TOMORROW HIRE
Washington, Washington DC
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
TOMORROW HIRE
Melbourne, Florida
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.
Dev Technology
Ashburn, Virginia
Job Description Job Description Information Security Specialist Officer, Technical Lead, AWS Security • RMF & ATO • NIST 800-53 • Cloud Application Security Clearance: Active CBP, DHS, or Top Secret Clearance required Work Arrangement: Hybrid - onsite 3 days/week during standard business hours in Ashburn, VA About the Role Dev Technology Group is seeking a Senior Information Security Specialist to lead and develop a mid-sized team of ISSOs supporting the security, compliance, and authorization of mission-critical federal applications and information systems hosted in AWS. This is a hands-on technical leadership role combining people leadership, federal cybersecurity expertise, and direct collaboration with government and technical stakeholders. You will mentor junior and mid-level ISSOs while partnering with system owners, developers, architects, cloud/infrastructure engineers, security professionals, and government stakeholders throughout the system development lifecycle. You will provide practical security guidance for AWS-hosted applications, lead Risk Management Framework (RMF) and Authority to Operate (ATO) activities, oversee vulnerability management and continuous monitoring, and translate federal cybersecurity requirements into actionable guidance for technical teams. What You'll Do Lead, mentor, and develop a team of ISSOs by establishing priorities, providing technical direction and coaching, and promoting accountability and consistent security practices. Lead and oversee RMF, ATO, security authorization, compliance, vulnerability management, and continuous monitoring activities across a portfolio of federal systems and applications. Partner with ISSMs, system owners, assessors, developers, architects, engineers, and government stakeholders to maintain authorizations, identify risks, and address security requirements. Lead vulnerability management efforts, prioritizing remediation, developing mitigation strategies, and tracking corrective actions through resolution. Develop, assess, document, and support implementation of security controls aligned with FISMA, NIST 800-53, DHS, and client requirements . Prepare and maintain security and authorization documentation, including SSPs, ISAs, audit artifacts, and RMF documentation . Provide cybersecurity guidance for applications and systems deployed in AWS and integrate security throughout the software development lifecycle. Validate security implementation through technical reviews, discussions, interviews, assessments, and tabletop exercises. Support security audits, assessments, compliance reviews, and reviews of information systems and network connections. Interpret federal and client security policies and translate requirements into practical guidance for technical and development teams. Identify and escalate security risks, communicate priorities and remediation status, and provide clear visibility to Dev Technology leadership and government stakeholders. Develop and present security metrics, status reports, risk assessments, and executive briefings . Establish and improve security processes, procedures, templates, dashboards, and workflows to improve consistency, accountability, and efficiency across the ISSO team. Build trusted relationships with government clients through proactive communication, collaboration, and face-to-face engagement. Required Education, Experience & Skills Bachelor's degree and 7+ years of experience securing federal information systems. Demonstrated experience leading and mentoring information security professionals , including junior and mid-level ISSOs. Experience leading cybersecurity activities in a federal government client environment and working directly with government stakeholders.' Strong working knowledge of NIST Risk Management Framework (RMF) and experience supporting federal systems through security authorization and ATO activities . Experience developing, implementing, assessing, or documenting security controls aligned with FISMA and NIST 800-53 . Experience with vulnerability management, continuous monitoring, security assessments, audits, or compliance reviews for federal systems. Experience providing cybersecurity guidance for AWS-hosted applications and systems . Strong understanding of modern information systems and their technical security considerations. Ability to work effectively with developers, architects, engineers, government stakeholders, and technical and non-technical audiences. Strong written and verbal communication skills, including the ability to communicate security risks and technical findings and develop/present security documentation and executive briefings. Ability to establish priorities, manage competing demands, independently manage security activities, and escalate issues appropriately. Proactive, solutions-oriented approach to identifying risks and improving security practices. Current CBP, DHS, or Top Secret Clearance. Ability to work onsite 3 days per week in Ashburn, VA during standard business hours. Cybersecurity certification such as CISSP, CISM, GIAC, Security+, or another recognized cybersecurity certification. Preferred Education, Experience & Skills Experience developing or supporting RMF