14 jobs found

Roxtec Inc. ( ) is the global leader in modular-based cable and pipe sealing solutions. Founded in 1990, we help protect critical infrastructure across industries by delivering innovative systems that ensure safety, reliability, and compliance. With a strong focus on engineering and design, Roxtec has grown rapidly-averaging 30% annual growth over the past decade-and continues to set the standard for sealing performance worldwide. We are seeking an experienced Senior IT Technician who combines strong end-user support skills with a broad understanding of IT infrastructure and operations. This role is ideal for a hands-on IT generalist who enjoys solving technical problems, supporting users, managing systems, and contributing to cybersecurity and compliance initiatives. Experience with networking, firewalls, servers, Microsoft cloud technologies, and regulated environments is highly valued. This is an onsite position at our Tulsa facility. Essential Job Functions Provide technical support for end users, including troubleshooting hardware, software, network, and operating system issues. Administer and support Microsoft 365, Entra ID (Azure AD), Active Directory, Exchange Online, and other enterprise IT systems. Configure, deploy, and support computers, mobile devices, printers, and other IT-related equipment. Collaborate with global IT teams on infrastructure projects, system upgrades, security initiatives, and standardization efforts. Maintain user accounts, security groups, access permissions, and business system integrations. Assist with cybersecurity operations, vulnerability remediation, endpoint protection, and security best practices. Support compliance initiatives including CMMC, ITAR, cybersecurity audits, and other regulatory or certification requirements. (Any prior experience with CMMC is highly valued). Manage relationships with vendors and service providers, including equipment procurement and invoice approvals. Maintain accurate documentation of systems, processes, configurations, and asset inventories. Identify opportunities for automation, process improvement, and operational efficiency. Support Global IT services while serving as a trusted local IT resource for the site. Requirements Self-motivated, proactive, and capable of working independently in a fast-paced environment. Strong analytical and troubleshooting skills with the ability to resolve complex technical issues. Excellent interpersonal, written, and verbal communication skills with the ability to provide professional support to users at all levels of the organization. Strong customer service mindset and a commitment to delivering a high-quality user experience. Ability to prioritize competing tasks while maintaining attention to detail and meeting deadlines. Demonstrated ability to work collaboratively with local and global IT teams. Must be able to travel domestically and/or internationally up to 10% of the time. Technical Qualifications Hands-on experience administering Microsoft Windows client and server operating systems. Experience with Microsoft 365 technologies, including Entra ID (Azure AD), Exchange Online, Teams, OneDrive, SharePoint, and Intune. Experience managing Active Directory, Group Policy, user identity, and access management. Experience supporting and troubleshooting network infrastructure, including switches, wireless networks, VPN connectivity, and firewalls. Experience with server administration, virtualization platforms, storage solutions, or related infrastructure technologies. Experience with endpoint management solutions, including Microsoft Endpoint Configuration Manager (ConfigMgr/SCCM), Intune, or similar platforms. Experience with mobile device management and supporting iOS and Android devices in a corporate environment. Experience with application deployment, software packaging, and operating system deployment. Education and Experience Bachelor's degree in Information Technology or related field preferred or equivalent years of experience Minimum of 3 years' experience Why Roxtec? Because Your Work-and Workplace-Matter. Benefits In addition to our competitive compensation package, Roxtec is proud to offer a comprehensive suite of benefits designed to support the well-being and professional growth of our employees: 401(k) Plan with Company Contribution: Enjoy the advantage of immediate vesting. Comprehensive Health Coverage: Inclusive of Medical, Dental, and Vision Insurance. Income Protection: Benefit from Short-Term Disability (STD) and Long-Term Disability (LTD) coverage. Life Insurance: Company-paid coverage to provide added peace of mind . Paid Time Off: Includes holidays, vacation, and personal days, tailored to your position. Career Development Opportunities: We support your professional growth and advancement. Education and Tuition Reimbursement: Programs available to further your education. Flexible or Hybrid Schedules: Options available based on your position. Climate-Controlled Workspaces: Our warehouse, fabrication, and shop areas are climate-controlled to ensure a comfortable and safe environment year-round. Exciting Bonus Opportunities: This position is eligible for a bonus, calculated based on individual and company performance. We are committed to fostering a supportive and dynamic work environment that promotes both personal and professional success. Join us at Roxtec and be part of a team that values your contributions and invests in your future! Physical Requirements Required to wear PPE as needed Physical Demands (reasonable accommodations may be made, if necessary): Physical Abilities Stand / Walk - Frequently Lift / Carry / Push / Pull up to 50 lbs - Occasionally Sit - Continuously Climb / Crawl / Squat / Bend - Occasionally Crawl - Occasionally Fine Manipulation - Occasionally Reach Outward - Occasionally Reach Above Shoulder - Occasionally Travel via car, rail, air or other means of public transportation - Occasionally N/A (Not Applicable) - Activity is not applicable to this occupation Occasionally - Occupation requires this activity up to 33% of the time (.25 - 2.5 hrs/day) Frequently - Occupation requires this activity from 33% - 66% of the time (2.5 - 5.5 hrs/day) Continuously - Occupation requires this activity more than 66% of the time NOTE: This job description is not intended to be all-inclusive. Employee may perform other related duties as required to meet the ongoing needs of the organization. Applicants must be legally authorized for employment in the United States without need for current or future employer-sponsored work authorization. Roxtec is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, disability, military/veteran status or other characteristics protected by law. PIaba5b1224f1b-3513

This job is with Invesco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About Invesco As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. What's in it for you? Our people are at the ver y core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including: Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution Health & wellbeing benefits Parental Leave benefits Employee stock purchase plan Job Description Your Role Work with a global team to administer, support, and help improve Enterprise Workplace and Collaboration solutions across Microsoft 365. Assist with the delivery of new capabilities while helping ensure existing platforms remain secure, stable, and operationally effective. This role focuses on Microsoft 365 administration with a working specialization in Microsoft Purview and Microsoft Data Loss Prevention (DLP), including information protection, sensitivity labeling, compliance policy configuration, data governance, monitoring, and incident response across Exchange Online, SharePoint Online, OneDrive, Teams, and endpoint controls. Additional focus areas include Entra ID connectivity, migration of services to M365, and MDM/MAM. You will be responsibles for: Contribute to the execution of the Microsoft 365 service strategy, helping ensure platform capabilities, security controls, and compliance requirements align with business needs and enterprise technology design principles Administer and support core Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Entra ID, and related collaboration and productivity capabilities Configure, implement, and maintain Microsoft Purview Data Loss Prevention policies across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios to help reduce the risk of sensitive data exposure Build and maintain working knowledge of Microsoft Purview capabilities including DLP, sensitivity labels, data classification, retention, audit, compliance reporting, and related information protection controls Collaborate with peers on the engineering team to share knowledge on Microsoft 365 administration, operational support, troubleshooting, and data protection practices Work with security, legal, risk, records management, and business stakeholders to help translate regulatory and policy requirements into Microsoft Purview and Microsoft 365 controls Monitor policy matches, alerts, incidents, dashboards, and reporting within Microsoft Purview and related Microsoft 365 admin tools; investigate trends, help reduce false positives, and suggest improvements Follow and help maintain operational procedures, service health checks, start-of-day checks, recovery processes, and control routines to keep Microsoft 365 and Purview services resilient and supportable Support the delivery of business resilience, data protection, and governance obligations for assigned Microsoft 365 and compliance services Assist with troubleshooting and resolution of Microsoft 365, Purview, and DLP issues, including policy behavior, classification outcomes, mail flow impacts, sharing restrictions, and endpoint enforcement scenarios; escalate complex issues as appropriate Maintain documentation, standards, and user guidance for Microsoft 365 and Purview capabilities, and deliver quality service to business partners through clear communication and support The Experience you Brings: 2-4 years in a Microsoft 365 engineering or administration role, including hands-on experience supporting Microsoft 365 security, compliance, and/or collaboration services Previous experience in Financial Services or another regulated environment is preferred Working technical knowledge of Microsoft 365 architecture and administration, with exposure to Microsoft Purview, Data Loss Prevention, information protection, and compliance disciplines Experience diagnosing and resolving policy, configuration, and service issues while maintaining professionalism and clear stakeholder communication Hands-on experience creating, tuning, testing, or supporting DLP policies using sensitive information types, policy tips, alerts, incident management, and reporting is desirable Familiarity with Microsoft Purview features such as sensitivity labels, retention, audit, compliance reporting, and role-based administration is a plus Interpersonal skills necessary to communicate effectively at varying technical levels Demonstrated commitment to quality client service Strong communication skills with the ability to understand and converse in English, verbally and in writing Ability to adhere to Invesco technical and operational procedures and policies Ability to interact and communicate throughout the IT organization with individuals of varying technical abilities Self-motivated, enthusiastic, approachable, and people-oriented Technical Skills Microsoft Purview Data Loss Prevention (DLP), including policy creation, tuning, testing, reporting, and incident management Microsoft Purview Information Protection, including sensitivity labels, label publishing, and data classification Microsoft 365 DLP coverage across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios Exchange Online administration, mail flow awareness, and integration of compliance and protection controls Microsoft Entra ID / Azure AD, including identity, access, and conditional access fundamentals Compliance operations including audit, retention, role-based access control, and reporting within Microsoft Purview MDM/MAM and endpoint management exposure, including Microsoft Intune and support for endpoint data protection controls Awareness of Microsoft Copilot Studio and the broader Power Platform ecosystem (Power Apps, Power Automate, Dataverse) and governance considerations for low-code and agent-based solutions Bachelor's degree preferred - in MIS, CIS, Computer Science, or related field Relevant Microsoft certifications (e.g., MS-500, SC-400, MS-102) preferred or in progress Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) Yes Workplace Model Pursuant to Invesco's Workplace Policy, employees are expected to comply with the firm's most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other's growth and development. The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.

