524 jobs found

Lockheed Martin seeks a Software Engineer to develop secure, mission-critical software supporting advanced aerospace and manufacturing systems. In this role, you will design, implement, and test high-reliability applications that integrate with complex hardware, sensors, and production environments. You'll collaborate with multi-disciplinary engineering teams, follow rigorous coding and security standards, and contribute to architectural decisions. This position offers opportunities to work on cutting-edge defense and space programs, grow technically, and support global security initiatives in a high-performance, ethical culture. Responsibilities Design, develop, and maintain software for advanced manufacturing and aerospace systems Collaborate with cross-functional engineering teams to define requirements and technical solutions Implement robust, secure, and scalable code following industry best practices and coding standards Integrate software with hardware, sensors, and manufacturing systems to support mission-critical operations Perform debugging, testing, and validation to ensure reliability and compliance with defense and aerospace standards Contribute to architecture decisions, technical documentation, and design reviews Support deployment, monitoring, and continuous improvement of software in production environments Work within agile development processes, including sprints, code reviews, and CI/CD pipelines Required Skills Python C++Java or C systems programming Real-time or safety-critical software development Git and version control workflows CI/CD tools (e.g., Jenkins, Git Lab CI) Linux development environment Cloud platforms (AWS, Azure, or similar) Unit and integration testing frameworks

Job Description Job Description Position Summary Description Directly accountable for designing and governing the enterprise and utility-specific network architecture to ensure alignment with business goals, technology strategies, and security requirements. Provide strategically focused direction, technical leadership, and architectural oversight for all network-related initiatives, including LAN/WAN, cloud networking, network security, and emerging technologies. Ensure all network security controls are implemented and managed in accordance with appropriate security principles, industry best practices, and applicable industry standards, including NERC CIP regulatory compliance standards. Partner and collaborate with infrastructure, operational, and other teams to effectuate scalable, secure, and resilient network architectures that support business and operational objectives and requirements. May serve as a project manager on network infrastructure projects and cross-train peers and other department team members, supporting knowledge sharing and development. Qualifications and Education Requirements Bachelor's degree in Computer Science, Computer Engineering, Network Engineering, Telecommunications, or related discipline is required. Minimum of fifteen (15) years of progressive technical leadership experience in information technology space, with at least ten (10) years in network architecture or advanced network design roles in medium to large-scale environments and at least three (3) years of experience designing networks for both Information Technology (IT) and Operational Technology (OT) environments. Certification as a Cisco Certified Internetwork Expert (CCIE), Certified Information Systems Security Professional (CISSP), AWS Certified Advanced Networking - Specialty, or Certified Information Security Manager (CISM) is required. Familiarity with architecture frameworks such as The Open Group Architecture Framework (TOGAF), and design methodologies like Zero Trust or defense-in-depth are a plus. Core Competencies: Adaptable, Collaborative, Communicator, Critical-Thinking, Detail-Oriented, and Outcome-Driven Technical Competencies/Skills: LAN/WAN Technologies, including MPLS, Wi-Fi, Cellular, SD-WAN, and Cloud Networking Architectures Network Design Tools and Modeling Routing Protocols (e.g., BGP, OSPF, EIGRP), Switching, VLANs, Firewalls, and Network Segmentation Strategies Technology Roadmaps and Lifecycle Management Plans IPv4/IPv6 Addressing, Subnetting and Segmentation. IT and OT Network Protocols and Architecture Network Design Cybersecurity Principles Network virtualization and software-defined networking (SDN) technologies Ability to produce detailed network diagrams and documentation Soft Competencies/Skills: Strong analytical and problem-solving abilities Effective written and verbal communication Strategic thinking and innovation Strong project planning, coordination, and collaboration skills Stakeholder engagement and influencing skills Ability to mentor junior cybersecurity analysts Essential Functions Architect and drive the implementation of complex networks infrastructures, in collaboration with engineering, operations, compliance, and other business technology teams, to ensure network designs align with security policies and frameworks. Networks include, but are not limited to LAN, WAN, data center, cloud, and wireless networks that provide high availability, scalability, and security in both information technology (IT) and operation technology (OT) environments. Develop and maintain comprehensive enterprise network architecture roadmap, including blueprints/drawings, security policies and frameworks, hardware, software, and security that span on-premise, cloud, and hybrid environments. Drive the development and implementation of network security policies and framework, and enforce robust network security measures, including firewalls, VPNs, intrusion detection/prevention systems, and network segmentation. Lead and direct the implementation of network architecture initiatives, solutions, and proof-of-concept projects while collaborating with multi-disciplinary teams, affiliates, and partners to support existing and future solutions. Maintain compliance with corporate network infrastructure policies and procedures, and remain knowledgeable of new technologies, threats, regulations, standards, and best practices applicable to IT and OT environments. Develop and maintain detailed network documentation, including diagrams, configuration standards, and ensure all network solutions adhere to defined corporate policies and governance models. Leads governance processes to ensure network designs meet enterprise architecture standards. Identify and recommend improvements in processes, procedures, technologies, network expansion, hardware, software and other network improvements and innovations. Support the establishment and implementation of network testing benchmarks, cybersecurity internal controls, and monitoring strategies. Serves as an escalation point for complex technical problems, participates in on-call rotations to resolve emergent network issues in critical environments, and develop and conduct training programs. Provide architectural oversight during vendor evaluations and technology selection. Oversee network-related risk assessments and lead implementation of mitigation strategies. Contribute to disaster recovery and business continuity planning from a network design perspective. Perform other duties as applicable to the position or as assigned. NERC Compliance: Performs NERC Compliance Program roles if/as designated in Seminole's Standard Ownership Matrix (SOM) including ongoing evidence retention in "audit-ready" form. You should also be familiar with Seminole's Enterprise Internal Compliance Program (ENT-GCD-RGC-EP-054) to further your understanding of Seminole's compliance program and your duties and responsibilities in the SOM. Physical Requirements Must be able to follow established protective measures including wearing required personal protective equipment (PPE). Must possess a valid driver's license and acceptable Motor Vehicle Report. Working Conditions This position may require occasional travel and work outside of standard business hours, including overnight stays. While performing duties in certain areas of the plant or at substations, there is potential exposure to hazards typical of industrial environments. Flexibility to work extended hours and weekends may be necessary to meet project deadlines. Additionally, the role requires availability on a 24-hour basis to provide support in the event of critical system malfunctions, outages, or severe weather events. " Disclaimer - Management may modify this job description at any time and may require the performance of additional duties, or modification of physical requirements, with or without advance notice."

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description YOUR ROLE As a Solution Architect focusing on Data Governance and Data Engineering, you'll be embedded with our Federal DoW/DoD customers as their dedicated technical partner. You'll have the opportunity to: Drive Technical Success : Lead customers through their complete journey from initial onboarding to advanced use case expansion, ensuring seamless adoption and implementation of Immuta solutions. Be a Trusted Technical Partner : Provide unparalleled technical domain expertise and solution design, becoming the go-to expert for customers navigating complex governance and compliance challenges in government environments. Innovate at the Edge : Design and implement cutting-edge proof of concepts and novel governance solutions, pushing the boundaries of what's possible within customer technology ecosystems. Shape Product Evolution : Serve as a vital feedback channel, translating customer insights and field experiences directly back to our Product team to influence future development and innovation. Build Strategic Partnerships : Collaborate closely with Customer Success Managers (CSMs) and field leadership to execute comprehensive account strategies and drive long-term customer outcomes. WHAT YOU'LL DO Partner with the Public Sector Customer Success Manager and Technical Field Leadership to define a comprehensive technical strategy for each customer account. Serve as the primary technical liaison to customer leadership, translating complex technical concepts into strategic business outcomes. Lead technical and functional meetings to advance strategic objectives and push forward project deliverables. Build novel technology proof-of-concepts (PoCs) and compelling demonstrations across multiple cloud environments and platforms. Serve as the subject matter expert on platform's technical integrations, configuration, and policy construction. Implement solutions directly within the customer's technology stack and represent current best practices. Contribute to internal knowledge bases and provide ad-hoc support to our partner's internal teams. Maintain competency in the platform's technical adjacencies, including data platforms (Snowflake, Databricks, Starburst), commercial cloud offerings (AWS, Azure, GCP), IDM systems, and data catalog tools. Requirements Due to the nature of our U.S. Government contracts, qualified applicants must be U.S. citizens and possess an active TS/SCI security clearance. 5+ years of working experience as a technology consultant, preferably with government-focused clients in the DoW/DoD, IC, and Federal Civilian spaces. Experience delivering on-prem solutions in air-gapped networks. IAM integration experience (e.g., PingFederate). Experience with Immuta or similar data/AI governance tool preferred Working experience in data engineering or data governance roles. Strong experience with modern data platforms like Trino, Postgres/RDBMS, as well as Snowflake, and Databricks. Demonstrated knowledge of cloud data architecture, data analytics, and programming. An understanding of data access through identity management and the purpose of data catalog tools. Exceptional ability to analyze complex technical concepts and translate them into business terms for both technical and non-technical audiences. The aptitude to lead and influence customer opinion on technology adoption and solution design. Strong technical problem-solving skills and the ability to navigate complex customer requests and projects. A high degree of comfort with uncertainty and changing priorities in a dynamic, fast-paced environment. Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Training & Development

