expert-level REST API design and implementation skills Solid command of relational databases and SQL (PostgreSQL, MySQL, or Oracle) including query optimization and schema design Experience with Git-based version control workflows (Bitbucket, GitLab, or GitHub) Deep understanding of object-oriented design principles, data structures, and Java Collections Hands-on experience with Agile/Scrum methodologies including sprint planning, backlog grooming, and Jira Strong communication skills - you can translate technical complexity for non-technical stakeholders and write clearly Frontend development experience with React, TypeScript, HTML, and CSS - you can own the full stack when needed Preferred Experience designing or operating microservices architectures in production Familiarity with NoSQL databases (MongoDB, DynamoDB, Redis, etc.) Exposure to cloud platforms (AWS, GCP, or Azure) and containerization (Docker, Kubernetes) Background in fintech, lending, or real estate technology Familiarity with AI/LLM technologies (e.g. OpenAI GPT, Anthropic Claude, LangChain) and an interest in applying them to automate workflows or enhance product experiences Core Tech Stack Java / Spring Boot REST APIs PostgreSQL / SQL React Microservices Git / CI-CD Roc360 is an Equal Opportunity Employer. We respect and endeavor to empower individuals and support the diverse cultures, perspectives, skills, and experiences within our workforce.
Job Description Job Description Software Engineers- with TS SCI & VA Customer Favorable Poly required: Experience in System Administration Demonstrated experience building and maintaining secure web applications on the Sponsor's network JWICS C2S network Designing, developing, querying and maintaining ElasticSearch/AWS OpenSearch and related technologies Writing and tuning complex queries against structured and unstructured data sets using both SQL and ElasticSearch/OpenSearch languages Integrating Services C2S services including Lambdas, SNS, SQS, etc. Integrating AWS services including Lambdas, SNS, SQS, etc., in the sponsor's classified environment Demonstrated experience leveraging a background in programming, software tools and packages, operating systems, and networking to solve collection needs in cloud environments. Demonstrated experience with the ability to listen and transcribe from mission need to technical requirements for Sponsor consideration. Demonstrated experience with the ability to reflect back an understanding of the mission need described and convey how a technical solution will deliver mission results. Demonstrated experience prioritizing work based on mission need. Demonstrated experience documenting and communicating technical and non-technical mission requirements for all audiences. Demonstrated experience working with other technical teams across multiple organizational boundaries. Demonstrated experience with assessing project requirements and making informed recommendations. Demonstrated experience with Python. Demonstrated experience with Linux shell scripting. Demonstrated experience building Docker containers and images. Demonstrated experience with cloud services, including Lambda functions and layers, S3, Batch, EC2, EventBridge, SQS, SNS, IAM roles, DynamoDB, and container services. Demonstrated experience using AWS Cloud Development Kits (CDK). (CloudFormation, Terraform or similar are NOT substitutes for CDK experience) Demonstrated experience transforming data in various file formats into common formats, such as JSON, CSV, or XML. Demonstrated experience working with application developers to identify and implement infrastructure and deployment requirements. Focus on monitoring, troubleshooting, and automating deployments, and secondarily, additional strengths in managing IT security vulnerabilities and security controls DESIRED: Demonstrated experience with tools, such as IDA Pro, Ghidra, JADX, or APKtool. DESIRED: Demonstrated experience with multiple cloud providers. DESIRED: Demonstrated experience with other programming languages besides Python.
10/23/2026
Full time
Job Description Job Description Software Engineers- with TS SCI & VA Customer Favorable Poly required: Experience in System Administration Demonstrated experience building and maintaining secure web applications on the Sponsor's network JWICS C2S network Designing, developing, querying and maintaining ElasticSearch/AWS OpenSearch and related technologies Writing and tuning complex queries against structured and unstructured data sets using both SQL and ElasticSearch/OpenSearch languages Integrating Services C2S services including Lambdas, SNS, SQS, etc. Integrating AWS services including Lambdas, SNS, SQS, etc., in the sponsor's classified environment Demonstrated experience leveraging a background in programming, software tools and packages, operating systems, and networking to solve collection needs in cloud environments. Demonstrated experience with the ability to listen and transcribe from mission need to technical requirements for Sponsor consideration. Demonstrated experience with the ability to reflect back an understanding of the mission need described and convey how a technical solution will deliver mission results. Demonstrated experience prioritizing work based on mission need. Demonstrated experience documenting and communicating technical and non-technical mission requirements for all audiences. Demonstrated experience working with other technical teams across multiple organizational boundaries. Demonstrated experience with assessing project requirements and making informed recommendations. Demonstrated experience with Python. Demonstrated experience with Linux shell scripting. Demonstrated experience building Docker containers and images. Demonstrated experience with cloud services, including Lambda functions and layers, S3, Batch, EC2, EventBridge, SQS, SNS, IAM roles, DynamoDB, and container services. Demonstrated experience using AWS Cloud Development Kits (CDK). (CloudFormation, Terraform or similar are NOT substitutes for CDK experience) Demonstrated experience transforming data in various file formats into common formats, such as JSON, CSV, or XML. Demonstrated experience working with application developers to identify and implement infrastructure and deployment requirements. Focus on monitoring, troubleshooting, and automating deployments, and secondarily, additional strengths in managing IT security vulnerabilities and security controls DESIRED: Demonstrated experience with tools, such as IDA Pro, Ghidra, JADX, or APKtool. DESIRED: Demonstrated experience with multiple cloud providers. DESIRED: Demonstrated experience with other programming languages besides Python.
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
10/23/2026
Full time
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
10/23/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
10/23/2026
Full time
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
10/23/2026
Full time
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
Job Description Job Description Description: Leading with our people, Digital Consultants' mission is to deliver the highest level of professional solutions while being a trusted partner and advisor to our customers. With a culture of practicality, opportunity, and creativity, we remain dedicated to being honest, trustworthy, respectful, and ethical in everything we do. We are a certified SBA 8(a) small, disadvantaged business that supports multiple IT customers within the Federal, civilian, and private sectors. Digital Consultants also offers our employees growth opportunities, competitive wages, and a full benefits package. Our founding principles, Fairness and Common Sense, make working here more than a job; it's the Digital family. Digital Consultants is looking for a seasoned Data Center Architect to lead the planning, design, and execution of large-scale data center migration projects. This role is responsible for creating migration strategies that reduce risk and downtime while ensuring strong scalability, performance, and security. The ideal candidate has deep expertise across data center infrastructure, virtualization, storage, networking, and cloud integration, and thrives in fast-paced, transformation-focused environments. Design and lead end-to-end data center migration strategies, including on-premises to on-premises transitions, data center consolidations, and hybrid or cloud-adjacent migrations. Assess current data center environments, dependencies, and risks to create detailed migration roadmaps and execution plans. Architect target-state data center designs that align with business objectives, security standards, and compliance requirements. Collaborate closely with infrastructure, network, storage, security, and application teams to coordinate and execute migration activities. Establish standards, best practices, and architectural frameworks to support ongoing data center operations and future scalability. Lead technical decision-making across virtualization platforms, storage solutions, networking architectures, backup strategies, and disaster recovery planning. Oversee migration execution, including cutover planning, validation activities, and post-migration optimization. Identify and mitigate performance, availability, data integrity, and security risks throughout the migration lifecycle. Produce comprehensive documentation such as architecture diagrams, runbooks, migration plans, and operational handoff materials. Provide technical leadership, mentorship, and guidance to engineering and operations teams. Investigates the technical capabilities of company services and competing equipment and/or solutions. Stays abreast of developments in hardware and software. Generates quantifiable requirements based on customer description, system planning and design, and ensures requirements comply through formal verification methods. Translates high level product development strategies into network and system requirement specifications and works with other engineering disciplines to develop lower-level detailed implementation requirements. Establishes and coordinates development of standards, practices, and procedures as related to the network and system development. Designs interfaces and brings network and system elements together so they work as a whole. Assesses performance using evaluation criteria and technical performance measures. Provides customer liaison and support for business development activities and to understand and shape requirements. Coordinates the planning, design, and installation of equipment, using knowledge of engineering and programming as well as sophisticated instruments and computers. Participates in system conceptual design and documentation of the design concepts. Designs, creates, and builds network services, equipment and devices. Requirements: Education: Bachelor's Degree with 12+ yrs experience Clearance: Top Secret/SCI Certification: DoD 8140 IAT Level II certification (Security+ CE,CCNA- Security,CySA+,CND) Deep expertise in data center infrastructure, including compute, storage, and networking Strong understanding of virtualization platforms (VMware, Hyper-V, KVM, etc.) Proficiency in designing and executing large-scale data center migrations Knowledge of cloud platforms and hybrid/cloud-adjacent architectures Experience with storage architectures (SAN, NAS, object storage) Advanced networking knowledge, including routing, switching, firewalls, and load balancing Familiarity with backup, recovery, and disaster recovery strategies Strong understanding of security frameworks, compliance requirements, and risk mitigation Ability to develop architectural standards, frameworks, and documentation Experience with automation and orchestration tools (PowerShell, Ansible, etc.) Proficiency in dependency mapping, workload analysis, and capacity planning Preferred Skills and Experience Strong problem-solving, analytical, and troubleshooting skills Excellent communication and cross-team collaboration skills Ability to lead technical teams and provide mentorship Experience with DOD Networks (NIPR, SIPR, JWICS) Experience working in fast-paced, transformation-driven environments Digital Consultants, an inclusive and welcoming company, is fully committed to hiring and retaining a diverse workforce without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, age (40 or older), disability, veteran status or any other protected characteristic. We provide reasonable accommodation to individuals who require assistance at any stage of the employment process. If you need assistance navigating Digital Consultants' job openings or applying for a position, please email or call . Please provide your contact information so we can assist you.