Pay Range: $59.35hr - $77.03hr Job Overview: We are seeking an experienced Microsoft Purview Engineer to design, implement, configure, and operate enterprise data security, information protection, compliance, and data governance solutions using Microsoft Purview. The engineer will translate enterprise data protection and governance requirements into scalable technical solutions across Microsoft Fabric, Azure, cloud, endpoint, and enterprise data environments. The role partners with cybersecurity, data, cloud, Fabric, Microsoft 365, architecture, legal and compliance, application, and business teams to protect sensitive information while enabling secure data use, analytics, Microsoft Fabric, and enterprise AI adoption. Major Responsibilities: Design, configure, deploy, and support Microsoft Purview capabilities across enterprise environments. Engineer solutions for information protection, sensitivity labeling, Data Loss Prevention (DLP), data classification, and data security posture management. Configure sensitive information types, classifiers, labels, policies, and related data protection controls in Microsoft Fabric. Develop and maintain enterprise standards, configurations, operating procedures, and support documentation. Troubleshoot complex Purview configuration, policy, integration, and operational issues. Automate repeatable administration, monitoring, and engineering activities where appropriate. Design and implement DLP policies for Microsoft Fabric and other supported enterprise environments. Implement and maintain enterprise sensitivity labels and information-protection policies in Microsoft Fabric. Support Client and classification of sensitive information using Sensitive Information Types and classifiers. Analyze policy matches, exceptions, false positives, and business impact; tune controls to improve effectiveness. Collaborate with application owners, data owners, and data stewards to remediate identified data-protection risks. Implement and support Microsoft Purview Data Map and Unified Catalog capabilities. Configure scanning and metadata Client across supported enterprise data environments. Support data cataloging, business metadata, classification, lineage, data domains, and governance processes. Work with data owners and stewards to improve data discoverability, ownership, quality, and governance. Implement role-based access aligned with least-privilege principles. Engineer and support Purview capabilities that improve visibility into sensitive-data exposure and risk. Support Data Security Posture Management and collaborate with security teams on remediation. Support Insider Risk Management, Audit, and data-security investigation requirements where applicable. Develop monitoring and reporting for policy coverage, data exposure, control effectiveness, and remediation status. Partner with cybersecurity teams during investigations involving sensitive enterprise information. Configure and support Client, Audit, Data Lifecycle Management, Records Management, and Compliance Manager based on organizational requirements. Partner with Legal, Cybersecurity, Privacy, Records Management, and Compliance teams to translate requirements into technical configurations. Support retention, records, and information lifecycle requirements. Produce technical documentation and evidence for governance, audit, and compliance processes. Support secure enterprise adoption of AI applications and AI agents through appropriate Purview data-security controls. Identify sensitive-data exposure and oversharing risks associated with enterprise AI use. Work with AI, cybersecurity, identity, application, and data teams to establish reusable data-protection patterns for AI solutions. Evaluate evolving Purview capabilities applicable to AI data security and incorporate approved capabilities into enterprise architecture. Required Qualifications: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Engineering, or a related discipline, or equivalent relevant experience with 6+ years of relevant experience. Strong hands-on experience with Microsoft Purview, Microsoft Fabric, Microsoft 365 security and compliance technologies, data governance, or enterprise data security. Demonstrated Azure + Purview + Fabric/OneLake experience. Advanced hands-on expertise implementing Microsoft Purview solutions in large enterprise environments. Ability to independently design complex Purview solutions and translate security, governance, and compliance requirements into technical architectures. Experience with Microsoft Fabric, OneLake, Azure Data Lake, Azure SQL, and related enterprise data platforms. Experience implementing or supporting Information Protection, sensitivity labels, DLP, data classification, retention, or related capabilities. Strong understanding of Microsoft Azure, Microsoft Fabric, and Microsoft 365. Ability to lead technical initiatives, solution designs, implementation patterns, and production deployments. Ability to mentor engineers and establish engineering standards and implementation practices. Ability to evaluate emerging Purview capabilities and recommend enterprise adoption approaches. Experience troubleshooting complex enterprise security or data-governance configurations. Understanding of data governance, privacy, security, and information lifecycle concepts. Strong analytical, documentation, communication, and stakeholder-management skills. Ability to lead complex technical workstreams and coordinate delivery with multiple application and platform teams. Demonstrated technical leadership across multidisciplinary teams. Preferred Qualifications: Microsoft Purview implementation experience in a large global enterprise. Experience with Microsoft Entra ID and Azure security. Experience with PowerShell, APIs, scripting, and configuration automation. Experience with enterprise data catalogs, metadata management, lineage, and governance. Experience with DLP, sensitivity labels, retention policies, eDiscovery, Insider Risk Management, and Data Security Posture Management. Knowledge of cybersecurity frameworks and regulatory or compliance requirements relevant to large enterprises. Experience securing data used by generative AI, Microsoft 365 Copilot, retrieval-augmented generation applications, or enterprise AI agents. Relevant Microsoft security, compliance, Azure, or data certifications. Preferred Certifications: Microsoft Certified: Fabric Analytics Engineer Associate. Microsoft Certified: Information Security Administrator Associate. Microsoft Azure certification. CISSP, CCSP, or CISM. Key Competencies: Microsoft Fabric. Data Security & Information Protection. Data Loss Prevention. Data Governance & Catalog. Sensitivity Labeling & Classification. Data Security Posture Management. Microsoft 365 Security & Compliance. Azure Data & Cloud Security. eDiscovery & Information Lifecycle. AI & Copilot Data Security. Automation & Engineering. Technical Leadership. Cross-functional Collaboration. Microsoft Purview Engineering. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description Capital Technology Group provides expert consulting services software development, digital transformation, human-centered design, data analytics and visualization, and cybersecurity. Our multidisciplinary teams use agile methodologies to rapidly and incrementally deliver value in close collaboration with our clients. For over a decade, we have been trusted by both federal and commercial clients to solve complex, mission-critical business challenges. The quality of our work has been recognized by our partners and peers through our inclusion in the Digital Services Coalition, a group of forward- thinking firms recognized for excellence in delivering IT services. Network Architect SME (Hybrid - Suitland, MD)Client Requirements: Applicants MUST BE U.S. Citizens and be able to obtain and maintain a Public Trust clearance.The CTG Experience At Capital Technology Group (CTG), our teams are passionate about modernizing how the federal government delivers software. We partner with federal agencies to build secure, scalable, and mission-driven solutions that make a meaningful impact on millions of people. Recognized by The Washington Post as a Top Workplace in 2025 and 2026. CTG fosters a culture rooted in our core values. Our values guide how