8 jobs found

Job Description Job Description Overview Intermediate Firewall Engineer Oakton, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! SecuriGence deliver essential technology services to our customer in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking a talented Intermediate Firewall Engineer to help contribute to our success. The talented Intermediate Firewall Engineer will be responsible for the core engineering, day-to-day administration, and operational maintenance of enterprise boundary defense platforms and network security appliances. The Intermediate Firewall Engineer serves as the Tier 2/3 escalation and implementation lead, translating architectural designs into active, secure firewall configurations across on-premises and classified mission enclaves (DMSS, Secret/SAP, TS/SCI/SAP). Key responsibilities include managing Palo Alto Networks firewalls via Panorama, troubleshooting Site-to-Site IPsec VPN tunnels, administering dynamic routing protocols (BGP/OSPF), coordinating scheduled PAN-OS software updates, and enforcing continuous compliance with DISA STIGs and DoD change-management standards. This role bridges strategic engineering initiatives with routine operational support, providing escalation resolution for junior staff and operational support to the Senior Firewall Engineer. Come help us solve problems with Innovation through Intelligence. Responsibilities Administer, configure, and maintain Palo Alto Networks Next-Generation Firewalls (NGFW) via enterprise Panorama and direct management interfaces in strict alignment with change control protocols. Provision and deploy security policies, App-ID rules, TLS/SSL decryption policies, dynamic NAT/PAT schemes, and standardized security objects across multi-tenant environments. Serve as the Tier 2/3 operational escalation point, investigating and resolving complex network connectivity failures, IPsec VPN tunnel drops, routing anomalies, and application performance bottlenecks. Implement dynamic routing protocols (BGP, OSPF), VLAN segmentation, and perimeter access controls to maintain resilient edge connectivity and segmentation across mission partner enclaves. Lead remote site management for performers and external stakeholders across classified networks, including establishing, monitoring, and maintaining IPsec tunnels, VPN gateways, and operational telemetry. Plan, coordinate, and execute scheduled PAN-OS maintenance updates, dynamic threat content releases, antivirus definitions, and security patches under the direction of senior engineering leads. Maintain rigorous Authority to Operate (ATO) and security posture baselines by executing DISA STIG checklists, remediating vulnerability scan findings, and updating PO&AM documentation. Provide incident isolation support to the Security Operations Center (SOC), validating security telemetry log-forwarding pipelines and isolating traffic anomalies during cyber events. Maintain comprehensive technical configuration records, network topology diagrams, change audit logs, and operational standard operating procedures (SOPs) within ticketing and project systems (e.g., Redmine, Jira). Provide operational mentorship and technical guidance to Junior Firewall Engineers, reviewing routine change requests and assisting in complex troubleshooting workflows. Other duties as assigned. Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field with 4+ years of hands-on network security/firewall engineering experience; OR High school diploma or GED equivalent with 8+ years of demonstrable operational experience in lieu of a degree. Must meet DoD 8140 / 8570.01-M IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE, CCNA Security, CySA+). Vendor technical certification: Palo Alto Networks Certified Network Security Administrator (PCNSA) required; Palo Alto Networks Certified Network Security Engineer (PCNSE) preferred. Active Secret security clearance with eligibility to obtain TS/SCI/SAP Knowledge, Skills and Abilities: Strong operational knowledge of Palo Alto Networks NGFW administration, Panorama centralized management, and PAN-OS feature sets (App-ID, Content-ID, User-ID). Proven experience building, troubleshooting, and tuning Site-to-Site IPsec VPN tunnels, Global Protect remote access gateways, and dynamic NAT/PAT policies. Solid working knowledge of dynamic routing protocols (BGP, OSPF), static routing, sub-netting, and Layer 2/3 switching fabrics. Practical understanding of DoD RMF, DISA STIG validation, and boundary protection compliance checklists. Experience integrating firewall telemetry and syslog forwarding with SIEM/SOAR platforms (Splunk, Cribl, XSOAR) and network visibility fabrics (IXIA Packet Brokers). Strong analytical and packet-level troubleshooting skills utilizing tools such as Wireshark, TCPdump, and Panorama traffic/threat inspection logs. Familiarity with IT Service Management (ITSM) workflows, strict configuration change management boards (CCB), and tracking platforms (Jira, ServiceNow, Redmine). How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook -

Job Description Job Description Pay Rate Range: $ 64.39 - 68.18/hr. Vmware NSX Security Engineer Job Description: VMware Ecosystem: Deep hands-on experience with VMware vSphere, ESXi, vCenter, and comprehensive NSX-T/NSX architecture. Core Networking Protocols: Expert-level knowledge of BGP, OSPF, Geneve/VXLAN overlay encapsulation, VLANs, and TCP/IP stack Job Summary The NSX Security Engineer is responsible for the architecture deployment configuration and day-to-day administration of network virtualization and security policies within our VMware infrastructure. This role bridges the gap between traditional networking cloud infrastructure and cybersecurity. The primary objective is to enforce a zero-trust network posture by configuring advanced logical routing distributed firewalls and micro-segmentation strategies across hybrid cloud workloads. Key Responsibilities Security Architecture & Micro-segmentation: Design and enforce granular distributed firewall (DFW) and Gateway Firewall rules. Isolate virtual machines and applications to prevent lateral "east-west" threat propagation. Network Virtualization Management: Deploy and manage logical switching tier-0/tier-1 routing distributed load balancers and VPNs within VMware NSX environments. Lifecycle Management: Handle regular maintenance component scaling software upgrades patches and configurations of NSX Managers Edge Nodes and Transport Nodes. Infrastructure Automation: Develop infrastructure-as-code (IaC) and automation scripts to streamline security rule deployment and ensure consistent disaster recovery readiness. Monitoring & Log Analysis: Audit infrastructure health capacity and security event logs utilizing tools like VMware Aria Operations (formerly vRealize) Network Insight or third-party SIEM platforms like Splunk. Cross-Team Collaboration: Work alongside systems engineers traditional network administrators and the Security Operations Center (SOC) to troubleshoot physical-to-virtual network overlays. Incident Response Support: Assist security incident teams by performing deep-packet inspection tracing network flows and applying emergency isolation rules during an active breach. Technical Requirements & Skills VMware Ecosystem: Deep hands-on experience with VMware vSphere ESXi vCenter and comprehensive NSX-T/NSX architecture. Core Networking Protocols: Expert-level knowledge of BGP OSPF Geneve/VXLAN overlay encapsulation VLANs and TCP/IP stack. Firewalling & Security: Strong understanding of Layer 4-7 firewall rules intrusion detection/prevention systems (IDS/IPS) and zero-trust concepts. Automation/Scripting: Proficiency with PowerShell/PowerCLI Python Terraform or interacting directly with NSX REST APIs. Third-Party Integration: Familiarity with integrating NSX with physical next-gen firewalls (e.g. Palo Alto Networks Check Point) or cloud networking environments like AWS and Azure. Preferred Certifications VMware Certified Professional Network Virtualization (VCP-NV)VMware Certified Advanced Professional Network Virtualization (VCAP-NV Design or Deploy) Cisco Certified Network Associate (CCNA) or Professional (CCNP) 1 2 Skills:CategoryNameRequiredImportanceExperienceSkillCategoryTest1_MNDigital : VMWareYes1>7 years

Job Description Job Description GES is seeking a Principal ScienceLogic Skylar 1/SL1 Engineer to design, deploy, configure, and transition to operations an enterprise ScienceLogic SL1 monitoring solution supporting a distributed, classified Department of Defense (DoD) environment. The successful candidate will serve as a primary technical engineer for implementation of the Skylar 1 (formerly SL1) platform, including deployment of the core Skylar 1/database infrastructure within a Microsoft Azure cloud environment and distributed Skylar 1 Data Collectors across multiple geographically separated sites. This position requires strong ScienceLogic engineering experience combined with knowledge of Azure infrastructure, enterprise networking, Windows and Linux systems, cybersecurity, and monitoring architecture. The engineer will work closely with cloud, network, cybersecurity, systems engineering, and site operations teams to establish secure connectivity between the centralized SL1 platform and distributed monitored environments. The engineer will support the solution through design, implementation, testing, accreditation, deployment, documentation, and transition to steady-state operations. Clearance Requirements U.S. Citizenship required. Active Secret clearance required, with eligibility to obtain the level of access required for the classified environment. Must meet applicable DoD cybersecurity workforce qualification requirements for the position. Primary Responsibilities ScienceLogic Skylar 1 Architecture and Deployment Design, engineer, deploy, configure, and document an enterprise ScienceLogic Skylar 1 architecture supporting a classified, geographically distributed environment. Implement and configure Skylar 1 core platform components within Microsoft Azure, including database, administration, monitoring, and supporting platform services. Design and deploy distributed Skylar 1 Data Collectors across multiple remote sites and network enclaves. Develop collector placement and sizing strategies based on device population, network topology, bandwidth, latency, security boundaries, and availability requirements. Configure secure communications between distributed collectors and centralized Skylar 1 platform components. Configure Skylar 1 discovery processes and onboard network devices, servers, virtual infrastructure, applications, and other enterprise technology components. Configure and maintain ScienceLogic PowerPacks, Dynamic Applications, device classes, credentials, monitoring policies, thresholds, events, dashboards, and reports. Develop customized monitoring, alerting, dashboards, and reporting to meet operational and cybersecurity requirements. Establish appropriate monitoring thresholds and key performance indicators (KPIs) for enterprise infrastructure. Support Skylar 1 software installation, upgrades, patches, migrations, backup, recovery, and lifecycle management. Perform capacity planning and performance tuning of SL1 platform components. Azure and Cloud Integration Work with Azure engineering teams to design and deploy Skylar 1 infrastructure within the approved classified Azure environment. Evaluate availability, resiliency, backup, recovery, and disaster recovery requirements for the SL1 