10/23/2026
Full time
Job Description Job Description Description: Leading with our people, Digital Consultants' mission is to deliver the highest level of professional solutions while being a trusted partner and advisor to our customers. With a culture of practicality, opportunity, and creativity, we remain dedicated to being honest, trustworthy, respectful, and ethical in everything we do. We are a certified SBA 8(a) small, disadvantaged business that supports multiple IT customers within the Federal, civilian, and private sectors. Digital Consultants also offers our employees growth opportunities, competitive wages, and a full benefits package. Our founding principles, Fairness and Common Sense, make working here more than a job; it's the Digital family. Digital Consultants is looking for a seasoned Data Center Architect to lead the planning, design, and execution of large-scale data center migration projects. This role is responsible for creating migration strategies that reduce risk and downtime while ensuring strong scalability, performance, and security. The ideal candidate has deep expertise across data center infrastructure, virtualization, storage, networking, and cloud integration, and thrives in fast-paced, transformation-focused environments. Design and lead end-to-end data center migration strategies, including on-premises to on-premises transitions, data center consolidations, and hybrid or cloud-adjacent migrations. Assess current data center environments, dependencies, and risks to create detailed migration roadmaps and execution plans. Architect target-state data center designs that align with business objectives, security standards, and compliance requirements. Collaborate closely with infrastructure, network, storage, security, and application teams to coordinate and execute migration activities. Establish standards, best practices, and architectural frameworks to support ongoing data center operations and future scalability. Lead technical decision-making across virtualization platforms, storage solutions, networking architectures, backup strategies, and disaster recovery planning. Oversee migration execution, including cutover planning, validation activities, and post-migration optimization. Identify and mitigate performance, availability, data integrity, and security risks throughout the migration lifecycle. Produce comprehensive documentation such as architecture diagrams, runbooks, migration plans, and operational handoff materials. Provide technical leadership, mentorship, and guidance to engineering and operations teams. Investigates the technical capabilities of company services and competing equipment and/or solutions. Stays abreast of developments in hardware and software. Generates quantifiable requirements based on customer description, system planning and design, and ensures requirements comply through formal verification methods. Translates high level product development strategies into network and system requirement specifications and works with other engineering disciplines to develop lower-level detailed implementation requirements. Establishes and coordinates development of standards, practices, and procedures as related to the network and system development. Designs interfaces and brings network and system elements together so they work as a whole. Assesses performance using evaluation criteria and technical performance measures. Provides customer liaison and support for business development activities and to understand and shape requirements. Coordinates the planning, design, and installation of equipment, using knowledge of engineering and programming as well as sophisticated instruments and computers. Participates in system conceptual design and documentation of the design concepts. Designs, creates, and builds network services, equipment and devices. Requirements: Education: Bachelor's Degree with 12+ yrs experience Clearance: Top Secret/SCI Certification: DoD 8140 IAT Level II certification (Security+ CE,CCNA- Security,CySA+,CND) Deep expertise in data center infrastructure, including compute, storage, and networking Strong understanding of virtualization platforms (VMware, Hyper-V, KVM, etc.) Proficiency in designing and executing large-scale data center migrations Knowledge of cloud platforms and hybrid/cloud-adjacent architectures Experience with storage architectures (SAN, NAS, object storage) Advanced networking knowledge, including routing, switching, firewalls, and load balancing Familiarity with backup, recovery, and disaster recovery strategies Strong understanding of security frameworks, compliance requirements, and risk mitigation Ability to develop architectural standards, frameworks, and documentation Experience with automation and orchestration tools (PowerShell, Ansible, etc.) Proficiency in dependency mapping, workload analysis, and capacity planning Preferred Skills and Experience Strong problem-solving, analytical, and troubleshooting skills Excellent communication and cross-team collaboration skills Ability to lead technical teams and provide mentorship Experience with DOD Networks (NIPR, SIPR, JWICS) Experience working in fast-paced, transformation-driven environments Digital Consultants, an inclusive and welcoming company, is fully committed to hiring and retaining a diverse workforce without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, age (40 or older), disability, veteran status or any other protected characteristic. We provide reasonable accommodation to individuals who require assistance at any stage of the employment process. If you need assistance navigating Digital Consultants' job openings or applying for a position, please email or call . Please provide your contact information so we can assist you.
Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh
10/23/2026
Full time
Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
10/23/2026
Full time
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
10/23/2026
Full time
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
Job Description Job Description Network Architect - Hybrid Opportunity Leading software company is currently seeking a skilled Network Architect in Lowell, MA, to lead the design and governance of a global hybrid network infrastructure. Must live in the Lowell, MA area, in order to commute to the office. This is a Hybrid position. Shift of the Network Architect: Hybrid, Mon-Tue-Wed in-office, 8:00 AM - 5:00 PM EST Pay Rate of the Network Architect: $100-110 per hour Responsibilities of the Network Architect: Define and maintain the enterprise network architecture roadmap supporting business growth and cloud adoption. Lead the architecture and design of global network solutions across various environments. Develop reference architectures and engineering best practices for hybrid and multi-cloud networking. Evaluate emerging networking technologies and provide strategic recommendations. Establish architectural governance processes to ensure operational efficiency across all network platforms. Qualifications of the Network Architect: 13+ years of experience in enterprise networking and infrastructure engineering. 10+ years of experience designing complex global network environments. Deep expertise in routing protocols, switching architectures, and WAN technologies. 10+ years of experience architecting networking solutions within Azure and Google Cloud Platform. Excellent stakeholder management and communication skills. Network Architects Apply Today! DAVIS Companies partners with the top employers locally and nationally. They choose us because of our reputation for finding high quality talent, fast, but also our experience for evaluating and representing the best candidates in the marketplace. We make every effort to provide updates and feedback to candidates at each stage of the process as we appreciate how stressful looking for a new role can be. Apply today and experience "The DAVIS Difference".
10/23/2026
Full time
Job Description Job Description Network Architect - Hybrid Opportunity Leading software company is currently seeking a skilled Network Architect in Lowell, MA, to lead the design and governance of a global hybrid network infrastructure. Must live in the Lowell, MA area, in order to commute to the office. This is a Hybrid position. Shift of the Network Architect: Hybrid, Mon-Tue-Wed in-office, 8:00 AM - 5:00 PM EST Pay Rate of the Network Architect: $100-110 per hour Responsibilities of the Network Architect: Define and maintain the enterprise network architecture roadmap supporting business growth and cloud adoption. Lead the architecture and design of global network solutions across various environments. Develop reference architectures and engineering best practices for hybrid and multi-cloud networking. Evaluate emerging networking technologies and provide strategic recommendations. Establish architectural governance processes to ensure operational efficiency across all network platforms. Qualifications of the Network Architect: 13+ years of experience in enterprise networking and infrastructure engineering. 10+ years of experience designing complex global network environments. Deep expertise in routing protocols, switching architectures, and WAN technologies. 10+ years of experience architecting networking solutions within Azure and Google Cloud Platform. Excellent stakeholder management and communication skills. Network Architects Apply Today! DAVIS Companies partners with the top employers locally and nationally. They choose us because of our reputation for finding high quality talent, fast, but also our experience for evaluating and representing the best candidates in the marketplace. We make every effort to provide updates and feedback to candidates at each stage of the process as we appreciate how stressful looking for a new role can be. Apply today and experience "The DAVIS Difference".