Job Description Job Description Security Risk Advisors Intl., LLC (SRA) is offering a Cloud Security Engineer position. This role is responsible for designing, implementing, and maintaining security controls across SRA's multi-cloud environment, spanning Microsoft Azure/Entra ID, Google Cloud Platform (GCP), and Amazon Web Services (AWS). The Cloud Security Engineer will work closely with internal IT, security operations, and engineering teams to ensure cloud infrastructure is deployed and maintained in a secure, compliant, and resilient manner. Essential Functions Design, implement, and maintain cloud security architectures across Azure/Entra ID, GCP, and AWS environments. Administer and continuously improve cloud identity and access management (IAM) policies, roles, and privilege models across all three platforms. Monitor cloud environments for misconfigurations, threats, and vulnerabilities using cloud-native and third-party security tooling (e.g., Defender for Cloud, Security Command Center, AWS Security Hub). Operationalize cloud vulnerability and patch management processes, ensuring timely remediation of identified risks. Implement and maintain Cloud Security Posture Management (CSPM) solutions to enforce security baselines and compliance standards. Develop and enforce cloud security policies, standards, and guardrails (e.g., Azure Policy, GCP Organization Policies, AWS SCPs). Collaborate with engineering and DevOps teams to embed security into CI/CD pipelines and infrastructure-as-code (IaC) workflows. Conduct cloud security assessments and architecture reviews for new and existing environments. Support incident response activities related to cloud infrastructure, including investigation, containment, and remediation. Create and maintain technical documentation for cloud security architectures, configurations, and operational procedures. Research and evaluate emerging cloud security technologies and provide recommendations for adoption. Develop detection content and security analytics in SRA's internal SOC applicable to cloud environments. Requirements Competencies In-depth understanding of: Microsoft Azure and Entra ID, including conditional access, PIM, and Defender for Cloud Google Cloud Platform (GCP) security services, including Security Command Center, IAM, and VPC Service Controls Amazon Web Services (AWS) security services, including IAM, GuardDuty, Security Hub, and AWS Config Cloud identity and access management principles and zero trust architecture Working knowledge of: Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP) Infrastructure-as-Code (IaC) tools such as Terraform, Bicep, or CloudFormation Networking concepts as applied to cloud environments (VPCs, peering, private endpoints, firewalls) SIEM and EDR technologies in cloud-integrated environments Experience with: CI/CD pipeline security and DevSecOps practices Organizing or supporting penetration testing, purple team exercises, or cloud-focused security assessments Compliance frameworks relevant to cloud environments (e.g., CIS Benchmarks, NIST CSF, SOC 2) Moderate experience with: Scripting and automation using Python, PowerShell, or Bash Automation via tools such as Power Automate, Logic Apps, or cloud-native orchestration services Supervisory Responsibility None Work Environment This job operates on-site in a professional office environment or remotely as needed/required. This role routinely uses standard office equipment. Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk and hear; use hands to finger, handle, or feel; and reach with hands and arms. The employee frequently is required to stand and walk. This is a largely sedentary role. Candidates with disabilities are encouraged to apply and email with any questions. Reasonable accommodations may be made to enable disabled individuals to perform the essential functions of this role. Position Type/Expected Hours of Work This is a full-time position and hours of work and days are Monday through Friday 8:30am to 5pm. Occasional evening and weekend work may be required as job duties demand. Travel Less than 5%. Required Education and Experience Punctuality and timely attendance to external client and internal stakeholder needs. A bachelor's degree in Information Technology, Computer Science, or a similar field of study, or equivalent experience. 3+ years of hands-on experience in cloud security engineering or a related role, with demonstrable experience across at least two of the three major cloud platforms (Azure, GCP, AWS). Relevant cloud security certifications preferred (e.g., AZ-500, SC-100, Google PCSE, AWS Security Specialty). A passion for learning about cloud security, emerging technologies, and threat landscapes. Excellent verbal and written communication skills. Strong time management and organizational skills. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. EEO Statement Security Risk Advisors is an Equal Opportunity Employer and prohibits discrimination or harassment of any kind. All employment decisions at SRA are based on business needs, job requirements, and individual qualifications, without regard to race, color, sex, sexual orientation, gender identity or expression, age, religion, national origin, disability, marital or family status, veteran status, medical condition, or any similar category protected under federal, state, or local laws. Benefits Work with Experts : Robust internal training program, plus Company-paid external training. SRA recognizes the value of professional development for employees. Therefore, we encourage our employees to pursue continuing education and role-specific training. Every SRA employee is eligible to attend one training per year paid for by SRA. Mental Health Services : SRA has partnered with BetterHelp to provide SRA employees with free mental health support. BetterHelp connects individuals with licensed therapists for chat, video, and phone sessions. Medical / Dental / Other (regular full-time employees only) Generous medical, dental, and vision benefits at different price points. Company-paid disability and life insurance. Company 401(k) plan including annual 3% safe harbor contribution. Free patient advocacy service that helps find care providers and resolve insurance queries. Free financial advising. Generous parental leave, sick leave, and vacation policies. Possibility to work remotely or with a flexible schedule when needed and approved. Company-paid cell phone with discounted accessories. 1-2-3 Give Program: 1. SRA will give $1,000 to a charity of your choice. 2. If you give an additional amount (up to $1,000), then 3. SRA will match that amount up to $1,000. Other discounted, employee-paid benefits including pet insurance, legal support, and voluntary life insurance. SRA's mission is to level up every day to protect our clients and their customers. This begins with our team members and their experience. SRA prides itself on maintaining a culture where team members have a shared sense of support and belonging, consistent with our It's Personal company value. At SRA, we prioritize transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture. SRA has twice been named a Best Place to Work by the Philadelphia Business Journal. These Essential Functions, Requirements, and Skills are guidelines. If you are a candidate who does not meet this exact job description but can demonstrate excellent organization, attention to detail, professionalism, flexibility, and self-direction in your professional background, we hope you apply. SRA values a diverse workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, and veterans to apply. Salary Range : $90k - 130k

Job Description Job Description Application Security (AppSec) Engineer $60/hr W2 Onsite - Maryland Heights, MO Cog Kit BGV must be cleared to start What are the top 3 skills required for this role? • Application Security (AppSec) • Secure SDLC / DevSecOps • SAST, DAST, IAST, SCA • Web, Mobile & API Security Testing • Manual Penetration Testing & Business Logic Testing • Threat Modelling • Vulnerability Management • Secure Code Review • CI/CD Security Integration Job Description/ Responsibilities The role focuses on embedding security testing, vulnerability management, and business logic validation directly into CI/CD pipelines and post-deployment processes, ensuring comprehensive security coverage without impacting engineering velocity. The ideal candidate will combine expertise in secure SDLC, automated security testing, DevSecOps, cloud-native applications, APIs, and manual penetration testing to improve application security posture across web, mobile, and microservices architectures. This aligns with Secure SDLC requirements, including SAST, DAST, SCA, and manual validation activities integrated throughout the development lifecycle. Key Responsibilities Application Security Engineering • Design and implement enterprise-wide Application Security programs for web, mobile, and API-based applications. • Integrate security controls and testing activities into Agile, DevOps, and CI/CD pipelines. • Establish automated security gates using SAST, DAST, SCA, IAST, secret scanning, and container security tools. • Enable continuous post-deployment security validation and risk monitoring. Security Testing & Validation • Conduct manual penetration testing and business logic testing to identify vulnerabilities beyond automated scanning capabilities. • Perform authenticated and unauthenticated security assessments of applications and APIs. • Execute threat modeling, attack-path analysis, and architecture reviews for new applications and platform services. • Validate remediation effectiveness and secure deployment practices. DevSecOps Integration • Embed security testing into GitHub Actions, Azure DevOps, Jenkins, GitLab, or similar CI/CD platforms. • Automate vulnerability triage, prioritization, and remediation workflows. • Develop security-as-code controls and policy enforcement mechanisms. • Collaborate with engineering teams to implement secure coding practices and shift-left security initiatives. Vulnerability Management • Analyze findings from multiple security tools and eliminate false positives. • Prioritize vulnerabilities based on business risk, exploitability, and application criticality. • Track remediation efforts through SDLC and release cycles. • Develop security metrics, dashboards, and executive reporting. Developer Enablement • Conduct secure coding reviews and developer education sessions. • Establish security champions programs across engineering teams. • Provide remediation guidance and hands-on support during application releases. • Drive adoption of secure development standards and best practices. Cloud & API Security • Assess cloud-native applications deployed across AWS, Azure, GCP, Kubernetes, and container platforms. • Secure REST, GraphQL, and microservice-based APIs. • Evaluate infrastructure-as-code (Terraform, ARM, CloudFormation) and container security controls. • Support software supply chain security initiatives, including SBOM/SCA validation. • 8-15 years of experience in Application Security, DevSecOps, or Security Architecture. • Experience securing large-scale enterprise applications across cloud and hybrid environments. • Relevant certifications preferred: o CISSP o CSSLP o GWAPT o OSCP o CEH o Azure/AWS Security Certifications

Job Description Job Description Vertical Relevance is seeking a Senior AWS Cloud Security Consultant to help design in NYC Metro Area. and enforce enterprise cloud security controls within a highly regulated environment. This role sits at the intersection of cloud security architecture, policy engineering, and AWS governance, with a primary focus on preventing data exfiltration through policy-as-code, data perimeter controls, and proactive threat modeling. You will evaluate AWS services before they are introduced into production environments, identify potential security risks at the API and configuration level, and implement preventive controls using AWS Organizations policies, IAM guardrails, and Rego-based policy frameworks. This is an opportunity to work on complex cloud security challenges supporting critical business platforms where security, compliance, and operational rigor are non-negotiable. Key Responsibilities 8+ years of cloud DevOps engineering, cloud security, or infrastructure security experience. Deep expertise in AWS security architecture and governance. Demonstrated experience performing API-level threat modeling for AWS services. Strong hands-on experience with: Open Policy Agent (OPA) Rego policy development Policy testing and validation Advanced knowledge of: AWS IAM AWS Organizations SCPs and RCPs Data perimeter architecture Experience designing least-privilege access models in regulated environments. Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks. Preferred Qualifications Experience with Kivera.io, Cloudflare One, or similar cloud API policy enforcement platforms. Experience with Regal policy linting and OPA coverage reporting. Infrastructure-as-Code expertise using Terraform. CI/CD experience with: GitHub Actions OIDC federation Policy validation pipelines Approval-based deployment models Experience with: Checkov Conftest Policy Sentry Cloudsplaining Strong AWS observability experience using: CloudWatch CloudTrail VPC Flow Logs Amazon EKS security and governance experience. Experience working directly with AWS Support and Technical Account Managers. Financial services, banking, capital markets, or other highly regulated industry experience. Technical Environment AWS Organizations with SCP and RCP governance Open Policy Agent (OPA) Rego policy language Kivera.io policy enforcement platform Cloudflare One Terraform GitHub Actions CloudWatch CloudTrail VPC Flow Logs Amazon EKS Enterprise Data Perimeter Architecture Coding experience with Python, IAC a must U.S. work authorization required. Candidates must be legally authorized to work in the United States without current or future employer sponsorship. About Vertical Relevance Vertical Relevance was founded to help business leaders drive value through the design and delivery of effective transformation programs across people, processes, and systems. Our mission is to help firms at any stage of their journey develop custom solutions for success and growth. We provide a full range of services from strategy and design through to implementation and training. Our collective industry expertise is our greatest asset - our professionals have an average of 20+ years' experience within Financial Services, across Wealth Management, Asset Management, Insurance, and Banking. Within our Customer Experience practice, we add complementary industry expertise (technology and media) synergizing the most relevant and successful customer trends. We focus wholly on your success by first rigorously assessing your business and technology challenges, and then right-sizing solutions that provide a meaningful ROI. With our industry experts hitting the ground running and focusing on nimble, quality delivery, we can see rapid, tangible improvements with our clients in productivity and effectiveness. When it makes sense for your company, we leverage our product partnerships in the areas of CRM, Sales Acceleration, Predictive Analytics, Digital Knowledge Management, and Cloud Transformation. Powered by JazzHR JfzJJ2bWAX