platform. Support integration of Skylar 1 with Azure-hosted and on-premises infrastructure. Enterprise Monitoring and Integration Configure monitoring using appropriate protocols and technologies, including SNMPv3, ICMP, HTTPS/API, SSH, WMI/WinRM, and other approved mechanisms. Coordinate with network and cybersecurity teams to establish required firewall rules, routing, ACLs, service accounts, certificates, and communications paths. Integrate Skylar 1 with enterprise IT service management, SIEM, automation, notification, and reporting platforms as required. Assist with the development of dashboards and reports supporting NOC, SOC, engineering, management, and customer requirements. Documentation Responsibilities Develop and maintain engineering and operational documentation, including: Skylar 1 system architecture diagrams Azure deployment architecture Data Collector architecture and site mappings Network and data-flow diagrams Port, protocol, and firewall requirements Installation and configuration procedures Discovery and device onboarding procedures Monitoring standards and threshold definitions PowerPack and Dynamic Application configurations Backup and recovery procedures Disaster recovery procedures System administration procedures Troubleshooting guides Standard operating procedures (SOPs) System Security Plan/RMF supporting artifacts As-built documentation Operations transition documentation Key Success Factors: The ideal candidate is not simply an SL1 console administrator. The position requires an engineer capable of building the monitoring platform from the ground up, understanding how SL1 components communicate across a segmented classified network, working with Azure and network engineering teams to establish the required infrastructure, and delivering a secure, supportable platform that can be transitioned to operations. The successful engineer will be comfortable troubleshooting issues across SL1, Azure, Linux, Windows, databases, routing, firewalls, authentication, certificates, APIs, and monitoring protocols rather than treating SL1 as an isolated application. Required Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related technical discipline with 12+ years of relevant experience. Additional relevant experience may be considered in lieu of a degree. 3+ years of hands-on ScienceLogic Skylar 1/SL1 engineering or administration experience, including deployment and configuration of SL1 platform components. Demonstrated experience deploying and administering ScienceLogic Data Collectors in distributed enterprise environments. Experience with Skylar 1/SL1 device discovery, PowerPacks, Dynamic Applications, monitoring policies, thresholds, events, dashboards, and reporting. Experience troubleshooting ScienceLogic platform, collector, database, discovery, and communications issues. Experience supporting large enterprise infrastructure monitoring environments. Working knowledge of Microsoft Azure infrastructure, including virtual machines, networking, storage, security controls, and identity. Strong understanding of enterprise networking concepts, including TCP/IP, routing, DNS, firewalls, VLANs, network segmentation, ports, protocols, and access control. Experience with monitoring technologies and protocols such as SNMPv3, ICMP, REST APIs, HTTPS, SSH, WMI/WinRM, and Syslog. System Admin experience with both Linux and Windows Server operating systems. Experience supporting cybersecurity hardening, vulnerability remediation, and DISA STIG implementation. Strong troubleshooting and analytical skills with the ability to isolate problems spanning application, database, operating system, cloud, and network layers. Ability to develop detailed engineering documentation, implementation procedures, diagrams, and operational documentation. Ability to communicate complex technical concepts to engineering teams, cybersecurity personnel, program leadership, and government customers. Ability to work independently and collaboratively within geographically distributed engineering teams. Ability to work at Ft. Meade as a primary work site Ability to travel to customer and remote sites as required. Relevant certifications may include: ScienceLogic Certified Professional, ScienceLogic Certified Expert, or other current equivalent ScienceLogic SL1 certification Microsoft Certified: Azure Administrator Associate Microsoft Certified: Azure Network Engineer Associate Microsoft Certified: Azure Solutions Architect Expert CompTIA Security+ CompTIA Network+ Red Hat Certified System Administrator (RHCSA) Cisco CCNA or CCNP Enterprise ITIL Foundation Desired Qualifications 5+ years of ScienceLogic Skylar 1 /SL1 experience in large enterprise environments. Experience designing or deploying ScienceLogic in environments containing multiple geographically distributed Data Collectors. Experience implementing Skylar 1 within Azure or another cloud environment. Experience supporting Azure Government or classified Azure environments. Experience with ScienceLogic architecture, database sizing, capacity planning, high availability, backup, and disaster recovery. Experience creating or modifying ScienceLogic PowerPacks and Dynamic Applications. Experience with Python, PowerShell, REST APIs, Ansible, or other infrastructure automation technologies. Experience integrating SL1 with ITSM platforms such as ServiceNow. Experience integrating monitoring platforms with SIEM solutions such as Splunk. Experience monitoring Palo Alto, Cisco, Nutanix, Microsoft, Red Hat, storage, virtualization, and other enterprise infrastructure technologies. Experience with DoD RMF, eMASS, DISA STIGs, and continuous monitoring. Experience developing engineering implementation plans, test plans, SOPs, runbooks, and as-built documentation. . click apply for full job details