we work together and support one another, creating an environment where employees feel trusted, empowered, and encouraged to grow both personally and professionally. About the Role We are seeking a Subject Matter Expert (SME) Network Architect to join our team supporting the U.S. Census Bureau on a large-scale federal modernization program. This is a senior, hands-on technical role responsible for designing, engineering, implementing, and modernizing secure, resilient network and cloud infrastructure supporting mission-critical systems and shared services across cloud and on-premises environments. The successful candidate will combine deep networking and cloud engineering expertise with enterprise architecture responsibilities, translating mission and technical requirements into scalable, secure, highly available cloud and hybrid infrastructure solutions. This role remains hands-on throughout the engineering lifecycle, from architecture and technical design through configuration, implementation, automation, migration, testing, troubleshooting, and operational transition. You'll produce technical designs and architecture artifacts, including physical and logical diagrams, while working directly with cloud, platform, network, security, and engineering teams to implement and support the environments those designs represent. The role will also support current-state assessments, target-state architecture, modernization roadmaps, architecture governance, and technical gap analysis. This is a hybrid role based out of Suitland, MD. Candidates must be U.S. citizens and able to obtain and maintain a Public Trust clearance. You Will Get To Design, engineer, implement, and support secure, resilient enterprise cloud, network, and hybrid infrastructure solutions supporting mission systems and shared services. Develop and implement secure connectivity solutions spanning cloud and on-premises environments. Translate mission, technical, security, and architecture requirements into implementable infrastructure and network solutions. Produce and assess physical and logical architecture diagrams, routing and segmentation designs, interfaces, connectivity, capacity, availability, resiliency, and monitoring requirements. Provide senior-level hands-on engineering throughout the infrastructure lifecycle, including design, configuration, implementation, automation, migration, testing, troubleshooting, deployment, and operational support. Configure, integrate, and troubleshoot cloud and hybrid infrastructure components and services. Ensure solutions meet requirements for scalability, availability, security, performance, interoperability, maintainability, cost effectiveness, and operational support. Provide technical guidance to engineers and resolve complex cloud infrastructure, networking, connectivity, performance, and cross-domain issues. Support infrastructure automation, infrastructure as code (IaC), network automation, software-defined networking, and repeatable deployment approaches. Support cloud adoption, migration, and modernization initiatives involving legacy infrastructure, hybrid environments, and shared enterprise services. Define and maintain cloud and network architecture standards, reference patterns, configurations, and technical decisions. Support target-state cloud and network architecture, technology standards, and modernization roadmaps. Align solutions with enterprise architecture governance, approved standards, and repository requirements. Assess current-state environments to identify technical gaps, technical debt, lifecycle risks, single points of failure, capacity constraints, and performance bottlenecks. Evaluate infrastructure and architecture options based on cost, performance, scalability, resiliency, security, and operational supportability. Participate in technical, architecture compliance, security, engineering, phase-gate, and implementation-readiness reviews. Evaluate proposed technical or architectural deviations and provide recommendations based on technical risk and architectural impact. Coordinate across cloud/platform, network, cybersecurity, identity, endpoint/mobility, application, data, ITSM, carrier, and provider teams. Support testing, migration, deployment, operational transition, and post-implementation stabilization. Validate implemented solutions against approved designs, security requirements, and architecture standards. Maintain architecture, technical decisions, risks, dependencies, configurations, diagrams, and engineering documentation in approved repositories. Communicate technical approaches, root cause, remediation options, risks, and tradeoffs to engineers, architects, program managers, and leadership. Who You Are A strategic, hands-on network architect who enjoys solving complex cloud, infrastructure, networking, and modernization challenges. Experienced translating mission and technical requirements into secure, scalable, resilient, and implementable architecture solutions. Comfortable working across engineering, security, architecture, compliance, and delivery teams in complex enterprise environments. A clear communicator who can explain technical approaches, risks, recommendations, and tradeoffs to both technical and non-technical stakeholders. Qualifications Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or related field (or equivalent experience). 12+ years of IT experience, including significant hands-on cloud, infrastructure, or network engineering experience and responsibility for enterprise-scale solutions. Demonstrated senior-level experience designing, engineering, implementing, migrating, and supporting enterprise cloud and hybrid infrastructure environments. Strong understanding of cloud infrastructure, cloud networking, hybrid connectivity, infrastructure engineering, and enterprise network architecture. Strong networking fundamentals, including TCP/IP, routing, switching, segmentation, DNS/DHCP/IPAM, load balancing, resiliency, capacity, performance, monitoring, and security. Experience producing and implementing technical cloud and network designs, including physical and logical architecture diagrams. Experience designing and implementing secure connectivity between cloud and on-premises environments. Experience configuring, integrating, testing, troubleshooting, and supporting cloud, network, and hybrid infrastructure. Experience integrating cloud infrastructure with enterprise network, security, identity, application, and data services. Experience with infrastructure as code, infrastructure/network automation, or automated infrastructure deployment and configuration. Experience supporting cloud migration, infrastructure modernization, or hybrid environment initiatives. Experience assessing current-state environments and identifying technical gaps, technical debt, lifecycle risks, single points of failure, capacity constraints, and performance issues. Experience supporting target-state architecture, modernization roadmaps, enterprise standards, or reference architectures. Experience participating in technical, security, architecture, compliance, and implementation-readiness reviews. Ability to evaluate technical or architectural deviations and assess technical risk and architectural impact. Ability to troubleshoot complex cloud infrastructure, network, connectivity, performance, availability, security, and cross-domain technical issues. Strong documentation and communication skills, with experience presenting technical designs and tradeoffs to engineers and leadership. U.S. Citizenship Required. Must be able to obtain and maintain a Public Trust clearance. Nice to Have Direct U.S. Census Bureau, federal, government, or large distributed enterprise cloud/network experience. Experience engineering cloud infrastructure supporting mission-critical applications, platforms, or shared services. . click apply for full job details