Job Description Job Description State Street Work from any major hub Quincy, Massachusetts Berwyn, Pennsylvania Clifton, New Jersey Austin, Texas Salary Range: $120,000 - $217,500 Annual Who we are looking for We are seeking a highly technical and hands on Security Guardian, Vice President to serve as a strategic security guardian to engineering, platform, and business teams. This role sits in the first line of defense and is responsible for proactively reducing technical security risk through deep engagement with product teams, rigorous architecture and application reviews, and the design and validation of embedded security controls across cloud and distributed environments. Why this role is important to us The ideal candidate is an experienced security architect and practitioner who thrives working directly with engineers, thinks like an attacker, and can translate complex security principles into actionable engineering decisions. This person brings strong expertise across multiple advanced security domains and operates as both a technical advisor and a strategic influencer. What you will be responsible for Conduct hands-on security assessments at the application, platform, and system levels using threat modeling, architecture review, and vulnerability analysis to identify design flaws, cloud misconfigurations, insecure dependencies, and agent or API abuse scenarios. Design and recommend concrete security controls that are embedded directly into system and application architectures, including secure identity and access design, cryptographic protections, network isolation, runtime enforcement, and secure defaults across cloud and distributed environments. Own and actively drive down technical security risk by continuously engaging with engineering and platform teams, validating that security controls are correctly implemented, effective in production, and aligned with real-world threat models rather than static risk registers. Partner closely with engineering teams as an embedded product security expert, influencing design decisions early, reviewing architecture and code paths, and helping teams build secure systems by default rather than retrofitting controls. Provide technically grounded security guidance to senior leadership, translating complex security tradeoffs into clear engineering decisions and recommending concrete mitigation strategies based on architecture, cloud primitives, cryptographic design, and secure software delivery practices. Demonstrate deep, hands-on expertise in at least three advanced security domains, such as product security, smart contract and blockchain security, multi-cloud security, threat modeling, secure architecture and design, Agentic AI security, and software supply-chain security. Bring strong technical depth across network security, product and platform security, data protection and cryptography, and offensive security techniques, using attacker-mindset analysis to proactively identify and remediate weaknesses before exploitation. Operate effectively within agile engineering environments, embedding security into iterative delivery through DevSecOps and Shift-Left principles, automated security testing, secure CI/CD pipelines, and rapid, evidence-based decision-making. Demonstrate strong written and oral communication skills, effectively engaging with engineers, architects, and platform teams on deep technical security topics while clearly articulating security risks, design tradeoffs, and remediation strategies to business and executive stakeholders in a concise, actionable manner. What we value These skills will help you succeed in this role Strong analytical and problem-solving skills, excellent communication (written and verbal) and advisory skills, attention to detail, ability to work independently and in teams, adaptability, and ethical judgment. Demonstrate strategic and tactical thinking, along with decision-making skills and business acumen. Be organized, reliable and have a strong bias for action. Education & Preferred Qualifications At least 7+ years of progressive cybersecurity experience with focus in Product and Cloud security and 3+ years within financial services. Experience in Agentic AI security and smart contract security is highly preferred. AWS or Azure Cloud Security certification is highly valued. Bachelor's degree in Computer Science or related technical field. Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and GIAC are preferred. Proven experience collaborating with engineering teams in an embedded security engagement model.

Job Description Job Description We are looking for a Lead Information Security Architect who will be responsible for developing and maintaining a comprehensive information security architecture program and representing information security requirements for all technology solutions and business processes covering multiple technical disciplines, such as systems & networking infrastructure, DevOps, security, business applications, cloud security, and data architecture. The role oversees cybersecurity for our company's digital products, including software, firmware or products that contain code. This includes implementing a product security program designed to address cybersecurity across all stages of the product life cycle. This role identifies and oversees the mitigation of technical and operational threats; analyzes the security, supportability, and feasibility of new technology; and ensures conformance with regulatory guidelines and industry best practices. This position requires an extremely high level of analytical problem-solving skills to diagnose and resolve complex technical issues in addition to superlative process management and communication skills. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. To be Successful in this Role Develop an architectural vision to support the continued growth of the product suite Working knowledge of Data Security Best Practices: At Rest, In Flight, In Use Experience with privacy-enhancing technologies and encryption techniques. Working knowledge of cloud security architecture strategies, frameworks, and reference models Proven ability to develop effective partnerships with senior management and peer organizations. Must be able to explain technical concepts and problems to nontechnical senior executives Ability to build Risk Models and analyze security weaknesses in complex technology deployments. Provide security expertise and direction on projects related to cloud architecture and design, implementation, maintenance, governance, and risk management Work with governance teams to establish automated processes and best practices for AWS, Azure IAM policies, roles, identity federation, etc. Conduct automated (preferred) or manual security validation of cloud templates and/or cloud infrastructure Collaborate with business units and corporate partners to ensure they build solutions consistent with the organization's policies, programs, architectural recommendations, and information security standards Develop, establish, enforce, and sustain the Information Security Architecture, including standards and guidelines for infrastructure solutions and technologies, integration methodologies and practices, development processes, hardware platforms, and enterprise data design. Partner with stakeholders in building and implementing a robust, scalable, and agile information security architecture Partner with stakeholders in assessing the IT application & infrastructure portfolios today and design and execute the future state strategy to meet business objectives going forward. Make recommendations on the strategic use of technology for leveraging business results and work with stakeholders to incorporate these recommendations into appropriate roadmaps and life cycle plans. Anticipate and ensure alignment with long-term business requirements, ensuring identified change is reflected in the appropriate roadmaps, providing thought leadership both internally and externally Minimize the number of architectural components and total cost of ownership while maintaining maximum of functional flexibility, reliability, and security. Must be able to balance the role of strategist with urgency while simultaneously managing and delivering results in a growing and fast-paced environment. Must demonstrate the ability to manage via influence and have the credibility and interpersonal skills to become respected as a thought leader. Must be capable of articulating pragmatic, sensible, and simple solutions while executing across multiple business and technical perspectives. Act as a role model for service mentality, building long-term relationships with key internal customers and stakeholders, while remaining receptive to the customer's needs Facilitate and steward the documenting of the architecture design and analysis work, including the capture and mapping of the relationships between architecture components. You Will Have 8+ years' experience dedicated to information security architecture required with expert knowledge in building defense in-depth reference architecture Required industry security certification (e.g., CISSP, CISM, CISA, CCSP, etc.) Familiarity with information management practices, system development life cycle management, IT services management, agile and lean methodologies, infrastructure, and operations. Knowledge of business ecosystems, SaaS, infrastructure as a service (IaaS), platform as a service (PaaS), SOA, APIs, open data, microservices, event-driven IT and predictive analytics. Hands-on experience with Cloud Technologies AWS, Azure & GCP Good understanding of security management solutions, including IDS, IPS, SIEM, Vulnerability Scanning, Denial of Service, and Continued Compliance Experience with attacks and mitigation methods, with experience working in two or more of the following: Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks Experience in managing and contributing to incident response Extensive experience in developing strategic information security plans, including the development of baseline security standards, information system hardening guides, and information security requirements documentation. Excellent analytical skills, organizational, time management, and problem-solving skills are essential.is work, including the capture and mapping of the relationships between architecture components.