Job Description Job Description On our expert team, you'll perform work focused on implementing and operating next generation security solutions for government and commercial clients. You'll perform hands-on evaluation, implementation, and operation of leading security cyber defense tools and technologies, and apply in-depth defense strategies to large and complex networks to rapidly identify vulnerabilities and threats, prioritize response actions, and develop effective countermeasures. You'll apply thought leadership in a highly collaborative and innovative work environment to solve complex security challenges. You will lead a team as they engineer solutions to complex challenges for customers using knowledge network engineering, Active Directory, and system administration. In this role, you'll closely impact mission success, protecting data and networks from malicious payloads and actors. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect our nation's most sensitive capabilities. What You'll Work On: Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management. Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise. Requirements 3+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades Experience with the deployment or daily maintenance of ForeScout CounterACT appliances Experience with network engineering, including physical or logical such as installation and activation of ports, configuration of switches, and LANS, VLANS, and network FW, or appliances or network administration services such as Active Directory, Guests LANS, and domain management Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures TS/SCI clearance with the ability to obtain a counter-intelligence polygraph. HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities. A DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, prior to start date on the contract. Additional Qualifications: ForeScout Certified Administrator (FSCA) and/or ForeScout Certified Engineer (FSCE) certifications Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems Ability to install and deploy ForeScout in a multidomain customer environment Ability to integrate cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation Ability to be a self-starter, work without considerable direction, and work with a team Possession of excellent verbal and written communication skills, including for coordinating efforts and establishing customer relations Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance Candidate AI Usage Policy AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

Job Description Job Description On our expert team, you'll perform work focused on implementing and operating next generation security solutions for government and commercial clients. You'll perform hands-on evaluation, implementation, and operation of leading security cyber defense tools and technologies, and apply in-depth defense strategies to large and complex networks to rapidly identify vulnerabilities and threats, prioritize response actions, and develop effective countermeasures. You'll apply thought leadership in a highly collaborative and innovative work environment to solve complex security challenges. You will lead a team as they engineer solutions to complex challenges for customers using knowledge network engineering, Active Directory, and system administration. In this role, you'll closely impact mission success, protecting data and networks from malicious payloads and actors. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect our nation's most sensitive capabilities. What You'll Work On: Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management. Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise. Requirements 3+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades Experience with the deployment or daily maintenance of ForeScout CounterACT appliances Experience with network engineering, including physical or logical such as installation and activation of ports, configuration of switches, and LANS, VLANS, and network FW, or appliances or network administration services such as Active Directory, Guests LANS, and domain management Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures TS/SCI clearance with the ability to obtain a counter-intelligence polygraph. HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities. A DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, prior to start date on the contract. Additional Qualifications: ForeScout Certified Administrator (FSCA) and/or ForeScout Certified Engineer (FSCE) certifications Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems Ability to install and deploy ForeScout in a multidomain customer environment Ability to integrate cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation Ability to be a self-starter, work without considerable direction, and work with a team Possession of excellent verbal and written communication skills, including for coordinating efforts and establishing customer relations Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance Candidate AI Usage Policy AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