and authorization artifacts, including SSPs, ISAs, PTAs, ATTs, POA&Ms , and related documentation. Experience partnering with application development, cloud engineering, and DevSecOps teams to integrate security throughout the SDLC. Experience working in an Agile software development environment using Jira or similar platforms. Experience with GRC tools such as CSAM or similar platforms supporting authorization, compliance, vulnerability management, and security activities. Understanding of AI concepts and practical applications of AI for cybersecurity operations, risk analysis, compliance, or security program management. Our estimated salary range for this position is $88,000 - $ 150,000. This presented salary range is not a guarantee of compensation or salary. Offered salary is based on experience, geographic location, and possibly contractual requirements as appropriate to the role. Salary could fall outside of this range. Who We Are Dev Technology is a growing IT company with an employee-centric culture that works on mission-critical projects for the federal government. We partner with our federal customers to deliver technology services and solutions, and to drive our client's missions forward through innovation. We use Agile and DevSecOps principles to provide services including application development, biometrics and identity management, cloud and infrastructure optimization, IT and legacy modernization, and data management. As a Washington Post Top Workplace award winner for the past THIRTEEN years in a row, the Top Workplaces USA for the past five years, and a recipient of the Companies As Responsive Employers (CARE) Award for the past six years, Dev Technology employees enjoy: Generous and flexible time-off policy Flexible work schedules and telework options, including remote work availability for eligible projects Career development opportunities including a mentorship program, technical and management training through Dev University, hands-on learning through DevLab, tuition reimbursement, and paid training opportunities Industry-leading benefits including a choice of two health plans that include dental and vision, flexible spending account, commuter benefits, life insurance, and more 401K matching with a 5% matching contribution Regular team and company social events including our annual party, happy hours, fitness challenges, and more A focus on community engagement including company wide support activities, employer match for donations, and time off for volunteer efforts To learn more about working at Dev Technology, visit Working At Dev Technology Group Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Dev Technology Group operates in the following states: AL, AR, AZ, CO, DC, FL, GA, ID, IL, IN, MD, MA, ME, MI, MN, MO, MS, NC, NJ, OH, OR, PA, SC, TN, TX, VA, WV.
Job Description Job Description Information Security Specialist Officer, Technical Lead, AWS Security • RMF & ATO • NIST 800-53 • Cloud Application Security Clearance: Active CBP, DHS, or Top Secret Clearance required Work Arrangement: Hybrid - onsite 3 days/week during standard business hours in Ashburn, VA About the Role Dev Technology Group is seeking a Senior Information Security Specialist to lead and develop a mid-sized team of ISSOs supporting the security, compliance, and authorization of mission-critical federal applications and information systems hosted in AWS. This is a hands-on technical leadership role combining people leadership, federal cybersecurity expertise, and direct collaboration with government and technical stakeholders. You will mentor junior and mid-level ISSOs while partnering with system owners, developers, architects, cloud/infrastructure engineers, security professionals, and government stakeholders throughout the system development lifecycle. You will provide practical security guidance for AWS-hosted applications, lead Risk Management Framework (RMF) and Authority to Operate (ATO) activities, oversee vulnerability management and continuous monitoring, and translate federal cybersecurity requirements into actionable guidance for technical teams. What You'll Do Lead, mentor, and develop a team of ISSOs by establishing priorities, providing technical direction and coaching, and promoting accountability and consistent security practices. Lead and oversee RMF, ATO, security authorization, compliance, vulnerability management, and continuous monitoring activities across a portfolio of federal systems and applications. Partner with ISSMs, system owners, assessors, developers, architects, engineers, and government stakeholders to maintain authorizations, identify risks, and address security requirements. Lead vulnerability management efforts, prioritizing remediation, developing mitigation strategies, and tracking corrective actions through resolution. Develop, assess, document, and support implementation of security controls aligned with FISMA, NIST 800-53, DHS, and client requirements . Prepare and maintain security and authorization documentation, including SSPs, ISAs, audit artifacts, and RMF documentation . Provide cybersecurity guidance for applications and systems deployed in AWS and integrate security throughout the software development lifecycle. Validate security implementation through technical reviews, discussions, interviews, assessments, and tabletop exercises. Support security audits, assessments, compliance reviews, and reviews