Job Description Job Description Maven Clinic is the world's largest virtual clinic for women and families on a mission to make healthcare work for all of us. Through Maven Enterprise, the company partners with more than 2,300 employers and health plans to provide end-to-end women's and family health programs spanning fertility and family building, maternity and newborn care, parenting and pediatrics, and menopause and midlife - improving clinical outcomes, reducing healthcare costs, and expanding equitable access to high-quality care at scale. Through its consumer platform, Maven provides direct access to virtual care across 30+ specialties, as well as dedicated hormone and GLP-1 care programs purpose-built for women. Founded in 2014 by CEO Kate Ryder, Maven Clinic has raised more than $425 million from leading healthcare and technology investors including General Catalyst, Sequoia, Dragoneer Investment Group, Oak HC/FT, StepStone Group, Icon Ventures, and Lux Capital. Recognized for innovation and industry leadership, Maven has been named to the TIME100 Most Influential Companies, CNBC Disruptor 50, Fast Company's Most Innovative Companies, and FORTUNE Best Places to Work. Learn more at An award-winning culture working towards an important mission - Maven Clinic is a recipient of over 30 workplace and innovation awards, including: TIME 100 Most Influential Companies (2023, 2026) Fortune Change the World (2024) CNBC Disruptor 50 List (2022, 2023, 2024) Fortune Best Workplaces for Millennials (2024) Fortune Best Workplaces in Health Care (2024) Fast Company Most Innovative Companies (2020, 2023) Fortune Best Workplaces NY (2020, 2021, 2022, 2023, 2024) What You'll DoSecurity Platform Engineering Design and implement scalable infrastructure supporting HIPAA, SOC 2, and ISO 27001 compliance Build and maintain systems for identity, authentication, and access management (Okta / GCP IAM / Auth0/ OPA) Implement observability and anomaly detection across microservices, data stores, and SaaS platforms Establish Zero Trust principles and enforce least-privilege access company-wide Develop compliance observability dashboards and automated evidence collection Security Automation & Tooling Create self-service security tools that integrate with developer workflows (GitLab CI/CD, Terraform) Automate onboarding/offboarding, access reviews, and approvals Integrate software-supply-chain security (SBOM, dependency scanning) Develop or adopt AI-assisted security tooling to proactively identify risks Automate policy enforcement, SAST/DAST scans, and compliance verification Application & Data Security Lead threat modeling and security architecture reviews for new products and services Partner with product and data teams to embed secure-by-default design patterns Ensure encryption, access tracking, and secure data handling across PHI workflows Contribute to incident response, post-mortems, and continual improvement of security posture Leadership & Collaboration Act as Maven's technical authority for security engineering Mentor peers and promote secure coding and architecture practices Partner cross-functionally (Engineering, Compliance, Clinical, Legal) to align on security strategy Champion an engineering culture of transparency, accountability, and continuous improvement What You'll BringRequired 8+ years of software engineering experience, including 3+ in security infrastructure or application security Proven ability to design and implement large-scale, distributed, cloud-native systems Strong coding proficiency in Python, TypeScript, Go and/or Rust Deep understanding of cloud security (GCP preferred; AWS/Azure welcome) Experience with Kubernetes, containers, and infrastructure-as-code (Terraform) Familiarity with security testing frameworks and secure SDLC principles Excellent communication and documentation skills Preferred Expertise in Zero Trust architectures, authentication/authorization frameworks, and data-loss prevention Experience with security compliance automation (SOC 2, ISO 27001, PCI-DSS, NIST) Background in data security telemetry and threat detection Familiarity with AI/ML security and AI-assisted analysis tools Exposure to supply-chain security and CI/CD pipeline hardening Certifications (CISSP, GCP Professional Cloud Security Engineer, OSCP) a plus What Makes You a Great Fit You take a pragmatic, automation-first approach to solving security problems You balance rigor with velocity, enabling teams to move quickly without compromising trust You communicate clearly with both technical and non-technical stakeholders You're curious, adaptable, and eager to lead initiatives from concept to production You care deeply about our mission-building safer, smarter healthcare for women and families The base salary range for this role is $221,000 - $260,000 per year. You will also be entitled to receive equity and benefits. Individual pay decisions are based on a number of factors, including qualifications for the role, experience level, and skillset. Maven embraces a flexible hybrid work model. Our teams primarily operate from the New York Metropolitan area, NY, and remotely via San Francisco/Bay Area, CA, Seattle, WA. For those in our New York City office, we encourage in-person collaboration by requiring team members to work onsite three days a week (Tuesday, Wednesday, Thursday). For those based in Boston, DC, Chicago, Seattle, and San Francisco, we encourage in-person collaboration by requiring team members to attend monthly Work Together Days within these cities. This policy aims to balance remote work flexibility with the benefits of face-to-face interaction. At Maven we believe that a diverse set of backgrounds and experiences enrich our teams and allow us to achieve above and beyond our goals. If you do not have experience in all of the areas detailed above, we hope that you will share your unique background with us in your application and how it can be additive to our teams. Benefits That Work For You Our benefits are designed to support your health, well-being and career development, helping you thrive both personally and professionally. We remain focused on providing a competitive benefits package for our employees. On top of standards such as employer-covered health, dental, and insurance plan options, we offer an inclusive approach to benefits: Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics. Whole-self care through wellness partnerships Hybrid work, in office meals, and work together days 16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for 1 year+) Annual professional development stipend and access to a personal career coach through Maven for Mavens 401K matching for US-based employees, with immediate vesting These benefits are applicable to Maven Clinic Co., US-based, full-time employees only. 1099/Contract Providers are ineligible for these benefits. Maven is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Maven is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Maven Clinic interview requests and job offers only originate from email address (e.g ). Maven Clinic will never ask for sensitive information to be delivered over email or phone. If you receive a scam issue or a security issue involving Maven Clinic please notify us at: . For general and additional inquiries, please contact us at .

Job Description Job Description Senior Cloud Security Architect Location: Trenton, NJ Hybrid Duration: Contract Interview Inperson Only Job Summary Must have one of these or related AWS Certified Security - Specialty (SCS-C03) Certified Cloud Security Professional (CCSP) 10+ years of cloud security experience with demonstrated expertise across AWS, Azure, and multi-cloud environments Government sector experience (state or local government strongly preferred) DevSecOps implementation expertise with proven track record of successful integrations Cloud security certifications including AWS Certified Security - Specialty and Certified Cloud Security Professional (CCSP) REQUIRED - AWS Certified Security - Specialty (SCS-C03) REQUIRED - Certified Cloud Security Professional (CCSP) Job Description We are seeking a highly skilled and experienced Senior Cloud Security Architect to join our IT team. What You'll Do Design and implement enterprise cloud security standards, policies, and governance frameworks for AWS, Azure, and multi-cloud environments Assess current cloud security posture and identify security gaps, vulnerabilities, risks, and improvement opportunities Develop and maintain an enterprise security framework aligned with organizational, regulatory, and government requirements Create a DevSecOps roadmap that integrates security controls throughout the software development lifecycle Define and document security processes, procedures, standards, and best practices Provide strategic guidance and recommendations on cloud security architecture, risk management, and security governance Partner with IT leadership and stakeholders to support secure cloud adoption and modernization initiatives Establish security controls and operational processes that support scalable development and cloud operations Develop implementation plans and phased approaches for cloud security and DevSecOps initiatives Create training materials, documentation, and knowledge transfer resources to support internal teams Conduct workshops, training sessions, and mentoring to build internal cloud security capabilities Collaborate with technical teams to improve security practices across development, infrastructure, and operations Support compliance, governance, and risk management initiatives Deliver security standards, policy documentation, roadmaps, operational procedures, and related project deliverables Work independently while maintaining close alignment with organizational priorities and leadership objectives What You'll Need Required: 10+ years of experience in cloud security architecture across AWS, Azure, and multi-cloud environments Experience designing and implementing enterprise cloud security frameworks, governance models, and security standards Strong expertise in DevSecOps practices and integrating security into development and operational workflows Experience conducting security assessments, risk analysis, vulnerability reviews, and remediation planning Deep understanding of cloud security architectures, security controls, compliance requirements, and governance frameworks Experience supporting large-scale cloud transformation, modernization, or application development initiatives Strong knowledge of cloud security best practices, identity and access management, security monitoring, and risk management Excellent communication, presentation, documentation, and stakeholder management skills Experience delivering training, knowledge transfer, and capability-building programs Ability to work effectively with executive leadership, technical teams, and business stakeholders Experience operating in regulated environments with strict security and compliance requirements Government sector experience, including state or local government environments Ability to work independently and lead strategic security initiatives AWS Certified Security - Specialty (SCS-C03) Certified Cloud Security Professional (CCSP) Preferred: Experience supporting state or local government technology transformation initiatives Experience establishing security practices for organizations scaling development operations Microsoft Azure Security Engineer Associate (AZ-500) Certified DevSecOps Professional (CDP) or equivalent certification CISSP (Certified Information Systems Security Professional) Additional cloud security certifications, including Azure or Google Cloud security credentials Experience building internal security capabilities and reducing dependency on external consulting resources Physical Demands Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state, and local standards Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc. Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor Flexible work from home options available.

Job Description Job Description We are looking for a Lead Information Security Architect who will be responsible for developing and maintaining a comprehensive information security architecture program and representing information security requirements for all technology solutions and business processes covering multiple technical disciplines, such as systems & networking infrastructure, DevOps, security, business applications, cloud security, and data architecture. The role oversees cybersecurity for our company's digital products, including software, firmware or products that contain code. This includes implementing a product security program designed to address cybersecurity across all stages of the product life cycle. This role identifies and oversees the mitigation of technical and operational threats; analyzes the security, supportability, and feasibility of new technology; and ensures conformance with regulatory guidelines and industry best practices. This position requires an extremely high level of analytical problem-solving skills to diagnose and resolve complex technical issues in addition to superlative process management and communication skills. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. To be Successful in this Role Develop an architectural vision to support the continued growth of the product suite Working knowledge of Data Security Best Practices: At Rest, In Flight, In Use Experience with privacy-enhancing technologies and encryption techniques. Working knowledge of cloud security architecture strategies, frameworks, and reference models Proven ability to develop effective partnerships with senior management and peer organizations. Must be able to explain technical concepts and problems to nontechnical senior executives Ability to build Risk Models and analyze security weaknesses in complex technology deployments. Provide security expertise and direction on projects related to cloud architecture and design, implementation, maintenance, governance, and risk management Work with governance teams to establish automated processes and best practices for AWS, Azure IAM policies, roles, identity federation, etc. Conduct automated (preferred) or manual security validation of cloud templates and/or cloud infrastructure Collaborate with business units and corporate partners to ensure they build solutions consistent with the organization's policies, programs, architectural recommendations, and information security standards Develop, establish, enforce, and sustain the Information Security Architecture, including standards and guidelines for infrastructure solutions and technologies, integration methodologies and practices, development processes, hardware platforms, and enterprise data design. Partner with stakeholders in building and implementing a robust, scalable, and agile information security architecture Partner with stakeholders in assessing the IT application & infrastructure portfolios today and design and execute the future state strategy to meet business objectives going forward. Make recommendations on the strategic use of technology for leveraging business results and work with stakeholders to incorporate these recommendations into appropriate roadmaps and life cycle plans. Anticipate and ensure alignment with long-term business requirements, ensuring identified change is reflected in the appropriate roadmaps, providing thought leadership both internally and externally Minimize the number of architectural components and total cost of ownership while maintaining maximum of functional flexibility, reliability, and security. Must be able to balance the role of strategist with urgency while simultaneously managing and delivering results in a growing and fast-paced environment. Must demonstrate the ability to manage via influence and have the credibility and interpersonal skills to become respected as a thought leader. Must be capable of articulating pragmatic, sensible, and simple solutions while executing across multiple business and technical perspectives. Act as a role model for service mentality, building long-term relationships with key internal customers and stakeholders, while remaining receptive to the customer's needs Facilitate and steward the documenting of the architecture design and analysis work, including the capture and mapping of the relationships between architecture components. You Will Have 8+ years' experience dedicated to information security architecture required with expert knowledge in building defense in-depth reference architecture Required industry security certification (e.g., CISSP, CISM, CISA, CCSP, etc.) Familiarity with information management practices, system development life cycle management, IT services management, agile and lean methodologies, infrastructure, and operations. Knowledge of business ecosystems, SaaS, infrastructure as a service (IaaS), platform as a service (PaaS), SOA, APIs, open data, microservices, event-driven IT and predictive analytics. Hands-on experience with Cloud Technologies AWS, Azure & GCP Good understanding of security management solutions, including IDS, IPS, SIEM, Vulnerability Scanning, Denial of Service, and Continued Compliance Experience with attacks and mitigation methods, with experience working in two or more of the following: Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks Experience in managing and contributing to incident response Extensive experience in developing strategic information security plans, including the development of baseline security standards, information system hardening guides, and information security requirements documentation. Excellent analytical skills, organizational, time management, and problem-solving skills are essential.is work, including the capture and mapping of the relationships between architecture components.