Job Description Job Description Capital Technology Group provides expert consulting services software development, digital transformation, human-centered design, data analytics and visualization, and cybersecurity. Our multidisciplinary teams use agile methodologies to rapidly and incrementally deliver value in close collaboration with our clients. For over a decade, we have been trusted by both federal and commercial clients to solve complex, mission-critical business challenges. The quality of our work has been recognized by our partners and peers through our inclusion in the Digital Services Coalition, a group of forward- thinking firms recognized for excellence in delivering IT services. Network Architect SME (Hybrid - Suitland, MD)Client Requirements: Applicants MUST BE U.S. Citizens and be able to obtain and maintain a Public Trust clearance.The CTG Experience At Capital Technology Group (CTG), our teams are passionate about modernizing how the federal government delivers software. We partner with federal agencies to build secure, scalable, and mission-driven solutions that make a meaningful impact on millions of people. Recognized by The Washington Post as a Top Workplace in 2025 and 2026. CTG fosters a culture rooted in our core values. Our values guide how we work together and support one another, creating an environment where employees feel trusted, empowered, and encouraged to grow both personally and professionally. About the Role We are seeking a Subject Matter Expert (SME) Network Architect to join our team supporting the U.S. Census Bureau on a large-scale federal modernization program. This is a senior, hands-on technical role responsible for designing, engineering, implementing, and modernizing secure, resilient network and cloud infrastructure supporting mission-critical systems and shared services across cloud and on-premises environments. The successful candidate will combine deep networking and cloud engineering expertise with enterprise architecture responsibilities, translating mission and technical requirements into scalable, secure, highly available cloud and hybrid infrastructure solutions. This role remains hands-on throughout the engineering lifecycle, from architecture and technical design through configuration, implementation, automation, migration, testing, troubleshooting, and operational transition. You'll produce technical designs and architecture artifacts, including physical and logical diagrams, while working directly with cloud, platform, network, security, and engineering teams to implement and support the environments those designs represent. The role will also support current-state assessments, target-state architecture, modernization roadmaps, architecture governance, and technical gap analysis. This is a hybrid role based out of Suitland, MD. Candidates must be U.S. citizens and able to obtain and maintain a Public Trust clearance. You Will Get To Design, engineer, implement, and support secure, resilient enterprise cloud, network, and hybrid infrastructure solutions supporting mission systems and shared services. Develop and implement secure connectivity solutions spanning cloud and on-premises environments. Translate mission, technical, security, and architecture requirements into implementable infrastructure and network solutions. Produce and assess physical and logical architecture diagrams, routing and segmentation designs, interfaces, connectivity, capacity, availability, resiliency, and monitoring requirements. Provide senior-level hands-on engineering throughout the infrastructure lifecycle, including design, configuration, implementation, automation, migration, testing, troubleshooting, deployment, and operational support. Configure, integrate, and troubleshoot cloud and hybrid infrastructure components and services. Ensure solutions meet requirements for scalability, availability, security, performance, interoperability, maintainability, cost effectiveness, and operational support. Provide technical guidance to engineers and resolve complex cloud infrastructure, networking, connectivity, performance, and cross-domain issues. Support infrastructure automation, infrastructure as code (IaC), network automation, software-defined networking, and repeatable deployment approaches. Support cloud adoption, migration, and modernization initiatives involving legacy infrastructure, hybrid environments, and shared enterprise services. Define and maintain cloud and network architecture standards, reference patterns, configurations, and technical decisions. Support target-state cloud and network architecture, technology standards, and modernization roadmaps. Align solutions with enterprise architecture governance, approved standards, and repository requirements. Assess current-state environments to identify technical gaps, technical debt, lifecycle risks, single points of failure, capacity constraints, and performance bottlenecks. Evaluate infrastructure and architecture options based on cost, performance, scalability, resiliency, security, and operational supportability. Participate in technical, architecture compliance, security, engineering, phase-gate, and implementation-readiness reviews. Evaluate proposed technical or architectural deviations and provide recommendations based on technical risk and architectural impact. Coordinate across cloud/platform, network, cybersecurity, identity, endpoint/mobility, application, data, ITSM, carrier, and provider teams. Support testing, migration, deployment, operational transition, and post-implementation stabilization. Validate implemented solutions against approved designs, security requirements, and architecture standards. Maintain architecture, technical decisions, risks, dependencies, configurations, diagrams, and engineering documentation in approved repositories. Communicate technical approaches, root cause, remediation options, risks, and tradeoffs to engineers, architects, program managers, and leadership. Who You Are A strategic, hands-on network architect who enjoys solving complex cloud, infrastructure, networking, and modernization challenges. Experienced translating mission and technical requirements into secure, scalable, resilient, and implementable architecture solutions. Comfortable working across engineering, security, architecture, compliance, and delivery teams in complex enterprise environments. A clear communicator who can explain technical approaches, risks, recommendations, and tradeoffs to both technical and non-technical stakeholders. Qualifications Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or related field (or equivalent experience). 12+ years of IT experience, including significant hands-on cloud, infrastructure, or network engineering experience and responsibility for enterprise-scale solutions. Demonstrated senior-level experience designing, engineering, implementing, migrating, and supporting enterprise cloud and hybrid infrastructure environments. Strong understanding of cloud infrastructure, cloud networking, hybrid connectivity, infrastructure engineering, and enterprise network architecture. Strong networking fundamentals, including TCP/IP, routing, switching, segmentation, DNS/DHCP/IPAM, load balancing, resiliency, capacity, performance, monitoring, and security. Experience producing and implementing technical cloud and network designs, including physical and logical architecture diagrams. Experience designing and implementing secure connectivity between cloud and on-premises environments. Experience configuring, integrating, testing, troubleshooting, and supporting cloud, network, and hybrid infrastructure. Experience integrating cloud infrastructure with enterprise network, security, identity, application, and data services. Experience with infrastructure as code, infrastructure/network automation, or automated infrastructure deployment and configuration. Experience supporting cloud migration, infrastructure modernization, or hybrid environment initiatives. Experience assessing current-state environments and identifying technical gaps, technical debt, lifecycle risks, single points of failure, capacity constraints, and performance issues. Experience supporting target-state architecture, modernization roadmaps, enterprise standards, or reference architectures. Experience participating in technical, security, architecture, compliance, and implementation-readiness reviews. Ability to evaluate technical or architectural deviations and assess technical risk and architectural impact. Ability to troubleshoot complex cloud infrastructure, network, connectivity, performance, availability, security, and cross-domain technical issues. Strong documentation and communication skills, with experience presenting technical designs and tradeoffs to engineers and leadership. U.S. Citizenship Required. Must be able to obtain and maintain a Public Trust clearance. Nice to Have Direct U.S. Census Bureau, federal, government, or large distributed enterprise cloud/network experience. Experience engineering cloud infrastructure supporting mission-critical applications, platforms, or shared services. . click apply for full job details