General Dynamics Mission Systems, Inc
Chantilly, Virginia
Job Description Job Description Overview General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team! Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Responsibilities Master's degree, plus 3 years of relevant experience. Bachelor's degree in a specialized area or equivalent relevant experience is required; plus, a minimum of 5 years of relevant experience; or Due to the nature of work performed within our facilities, U.S. citizenship is required. Qualifications Put your engineering talent to the ultimate test. At General Dynamics Mission Systems, we create the technologies, products and services that help our service members, intelligence analysts and first responders keep our nation safe. The work we do is so advanced our teams often redefine what's possible for the world. If you want to be a leader with the company that delivers smart solutions for our nation's challenges, this is your opportunity. We apply advanced technologies such as Artificial Intelligence, Blockchain, AR/VR, Cloud Native and Quantum Physics to solve our customers' missions in cyber, RF, undersea, interstellar and everything in between. Working in a highly collaborative and creative environment, you will provide technical support for internal, customer, and C-level executive meetings, ensuring reliable and professional audiovisual (AV) experiences. Responsibilities include performing regular maintenance, software and firmware updates, preventive maintenance, and routine repairs to sustain uninterrupted operation of conference-room equipment. The candidate will proactively identify potential system issues, address client concerns, and recommend practical solutions, including the design and implementation of AV upgrades. They will test, troubleshoot, configure, and document AV solutions for effective end-user operation and ongoing support. This role requires maintaining technical expertise across AV systems, including networks, hardware, software, codecs, audio/video switchers, control systems, and devices such as displays, microphones, and cameras. The candidate will remain current through continuing education and training and will collaborate with manufacturers, vendors, and colleagues in the design, planning, and implementation of AV systems. The individual will establish peer-to-peer mentoring relationships, facilitate team goal setting and problem solving, and demonstrate ownership through a solution-oriented approach to technical challenges. Success in this position requires the ability to establish and meet goals aligned with business objectives; adapt effectively to multiple demands, shifting priorities, ambiguity, and rapid change; and actively participate in continuous process-improvement efforts to strengthen process application within their domain of expertise. Local travel between sites required daily/weekly ; travel to East Coast sites or other GDMS locations required as needed. What you'll experience: Technologies that aren't just top-notch, they're often top-secret A team of bold thinkers committed to exploring what's next Opportunities to gain new knowledge - as it's discovered What you bring to the team: A Bachelor's degree in a specialized area; or equivalent plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience Demonstrated strong working knowledge of teleconferencing platforms such as Skype for Business, Teams, Zoom, etc. Specialization in audio digital signal processors, video over IP, programming, networks, video conferencing, web conferencing, matrix switchers and complex system Ability to provide technical expertise and guidance for AV hardware such as Barco, Crestron, Biamp, Extron, etc. Competence in processing control, routing, and audio video signal flow. Competence in reading system signal flow diagrams, floor plans, and configuration files to troubleshoot issues. Awareness of the latest trends, hardware, and features in AV equipment. Ability to read CAD/Floorplans & signal flow diagrams. Ability to lead test sessions to ensure AV is functioning properly ahead of important meetings. What sets you apart: Creative thinking with the ability to multi-task Strong expertise in troubleshooting AV issues remotely and in-person Team player who thrives in collaborative environments and revels in team success Commitment to ongoing professional development Strong experience with technical writing IE: SOPs, technical proposals, etc. Identifies opportunities to apply AI for continuous improvement and innovatio Deep understanding of area of specialization; resolves a wide range of issues in creative ways Strong communication skills with ability communicate technical information clearly to non-technical individuals Preferred candidates should also have these certifications/specialized knowledge areas: Avixa CTS (strongly preferred) Crestron Biamp Extron Microsoft Teams Room systems Barco Clickshare Dante Lvls 1,2, and/or 3
10/23/2026
Full time
Job Description Job Description Overview General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team! Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Responsibilities Master's degree, plus 3 years of relevant experience. Bachelor's degree in a specialized area or equivalent relevant experience is required; plus, a minimum of 5 years of relevant experience; or Due to the nature of work performed within our facilities, U.S. citizenship is required. Qualifications Put your engineering talent to the ultimate test. At General Dynamics Mission Systems, we create the technologies, products and services that help our service members, intelligence analysts and first responders keep our nation safe. The work we do is so advanced our teams often redefine what's possible for the world. If you want to be a leader with the company that delivers smart solutions for our nation's challenges, this is your opportunity. We apply advanced technologies such as Artificial Intelligence, Blockchain, AR/VR, Cloud Native and Quantum Physics to solve our customers' missions in cyber, RF, undersea, interstellar and everything in between. Working in a highly collaborative and creative environment, you will provide technical support for internal, customer, and C-level executive meetings, ensuring reliable and professional audiovisual (AV) experiences. Responsibilities include performing regular maintenance, software and firmware updates, preventive maintenance, and routine repairs to sustain uninterrupted operation of conference-room equipment. The candidate will proactively identify potential system issues, address client concerns, and recommend practical solutions, including the design and implementation of AV upgrades. They will test, troubleshoot, configure, and document AV solutions for effective end-user operation and ongoing support. This role requires maintaining technical expertise across AV systems, including networks, hardware, software, codecs, audio/video switchers, control systems, and devices such as displays, microphones, and cameras. The candidate will remain current through continuing education and training and will collaborate with manufacturers, vendors, and colleagues in the design, planning, and implementation of AV systems. The individual will establish peer-to-peer mentoring relationships, facilitate team goal setting and problem solving, and demonstrate ownership through a solution-oriented approach to technical challenges. Success in this position requires the ability to establish and meet goals aligned with business objectives; adapt effectively to multiple demands, shifting priorities, ambiguity, and rapid change; and actively participate in continuous process-improvement efforts to strengthen process application within their domain of expertise. Local travel between sites required daily/weekly ; travel to East Coast sites or other GDMS locations required as needed. What you'll experience: Technologies that aren't just top-notch, they're often top-secret A team of bold thinkers committed to exploring what's next Opportunities to gain new knowledge - as it's discovered What you bring to the team: A Bachelor's degree in a specialized area; or equivalent plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience Demonstrated strong working knowledge of teleconferencing platforms such as Skype for Business, Teams, Zoom, etc. Specialization in audio digital signal processors, video over IP, programming, networks, video conferencing, web conferencing, matrix switchers and complex system Ability to provide technical expertise and guidance for AV hardware such as Barco, Crestron, Biamp, Extron, etc. Competence in processing control, routing, and audio video signal flow. Competence in reading system signal flow diagrams, floor plans, and configuration files to troubleshoot issues. Awareness of the latest trends, hardware, and features in AV equipment. Ability to read CAD/Floorplans & signal flow diagrams. Ability to lead test sessions to ensure AV is functioning properly ahead of important meetings. What sets you apart: Creative thinking with the ability to multi-task Strong expertise in troubleshooting AV issues remotely and in-person Team player who thrives in collaborative environments and revels in team success Commitment to ongoing professional development Strong experience with technical writing IE: SOPs, technical proposals, etc. Identifies opportunities to apply AI for continuous improvement and innovatio Deep understanding of area of specialization; resolves a wide range of issues in creative ways Strong communication skills with ability communicate technical information clearly to non-technical individuals Preferred candidates should also have these certifications/specialized knowledge areas: Avixa CTS (strongly preferred) Crestron Biamp Extron Microsoft Teams Room systems Barco Clickshare Dante Lvls 1,2, and/or 3