Job Description Job Description Position Overview We are seeking a highly experienced Senior Master Data Management (MDM) Developer to lead the technical implementation of our enterprise MDM strategy. This individual will play a critical role in architecting, developing, and delivering a scalable Master Data Management platform that will serve as the foundation for enterprise-wide data governance. The initial focus will be the successful implementation of a Customer Master solution, with a strategic roadmap to evolve into a Multi-Domain Enterprise MDM supporting Customer, Material, Supplier, Asset, and other core business domains. This role combines deep MDM platform expertise, cloud-native integration experience, and enterprise data architecture skills. The ideal candidate will work closely with enterprise architects, business stakeholders, and system integrators to deliver a secure, scalable solution operating within an AWS GovCloud environment. Key Responsibilities Enterprise MDM Solution Design Lead the design and implementation of enterprise-grade Master Data Management solutions. Configure and optimize matching, merging, survivorship, relationship management, hierarchy management, and reference data capabilities. Develop scalable data models capable of supporting future multi-domain expansion. Platform Evaluation & Technical Leadership Lead technical evaluations and Proof of Concepts (PoCs) across leading MDM platforms including Informatica MDM and Reltio . Assess platform capabilities, scalability, integration patterns, and long-term maintainability. Provide architecture recommendations that align with enterprise data strategy. Data Integration & Engineering Design and develop secure, high-performance ETL/ELT pipelines for ingesting master data from Salesforce CRM and other enterprise systems. Develop APIs, integration services, and batch processing workflows. Ensure data quality, consistency, lineage, and governance throughout the integration lifecycle. MDM Configuration & Development Configure: Match & Merge Rules Survivorship Rules Identity Resolution Golden Record Management Hierarchy Management Reference Data Management Crosswalk Management Data Stewardship Workflows Optimize performance for large-scale master data processing. Cloud & Security Deploy and support MDM solutions within a secure AWS GovCloud environment. Implement security, encryption, access controls, and compliance requirements aligned with government standards. Collaborate with infrastructure teams on cloud architecture and deployment automation. Cross-Functional Collaboration Serve as the primary technical lead within a blended delivery model consisting of internal teams, business stakeholders, and external system integrators. Partner closely with Data Governance, Enterprise Architecture, Security, Infrastructure, and Application Development teams. Mentor junior developers and establish development best practices. Enterprise Data Strategy Design Customer Master implementations that naturally evolve into an Enterprise Multi-Domain MDM platform. Contribute to enterprise standards for metadata, data quality, governance, and master data lifecycle management. Support long-term modernization initiatives across the enterprise data ecosystem. Required Qualifications Experience 8+ years of hands-on Master Data Management implementation experience. Proven experience implementing enterprise-scale MDM solutions from design through production deployment. Experience leading technical workstreams on complex MDM implementations. MDM Platforms Hands-on development experience in two or more of the following: Informatica MDM Reltio Informatica Intelligent Data Management Cloud (IDMC) (preferred) Informatica Customer 360 Informatica Product 360 (nice to have) Data Integration Strong experience with: Salesforce CRM integration ETL/ELT development REST APIs SOAP APIs Batch processing Data profiling Data cleansing Data quality Identity resolution Cloud Technologies Experience with: AWS GovCloud AWS Lambda S3 IAM Secrets Manager CloudFormation or Terraform CI/CD pipelines Database & Development Strong knowledge of: SQL Oracle PostgreSQL JSON/XML Python or Java Git DevOps practices Data Management Deep understanding of: Master Data Management Data Governance Data Quality Metadata Management Data Lineage Reference Data Management Golden Record Management Hierarchy Management Preferred Qualifications Experience implementing Customer 360 initiatives. Experience with Enterprise Data Governance programs. Knowledge of Informatica Cloud Data Quality (CDQ). Experience with Data Catalog solutions. Experience integrating MDM with ERP platforms such as SAP or Oracle. Familiarity with Material Master, Supplier Master, or Asset Master domains. Experience working within regulated industries such as Aerospace, Defense, Manufacturing, or Government. Security Requirements Due to the nature of this program and deployment within AWS GovCloud , candidates must: Be a U.S. Citizen . Be eligible to obtain and maintain required government security clearances. Successfully pass all applicable background investigations. What Success Looks Like Within the first 12 months, the successful candidate will: Deliver a production-ready Customer Master implementation. Successfully complete MDM platform evaluation and recommendations. Establish scalable enterprise data models supporting future multi-domain expansion. Build secure Salesforce-to-MDM integration pipelines. Enable a governed, trusted Golden Record supporting enterprise analytics, operational systems, and AI initiatives.

Job Description Job Description JOB SUMMARY Specialty Systems, Inc. has an opening for a Windows Platform Engineer to join our team of technical professionals supporting Government customers and national security mission requirements. In this role, you will support the design, implementation, automation, and sustainment of Windows-based platform environments supporting mission-critical defense systems and software-intensive applications. The position involves working within Government-provided environments while supporting secure infrastructure operations, platform modernization, DevSecOps integration, and enterprise system lifecycle management activities. As a member of the Specialty Systems team, you will contribute directly to secure and reliable platform solutions supporting critical defense and intelligence missions. This position is located at our customer site location. In this position, you will work our customer's Compressed Work Schedule which consists of working four 9-hour days (M-Th) and an 8-hour day (F) for the first week of a cycle followed by four 9-hour days (M-Th) and being off on the second Friday for the second week of a cycle. This results in a 3-day weekend every other week! RESPONSIBILITIES Design, implement, and maintain Windows-based platform infrastructure across development, test, and production environments. Engineer, automate, and document system provisioning, configuration management, and deployment processes. Administer and maintain Windows Server environments, including Active Directory, Group Policy, and domain services. Implement and maintain system security configurations in compliance with DoD cybersecurity requirements (STIGs, RMF). Monitor system performance, troubleshoot issues, and optimize platform reliability and availability. Coordinate patching, updates, vulnerability remediation, and lifecycle maintenance of Windows systems. Collaborate with Agile software, systems engineering, cybersecurity, and automated/manual test teams to support platform integration and delivery. Maintain documentation, system baselines, and architecture artifacts to support program requirements. Identify risks, recommend improvements, and support modernization initiatives across platform environments. QUALIFICATIONS : Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical field is preferred. Equivalent work experience may be considered. Active Secret security clearance or the ability to obtain an interim Secret clearance within approximately four weeks after submission of the clearance application. 5+ years of experience supporting Windows-based enterprise environments or platform engineering roles. Security+ CE or ability to obtain within 3-6 months. Technical Requirements: Strong experience with Windows Server (2016/2019/2022), Windows 10/11, Active Directory, and Group Policy. Experience with PowerShell scripting and automation. Working knowledge of networking concepts and system security. Experience implementing and maintaining compliance standards (STIG, RMF, or similar). Preferred Qualifications: Experience supporting Navy or DoD programs. Experience with cloud platforms. Familiarity with DevSecOps practices and CI/CD pipelines. Experience with Jira, Confluence, Git, and artifact/configuration repositories. Experience with containerization technologies (Docker, Kubernetes on Windows). Microsoft certifications (e.g., Windows Server Hybrid Administrator, Microsoft Server Administrator). Experience with virtualized environments (VMware, VirtualBox, Hyper-V). Familiarity with Infrastructure-as-Code tools (Ansible, Terraform, or similar). Specialty Systems, Inc. provides equal employment opportunity (EEO) to all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability status, genetic information, marital status, ancestry, protected veteran status, or any other characteristic protected by applicable federal, state, and local laws and offers equal opportunity for VEVRAA Protected Veterans. Specialty Systems, Inc. will not discriminate against employees and job applicants who inquire about, discuss, or disclose compensation information. Reasonable accommodation that do not cause an undue hardship on the company may be made to enable individuals with disabilities to perform essential functions, as long as that would not hinder or prevent performance of duties or be of a safety concern. PHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is required to reach with hands and arms. The employee is frequently required to sit, stand and walk. The employee may be required to move ten pounds and could occasionally lift or move up to twenty-five pounds. Disclaimer: The listed duties are not intended to serve as a comprehensive list of all duties performed by all employees in this classification, only a representative summary of primary duties and responsibilities.