Job Description Job Description Benefits: 401(k) Competitive salary Dental insurance Health insurance Opportunity for advancement Paid time off Training & development Vision insurance POSITION SUMMARY Celestial Innovations Group (CIG) is seeking a Zero Trust Identity and ICAM Engineer to own end-to-end access policy design across the identity, endpoint, network, and application layers for federal agency clients, spanning the design, implementation, and sustainment of Zero Trust Architecture (ZTA) programs. This role is framework-agnostic and vendor-informed: the ideal candidate understands that Zero Trust is a security philosophy and architectural strategy, not a single product or platform, guided by the principle of "never trust, always verify." The engineer will apply that expertise across one or more leading vendor ecosystems to deliver compliant, mission-ready ZTA solutions aligned with federal mandates including EO 14028, OMB M-22-09, NIST SP 800-207, and the CISA Zero Trust Maturity Model and Secure Access Service Edge (SASE) guidance. These responsibilities and strategies are currently shared across three teams and, as a result, are owned by none of them. Current cyber threats require aligning, consolidating, and bridging access control strategies and policies into a unified front, acting as Trust Brokers across the enterprise, so the organization can maintain a strong security posture ahead of adversaries. Must be located in the DC Metro Area as this role requires onsite and remote support. KEY RESPONSIBILITIES Architecture and Strategy Lead Zero Trust Architecture assessments, gap analyses, and roadmap development for federal clients Design and document ZTA solutions spanning all five pillars: Identity, Device, Network, Application/Workload, and Data Translate federal ZTA mandates (EO 14028, OMB M-22-09, CISA ZT Maturity Model) into actionable implementation plans Develop architecture artifacts including conceptual, logical, and physical ZTA diagrams using DODAF, TOGAF, or equivalent frameworks Support integration of ZTA principles into existing enterprise architectures, hybrid cloud environments, and multi-tenant federal networks Drive SASE convergence, consolidating network and security enforcement onto a single policy plane Advance security posture design and real-time trust evaluation, with a focus on insider threat detection and response Implementation and Engineering Deploy and configure Zero Trust solutions across one or more vendor platforms (see Vendor Ecosystem section below) Own top-level Conditional Access policy design and privileged access governance in Microsoft Entra ID/M365 Implement Identity and Access Management controls including CAC/PIV authentication, MFA, role-based access control (RBAC), and Just-in-Time (JIT) Privileged Access Management Deliver Enterprise Identity, Credential, and Access Management (ICAM) support services, with priority focus on PIV-enabled logical access implementation across enterprise systems Enforce device posture as a condition of every access decision, integrating SCCM, Intune, Workspace ONE (WS1), Purview, Qualys, and Palo Alto NGFW signals Define and enforce application-layer access policy and decisions across M365, Palo Alto NGFW, Entra ID, and Workspace ONE (WS1) Configure microsegmentation, Zero Trust Network Access (ZTNA), software-defined perimeters, and DNS security controls across the network landscape, including Palo Alto, Cisco, and wireless infrastructure Deploy Endpoint Detection and Response (EDR) tooling and enforce device compliance policies at enterprise scale Integrate data protection controls including classification, labeling, DLP, and encryption aligned to ZTA data pillar requirements Compliance and Authorization Align ZTA implementations with NIST SP 800-53 Rev 5, NIST SP 800-207, DISA STIGs, and DHS CDM program requirements Support the Risk Management Framework (RMF) lifecycle, including SSP authoring, continuous monitoring, and ATO maintenance Document ZTA controls for system security packages, POA&Ms, and security assessment reports Own access policy exception management, including governance workflows and audit-ready evidence documentation Client Engagement and Collaboration Serve as a trusted ZTA advisor to federal agency stakeholders, program managers, and ISSO/ISSM counterparts Produce executive-level briefings, technical white papers, and implementation status reports Collaborate cross-functionally with cloud, networking, data analytics, and infrastructure teams to ensure cohesive ZTA integration VENDOR ECOSYSTEM EXPERIENCE CIG's ZTA practice is solution-agnostic at the architectural level. Engineers are expected to bring deep expertise in at least one of the following vendor platforms, with cross-platform fluency strongly preferred: Vendor / Framework & Relevant Capabilities Palo Alto Networks (Prisma): Prisma Access (ZTNA 2.0), Prisma Cloud, Cortex XDR/XSIAM, NGFW policy, SD-WAN integration, threat prevention across all ZTA pillars Zscaler: Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), cloud proxy architecture, VPN replacement, SSL inspection Microsoft Zero Trust: Microsoft Entra ID (Azure AD), Conditional Access, Intune/MEM, Microsoft Defender suite, Sentinel SIEM/SOAR, Purview data governance, M365 compliance center CISA ZT Maturity Model: Five-pillar maturity assessment (Traditional, Initial, Advanced, Optimal), cross-cutting capability mapping, agency self-assessment support, roadmap alignment to federal reporting requirements Additional Enterprise Tooling: SCCM, Workspace ONE (WS1), Qualys vulnerability management, and Cisco network/wireless fabric, supporting device posture and network segmentation enforcement across the landscape REQUIRED QUALIFICATIONS Experience 5+ years of experience in cybersecurity engineering, network security, or IT infrastructure roles 2+ years of hands-on experience designing or implementing Zero Trust Architecture in an enterprise or federal environment Demonstrated understanding of ZTA concepts across all five pillars per NIST SP 800-207 and the CISA Zero Trust Maturity Model Experience supporting federal government clients or DoD/civilian agency environments Technical Skills Proficiency in at least one of the following: Palo Alto Prisma, Zscaler, or Microsoft Zero Trust stack Identity and access management: Entra ID, Active Directory, LDAP, PKI, MFA, PAM tooling; Federal PKI/ICAM experience, with demonstrated hands-on PIV/PIV-I Smartcard credential issuance and lifecycle management Intercede MyID CMS Enterprise architecture and deployment: hands-on experience designing, deploying, configuring, and operating Intercede MyID CMS Enterprise, including credential profiles, enrollment workflows, Smartcard issuance, certificate provisioning, renewal, revocation, and integration with PKI and enterprise identity services Microsoft Entra Certificate Based Authentication (CBA) Network security: microsegmentation, ZTNA, DNS security, SD-WAN, next-generation firewall policy Endpoint security: EDR/XDR deployment and management, device compliance policy enforcement Cloud environments: Azure, AWS, or hybrid cloud architectures with ZTA overlay Familiarity with SIEM/SOAR platforms (Microsoft Sentinel, SumoLogic, Google SecOps, or equivalent) PREFERRED QUALIFICATIONS Active certifications in one or more ZTA vendor platforms: PCCSE, PCNSE, Zscaler ZCCA-IA or ZCCA-PA, Microsoft SC-100 (Cybersecurity Architect Expert) Additional certifications: CISSP, CISM, CompTIA Security+, Cloud+ or relevant AWS/Azure security certifications Familiarity with RMF processes: NIST SP 800-37, SSP authoring, ATO package preparation Experience with ServiceNow, Salesforce, or IT service management tooling in a federal context Multi-vendor ZTA integration experience (e.g., combining Palo Alto and Zscaler capabilities within a single architecture) Flexible work from home options available.