Job Description Role : IT VMware Systems Engineer Location - Jersey City, NJ (Hybrid - 3 days a week in Office) - Client interview will be an in-person interview in Jersey City, NJ Duration : Contract Job Description The VMware Virtualization SME provides expert level strategy, design, and 24 7 365 support for the Americas region virtualization platform. The role owns performance monitoring, automation, and continuous improvement of the VMware ecosystem-including VMware Cloud Foundation 9 (VCF 9), Aria Operations, vRealize Log Insight (VRLI), vRealize Network Insight (VRNI), NSX T, and vSAN-while pioneering AI driven operational models and cost optimization initiatives. Core Responsibilities • Platform Architecture & Migration o Lead the migration to VMware Cloud Foundation 9 (VCF 9), ensuring zero downtime, compliance, and alignment with security baselines. o Design and evolve the integrated VMware stack (vSphere, NSX T, vSAN, Aria Operations, VRLI, VRNI) to meet ultra low latency and high availability requirements. • Automation & AI Enabled Operations o Implement Infrastructure as Code (Ansible, Terraform, PowerCLI) to automate provisioning, patching, and lifecycle management of the virtualization layer. o Deploy agentic AI assistants (LLM powered chat ops) for ticket triage, predictive alerting, and automated root cause analysis within Aria Operations. o Create self healing playbooks that remediate common performance or capacity events without human intervention. • Performance Monitoring & Capacity Management o Configure, fine tune, and maintain monitoring thresholds, alarms, and dashboards in Aria Operations, VRLI, and VRNI. o Use AI driven anomaly detection to anticipate capacity bottlenecks and latency spikes before they affect production. • Process Improvement & Standardisation o Facilitate environment wide process improvement initiatives (change, release, and incident management) to increase efficiency and consistency. o Ensure all deployments adhere to group standards, best practices, and security hardening guides (CIS, VMware Hardened Base Image). • Vendor & Global Team Collaboration o Interface with VMware, storage, networking, and hyper converged hardware vendors; coordinate with global IT teams to keep the platform aligned with enterprise standards. • Disaster Recovery & Business Continuity o Participate in DR planning, testing, and execution for the virtualization environment; maintain RPO 5 seconds and RTO 15 minutes for critical workloads. • Operational Support o Provide Tier 2/3 support for production workloads, including 24 7 on call rotation. o Conduct thorough morning and end of day health checks using scripted tools and AI generated health scores. o Perform OS and firmware upgrades, mandatory security patches, and storage system updates through automated pipelines. • Stakeholder & Service Management o Liaise with application owners to gather requirements, design standards, and deploy consistent virtual infrastructure services. o Maintain the service catalogue for internal business lines, regularly reviewing consumption, pricing, and performance metrics. • Reporting & Governance o Report to the Americas IT Infrastructure Virtualization Platform Manager; deliver executive dashboards on SLA compliance, cost savings, AI ops impact, and platform health. Required Experience & Qualifications • Bachelor's degree in computer science, Information Systems or a related field (or equivalent professional experience). • Proven years of hands on experience designing, deploying, and supporting large scale VMware environments (vSphere 8+, NSX T, vSAN). • Demonstrated experience migrating legacy VMware sites to VMware Cloud Foundation 9 or newer cloud native stacks. • Strong automation background - expert level use of PowerCLI, vRealize Automation (vRA), Ansible, Terraform, and PowerShell/Python scripting. • Hands on experience with the Aria Operations suite (formerly vRealize Operations), VRLI, and VRNI for log analytics and network insight. • Solid understanding of enterprise storage (EMC/Isilon, Pure Storage, Dell/NetApp SAN, iSCSI), and how vSAN integrates with these platforms. • Deep networking knowledge - TCP/IP fundamentals, VLANs, routing, and NSX T concepts (micro segmentation, distributed firewalls). • Experience applying AI ops concepts: predictive monitoring, automated RCA, LLM driven chat ops, and intelligent capacity forecasting. • Proven track record of cost optimisation (rights sizing VMs, leveraging spot/ephemeral instances, improving TCO). • Excellent written and verbal communication; ability to influence senior stakeholders and mentor junior team members. • Strong project management skills focused on outcome based results (Agile/ITIL preferred). Desired Certifications & Skills • VMware Certified Professional - Cloud Management and Automation (VCP CMA) • VMware Certified Advanced Professional - Cloud Foundation (VCAP CF) • ITIL Foundation / Managing Professional. • Experience with Aria Operations and related APIs for custom automation. We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, citizenship status, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable law. verify.gov/sites/default/files/everify/posters/IER_RighttoWorkPoster.pdf
10/23/2026
Full time
Job Description Role : IT VMware Systems Engineer Location - Jersey City, NJ (Hybrid - 3 days a week in Office) - Client interview will be an in-person interview in Jersey City, NJ Duration : Contract Job Description The VMware Virtualization SME provides expert level strategy, design, and 24 7 365 support for the Americas region virtualization platform. The role owns performance monitoring, automation, and continuous improvement of the VMware ecosystem-including VMware Cloud Foundation 9 (VCF 9), Aria Operations, vRealize Log Insight (VRLI), vRealize Network Insight (VRNI), NSX T, and vSAN-while pioneering AI driven operational models and cost optimization initiatives. Core Responsibilities • Platform Architecture & Migration o Lead the migration to VMware Cloud Foundation 9 (VCF 9), ensuring zero downtime, compliance, and alignment with security baselines. o Design and evolve the integrated VMware stack (vSphere, NSX T, vSAN, Aria Operations, VRLI, VRNI) to meet ultra low latency and high availability requirements. • Automation & AI Enabled Operations o Implement Infrastructure as Code (Ansible, Terraform, PowerCLI) to automate provisioning, patching, and lifecycle management of the virtualization layer. o Deploy agentic AI assistants (LLM powered chat ops) for ticket triage, predictive alerting, and automated root cause analysis within Aria Operations. o Create self healing playbooks that remediate common performance or capacity events without human intervention. • Performance Monitoring & Capacity Management o Configure, fine tune, and maintain monitoring thresholds, alarms, and dashboards in Aria Operations, VRLI, and VRNI. o Use AI driven anomaly detection to anticipate capacity bottlenecks and latency spikes before they affect production. • Process Improvement & Standardisation o Facilitate environment wide process improvement initiatives (change, release, and incident management) to increase efficiency and consistency. o Ensure all deployments adhere to group standards, best practices, and security hardening guides (CIS, VMware Hardened Base Image). • Vendor & Global Team Collaboration o Interface with VMware, storage, networking, and hyper converged hardware vendors; coordinate with global IT teams to keep the platform aligned with enterprise standards. • Disaster Recovery & Business Continuity o Participate in DR planning, testing, and execution for the virtualization environment; maintain RPO 5 seconds and RTO 15 minutes for critical workloads. • Operational Support o Provide Tier 2/3 support for production workloads, including 24 7 on call rotation. o Conduct thorough morning and end of day health checks using scripted tools and AI generated health scores. o Perform OS and firmware upgrades, mandatory security patches, and storage system updates through automated pipelines. • Stakeholder & Service Management o Liaise with application owners to gather requirements, design standards, and deploy consistent virtual infrastructure services. o Maintain the service catalogue for internal business lines, regularly reviewing consumption, pricing, and performance metrics. • Reporting & Governance o Report to the Americas IT Infrastructure Virtualization Platform Manager; deliver executive dashboards on SLA compliance, cost savings, AI ops impact, and platform health. Required Experience & Qualifications • Bachelor's degree in computer science, Information Systems or a related field (or equivalent professional experience). • Proven years of hands on experience designing, deploying, and supporting large scale VMware environments (vSphere 8+, NSX T, vSAN). • Demonstrated experience migrating legacy VMware sites to VMware Cloud Foundation 9 or newer cloud native stacks. • Strong automation background - expert level use of PowerCLI, vRealize Automation (vRA), Ansible, Terraform, and PowerShell/Python scripting. • Hands on experience with the Aria Operations suite (formerly vRealize Operations), VRLI, and VRNI for log analytics and network insight. • Solid understanding of enterprise storage (EMC/Isilon, Pure Storage, Dell/NetApp SAN, iSCSI), and how vSAN integrates with these platforms. • Deep networking knowledge - TCP/IP fundamentals, VLANs, routing, and NSX T concepts (micro segmentation, distributed firewalls). • Experience applying AI ops concepts: predictive monitoring, automated RCA, LLM driven chat ops, and intelligent capacity forecasting. • Proven track record of cost optimisation (rights sizing VMs, leveraging spot/ephemeral instances, improving TCO). • Excellent written and verbal communication; ability to influence senior stakeholders and mentor junior team members. • Strong project management skills focused on outcome based results (Agile/ITIL preferred). Desired Certifications & Skills • VMware Certified Professional - Cloud Management and Automation (VCP CMA) • VMware Certified Advanced Professional - Cloud Foundation (VCAP CF) • ITIL Foundation / Managing Professional. • Experience with Aria Operations and related APIs for custom automation. We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, citizenship status, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable law. verify.gov/sites/default/files/everify/posters/IER_RighttoWorkPoster.pdf
Quality Automotive Services, Inc. Valvoline Instant Oil Change Franchisee
Job Description About the Role: Quality Automotive Services is one of the largest and fastest-growing Valvoline Instant Oil Change franchisees in the country, with over 250 locations in 13 states, and we are investing in the cloud and data infrastructure to support continued growth. We are adding a Senior Systems and Cloud Engineer to own our systems and cloud environment-including our AWS platform and enterprise data lake-and bring specialized depth to a lean, high-impact team. This is a hands-on role with real ownership. You will design and run our cloud infrastructure, advance our data lake, administer our core systems, and oversee security and access across the environment - partnering directly with the IT Director to modernize and scale the technology platform. If you want to build, own the architecture, and see your work drive a growing business, this is a strong fit. What You Will Do: Cloud and data infrastructure • Design, build, and operate our AWS cloud environment using infrastructure-as-code, automation, and monitoring. • Own and advance our enterprise data lake - architecture, ingestion, pipelines, and governance - partnering with analytics initiatives and external implementation partners. • Manage cloud cost, performance, and reliability. Systems administration • Administer Google Workspace - users, groups, security settings, and policies - taking ownership of systems currently managed centrally. • Own identity and access management - controlling who can access which systems and how - including single sign-on, multi-factor authentication, provisioning, and least-privilege access. Security and continuity • Own systems security architecture - access controls, hardening, encryption, and monitoring. • Maintain backup, disaster recovery, and business continuity for core systems. • Support security and audit readiness across the environment. Architecture and knowledge transfer • Establish systems architecture, standards, and best practices. • Document systems and processes thoroughly and build operational runbooks, distributing critical knowledge across the team. • Partner with the IT Director on the infrastructure roadmap and strategy. What We Are Looking For Required Qualifications • 5+ years in cloud/systems engineering or IS administration, including having owned or led infrastructure initiatives end to end. • 3+ years of hands-on AWS experience across core services (compute, storage, networking, IAM), including designing and operating production