Job Description Job Description Company Description VERSANT is a leading force in news, sports and entertainment - home to iconic and trusted brands that inspire, inform, and delight audiences. Our unique combination of content, technology and services enriches the cultural fabric, igniting passions, sparking conversations, and connecting people to what they love most. As an independent, publicly traded company, VERSANT brings together powerhouse cable networks - including USA Network, CNBC, MS NOW (formerly MSNBC), Oxygen, E!, SYFY, and Golf Channel - with dynamic digital and direct-to-consumer brands such as Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. Together, these businesses reflect our commitment to delivering exceptional experiences across every screen and service. VERSANT is an industry-changing media company fueled by innovation and an entrepreneurial spirit. With a strong foundation and a forward-looking vision, VERSANT empowers creativity, embraces change, and drives connection in an ever-evolving world. Job Description We are seeking a Senior Data Modeler to define, evolve, and govern our enterprise-wide North Star Data Model. This role will make data consistent, interoperable, discoverable, and reusable across business domains, products, analytics, and AI use cases. The Senior Data Modeler will work with Product, domain experts, Data Engineering, Analytics, Architecture, Governance, and Security to translate business concepts into a shared enterprise data language and practical models that teams can implement across the Bronze, Silver, and Gold layers of our data platform. This is not a role focused only on designing tables for individual projects. It owns the connective tissue between domain models: the common entities, identifiers, relationships, definitions, metadata, and standards that allow trusted data products to work together across the enterprise. What you will do Establish the enterprise North Star Data Model Define and maintain enterprise conceptual, logical, and physical data models across core business domains. Establish canonical business entities, shared dimensions, reference data, identifiers, relationships, and lifecycle states. Create a pragmatic model that supports domain autonomy while enabling cross-domain analysis and data sharing. Maintain an enterprise ontology, business glossary, and semantic definitions so that important terms and metrics mean the same thing across products and teams. Design for reuse, extensibility, regional variation, and future use cases while avoiding unnecessary centralization. Model the Bronze, Silver, and Gold data layers Define modeling principles and required artifacts for each layer: Bronze: Preserve source fidelity, source lineage, ingestion metadata, auditability, and raw-data contracts. Silver: Standardize and validate data; apply common identifiers, canonical entities, conformed dimensions, data-quality rules, and cross-domain integration patterns. Gold: Deliver governed, business-ready data products, semantic models, certified metrics, and analytics-ready structures for dashboards, self-service analysis, and AI. Ensure traceability from Gold metrics and business concepts back through Silver transformations to authoritative Bronze sources. Define clear rules for when a concept belongs in a domain model, the shared enterprise model, a semantic layer, or a product-specific analytical model. Review and guide physical implementations for performance, maintainability, cost, privacy, and scale. Enable data products and delivery teams Partner with Product Managers and domain leaders to turn business outcomes and use cases into clear data-modeling requirements. Partner with Data Engineers to define schemas, transformations, mappings, data contracts, and implementation patterns. Partner with BI developers to create governed semantic models, reusable measures, and self-service-ready datasets. Facilitate architecture and design reviews; identify duplication, inconsistent definitions, broken lineage, and integration risk early. Provide model patterns, templates, and coaching that enable teams to deliver independently while following enterprise standards. Govern for trust, security, and global scale Embed data quality, lineage, ownership, retention, security classification, privacy-by-design, and access-control requirements into data-model designs. Model regional, regulatory, language, currency, and local-business variations without fragmenting global reporting or shared concepts. Define stewardship and decision rights for enterprise entities, metrics, and reference data. Maintain model documentation and metadata in the organization's data catalog and modeling tools. Measure adoption, reuse, quality, coverage, and exceptions to drive continual improvement of the North Star model. What success looks like Teams use the same definitions for shared business concepts and key metrics. New data products can be delivered faster because common models, dimensions, identifiers, and patterns are reusable. Cross-domain reporting is reliable, explainable, and traceable to authoritative sources. Data consumers can discover what data exists, what it means, who owns it, and whether it is fit for use. Regional expansion is supported through intentional extensions rather than isolated local models. Gold-layer analytics and AI experiences use certified semantic definitions rather than reconstructing logic independently. Qualifications Required qualifications 7+ years of experience in data modeling, data architecture, data engineering, analytics engineering, or related disciplines. Demonstrated experience designing conceptual, logical, and physical models for complex, multi-domain data platforms. Experience defining or evolving an enterprise data model, canonical model, semantic layer, ontology, or common data model. Strong understanding of dimensional modeling, normalized modeling, data vault or equivalent integration patterns, and lakehouse/warehouse design. Experience designing models for raw, standardized, and consumption-ready data layers in a modern cloud data platform. Proven ability to translate business concepts into unambiguous data definitions, models, mappings, and implementation guidance. Practical expertise in metadata, lineage, data quality, data governance, master/reference data, and data privacy. Strong facilitation and communication skills; able to influence senior stakeholders and delivery teams without relying on direct authority. Preferred qualifications Experience with Databricks, Delta Lake, Unity Catalog, Snowflake, or comparable cloud data platforms. Experience with a data catalog, modeling tool, and metadata-management platform. Experience supporting global products and multi-region data, regulatory, or data-residency requirements. Experience designing semantic models and governed metrics for BI, natural-language data experiences, or AI applications. Experience in a regulated, high-scale, or operationally sensitive environment. Additional Information As part of our selection process, external candidates may be required to attend an in-person interview with a VERSANT Media employee at one of our locations prior to a hiring decision. VERSANT Media's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability, you have the right to request a reasonable accommodation. You can submit your request to . VERSANT Media is committed to fair and equitable compensation practices. We include a good faith pay range for each position to comply with applicable state and local pay transparency laws and to promote equity across our organization. Actual compensation will be based on factors such as the candidate's skills, qualifications, experience, and location and may include additional forms of compensation and benefits such as health insurance, retirement plans, paid time off, etc. VERSANT Media is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at VERSANT via-email, the Internet, or in any form and/or method without a valid written Statement of Work in place for this position from VERSANT's Talent Acquisition team will be deemed the sole property of VERSANT. No fee will be paid in the event the candidate is hired by VERSANT as a result of the referral or through other means.

Job Description Job Description About Us: FIDx is a groundbreaking, industry-changing, growing company out of Berwyn, Pennsylvania. We provide a platform that allows financial advisors to fully integrate annuities into the advisory ecosystem and modernizes annuity distribution. We do this by providing a top technology and services platform that connects the legacy tools, experience and expertise of high-quality insurance companies to the advisory marketplace. About the Opportunity: The Head of Information Security plays a critical role in protecting FIDx's platform, data, and reputation as the company scales its mission of modernizing annuity distribution. As a senior security leader in the firm, the Head of Information Security is responsible for defining and executing the company's information security, data privacy, and cyber-risk strategy - safeguarding the sensitive financial and personal data that flows across our platform and our deep integrations with carriers, advisors, and partners. This position brings executive security experience, an execution mindset, and a bias toward action to embed security into every layer of the business. The role reports to the Chief Technology Officer, with regular, direct engagement with the CEO, executive team, and Board on matters of risk and security posture. The position encompasses a wide range of activities with involvement in all phases of security governance, risk and compliance, security architecture, security operations, and incident response. It requires exemplary energy and work ethic, excellent people skills, and business acumen. The Head of Information Security is responsible for planning, organizing, directing and controlling the day-to-day security operations of the firm, and for directing the implementation of the firm's security policies - balancing rigorous protection with the speed and agility of a growing fintech. As an early-stage, small company, FIDx expects this to be a hands-on, roll-up-your-sleeves role. Out of the gate the Head of Information Security will personally own and operate the security function - effectively a team of one - doing the work directly rather than managing others who do it. As the company scales, this leader will have both the opportunity and the responsibility to build, hire, and lead a dedicated security team. This is an engaging position for a dynamic self-starter that requires significant attention to detail, entrepreneurial thinking and efficient and effective decision making. This person is entrepreneurial, self-directed and passionate about protecting the experiences we deliver to customers, advisors, investors, clients, and employees. Essential Functions Own and operate the firm's information security program, and serve as the firm's primary subject matter expert on cybersecurity, data privacy, and information-security compliance. Establish, own, and continuously mature the enterprise information security program, including policies, standards, and controls, for approval by the CTO and executive team. Support strategic planning for the future and assessing the security implications of new product lines, markets, and partnerships, and recommending how to pursue them securely. Build a strong understanding of both the technology and business aspects of the product, as security must enable delivery of the platform rather than impede it. Run the company's day-to-day security operations, creating security strategies and policies, communicating them across the organization, and building company-wide alignment with a security-first culture. Security Strategy, Architecture & Execution (35%): Build and execute the information security roadmap in alignment with the strategy and priorities set with the CTO and executive team. Work directly with development and DevOps staff to embed security into the SDLC - secure-by-design principles, secure coding standards, code review, and dependency/supply-chain management. Provide hands-on technical guidance to scrum teams as necessary to ensure security requirements are met without compromising delivery deadlines. Define and maintain security architecture across cloud infrastructure, APIs, and the application layer; establish standards for identity and access management (IAM), encryption, key management, and data protection. Set comprehensive goals for security performance and maturity; select, implement, and manage the security toolchain (e.g., SIEM, vulnerability management, endpoint protection, cloud security posture management). Run threat modeling, penetration testing, and vulnerability management programs, and drive timely remediation. Partner with Product and Engineering to ensure new products, features, and integrations are delivered securely. Lead day-to-day Security functions in partnership with the CTO and DevOps, ensuring our technology and processes are secure and meet audit requirements. Risk Management, Compliance & Audit (40%): Run the enterprise cyber-risk management program: identify, assess, prioritize, and mitigate information-security and data-privacy risks, and maintain a clear risk register. Ensure compliance with applicable regulatory and industry frameworks relevant to insurance and financial services (e.g., SOC 2, NIST CSF / 800-53, ISO 27001, GLBA, and state privacy laws such as CCPA). Manage and coordinate internal and external audits, regulatory examinations, and client and partner security assessments; maintain evidence and drive remediation of findings. Run third-party and vendor risk management, including due diligence and ongoing monitoring of partners, carriers, cloud providers, and platform integrations. Support and maintain data privacy and data governance programs. Develop, maintain, and regularly test business continuity and disaster recovery plans. Provide timely, accurate and complete reporting, dashboards, and metrics on the firm's security and risk posture; write and submit reports to the CTO and executive team on all matters of importance. Security Operations & Incident Response (20%): Build and mature the firm's security operations capability across monitoring, threat detection, and response. Own the incident response program end to end - preparation, detection, containment, eradication, recovery, and post-incident review. Coordinate incident handling with Legal, Communications, leadership, regulators, carriers, and affected partners as appropriate. Lead security awareness and training programs across the organization, including phishing simulations, to build a security-conscious workforce. Continuously monitor the threat landscape and adjust the firm's defenses, controls, and priorities accordingly. Personally own and operate the firm's day-to-day security functions in a hands-on capacity, instilling practices that mirror the adopted core values of the company. Bottom line: help build an amazing, resilient company. Leadership, Culture & Team Building (5%): Assure a team mentality and culture: partner effectively across the company to drive our culture and execute on our common goals. Act as a trusted security partner and advisor to every team, embedding security into how the whole company works rather than relying on a large dedicated staff. Manage periodic employee communications on security and risk matters. Collaborate with senior leadership on related projects as they arise and in meeting overall deliverables. Communicate with co-workers, management, clients and others in a courteous and professional manner. Education, Skill and Experience Required A minimum of 7-15 years of experience in information security / cybersecurity, with a history of upward progression working up through the ranks into senior leadership. Financial services, insurance, and/or fintech and start-up experience strongly preferred. Must have a minimum of a bachelor's degree (Computer Science, Information Security, or a related field). Master's degree or MBA preferred. Industry security certifications strongly preferred (e.g., CISSP, CISM, CRISC, CISA, or CCSP). Must have direct, hands on experience building or running an enterprise information security program, ideally from an early stage, including hands-on execution across multiple security domains. Must have a strong background in cloud security and API security coupled with secure SDLC / DevSecOps and application/product -security experience. Demonstrated expertise across security frameworks and regulations relevant to financial services and insurance (e.g., SOC 2, NIST, ISO 27001, GLBA, CCPA). Proven experience leading incident response and managing security incidents through to resolution. Experience owning third-party / vendor risk in a heavily integrated platform environment. Responsible for developing and managing security budgets, dashboards, and roadmaps. Requires strong leadership skills as well as the ability to approach situations from an entrepreneurial point of view. Comfortable operating hands-on as effectively a team of one initially, with the demonstrated ability to build, hire, manage, and develop a security team as the function grows. Previous experience in a client-facing role with the ability to effectively communicate with all levels of employees, including board members and C-level executives, as well as auditors, regulators, and partners. . click apply for full job details