Job Description Job Description Job Title: Senior Patching Engineer - SCCM, Intune & Endpoint Management Duration: 6-Month Contract Location: On-site (Authorized U.S. States - see below) Compensation: $ 46 USD / hour Position Summary Important Healthcare organization is seeking an experienced and highly skilled Senior Patching Engineer to lead and support enterprise-wide patching, vulnerability remediation, and endpoint management initiatives across a large healthcare environment. This role is responsible for the administration, maintenance, and continuous improvement of Microsoft Configuration Manager (SCCM/MECM), Microsoft Intune, Windows and Linux Server patching, and endpoint management solutions supporting thousands of servers, workstations. The ideal candidate will possess deep expertise in Microsoft Endpoint Management technologies, vulnerability remediation, operating system patching, compliance reporting, and healthcare IT operational requirements. This individual will work closely with Infrastructure, Security, and Compliance teams to ensure systems remain secure, compliant, and highly available while minimizing business disruption. Key Responsibilities Patch Management & Vulnerability Remediation Manage and maintain enterprise patching processes for Windows and Linux Servers, Windows workstations, and other supported platforms. Plan, test, schedule, deploy, and validate security updates, cumulative updates, hotfixes, and feature upgrades. Lead monthly patch cycles and emergency remediation activities for critical vulnerabilities. Partner with Cybersecurity teams to identify, prioritize, and mitigate vulnerabilities based on risk and compliance requirements. Develop patch deployment strategies that minimize downtime and maintain organizational service-level objectives. Monitor patch compliance and drive remediation efforts to achieve established compliance targets. Work Requirements Candidates must currently reside and be authorized to work in one of the following states: Alabama, Arkansas, Florida, Georgia, Illinois, Indiana, Iowa, Kentucky, Louisiana, Mississippi, Missouri, North Carolina, Ohio, Oklahoma, South Carolina, Tennessee, Texas, Wisconsin, St. Louis, Missouri or Kansas City, Missouri. SCCM (Microsoft Endpoint Configuration Manager) Administer SCCM infrastructure including Software Update Points (SUP), Distribution Points, Boundary Groups, Collections, and Client Management. Create, maintain, and optimize patch deployment packages and automated deployment rules. Troubleshoot SCCM client health, software distribution, application deployments, and patching issues. Develop compliance reporting and dashboards for executive leadership, IT management, and auditors. Support operating system deployment (OSD) and endpoint lifecycle management initiatives. Microsoft Intune & Endpoint Management Administer Microsoft Intune policies, update rings, Autopilot, endpoint compliance, and device management configurations. Manage co-managed environments integrating SCCM and Intune. Support endpoint configuration, enrollment, compliance monitoring, and policy enforcement. Collaborate with Security teams to implement Endpoint Security and Conditional Access strategies. Server & Infrastructure Support Support patching and maintenance for Windows and Linux Server environments across on-premises and cloud platforms. Coordinate maintenance windows with infrastructure, application, and clinical teams. Validate application functionality following patch deployments. Perform root cause analysis for deployment failures and service-impacting issues. Ensure high availability and operational stability of endpoint management platforms. Compliance, Audit & Healthcare Security Ensure systems comply with healthcare regulatory requirements including HIPAA, HITECH, and organizational security standards. Produce audit-ready reports demonstrating patch compliance and vulnerability remediation. Support internal and external audits related to system security and patch governance. Maintain documentation, standard operating procedures, and technical runbooks. Automation & Continuous Improvement Develop PowerShell scripts and automation solutions for patching, reporting, and endpoint management activities. Identify opportunities to improve deployment efficiency, compliance, and operational effectiveness. Participate in architecture reviews and technology modernization initiatives. Recommend and implement best practices for endpoint security and lifecycle management. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Engineering, or related discipline, or equivalent work experience. 3+ years of experience supporting enterprise endpoint management environments. 3+ years of hands-on experience administering SCCM/MECM. 3+ years of experience administering Microsoft Intune. Experience managing patching operations for large-scale environments consisting of servers and endpoints. Strong knowledge of: Microsoft SCCM/MECM Microsoft Intune Windows Update for Business (WUfB) Windows Server platforms Active Directory Group Policy PowerShell scripting Microsoft Entra ID (Azure AD) Experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management. Strong troubleshooting and root-cause analysis skills. Excellent communication and stakeholder management abilities. Preferred Qualifications Familiarity with Microsoft Defender for Endpoint. Experience supporting hybrid cloud environments including Azure. Experience with endpoint compliance reporting and audit preparation. Relevant certifications such as: Microsoft Certified: Endpoint Administrator Associate Microsoft Certified: Azure Administrator Associate Microsoft Certified: Windows Server Hybrid Administrator Associate ITIL Foundation CISSP (preferred)

Job Description Job Description Description: Hybrid 2 on 3 off in Charlotte, NC Our client seeks a Unified Endpoint Engineer specializing in Microsoft Endpoint Configuration Manager (MECM/SCCM) to engineer, implement, maintain, and support enterprise Unified Endpoint Management services. The role covers Windows endpoint lifecycle management including provisioning and upgrades, application deployment, patching, configuration management, automation, security compliance, troubleshooting, and support for Microsoft Intune, co-management, modern provisioning, and mobile device management. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $40.00 to $50.00/hr. w2 Responsibilities: Administer, maintain, and enhance enterprise endpoint management solutions using Microsoft Endpoint Configuration Manager (MECM/SCCM) and related technologies. Engineer and support Windows 11 provisioning, operating system deployment, feature upgrades, configuration management, and device lifecycle processes across the enterprise. Package, test, deploy, maintain, and troubleshoot enterprise applications using MECM/SCCM, PowerShell, and other endpoint management technologies. Coordinate and execute monthly Windows security patching and endpoint remediation activities, including testing, deployment, troubleshooting, compliance monitoring, and resolution of deployment failures. Develop, maintain, test, and troubleshoot PowerShell scripts and other automation used for endpoint administration, software deployment, configuration management, reporting, and remediation. Configure, test, deploy, and maintain Group Policy Objects (GPOs), endpoint configuration policies, compliance policies, and related controls in accordance with enterprise standards and security requirements. Support Microsoft Intune and co-management capabilities, including device enrollment, configuration profiles, compliance policies, application deployment, and migration of endpoint management capabilities to modern management platforms. Monitor endpoint health, deployment status, patch compliance, configuration compliance, and other operational metrics; investigate issues and implement corrective actions as needed. Troubleshoot complex Windows endpoint issues involving operating systems, applications, registry settings, services, file systems, Active Directory, Group Policy, networking, security controls, and endpoint management technologies. Support endpoint security and vulnerability management activities by implementing approved security configurations, remediating vulnerabilities, and assisting with zero-trust, PCI, and other enterprise security requirements. Support management of mobile and Apple devices using technologies such as Microsoft Intune, Apple Business Manager, Mobile Device Management (MDM), and Mobile Application Management (MAM). Participate in testing and implementation of endpoint changes through established change management processes, including documenting changes, evaluating implementation impacts, coordinating deployments, and supporting rollback or remediation activities when necessary. Participate in endpoint technology projects and coordinate technical activities with Cybersecurity, Identity, Service Desk, Infrastructure, Networking, Application Teams, departmental IT liaisons, vendors, and other stakeholders. Create and maintain technical documentation, operational procedures, deployment documentation, troubleshooting guides, and knowledge articles supporting endpoint management services. Provide technical guidance and assistance to Service Desk personnel, departmental technology staff, other UEM team members, and internal customers regarding endpoint management technologies and issues. Evaluate endpoint management technologies and identify opportunities to improve automation, reliability, security, user experience, and operational efficiency. Use modern productivity and AI-assisted tools, where appropriate, to improve scripting, documentation, troubleshooting, knowledge sharing, and operational efficiency. Experience Requirements: Three (3) or more years of progressively responsible IT experience involving enterprise endpoint management, systems administration, desktop engineering, or related technologies. Hands-on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in an enterprise environment. Experience supporting Windows 10/11 endpoint lifecycle activities, including operating system deployment or provisioning, patch management, software deployment, and troubleshooting. Experience packaging, deploying, and troubleshooting enterprise Windows applications. Proficiency with PowerShell scripting for endpoint administration, automation, troubleshooting, and remediation. Experience administering or supporting Active Directory and Group Policy in an enterprise environment. Working knowledge of enterprise endpoint security, configuration management, and vulnerability remediation practices. Experience troubleshooting endpoint issues across Windows operating systems, applications, networking, identity, and endpoint management technologies. Preferred: Five (5) or more years of IT experience in a large enterprise supporting 5,000+ users. Preferred: Experience with Microsoft Intune, co-management, Windows Autopilot, Microsoft Entra ID, and Apple Business Manager. Preferred: Experience with Endpoint Analytics, proactive remediations, compliance reporting, and patch reporting. Preferred: Experience supporting enterprise Windows OS upgrades or large-scale endpoint transformation initiatives. Preferred: Experience implementing endpoint configurations supporting PCI or other industry security and compliance requirements. Preferred: Microsoft certifications related to Endpoint Administration, Intune, Microsoft 365, or Azure/Entra. Preferred: Experience using AI-assisted administrative tools to improve scripting, documentation, troubleshooting, or operational efficiency. Education Requirements: High School Graduate or Equivalent and five (5) years of related work experience; OR Two-Year College Degree and three (3) years of related work experience; OR Bachelor's Degree and one (1) year of related work experience; OR Master's Degree; OR An equivalent combination of education and relevant experience that enables successful performance of essential duties. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes . click apply for full job details