environments. • Hands-on infrastructure-as-code experience (Terraform or CloudFormation). • Hands-on identity and access management experience in a production environment (single sign-on, MFA, provisioning, and least-privilege access). • Data engineering experience - building and operating data pipelines and ETL with AWS data services (S3, Glue, Athena, or Redshift) - with the ability to administer our data lake. • Systems administration experience, with hands-on working knowledge of security fundamentals (access control, encryption, and network security). Preferred Qualifications • Google Workspace administration experience - or clear aptitude and willingness to learn it quickly. • Scripting proficiency (Python, Bash, or PowerShell). • A track record of documenting systems and building runbooks to transfer knowledge across a team. • Comfort working autonomously and owning outcomes on a small, lean team. Nice-to-Have Qualifications • AWS certification (e.g., Solutions Architect or SysOps Administrator). • Google Workspace Administrator certification. • Experience in a multi-site retail, restaurant, or franchise environment. Additional Qualifications • Hands-on data lake architecture experience (e.g., AWS Lake Formation), or having stood up a data lake from the ground up. • Security or IAM specialization or certifications. • Experience partnering with external implementation or consulting partners on infrastructure or data initiatives. Why Join Us You will oversee the cloud and data platform for a fast-growing, multi-site company at a moment of real investment in technology. That means greenfield build work, genuine architectural ownership, specialized depth on a lean team, and the room to shape how our systems scale with the business. Comprehensive Benefits Package: We care about your overall well-being and offer a robust benefits package including: Medical, Dental, and Vision Insurance Basic and Optional Life Insurance and AD&D Coverage Voluntary Short-Term Disability Coverage Voluntary Accident Plan 401(k) Savings Plan Employee Assistance Program (EAP) Employee Discount Valvoline is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
10/23/2026
Full time
Job Description About the Role: Quality Automotive Services is one of the largest and fastest-growing Valvoline Instant Oil Change franchisees in the country, with over 250 locations in 13 states, and we are investing in the cloud and data infrastructure to support continued growth. We are adding a Senior Systems and Cloud Engineer to own our systems and cloud environment-including our AWS platform and enterprise data lake-and bring specialized depth to a lean, high-impact team. This is a hands-on role with real ownership. You will design and run our cloud infrastructure, advance our data lake, administer our core systems, and oversee security and access across the environment - partnering directly with the IT Director to modernize and scale the technology platform. If you want to build, own the architecture, and see your work drive a growing business, this is a strong fit. What You Will Do: Cloud and data infrastructure • Design, build, and operate our AWS cloud environment using infrastructure-as-code, automation, and monitoring. • Own and advance our enterprise data lake - architecture, ingestion, pipelines, and governance - partnering with analytics initiatives and external implementation partners. • Manage cloud cost, performance, and reliability. Systems administration • Administer Google Workspace - users, groups, security settings, and policies - taking ownership of systems currently managed centrally. • Own identity and access management - controlling who can access which systems and how - including single sign-on, multi-factor authentication, provisioning, and least-privilege access. Security and continuity • Own systems security architecture - access controls, hardening, encryption, and monitoring. • Maintain backup, disaster recovery, and business continuity for core systems. • Support security and audit readiness across the environment. Architecture and knowledge transfer • Establish systems architecture, standards, and best practices. • Document systems and processes thoroughly and build operational runbooks, distributing critical knowledge across the team. • Partner with the IT Director on the infrastructure roadmap and strategy. What We Are Looking For Required Qualifications • 5+ years in cloud/systems engineering or IS administration, including having owned or led infrastructure initiatives end to end. • 3+ years of hands-on AWS experience across core services (compute, storage, networking, IAM), including designing and operating production environments. • Hands-on infrastructure-as-code experience (Terraform or CloudFormation). • Hands-on identity and access management experience in a production environment (single sign-on, MFA, provisioning, and least-privilege access). • Data engineering experience - building and operating data pipelines and ETL with AWS data services (S3, Glue, Athena, or Redshift) - with the ability to administer our data lake. • Systems administration experience, with hands-on working knowledge of security fundamentals (access control, encryption, and network security). Preferred Qualifications • Google Workspace administration experience - or clear aptitude and willingness to learn it quickly. • Scripting proficiency (Python, Bash, or PowerShell). • A track record of documenting systems and building runbooks to transfer knowledge across a team. • Comfort working autonomously and owning outcomes on a small, lean team. Nice-to-Have Qualifications • AWS certification (e.g., Solutions Architect or SysOps Administrator). • Google Workspace Administrator certification. • Experience in a multi-site retail, restaurant, or franchise environment. Additional Qualifications • Hands-on data lake architecture experience (e.g., AWS Lake Formation), or having stood up a data lake from the ground up. • Security or IAM specialization or certifications. • Experience partnering with external implementation or consulting partners on infrastructure or data initiatives. Why Join Us You will oversee the cloud and data platform for a fast-growing, multi-site company at a moment of real investment in technology. That means greenfield build work, genuine architectural ownership, specialized depth on a lean team, and the room to shape how our systems scale with the business. Comprehensive Benefits Package: We care about your overall well-being and offer a robust benefits package including: Medical, Dental, and Vision Insurance Basic and Optional Life Insurance and AD&D Coverage Voluntary Short-Term Disability Coverage Voluntary Accident Plan 401(k) Savings Plan Employee Assistance Program (EAP) Employee Discount Valvoline is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Job Description Job Title: Citrix & NetScaler Engineer Location: Lutz, FL Work Arrangement: Hybrid - 4 days onsite and 1 day remote per week Engagement: Long-Term Contract About the Role NetworkPedia is seeking an experienced Citrix & NetScaler Engineer to support and optimize enterprise infrastructure in a complex technical environment. The ideal candidate will have strong hands-on expertise in Citrix Virtual Apps and Desktops, NetScaler ADC/Gateway, application delivery, and infrastructure security. This role focuses on maintaining high availability, improving performance, managing security, and providing advanced troubleshooting across business-critical enterprise systems. Key Responsibilities Administer and support Citrix Virtual Apps and Desktops environments. Manage and maintain NetScaler ADC and NetScaler Gateway infrastructure. Support Web Application Firewall (WAF) administration and security initiatives. Perform system patching, upgrades, maintenance, and lifecycle management. Troubleshoot complex infrastructure, application delivery, connectivity, and performance issues. Identify technical risks and recommend solutions to improve reliability and resiliency. Collaborate with Network, Cybersecurity, Identity and Access Management, Infrastructure, and Application teams. Establish and improve technical standards, operational procedures, and engineering best practices. Provide senior-level technical guidance and hands-on engineering support. Maintain high availability, security, stability, and optimal performance across supported environments. Document technical processes and contribute to continuous improvement initiatives. Mandatory Skills & Qualifications Strong hands-on experience with Citrix Virtual Apps and Desktops . Experience administering NetScaler ADC and NetScaler Gateway . Knowledge of Web Application Firewall (WAF) administration. Experience with enterprise infrastructure administration and security. Experience with patching, upgrades, lifecycle management, and performance optimization. Strong infrastructure troubleshooting and analytical skills. Understanding of high-availability architecture and application delivery management. Ability to collaborate across multiple technical teams and manage competing priorities. Strong communication, documentation, and problem-solving skills. Preferred Qualifications 5+ years of enterprise Citrix engineering experience. Experience with Citrix Cloud and Citrix DaaS. Familiarity with load balancing technologies. Experience integrating Identity and Access Management solutions. Knowledge of network security technologies and infrastructure automation. Experience with disaster recovery, business continuity, and enterprise monitoring tools. Ability to work independently, take ownership, and provide technical guidance in a complex enterprise environment. About NetworkPedia NetworkPedia is a certified women-owned technology and talent solutions company, providing IT infrastructure, cybersecurity, managed services, and specialized recruitment across North Americas and beyond. Our mission is to empower organizations with secure, scalable, and innovative technology while building inclusive teams that reflect the communities we serve. As a trusted partner, we deliver expertise across networking, cloud, IT service management, and security operations, along with staffing solutions for niche technology roles. We are committed to diversity, equity, and inclusion (DEI) in all our hiring practices and ensure that our opportunities are open to all qualified applicants, without discrimination on the basis of age, gender, race, ethnicity, religion, sexual orientation, or disability. How to Apply Apply directly via LinkedIn Easy Apply. All applications are routed to our central recruitment email id -
10/23/2026
Full time