Job Description Job Description We are seeking a highly skilled and experienced Application Security Engineer to join our Application Security team to take charge and advance our application security initiatives, while ensuring the security and integrity of our applications. You will drive security best practices, identify vulnerabilities, and implement solutions to protect our systems and data from evolving threats. This role will require collaboration with development teams, security architects, leadership, and other stakeholders to integrate security best practices into all stages of the software development lifecycle. The Opportunity Your key responsibilities will consist of the following to ensure applications are resilient against emerging threats, reducing potential financial and reputational damage from security incidents. Embed security best practices into the software development lifecycle (SDLC). Conduct in-depth security assessments, including vulnerability scanning, and code reviews. Leverage automated tools and manual testing techniques to identify, risk assess and prioritize and propose mitigation strategies for identified threats and application-level vulnerabilities (e.g., OWASP Top 10, etc.) ensuring our applications meet security standards and reducing exposure to data breaches. Collaborate with security architects to design secure application architectures that align with industry best practices. Ensure secure coding practices are followed, and security controls are incorporated into software designs. Conduct detailed threat modeling to identify attack vectors and potential weaknesses. Collaborate with our SDLC Council to develop and maintain secure coding standards, empowering developers to integrate security into the development process. Partner with DevOps teams to implement security within CI/CD (continuous integration & delivery) pipelines for automated and seamless deployment of secure code. Develop, configure, and maintain tools for static and dynamic application security testing (SAST/DAST). Evaluate third-party software and APIs for security compliance Assist in incident response activities related to application security breaches, providing rapid identification and mitigation guidance. Ensure compliance with security regulations, frameworks, and industry standards such as OWASP. Leverage reporting tools to demonstrate the overall risk through metrics (KPIs, KRIs, OKRs) of vulnerabilities and code defects of cyber assets for various team leaders and executive leadership for risk prioritization and enablement of risk-based decision-making. Stay up to date with the latest security threats, vulnerabilities, and industry trends to inform and improve security strategies. Strong problem-solving abilities and analytical thinking. Educate developers and stakeholders on secure coding practices. Excellent communication skills to explain security issues to both technical and non-technical stakeholders. A team player with the ability to work in a collaborative, fast-paced environment. The Minimum Qualifications : Bachelor's or master's degree in computer science, Information Security, or a related field. 8+ years of experience in application security, penetration testing, or secure software development. The Ideal Qualifications: Relevant security certifications such as CEH, OSCP, CISSP, or GWAPT from an industry recognized certifier (e.g., SANS/GIAC, CompTIA, ISACA, ISC2, etc.) Strong knowledge of secure software development methodologies, including threat modeling, code reviews, and static/dynamic analysis. Strong knowledge of application security vulnerabilities and best practices (e.g., OWASP Top 10, etc.) Experience in integrating security into DevOps (DevSecOps) and CI/CD environments. Strong technical knowledge of web application security, cloud security (AWS, Azure, GCP), mobile security, infrastructure as code (IaC), containerized environments (Docker, Kubernetes), and API security. Hands-on experience with security tools such as SAST, DAST, SCA, IAST, and fuzzing tools. Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and their mitigations. Advance understanding and experience with writing source code in at least one programming language (e.g., JavaScript, Java, C/C++/C#, Python, etc.) and familiarity with software security frameworks (e.g., Maven, Node, Gradle, etc.). Experience with identifying security vulnerabilities/defects in dockers, containers, and Kubernetes. Experience with cloud deployment and automation tools (Terraform, GitHub Actions, Jenkins, AWS Cloud Formation Templates, Secrets Managers). Knowledge of encryption, authentication, and access control. Knowledge of compliance and regulatory frameworks (SOC 2, etc.). Education: Bachelor's or master's degree in computer science

Job Description Job Description Duties: We are seeking an experienced Application Security Engineer to join our Software Security team and take charge of ensuring the security and integrity of our software applications. The ideal candidate will have advanced knowledge of secure software development, extensive experience with identifying vulnerabilities, and the ability to implement robust security solutions. This role will require collaboration with development teams, security architects, and other stakeholders to integrate security best practices into all stages of the software development lifecycle. The Impact Your key responsibilities will consist of the following to ensure applications are resilient against emerging threats, reducing potential financial and reputational damage from security incidents. Conduct in-depth security assessments, including vulnerability scanning, and code reviews. Leverage automated tools and manual testing techniques to identify, risk assess and prioritize and propose mitigation strategies for identified threats and application-level vulnerabilities (e.g., OWASP Top 10, etc.) ensuring our applications meet security standards and reducing exposure to data breaches. Collaborate with security architects to design secure application architectures that align with industry best practices. Ensure secure coding practices are followed, and security controls are incorporated into software designs. Conduct detailed threat modeling to identify attack vectors and potential weaknesses. Collaborate with our SDLC Council to develop and maintain secure coding standards, empowering developers to integrate security into the development process. Partner with DevOps teams to implement security within CI/CD (continuous integration & delivery) pipelines for automated and seamless deployment of secure code. Assist in incident response activities related to application security breaches, providing rapid identification and mitigation guidance. Ensure compliance with security regulations, frameworks, and industry standards such as OWASP. Leverage reporting tools to demonstrate the overall risk through metrics (KPIs, KRIs, OKRs) of vulnerabilities and code defects to cyber assets for various team leaders and executive leadership for risk prioritization and enablement of risk-based decision-making. Stay up to date with the latest security threats, vulnerabilities, and industry trends to inform and improve security strategies. Strong problem-solving abilities and analytical thinking. Excellent communication skills to explain security issues to both technical and non-technical stakeholders. A team player with the ability to work in a collaborative, fast-paced environment. The Minimum Qualifications Bachelor's or master's degree in computer science, Information Security, or a related field. Minimum of 5+ years of experience in application security, penetration testing, or secure software development. The Ideal Qualifications Relevant security certifications such as CEH, OSCP, or GWAPT) from an industry recognized certifier (e.g., SANS/GIAC, CompTIA, ISACA, ISC2, etc.) Strong knowledge of secure software development methodologies, including threat modeling, code reviews, and static/dynamic analysis. Experience in integrating security into DevOps (DevSecOps) and CI/CD environments. Strong technical knowledge of web application security, cloud security (AWS, Azure, GCP), mobile security, infrastructure as code (IaC), container security, and API security. Familiarity with SAST, DAST, and IAST tools. Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and their mitigations. Advanced understanding and experience with writing source code (e.g., JavaScript, Java, C/C++/C#, Python, etc.) and familiarity with software security frameworks (e.g., Maven, Node, Gradle, etc.). Experience with identifying security vulnerabilities/defects in dockers, containers, and Kubernetes. Experience with cloud deployment and automation tools (Terraform, GitHub Actions, Jenkins, AWS Cloud Formation Templates, Secrets Managers). Knowledge of compliance and regulatory frameworks (SOC 2, etc.). Education: Bachelor's or master's degree in computer science. Skills and Experience: Required Skills: MITIGATION CLOUD SECURITY METRICS SCANNING GCP Additional Skills: SOC INFORMATION SECURITY API DYNAMIC ANALYSIS C JAVA MAVEN AMAZON WEB SERVICES PROBLEM-SOLVING GITHUB DEPLOYMENT REPORTING TOOLS INCIDENT RESPONSE C/C++ CONTINUOUS INTEGRATION/DELIVERY TERRAFORM CODING DEV OPS EXCELLENT COMMUNICATION SKILLS JAVASCRIPT SOFTWARE SECURITY COMPTIA PYTHON STRUCTURED SOFTWARE GIAC SDLC JENKINS CODING STANDARDS TEAM PLAYER GRADLE KUBERNETES