Vaco is partnering with a national retail organization to hire a Manager of Cybersecurity Operations to lead and mature core security operations programs across the enterprise. This is a hands-on leadership role overseeing SOC operations, vulnerability management, endpoint security, DLP, incident response, and security automation. This role is ideal for a cybersecurity leader who can operate at both the program and technical execution level. The team needs someone who can manage internal security talent, hold external MSSP partners accountable, improve alert handling and escalation processes, and build repeatable capabilities around detection, response, reporting, and automation. The environment is collaborative, fast-moving, and highly cross-functional, requiring someone who can communicate clearly across IT, GRC, engineering, and business teams. This position is based in Tempe, Arizona and requires onsite presence Monday through Thursday, with Fridays optional remote. What You'll Be Doing Manage and mature day-to-day SOC operations, including monitoring, alert triage, escalation, and incident response workflows Partner closely with an external MSSP to drive SLA accountability, improve alert quality, and ensure critical issues are escalated quickly Lead vulnerability management efforts across tools such as Rapid7, Defender, and related platforms, including prioritization, remediation tracking, and executive reporting Oversee endpoint security and management initiatives across Intune, Jamf, Defender, and related endpoint controls Drive improvements to SIEM and SOAR capabilities, including automation opportunities for level 1 response, alert enrichment, and repeatable playbooks Build and refine incident response processes, including playbooks, simulations, post-incident reviews, and lessons learned Partner with IT, GRC, engineering, and business stakeholders to improve security posture across the organization Support DLP strategy and monitoring to protect sensitive data across SaaS, cloud, and endpoint environments Use security metrics, scorecards, and framework alignment to communicate program maturity and areas for improvement Evaluate how AI can be used responsibly in security operations, including automation of response workflows and protection of AI-enabled systems Mentor and develop security team members while remaining hands-on with technical operations when needed Help define and operationalize security programs that reduce risk while supporting business velocity Required Experience 6 or more years of experience in cybersecurity, information security operations, incident response, infrastructure, or related technical security roles Proven experience managing or leading SOC operations, either in a corporate environment or MSSP setting Strong understanding of the end-to-end incident response lifecycle, from alert intake through containment, remediation, and post-incident review Hands-on experience with cybersecurity technologies such as MDR, EDR, SIEM, SOAR, vulnerability management, and endpoint security tools Experience maturing vulnerability management programs, including risk prioritization, remediation coordination, and reporting Experience partnering with or managing MSSP relationships and holding vendors accountable to performance expectations Strong understanding of security frameworks and compliance considerations such as NIST, CIS Controls, PCI, SOX, and CCPA Ability to lead without authority and collaborate effectively across IT, engineering, GRC, and business teams Experience managing high-pressure incidents and making informed decisions under time-sensitive conditions Understanding of AI concepts and their impact on cybersecurity operations, including AI-enabled threats and secure use of AI tools Bachelor's degree in a related field, or equivalent additional experience Nice to Have CISM, CISSP, or similar security certification Experience with Rapid7, Microsoft Defender, Intune, Jamf, Workato, or comparable security and automation tools Experience building SOAR workflows or security automation playbooks Familiarity with cloud security controls across AWS, Azure, or GCP Experience in SaaS-heavy environments Experience with DLP program ownership or data protection initiatives Background supporting retail, consumer-facing, or high-growth business environments Compensation & Benefits Salary range: $150,000 to $160,000 base, depending on experience Bonus potential and other financial incentives Comprehensive benefits package available If you are a hands-on cybersecurity operations leader who can mature SOC processes, improve vulnerability and endpoint programs, and build practical automation across a growing security environment, we would welcome the opportunity to connect. Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets . click apply for full job details

Senior / Lead .NET Software Engineer / SRE DETAILS Location: Arlington, TX 76014 (hybrid onsite 2-days per week) Openings: 2 (1 Senior .NET / 1 Lead .NET) Position Type: 6M C2H Hourly / Salary: to $160K+ (based on experience level) JOB SUMMARY Vaco is currently seeking a Senior .NET Software Engineer / SRE for a 6M C2H opportunity that is located in Arlington, TX 76014 (hybrid onsite 2-days per week). About the Project: This is an ongoing multi-year digital transformation initiative (now roughly 2+ years in) focused on modernizing financial services platforms, making them more scalable, reliable, automated, and cloud-native. The .NET Engineer / SRE will be building and extending tools / frameworks for SRE practices, including automation scripts, custom monitoring, CI/CD enhancements, reliability tooling, etc. The .NET Engineer / SRE will help bridge the gap between development teams (writing .NET) and SREs (ensuring reliability at scale), especially within this strategic / tool building-focused SRE practice. This is not a traditional .NET Developer (no owning user-facing APIs or business logic for financial services), but rather applying .NET skills to SRE tasks, including building custom tools for automation, reliability, and release engineering, creating GITHub Copilot context files to embed SRE practices (security / performance checks) early in development cycles, debugging / refactoring code in production environments, performing root-cause analysis, and iterating post-deployment. Additionally, there's no traditional on-call production monitoring / support, whereas the focus will be on design, architecture, automation, and enabling scalable DevOps / SRE practices for development teams, rather than day-to-day firefighting. Ideal Senior Candidate:The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Senior Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). Ideal LEAD Candidate (leading teams of 5+): The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Lead Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). JOB REQUIREMETS .NET Core Development (hands-on core expertise) - C# / .NET Core Development Building / Maintaining Production-Grade Applications / APIs / Services Cloud Modernization - Migrating Legacy .NET Applications to Cloud-Native Azure Architectures Azure-Native Application Development - Designing / Deploying / Supporting .NET Applications Directly in Azure with Real Production Workloads (Beyond Portal-Based "Click-Ops") AKS / Containerization - Containerizing .NET Applications (Docker Multi-Stage Builds) Deploying / Managing within AKS (Deployments / Services / ConfigMaps / Secrets / Helm / Node Pools / Autoscaling / Ingress / Cluster-Level Troubleshooting) CI/CD / Azure DevOps - Building / Maintaining YAML-Based CI/CD Pipelines (Automated Builds / Testing / Security Scans / Docker Image Creation / Deployments to AKS / App Services) Azure Platform Services Integration - Integrating Core Azure Services into .NET Applications (App Services / Azure Functions / Service Bus / Event Grid / Azure Monitor / Application Insights With Custom Telemetry / Distributed Tracing / Metrics) IaC / Terraform - Developing / Managing Terraform-Based Infrastructure (AKS / VNETs / Private Endpoints / Service Bus / SQL Database / Storage) Aligned with Application Development Identity / Security (Azure) - Implementing Secure Patterns (Managed Identities / Entra ID / RBAC / Secure Connectivity / Polly Retry Policies / Private Endpoints / VNET Integration) within .NET Services Observability / SRE Practices - Applying SRE Principles within Development (Application Insights / Log Analytics / Alerting / Performance Monitoring / Production Troubleshooting) Database Design / Optimization - Oracle / MS SQL Server / NoSQL (CosmosDB) SQL Scripting (hands-on) Designing / Evolving Database Schemas Performing Query Performance Analysis Indexing to Deliver Scalable / Performant Services Problem Solving / Collaboration - Driving Root Cause Analysis / Debugging for .NET Applications in Azure Collaborating within SRE / Cross-Functional Teams PREFERRED (not required) Azure Governance / Best Practices - Azure Policy / GitHub Copilot Context / Embedding SRE Practices Early in Development Lifecycle Architecture Frameworks (Familiarity) - Azure Well-Architected Framework (Reliability / Operational Excellence) Advanced AKS / Hybrid - Exposure to Advanced AKS Topics (Cluster Autoscaling / Service Mesh / Cost Optimization) / Hybrid Scenarios (Azure Arc) AI / Automation Enablement - Driving Adoption of AI-Powered Tools (GitHub Copilot) to Improve Developer Productivity / Code Quality By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.