Job Description Job Title: Citrix & NetScaler Engineer Location: Lutz, FL Work Arrangement: Hybrid - 4 days onsite and 1 day remote per week Engagement: Long-Term Contract About the Role NetworkPedia is seeking an experienced Citrix & NetScaler Engineer to support and optimize enterprise infrastructure in a complex technical environment. The ideal candidate will have strong hands-on expertise in Citrix Virtual Apps and Desktops, NetScaler ADC/Gateway, application delivery, and infrastructure security. This role focuses on maintaining high availability, improving performance, managing security, and providing advanced troubleshooting across business-critical enterprise systems. Key Responsibilities Administer and support Citrix Virtual Apps and Desktops environments. Manage and maintain NetScaler ADC and NetScaler Gateway infrastructure. Support Web Application Firewall (WAF) administration and security initiatives. Perform system patching, upgrades, maintenance, and lifecycle management. Troubleshoot complex infrastructure, application delivery, connectivity, and performance issues. Identify technical risks and recommend solutions to improve reliability and resiliency. Collaborate with Network, Cybersecurity, Identity and Access Management, Infrastructure, and Application teams. Establish and improve technical standards, operational procedures, and engineering best practices. Provide senior-level technical guidance and hands-on engineering support. Maintain high availability, security, stability, and optimal performance across supported environments. Document technical processes and contribute to continuous improvement initiatives. Mandatory Skills & Qualifications Strong hands-on experience with Citrix Virtual Apps and Desktops . Experience administering NetScaler ADC and NetScaler Gateway . Knowledge of Web Application Firewall (WAF) administration. Experience with enterprise infrastructure administration and security. Experience with patching, upgrades, lifecycle management, and performance optimization. Strong infrastructure troubleshooting and analytical skills. Understanding of high-availability architecture and application delivery management. Ability to collaborate across multiple technical teams and manage competing priorities. Strong communication, documentation, and problem-solving skills. Preferred Qualifications 5+ years of enterprise Citrix engineering experience. Experience with Citrix Cloud and Citrix DaaS. Familiarity with load balancing technologies. Experience integrating Identity and Access Management solutions. Knowledge of network security technologies and infrastructure automation. Experience with disaster recovery, business continuity, and enterprise monitoring tools. Ability to work independently, take ownership, and provide technical guidance in a complex enterprise environment. About NetworkPedia NetworkPedia is a certified women-owned technology and talent solutions company, providing IT infrastructure, cybersecurity, managed services, and specialized recruitment across North Americas and beyond. Our mission is to empower organizations with secure, scalable, and innovative technology while building inclusive teams that reflect the communities we serve. As a trusted partner, we deliver expertise across networking, cloud, IT service management, and security operations, along with staffing solutions for niche technology roles. We are committed to diversity, equity, and inclusion (DEI) in all our hiring practices and ensure that our opportunities are open to all qualified applicants, without discrimination on the basis of age, gender, race, ethnicity, religion, sexual orientation, or disability. How to Apply Apply directly via LinkedIn Easy Apply. All applications are routed to our central recruitment email id -
Job Description Come Shape the Future with Haydon! At Haydon, we bring the spark that shapes tomorrow's possibilities! If you thrive in environments where you are able to wear multiple hats in an Azure and Microsoft 365 environment, our System Administrator role might be the perfect fit for you! Responsibilities include, but are not limited to: Assist or lead end-to-end implementation of technology projects, along with end-user training Manage ISP, MSP and vendor (Xerox, TTG, Vector Security) activities through ticket tracking, scheduling, responding to alerts and follow-ups. Manage downtime execution (communications, coordinate activities, manage operational steps during maintenance windows) Responsible for the installation and support of the company's IT assets (servers, handheld scanners, phones, desktops, laptops, printers and mobile devices, etc.) Implement and assist with network configuration changes (IP addressing, subnets, VLANs, Meraki switch configurations) Administer network access points, switches, assist with firewalls, cabling infrastructure, etc. Troubleshoot networking errors; STP, CRC, circuit drops, intermittent latency, etc. Perform on-prem and virtualized Windows server and NAS patching, health checks Administer AWS platform; EC2 patching, WorkSpaces, integrations and operational support (analytics, backup restoration, IAM, VPC) Manage backup operations using Veeam Backup & Replication; job monitoring, backup validation, quarterly restore testing Manage SAP-Alerts and operations (with vendor support), user account administration Manage Intune, Autopilot, Datto (deployment, patching, upgrades) Manage digital signage platform (Yodeck) Manage MDM (SOTI) Monitor and maintain UPS systems, environmental systems (Room Alert) Provide user account, group and licensing administration across multiple technology platforms, including SaaS platforms (Adobe, HubSpot, SmartSheets), during entire user lifecycle (onboarding, maintenance, offboarding) Manage Entra ID, on-prem AD, Group Policy, SSO, MFA; security minded first approach Manage Microsoft cloud services 365 - Exchange (distribution lists, shared mailboxes), OneDrive, SharePoint, Teams, Power BI (workspace administration, dataset refresh support, access and permissions) Troubleshoot authentication and access issues Administer unified communications services (provisioning Teams phone numbers), camera systems, badge access, etc. Professional Qualifications 5+ years' experience in a Systems Administrator role or equivalent combination of relevant education and experience. Deep knowledge of VMWare, AWS, Windows Server & Azure Proven track record in supporting and working in 24/7 manufacturing environment across multiple time zones Strong customer service skills with a focus on delivering the best outcome for the business and customers Excellent written communication skills, with the ability to produce and maintain technical documentation Strong verbal communication skills, with an ability to communicate highly technical information to non-technical audiences Excellent attention to detail and ability to manage multiple tasks; prioritize work on multiple service tickets & projects in high-paced environment to meet or exceed customer expectations Excellent troubleshooting and analytical skills to solve problems using technical expertise and research in complex environments This position requires being part of a contact phone tree outside of normal business hours to support service issues, emergency or maintenance tasks Ability to work independently and with a team Strong working knowledge of operating systems (Windows 11, 2016 or later) Strong working knowledge of other software packages including (MS Office, VPN, CAD Application, etc.) Strong working knowledge of Intel-based endpoints and servers Strong working knowledge of local and network printer/copier support, configuration, and installation Exposure to OT-adjacent systems (MES awareness only; not controls engineering) Experience in creating end-user documentation and providing IT training Prefer PowerShell scripting for routine automation and administrative tasks Prefer Microsoft or AWS foundational certifications Bachelor's degree in computer science or related area.
10/23/2026
Full time
Job Description Come Shape the Future with Haydon! At Haydon, we bring the spark that shapes tomorrow's possibilities! If you thrive in environments where you are able to wear multiple hats in an Azure and Microsoft 365 environment, our System Administrator role might be the perfect fit for you! Responsibilities include, but are not limited to: Assist or lead end-to-end implementation of technology projects, along with end-user training Manage ISP, MSP and vendor (Xerox, TTG, Vector Security) activities through ticket tracking, scheduling, responding to alerts and follow-ups. Manage downtime execution (communications, coordinate activities, manage operational steps during maintenance windows) Responsible for the installation and support of the company's IT assets (servers, handheld scanners, phones, desktops, laptops, printers and mobile devices, etc.) Implement and assist with network configuration changes (IP addressing, subnets, VLANs, Meraki switch configurations) Administer network access points, switches, assist with firewalls, cabling infrastructure, etc. Troubleshoot networking errors; STP, CRC, circuit drops, intermittent latency, etc. Perform on-prem and virtualized Windows server and NAS patching, health checks Administer AWS platform; EC2 patching, WorkSpaces, integrations and operational support (analytics, backup restoration, IAM, VPC) Manage backup operations using Veeam Backup & Replication; job monitoring, backup validation, quarterly restore testing Manage SAP-Alerts and operations (with vendor support), user account administration Manage Intune, Autopilot, Datto (deployment, patching, upgrades) Manage digital signage platform (Yodeck) Manage MDM (SOTI) Monitor and maintain UPS systems, environmental systems (Room Alert) Provide user account, group and licensing administration across multiple technology platforms, including SaaS platforms (Adobe, HubSpot, SmartSheets), during entire user lifecycle (onboarding, maintenance, offboarding) Manage Entra ID, on-prem AD, Group Policy, SSO, MFA; security minded first approach Manage Microsoft cloud services 365 - Exchange (distribution lists, shared mailboxes), OneDrive, SharePoint, Teams, Power BI (workspace administration, dataset refresh support, access and permissions) Troubleshoot authentication and access issues Administer unified communications services (provisioning Teams phone numbers), camera systems, badge access, etc. Professional Qualifications 5+ years' experience in a Systems Administrator role or equivalent combination of relevant education and experience. Deep knowledge of VMWare, AWS, Windows Server & Azure Proven track record in supporting and working in 24/7 manufacturing environment across multiple time zones Strong customer service skills with a focus on delivering the best outcome for the business and customers Excellent written communication skills, with the ability to produce and maintain technical documentation Strong verbal communication skills, with an ability to communicate highly technical information to non-technical audiences Excellent attention to detail and ability to manage multiple tasks; prioritize work on multiple service tickets & projects in high-paced environment to meet or exceed customer expectations Excellent troubleshooting and analytical skills to solve problems using technical expertise and research in complex environments This position requires being part of a contact phone tree outside of normal business hours to support service issues, emergency or maintenance tasks Ability to work independently and with a team Strong working knowledge of operating systems (Windows 11, 2016 or later) Strong working knowledge of other software packages including (MS Office, VPN, CAD Application, etc.) Strong working knowledge of Intel-based endpoints and servers Strong working knowledge of local and network printer/copier support, configuration, and installation Exposure to OT-adjacent systems (MES awareness only; not controls engineering) Experience in creating end-user documentation and providing IT training Prefer PowerShell scripting for routine automation and administrative tasks Prefer Microsoft or AWS foundational certifications Bachelor's degree in computer science or related area.