Job Description Job Description Company Description CapTech is an award-winning consulting firm that collaborates with clients to achieve what's possible through the power of technology. At CapTech, we're passionate about the work we do and the results we achieve for our clients. From the outset, our founders shared a collective passion to create a consultancy centered on strong relationships that would stand the test of time. Today we work alongside clients that include Fortune 100 companies, mid-sized enterprises, and government agencies, a list that spans across the country. Job Description CapTech Data Architects match our clients' business goals with available technologies when developing a strategy for a successful data delivery implementation. We improve our clients' business value by enhancing data use, improving effectiveness of information stewardship, and streamlining data flows. After gaining in-depth understanding of our client's business challenges, our architects apply experience-based insight and use state-of-the-art tools and techniques to identify the best solutions. We view our Data Architects as thought leaders in the data space. We task them with growing CapTech talent and expanding data and analytics delivery capabilities. Specific responsibilities for the Data Architect position include: Assessing and advocating data management technologies and practices eliminating gaps between the current state and a well-targeted future state Interpreting and delivering impactful strategic plans improving data integration, data quality, and data delivery in support of business initiatives and roadmaps Formulating and articulating architectural trade-offs across solution options before recommending an optimal solution ensuring technical requirements are met Leading teams of data engineers and other technical team members through design, implementation and best practices. Providing insights to executive stakeholders and development teams to ensure data architecture recommendations maximize the value of client data across the organization Works to ensure the solutions recommended are providing business value and alignment with client's strategic goals Communication with non-technical executives focusing on value of modern enterprise level data solutions Driving innovative technology solutions through thought leadership on emerging trends Sharing project solutions and outcomes with colleagues to improve delivery on future projects Leadership within the Data & Analytics practice area focused on growing and development capabilities and talent Partnering with CapTech business development team to demonstrate CapTech's technical capabilities, envision a proposed solution CapTech can offer, and estimate proposed work plans. Qualifications Typical experience for successful candidates includes: 7+ years of experience implementing with a variety of on-premises and cloud data management, integration, visualization, and analytical technologies Advanced proficiency in the design and implementation of modern data architectures and concepts such as cloud services (e.g., AWS, Azure, GCP), real-time data distribution (e.g., Kafka, Kinesis, DataFlow, Airflow), NoSQL (e.g., MongoDB, DynamoDB, HBase, CosmosDB) and modern data warehouse tools including Snowflake and DataBricks Advanced proficiency in end-to-end data architecture solutions including ingestion, storage and relational modeling leveraging industry standard languages including SQL and Python Ability to think strategically and relate architectural decisions and recommendations to business needs and client culture Ability to assess traditional and modern data architectural components based on business needs Experience in recommending data governance best practices including MDM, security, privacy and policies Experience leading enterprise engineering teams through implementations serving as POC on design decisions and best practices Preferred Qualifications Previous consulting industry experience Experience in recommending data governance best practices including MDM, security, privacy and policies Providing thought leadership and internal engagement with leadership and innovation across enterprise Participating in providing mentorship and investing talent growth within Data & Analytics practice area Awareness and continued education around emerging technologies and skills in data landscape Additional Information We want everyone at CapTech to be able to envision a lasting and rewarding career here, which is why we offer a variety of career paths based on your skills and passions. You decide where and how you want to develop, and we help get you there with customizable career progression and a comprehensive benefits package to support you along the way. Alongside our suite of traditional benefits encompassing generous PTO, health coverage, disability insurance, paid family leave and more, we've launched extended benefits to help meet our employees' needs. Learning & Development - Programs offering certification and tuition support, digital on-demand learning courses, mentorship, and skill development paths CapTech is committed to providing a flexible work environment and helping our employees achieve a work-life balance that suits their individual needs. Employees must be available to work onsite in a client location or a CapTech office as requested. We allow CapTech employees to work remotely when compatible with CapTech and client needs. Learning & Development - Programs offering certification and tuition support, digital on-demand learning courses, mentorship, and skill development paths Modern Health -A mental health and well-being platform that provides 1:1 care, group support sessions, and self-serve resources to support employees and their families through life's ups and downs Carrot Fertility -Inclusive fertility and family-forming coverage for all paths to parenthood - including adoption, surrogacy, fertility treatments, pregnancy, and more - and opportunities for employer-sponsored funds to help pay for care Fringe -A company paid stipend program for personalized lifestyle benefits, allowing employees to choose benefits that matter most to them - ranging from vendors like Netflix, Spotify, and GrubHub to services like student loan repayment, travel, fitness, and more Employee Resource Groups - Employee-led committees that embrace and incorporate diversity and inclusion into our day-to-day operations Philanthropic Partnerships - Opportunities to engage in partnerships and pro-bono projects that support our communities. 401(k) Matching - Generous matching and no vesting period to help you continue to build financial wellness CapTech is an equal opportunity employer committed to fostering a culture of equality, inclusion and fairness - each foundational to our core values. We strive to create a diverse environment where each employee is encouraged to bring their unique ideas, backgrounds and experiences to the workplace. For more information about our Diversity, Inclusion and Belonging efforts, click HERE. As part of this commitment, CapTech will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Laura Massa directly via email . At this time, CapTech cannot transfer nor sponsor a work visa for this position. Applicants must be authorized to work directly for any employer in the United States without visa sponsorship.

Job Description Job Description Space Systems Integration (SSI) is a fast-growing engineering company that provides aerospace solutions to a variety of government and commercial customers. Our employees are forward-thinking, self-directed individuals who are committed to solving our customers' technical challenges. SSI is seeking a Product Support Manager for a role in Colorado Springs, CO. PM&AS/Enterprise Operation & Help Desk Principal Duty You will work in a small, highly empowered team where every team member is directly responsible for the success of the program. Engineering responsibilities span technology domains including space rated hardware, software, sensors, and processors in an extremely fast-paced, responsive development environment. This SETA candidate will directly assist the Government Program Manager (PM) in managing, monitoring, and evaluating the execution of a prime contractor responsible for enterprise-wide Tier 0/1 help desk operations. In this role, you serve as the PM's trusted technical agent, ensuring contractor performance aligns with contractual service level agreements (SLAs), operational metrics, and agency technical standards. The operational scope covers front-line support across modern cloud infrastructure, platforms, antenna and satellite network distribution, core Network Operations Center (NOC) environments, and identity/account management workflows. Role and Responsibilities include: Serves as program advisory lead for extremely time critical technical projects, test projects, or tasks requiring appropriate level technical expertise. Leverages operations experience to assist the program offices in developing and fielding space systems. Act as an operational bridge between the help desk contractor, Tier 2/3 engineering teams, external mission partners, and customer end-users Track, validate, and report on contractor performance against Key Performance Indicators (KPIs) and Service Level Agreements (SLAs)-including First Contact Resolution (FCR), Mean Time to Resolve (MTTR), ticket backlog, and abandonment rates. Identify technical risks, operational bottlenecks, and service delivery failures; draft corrective action recommendations and risk mitigation strategies. Assists acquisition planning, market research, and drafting technical requirements and documents. Coordinates with internal and external stakeholders to verify program needs and identified to meet project goals. Helps the government assess the technical sufficiency, cost, quality, and timely delivery of program deliverables. Confers with engineers to provide technical advice and to assist with problem resolution as needed. Supports management and execution of programs consisting of multiple projects ensures overall program is properly coordinated and efficiently accomplished with the best available resources. Aids in the development of a Monthly Status Report on all support efforts including updates in status and performance, major activities, challenges and opportunities, deliverables, and subcontractor performance. Drafts, reviews, and edits final program reports, documents, and briefings. Supports acquisition planning and development of documents required for systems acquisition. Coordinates with external agencies to include operational units, higher headquarters, Combatant Command (COCOM) staffs, other acquisition activities, and research and development functions. Coordination will include producing, tracking, coordinating all agreements and documentation necessary for the systems to transition seamlessly into a framework for organizing, training, and equipping the United States Space Force Supports and advises acquisition and program management functions, advises government management on design challenges, delivery and integration, and supports system program reviews. Work on high-visibility or mission critical aspects of a given program and perform all functional duties independently. Oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job. Translate complex ideas and data into simple, actionable recommendations or easily differentiated courses of action. Communicate clearly, concisely, and with technical accuracy-oral and written. Required Qualifications: Minimum ten (10) years DoD/IC, or relevant industry work experience. Proven experience and/or qualifications in development and fielding satellite systems. Systems Engineering/IT/Computer Science degree from a program accredited by the Accreditation Board for Engineering and Technology (ABET) or possess a Professional Engineering license. MA/MS/ME degree. Understanding of operational environment, working with USSF Combat Forces Command and corresponding mission user needs. Experience with Electronic warfare principles and operations. Experience fielding systems to user communities. Knowledge of space system engineering, development, and manufacturing. Experience in DoD program management including program development and transition. Experience with Integrated Master Schedules, and risk management Experience with Statements of Work (SOW) and Performance Work Statements (PWS). Strong working knowledge of IT Service Management (ITSM) frameworks (ITIL), enterprise ticketing platforms (e.g., ServiceNow, Remedy, Jira Service Management), and Tier 0/1 escalation tiering. Cloud infrastructure/platform support basics (AWS, Azure, or hybrid enterprise environments). Network operations concepts and satellite/antenna ground network support interfaces. Identity, Credential, and Access Management (ICAM/IAM) processes and directory services (Active Directory, Okta, etc.). Active TS clearance with in-scope T5/SSBI is required, along with SCI eligibility and participation in Continuous Evaluation. Must meet all requirements for SCI and SAP access and be willing to undergo a polygraph examination. Travel is 30%. Desired Qualifications: 5+ years of relevant DoD and/or Industry work experience with SAP and/or SCI. System Engineering Technical Assistance (SETA) to Government program office. Experience with rapid prototyping. Experience with integrated air, space and cyberspace capabilities. Experience developing, deploying, and maintaining ground mission planning architecture and software. Experience with ACAT I/II level acquisition programs. Experience using multivariable optimization in mission planning software systems. Experience in planning and executing test campaigns for space systems. Fluency with IC organizations. ITIL v3/v4 Foundation (or higher). CompTIA Security+ or equivalent DoD 8570/8140 baseline certification. Associate-level Cloud Certification (e.g., AWS Certified Cloud Practitioner / Solutions Architect, Microsoft Azure Fundamentals. Target salary range: $180,000 - $220,000. The estimate displayed represents the typical salary range for this position based on experience and other factors. We offer medical/dental/vision benefits and 401k contribution. Space Systems Integration provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, or any other characteristic protected by federal, state, or local laws.