Network Engineer DETAILS Location: Chesapeake, VA 23322 (onsite 5-days per week) Position Type: 6M Contract Hourly / Salary: to $60W2 JOB SUMMARY Vaco is currently seeking a Network Engineer for a 6M Contract that is located in Chesapeake, VA (onsite 5-days per week). The Network Engineer will support and enrich the enterprise network infrastructure within a large production environment. The Network Engineer will maintain and troubleshoot Layer 2 and foundational Layer 3 networking technologies, supporting switching, VLAN segmentation, trunking, wireless connectivity, and network access services while ensuring reliable day-to-day operations. The Network Engineer will work closely with existing network teams to assist with network implementation, configuration, troubleshooting, and operational support across wired and wireless environments. The ideal Network Engineer will possess strong switching fundamentals, practical networking experience, and the ability to support enterprise connectivity, security, and infrastructure initiatives while contributing to the overall stability and performance of the network environment. Enterprise Network Operations - Supporting / Maintaining Critical Network Infrastructure via Configuration / Monitoring / Troubleshooting / Resolution of Connectivity Issues Across Switching / Routing / Wireless / Access Layer Technologies Layer 2 Network Administration - Managing VLAN Architecture / Trunking / Spanning Tree / Authentication Services / Switch Configurations Ensuring Secure / Reliable Network Communications Network Troubleshooting / Incident Response - Investigating / Resolving Performance / Availability / Connectivity Issues via Systematic Analysis of Switching / Routing / Wireless / Endpoint Communication Paths Wireless / Access Network Support - Supporting WiFi Connectivity / Access Layer Deployments / Network Access Services Delivering Consistent User / Device Connectivity Across Enterprise Locations Network Implementation / Change Management - Supporting Network Upgrades / Equipment Deployments / Configuration Changes / Infrastructure Enhancements Following Established Change Control Processes Cross-Technology Infrastructure Support - Collaborating with Network / Security / Infrastructure Teams to Support Integrated Solutions Across Routing / Firewalls / Wireless Networking / Network Access Control (NAC) Technologies JOB REQUIREMENTS Enterprise Network Engineering (5+ years hands-on) - Supporting Enterprise Network Infrastructure Across Campus / Branch / Data Center Environments Layer 2 Networking Expertise (strong experience) - VLAN Design / Trunking / Spanning Tree / Port Security / Authentication Services / Switch Provisioning / Enterprise Access Layer Operations Routing / Layer 3 Fundamentals (working knowledge) - Routing Protocols / Technologies (Static Routing / OSPF / Default Routing / Inter-VLAN Routing / Route Redistribution Fundamentals) Cisco Switching Infrastructure - Configuring / Managing / Troubleshooting Cisco Catalyst Switching Platforms in Large Enterprise Environments Wireless Networking Support - Supporting Enterprise Wireless Infrastructure (WLAN Deployments / SSIDs / Authentication Services / Client Connectivity Troubleshooting / RF Fundamentals) Network Troubleshooting / Incident Resolution (advanced) - Troubleshooting Switching / Routing / Wireless / Client Connectivity Issues via Structured Root Cause Analysis Methodologies Network Access Control (NAC) - Supporting NAC Technologies (Authentication / Authorization / Device Access Policies / Endpoint Connectivity Management) Network Security Fundamentals (understanding) - Enterprise Security Concepts (ACLs / Segmentation / Network Access Controls / Secure Connectivity Best Practices) Infrastructure Monitoring / Operations - Utilizing Network Monitoring / Alerting / Performance Management Tools to Maintain Operational Stability / Resolve Infrastructure Issues Proactively Change Management / Network Implementations - Supporting Network Deployments / Hardware Refreshes / Configuration Changes / Infrastructure Upgrades Following Established Change Control Processes Documentation / Operational Standards - Creating / Maintaining Network Documentation (Diagrams / Runbooks / Configuration Standards / Support Procedures) Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description Endpoint & Information Systems Specialist POSITION SUMMARY: The Endpoint & Information Systems Specialist designs, implements, and supports the district's cloud, identity, and endpoint management systems across Microsoft 365, Azure, Google Workspace, and major device platforms. The role manages identity services, automation workflows, SIS integrations, and data accuracy while providing Level 3 technical support and ensuring compliance with state reporting requirements. This position requires strong technical expertise, problem solving skills, and the ability to support mission critical educational technology in a fast paced environment. DUTIES AND RESPONSIBILITIES: Design and implement modern endpoint management solutions and strategy for large scale environments. Design, implement and maintain Microsoft Azure, Microsoft 365 and Google Workspace solutions and maintain their roadmap. Design and deploy identity services that support Microsoft 365/Google Workspace for authentication and secure access. Define and maintain identity provisioning of services and role-based access controls; develop and maintain processes and systems to automate workflows for the provisioning, management and de-provisioning of directory objects and services. Develop, maintain, and enforce directory structure, security, policies, and naming standards. Develop and maintain scripts to automate systems deployment, operations, and management. Deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment. Provide technical support for state and national assessments such as IAR, ACCESS, DLM-AA, ACT, SAT, and NAEP. Assist schools with data submissions and reports for compliance and accountability. Provide technical support for educational applications such as Skyward, PowerSchool, Clever, SchoolDay, Hapara, Destiny, and Fitnessgram. Manage end-of-year SIS processes, including data rollover and cleanup. Maintain and troubleshoot Clever, SchoolDay, and Google Workspace integrations with SIS. Lead data cleanup and ETL (Extract, Transform, Load) processes between SIS and the district's data warehouse. Support schools with state reporting and ensure SIS compliance with state (ISBE) requirements. Proactively review and validate SIS data accuracy, identifying and resolving discrepancies. Provide Level 3 support for Service Desk tickets and incidents. Perform scheduled maintenance and support after hours. EXPERIENCE IN: Microsoft 365 MacOS and iOS Microsoft Intune Microsoft Defender for Endpoint Azure AD, identity security and compliance Azure Arc and hybrid cloud management Google Workspace Windows Server 2016/2019/2022 Microsoft Active Directory SSO-related software such as ADFS, OAuth, Okta or other SAML & OpenID Connect providers. PowerShell scripting and utility scripts REQUIREMENTS: Bachelor's Degree in Information Systems, Computer Science, or equivalent combination of education and experience. Minimum of 10 years' experience working in IT disciplines. Experience with Microsoft Access, SQL Server, and T-SQL. Experience with API integration and scripting (e.g., Google Apps Manager - GAM). Strong proficiency in Microsoft Excel. Experience working in K-12 Schools. PREFERRED CERTIFICATION(S) REQUIREMENTS: Microsoft 365 Certified: Modern Desktop Administrator Associate Microsoft 365 related certification Microsoft Azure related certification Google for Workspace related certification SKILLS AND ABILITIES: Strong troubleshooting and problem-solving skills with attention to details. Apple device management, for example JAMF/Mosyle Critical thinker with proven ability to deal with requirements yet see things holistically and strategically. Strong interpersonal skills with excellent verbal and written communication to technical and non-technical audiences. Ability to work with clients and technical teams to build requirements, technical artifacts and engineering documents including detailed designs and test plan. Ability to shift and pivot with changing responsibilities. Ability to learn new technology and business process as required. Maintain industry knowledge on latest trends and technology. Possess a personal sense of urgency and the ability to handle a fast-paced environment. Provide training, mentorship, and support professional development of fellow engineers. Represent the company professionally to all parties including customers, prospects, and vendors. Carry out other duties and responsibilities as assigned by supervisor.