Job Description Job Title: Senior Cyber Security Analyst - Threat Detection, Cloud & Security Operations Company: Clinisol Tech Inc. Employment Type: Full-Time, W2 (deployed to client projects) Experience: 3-4 years Compensation: $80,000 - $90,000 per year Work Mode: On-Site / Hybrid Work Authorization At this time, we are only able to consider candidates who are authorized to work in the United States without sponsorship. Why This Role? The best senior analysts are not one-trick specialists - they can triage an incident at 9 AM, tune a detection rule at noon, and brief leadership on cloud risk by 4. This role is built for that profile: broad, hands-on ownership across SOC operations, threat hunting, cloud security, and vulnerability management, with the tooling depth that senior security roles across the market demand. Job Summary Clinisol Tech Inc is seeking a Senior Cyber Security Analyst to take a lead role across security operations. You will drive threat detection and incident response, harden cloud and identity environments, run vulnerability management, and mentor junior analysts - operating across the full modern security stack: SIEM, EDR/XDR, SOAR, and cloud-native security tooling. Key Responsibilities Lead detection, triage, investigation, and response for security incidents across cloud and on-prem environments. Perform proactive threat hunting mapped to the MITRE ATT&CK framework; develop and tune detection rules (KQL, SPL, Sigma). Engineer and maintain SOAR playbooks to automate enrichment, containment, and response workflows. Own vulnerability management end-to-end - scanning, risk-based prioritization (CVSS/EPSS), remediation tracking, and reporting. Harden cloud security posture across AWS and Azure - identity (IAM), logging, misconfiguration remediation, and CSPM findings. Support identity security and Zero Trust initiatives - conditional access, MFA, privileged access management. Conduct phishing, malware, and forensic analysis; produce root-cause and lessons-learned reports. Mentor junior SOC analysts, review escalations, and improve runbooks and incident-response procedures. Brief technical and executive stakeholders on threats, incidents, and security posture. Qualifications Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent experience). 3-4 years of hands-on experience in security operations, incident response, or threat detection roles. Deep experience with at least one enterprise SIEM and one EDR/XDR platform in a production environment. Strong grasp of attacker tradecraft - phishing, ransomware, lateral movement, privilege escalation, C2 - and the MITRE ATT&CK framework. Solid networking and OS fundamentals: TCP/IP, DNS, Windows/Linux internals, Active Directory attack paths. Scripting ability in Python or PowerShell for automation, log analysis, and tooling. Strong incident documentation, communication, and stakeholder-briefing skills. Tools & Technologies You Will Use SIEM & detection: Splunk (SPL), Microsoft Sentinel (KQL), Elastic Security, QRadar; Sigma rules. EDR/XDR & response: CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne; SOAR platforms (Splunk SOAR, Sentinel playbooks, Cortex XSOAR). Cloud & identity security: AWS (GuardDuty, Security Hub, CloudTrail), Azure (Defender for Cloud, Entra ID), Okta; CSPM tools (Wiz, Prisma Cloud exposure a plus). Vulnerability & analysis: Tenable Nessus, Qualys, Rapid7; Wireshark, Sysinternals; threat intel platforms (MISP, Recorded Future exposure a plus). Automation: Python, PowerShell, REST APIs. Preferred Skills Detection-engineering experience - building detections-as-code, tuning for false-positive reduction. Purple-team or adversary-emulation exposure (Atomic Red Team, Caldera). Digital forensics fundamentals (memory, disk, log timeline analysis). Exposure to compliance-driven environments (SOC 2, HIPAA, PCI DSS, NIST CSF). Certifications such as CISSP, GIAC (GCIH, GCIA, GCFA), CySA+, Microsoft SC-200, Splunk Core Certified, or AWS Security Specialty are a plus. About Clinisol Tech Inc. Clinisol Tech Inc connects businesses with skilled professionals who drive results. We combine industry expertise with a personalized approach to deliver the right talent quickly and efficiently. Our mission is to accelerate careers and companies by connecting exceptional technology talent with innovative organizations that value people.
10/23/2026
Full time
Job Description Job Title: Senior Cyber Security Analyst - Threat Detection, Cloud & Security Operations Company: Clinisol Tech Inc. Employment Type: Full-Time, W2 (deployed to client projects) Experience: 3-4 years Compensation: $80,000 - $90,000 per year Work Mode: On-Site / Hybrid Work Authorization At this time, we are only able to consider candidates who are authorized to work in the United States without sponsorship. Why This Role? The best senior analysts are not one-trick specialists - they can triage an incident at 9 AM, tune a detection rule at noon, and brief leadership on cloud risk by 4. This role is built for that profile: broad, hands-on ownership across SOC operations, threat hunting, cloud security, and vulnerability management, with the tooling depth that senior security roles across the market demand. Job Summary Clinisol Tech Inc is seeking a Senior Cyber Security Analyst to take a lead role across security operations. You will drive threat detection and incident response, harden cloud and identity environments, run vulnerability management, and mentor junior analysts - operating across the full modern security stack: SIEM, EDR/XDR, SOAR, and cloud-native security tooling. Key Responsibilities Lead detection, triage, investigation, and response for security incidents across cloud and on-prem environments. Perform proactive threat hunting mapped to the MITRE ATT&CK framework; develop and tune detection rules (KQL, SPL, Sigma). Engineer and maintain SOAR playbooks to automate enrichment, containment, and response workflows. Own vulnerability management end-to-end - scanning, risk-based prioritization (CVSS/EPSS), remediation tracking, and reporting. Harden cloud security posture across AWS and Azure - identity (IAM), logging, misconfiguration remediation, and CSPM findings. Support identity security and Zero Trust initiatives - conditional access, MFA, privileged access management. Conduct phishing, malware, and forensic analysis; produce root-cause and lessons-learned reports. Mentor junior SOC analysts, review escalations, and improve runbooks and incident-response procedures. Brief technical and executive stakeholders on threats, incidents, and security posture. Qualifications Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent experience). 3-4 years of hands-on experience in security operations, incident response, or threat detection roles. Deep experience with at least one enterprise SIEM and one EDR/XDR platform in a production environment. Strong grasp of attacker tradecraft - phishing, ransomware, lateral movement, privilege escalation, C2 - and the MITRE ATT&CK framework. Solid networking and OS fundamentals: TCP/IP, DNS, Windows/Linux internals, Active Directory attack paths. Scripting ability in Python or PowerShell for automation, log analysis, and tooling. Strong incident documentation, communication, and stakeholder-briefing skills. Tools & Technologies You Will Use SIEM & detection: Splunk (SPL), Microsoft Sentinel (KQL), Elastic Security, QRadar; Sigma rules. EDR/XDR & response: CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne; SOAR platforms (Splunk SOAR, Sentinel playbooks, Cortex XSOAR). Cloud & identity security: AWS (GuardDuty, Security Hub, CloudTrail), Azure (Defender for Cloud, Entra ID), Okta; CSPM tools (Wiz, Prisma Cloud exposure a plus). Vulnerability & analysis: Tenable Nessus, Qualys, Rapid7; Wireshark, Sysinternals; threat intel platforms (MISP, Recorded Future exposure a plus). Automation: Python, PowerShell, REST APIs. Preferred Skills Detection-engineering experience - building detections-as-code, tuning for false-positive reduction. Purple-team or adversary-emulation exposure (Atomic Red Team, Caldera). Digital forensics fundamentals (memory, disk, log timeline analysis). Exposure to compliance-driven environments (SOC 2, HIPAA, PCI DSS, NIST CSF). Certifications such as CISSP, GIAC (GCIH, GCIA, GCFA), CySA+, Microsoft SC-200, Splunk Core Certified, or AWS Security Specialty are a plus. About Clinisol Tech Inc. Clinisol Tech Inc connects businesses with skilled professionals who drive results. We combine industry expertise with a personalized approach to deliver the right talent quickly and efficiently. Our mission is to accelerate careers and companies by connecting exceptional technology talent with innovative organizations that value people.