of information systems and network connections. Interpret federal and client security policies and translate requirements into practical guidance for technical and development teams. Identify and escalate security risks, communicate priorities and remediation status, and provide clear visibility to Dev Technology leadership and government stakeholders. Develop and present security metrics, status reports, risk assessments, and executive briefings . Establish and improve security processes, procedures, templates, dashboards, and workflows to improve consistency, accountability, and efficiency across the ISSO team. Build trusted relationships with government clients through proactive communication, collaboration, and face-to-face engagement. Required Education, Experience & Skills Bachelor's degree and 7+ years of experience securing federal information systems. Demonstrated experience leading and mentoring information security professionals , including junior and mid-level ISSOs. Experience leading cybersecurity activities in a federal government client environment and working directly with government stakeholders.' Strong working knowledge of NIST Risk Management Framework (RMF) and experience supporting federal systems through security authorization and ATO activities . Experience developing, implementing, assessing, or documenting security controls aligned with FISMA and NIST 800-53 . Experience with vulnerability management, continuous monitoring, security assessments, audits, or compliance reviews for federal systems. Experience providing cybersecurity guidance for AWS-hosted applications and systems . Strong understanding of modern information systems and their technical security considerations. Ability to work effectively with developers, architects, engineers, government stakeholders, and technical and non-technical audiences. Strong written and verbal communication skills, including the ability to communicate security risks and technical findings and develop/present security documentation and executive briefings. Ability to establish priorities, manage competing demands, independently manage security activities, and escalate issues appropriately. Proactive, solutions-oriented approach to identifying risks and improving security practices. Current CBP, DHS, or Top Secret Clearance. Ability to work onsite 3 days per week in Ashburn, VA during standard business hours. Cybersecurity certification such as CISSP, CISM, GIAC, Security+, or another recognized cybersecurity certification. Preferred Education, Experience & Skills Experience developing or supporting RMF and authorization artifacts, including SSPs, ISAs, PTAs, ATTs, POA&Ms , and related documentation. Experience partnering with application development, cloud engineering, and DevSecOps teams to integrate security throughout the SDLC. Experience working in an Agile software development environment using Jira or similar platforms. Experience with GRC tools such as CSAM or similar platforms supporting authorization, compliance, vulnerability management, and security activities. Understanding of AI concepts and practical applications of AI for cybersecurity operations, risk analysis, compliance, or security program management. Our estimated salary range for this position is $88,000 - $ 150,000. This presented salary range is not a guarantee of compensation or salary. Offered salary is based on experience, geographic location, and possibly contractual requirements as appropriate to the role. Salary could fall outside of this range. Who We Are Dev Technology is a growing IT company with an employee-centric culture that works on mission-critical projects for the federal government. We partner with our federal customers to deliver technology services and solutions, and to drive our client's missions forward through innovation. We use Agile and DevSecOps principles to provide services including application development, biometrics and identity management, cloud and infrastructure optimization, IT and legacy modernization, and data management. As a Washington Post Top Workplace award winner for the past THIRTEEN years in a row, the Top Workplaces USA for the past five years, and a recipient of the Companies As Responsive Employers (CARE) Award for the past six years, Dev Technology employees enjoy: Generous and flexible time-off policy Flexible work schedules and telework options, including remote work availability for eligible projects Career development opportunities including a mentorship program, technical and management training through Dev University, hands-on learning through DevLab, tuition reimbursement, and paid training opportunities Industry-leading benefits including a choice of two health plans that include dental and vision, flexible spending account, commuter benefits, life insurance, and more 401K matching with a 5% matching contribution Regular team and company social events including our annual party, happy hours, fitness challenges, and more A focus on community engagement including company wide support activities, employer match for donations, and time off for volunteer efforts To learn more about working at Dev Technology, visit Working At Dev Technology Group Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Dev Technology Group operates in the following states: AL, AR, AZ, CO, DC, FL, GA, ID, IL, IN, MD, MA, ME, MI, MN, MO, MS, NC, NJ, OH, OR, PA, SC, TN, TX, VA, WV.