Job Description Position Summary: Sapient Logic is seeking a Senior Systems Engineer to support a joint mission system program in San Diego, CA. This position requires an expert-level engineer with strong expertise of Windows Server, Active Directory, RBAC, along with experience in Linux, and automation frameworks used to deploy and sustain enterprise domains across multiple environments (on-premises and cloud). The ideal candidate will lead complex system integrations, design domain architectures, and ensure secure, policy-compliant operations in line with DoD Zero Trust principles. Responsibilities: Architect, deploy, and maintain Windows Server (2019/2022) across multi-site, multi-domain architectures. Lead configuration and management of Active Directory, DNS, DHCP, and Group Policy (GPOs). Implement Role-Based Access Control (RBAC) and least-privilege models. Design and administer Active Directory Certificate Services (AD CS), PKI, and Kerberos authentication. Manage RADIUS authentication for network devices and infrastructure systems. Administer SCCM/MECM and WSUS for patch management, software deployment, and configuration compliance. Develop and maintain PowerShell, Python, and Ansible automation for system provisioning, configuration, application installation, deployment, monitoring, and infrastructure management. Build automation utilities using JavaScript (Node.js) for cross-system orchestration and integration. Collaborate with Linux and Network Engineering teams to ensure secure interoperability (Kerberos, LDAP, RADIUS). Perform system hardening and validation in compliance with DoD STIGs, CIS Benchmarks, and Zero Trust frameworks. Design and oversee SQL Server deployments for integrated Windows services. Create and maintain detailed technical documentation, including configuration guides, design diagrams, and test procedures. Provide technical mentorship and oversight across enterprise Windows projects. Support systems integration, infrastructure engineering, automation, and deployment activities across classified multi-domain environments. Engineer and maintain virtualized Operating Environment infrastructure using KVM and EC2 on on-premise infrastructure and cloud environments. Develop Infrastructure-as-Code and configuration automation using Ansible, PowerShell, and Python across Windows Server and Linux/RHEL environments. Automate system configuration, software installation, task sequencing, provisioning, and deployment workflows. Support infrastructure architecture, system design, interface planning, and requirements-driven implementation using architecture and engineering artifacts. Partner with software, infrastructure, cybersecurity, Linux, and network engineering teams to troubleshoot complex system integration and deployment issues. Required Qualifications: Bachelor's degree in Computer Science, Information Technology, or related field (Master's preferred) with 12+ years of progressive experience designing and maintaining enterprise Windows environments; OR an Associates degree and 14 years of IT Networking experience; OR a High School Diploma/GED and 16 years of IT Networking experience is required. Expert knowledge of Active Directory, DNS, DHCP, and GPOs. Expertise in RBAC, AD CS, PKI, Kerberos, and RADIUS authentication integration. Experience with Windows Server 2019/2022 configuration and hardening. Proficiency managing SCCM/MECM and WSUS for enterprise patching and software deployment. Automation with PowerShell and Ansible; experience with Git/CI-CD for Infrastructure-as-Code. Familiarity with Linux interoperability and cross-domain authentication. Knowledge of DoD cybersecurity frameworks (STIGs, CIS, Zero Trust). IAT Level II (e.g., Security+ CE) and OS/Computing Environment certification. Active DoD Top Secret clearance required. U.S. Citizenship required. Microsoft Certifications: Microsoft Certified: Windows Server: Administrator Associate - strongly preferred. Microsoft Certified: Azure Administrator Associate (AZ-104) - preferred. Microsoft Certified: Identity and Access Administrator Associate (SC-300) - preferred. Desired Skills: Experience with Azure, AWS, or GCP cloud environments. Understanding of Docker, Kubernetes, and microservices architectures. Strong analytical, leadership, and documentation skills. Proficiency using Jira, Confluence, and GitLab for Agile collaboration. Experience with virtualization technologies, including KVM. Proficiency with Python for infrastructure and systems automation. Experience supporting Windows and Linux/RHEL systems in classified or mission-critical environments. Experience with systems architecture/modeling tools such as Cameo and Visio. Experience developing Infrastructure-as-Code and automated deployment solutions. Experience presenting system status, technical risks, architecture, and engineering solutions to technical and program leadership. Benefits: 401(k) with company match Health, dental, and vision insurance Health savings and flexible spending accounts Paid time off and parental leave Life insurance Professional development assistance Employee referral and assistance programs Schedule: Monday to Friday 8-hour shift Job Type: Full-Time Location: San Diego, CA Salary Range: $180,000 - $200,000
10/23/2026
Full time
Job Description Position Summary: Sapient Logic is seeking a Senior Systems Engineer to support a joint mission system program in San Diego, CA. This position requires an expert-level engineer with strong expertise of Windows Server, Active Directory, RBAC, along with experience in Linux, and automation frameworks used to deploy and sustain enterprise domains across multiple environments (on-premises and cloud). The ideal candidate will lead complex system integrations, design domain architectures, and ensure secure, policy-compliant operations in line with DoD Zero Trust principles. Responsibilities: Architect, deploy, and maintain Windows Server (2019/2022) across multi-site, multi-domain architectures. Lead configuration and management of Active Directory, DNS, DHCP, and Group Policy (GPOs). Implement Role-Based Access Control (RBAC) and least-privilege models. Design and administer Active Directory Certificate Services (AD CS), PKI, and Kerberos authentication. Manage RADIUS authentication for network devices and infrastructure systems. Administer SCCM/MECM and WSUS for patch management, software deployment, and configuration compliance. Develop and maintain PowerShell, Python, and Ansible automation for system provisioning, configuration, application installation, deployment, monitoring, and infrastructure management. Build automation utilities using JavaScript (Node.js) for cross-system orchestration and integration. Collaborate with Linux and Network Engineering teams to ensure secure interoperability (Kerberos, LDAP, RADIUS). Perform system hardening and validation in compliance with DoD STIGs, CIS Benchmarks, and Zero Trust frameworks. Design and oversee SQL Server deployments for integrated Windows services. Create and maintain detailed technical documentation, including configuration guides, design diagrams, and test procedures. Provide technical mentorship and oversight across enterprise Windows projects. Support systems integration, infrastructure engineering, automation, and deployment activities across classified multi-domain environments. Engineer and maintain virtualized Operating Environment infrastructure using KVM and EC2 on on-premise infrastructure and cloud environments. Develop Infrastructure-as-Code and configuration automation using Ansible, PowerShell, and Python across Windows Server and Linux/RHEL environments. Automate system configuration, software installation, task sequencing, provisioning, and deployment workflows. Support infrastructure architecture, system design, interface planning, and requirements-driven implementation using architecture and engineering artifacts. Partner with software, infrastructure, cybersecurity, Linux, and network engineering teams to troubleshoot complex system integration and deployment issues. Required Qualifications: Bachelor's degree in Computer Science, Information Technology, or related field (Master's preferred) with 12+ years of progressive experience designing and maintaining enterprise Windows environments; OR an Associates degree and 14 years of IT Networking experience; OR a High School Diploma/GED and 16 years of IT Networking experience is required. Expert knowledge of Active Directory, DNS, DHCP, and GPOs. Expertise in RBAC, AD CS, PKI, Kerberos, and RADIUS authentication integration. Experience with Windows Server 2019/2022 configuration and hardening. Proficiency managing SCCM/MECM and WSUS for enterprise patching and software deployment. Automation with PowerShell and Ansible; experience with Git/CI-CD for Infrastructure-as-Code. Familiarity with Linux interoperability and cross-domain authentication. Knowledge of DoD cybersecurity frameworks (STIGs, CIS, Zero Trust). IAT Level II (e.g., Security+ CE) and OS/Computing Environment certification. Active DoD Top Secret clearance required. U.S. Citizenship required. Microsoft Certifications: Microsoft Certified: Windows Server: Administrator Associate - strongly preferred. Microsoft Certified: Azure Administrator Associate (AZ-104) - preferred. Microsoft Certified: Identity and Access Administrator Associate (SC-300) - preferred. Desired Skills: Experience with Azure, AWS, or GCP cloud environments. Understanding of Docker, Kubernetes, and microservices architectures. Strong analytical, leadership, and documentation skills. Proficiency using Jira, Confluence, and GitLab for Agile collaboration. Experience with virtualization technologies, including KVM. Proficiency with Python for infrastructure and systems automation. Experience supporting Windows and Linux/RHEL systems in classified or mission-critical environments. Experience with systems architecture/modeling tools such as Cameo and Visio. Experience developing Infrastructure-as-Code and automated deployment solutions. Experience presenting system status, technical risks, architecture, and engineering solutions to technical and program leadership. Benefits: 401(k) with company match Health, dental, and vision insurance Health savings and flexible spending accounts Paid time off and parental leave Life insurance Professional development assistance Employee referral and assistance programs Schedule: Monday to Friday 8-hour shift Job Type: Full-Time Location: San Diego, CA Salary Range: $180,000 - $200,000