Job Description Job Description SRE Automation Analyst - (w/ active Secret) Location: Norfolk, VA Clearance: Secret Type: Full-time, Onsite Salary Range: $87,000 - $112,000 JOB DESCRIPTION Critical Solutions is seeking a SRE Automation Analyst to support our federal customer. The Site Reliability Engineering (SRE) Automation Analyst identifies, designs, implements, and supports automation solutions that improve operational efficiency, data quality, and service delivery across enterprise environments. The role partners with technical teams and business stakeholders to analyze manual or repetitive processes, define automation opportunities, document requirements, develop and test workflows, and measure realized benefits. The analyst will use scripting, workflow/RPA platforms, APIs, configuration-management and CI/CD tools, and approved AI/large language model (LLM) capabilities while ensuring solutions meet cybersecurity, compliance, and operational requirements PRIMARY ROLES AND RESPONSIBILITIES: Analyze business and technical processes to identify automation opportunities, document current-state and future-state workflows, and prioritize candidates based on value, feasibility, risk, and repeatability. Gather and translate stakeholder requirements into automation use cases, functional requirements, acceptance criteria, process maps, and implementation plans. Design, develop, test, deploy, and maintain automation using PowerShell, Python, Microsoft Power Automate, UiPath, REST APIs, or comparable workflow/orchestration technologies. Integrate automation with enterprise systems, data sources, ticketing platforms, cloud services, and APIs using secure authentication, structured data formats, reusable components, and appropriate exception handling. Support configuration-management and CI/CD practices using tools such as Ansible, Jenkins, Bitbucket, Git, or comparable platforms for version control, automated testing, deployment, and change traceability. Leverage approved AI and LLM capabilities for automation use cases such as classification, summarization, information extraction, workflow assistance, and decision support with appropriate human review and security controls. Monitor automation performance, failures, utilization, and realized benefits; troubleshoot defects; perform root-cause analysis; and implement improvements that increase reliability, efficiency, and adoption. Develop metrics and dashboards; maintain technical documentation, SOPs, solution diagrams, test evidence, runbooks, and automation inventories; and coordinate with cybersecurity, infrastructure, application, data, and operations teams throughout the solution lifecycle. BASIC QUALIFICATIONS: Must be a U.S. citizen and possess an active DoD Secret Security Clearance or higher. Must possess an IAT Level II-compliant certification (for example, CompTIA Security+ CE or an equivalent certification accepted for the position/contract). Bachelor's degree in Information Technology, Computer Science, Information Systems, Engineering, Data/Business Analytics, or a related discipline, or equivalent relevant professional experience in lei Experience in automation, process improvement, systems analysis, scripting, application support, IT operations, data analysis, or a related technical role. Working knowledge of PowerShell and/or Python and workflow automation concepts, including the ability to read, modify, test, and troubleshoot scripts or automated workflows; familiarity with Microsoft Power Automate, UiPath, or a comparable platform is beneficial. Experience gathering requirements, analyzing manual processes, documenting business rules and automation opportunities, defining acceptance criteria, and communicating solutions to technical and non-technical stakeholders. Working knowledge of systems integration and software delivery concepts, including REST APIs, JSON, authentication methods, Git-based source control such as Bitbucket, and basic CI/CD practices. Strong analytical, troubleshooting, documentation, and problem-solving skills with the ability to manage multiple priorities in a mission-critical environment. Working familiarity with AI and large language model concepts and the responsible use of AI-enabled tools in technical or business workflows, including prompt design, output validation, and human review. CERTIFICATION REQUIREMENT: Must possess an active IAT Level II-compliant certification (for example, CompTIA Security+ CE or an equivalent certification accepted for the position/contract). PREFERRED QUALIFICATIONS: Business intelligence or analytics background, including experience developing dashboards, operational metrics, or reports using Power BI and/or Splunk. Microsoft Azure Administrator Associate (AZ-104) certification and practical experience with Azure services, identity, monitoring, automation, or hybrid cloud environments. Experience with enterprise automation or robotic process automation (RPA) platforms such as Microsoft Power Automate, UiPath, Automation Anywhere, or ServiceNow Flow Designer/Automation Engine. Hands-on experience with configuration-management, orchestration, CI/CD, and collaboration tools such as Ansible, Jenkins, Bitbucket, Git, Azure DevOps, or comparable platforms. Experience designing reusable automation components, API-driven integrations, scheduled or event-driven workflows, logging, alerting, exception handling, and automated recovery processes. Experience leveraging enterprise-approved AI/LLM services and models such as Microsoft Copilot, Azure OpenAI/GPT models, OpenAI GPT models, Anthropic Claude, or Google Gemini for automation, information extraction, summarization, classification, or workflow assistance. Experience integrating AI into automated workflows using APIs, prompt templates, structured outputs, retrieval/grounding techniques, and human-in-the-loop review; familiarity with responsible-AI practices, data handling, access control, privacy, and model-output validation. Familiarity with Security Technical Implementation Guides (STIGs), the Risk Management Framework (RMF), vulnerability management, cybersecurity controls, and applicable compliance frameworks in DoD or regulated environments. Experience working in classified or unclassified DoD/government environments and supporting solutions subject to formal change, configuration, release, and audit requirements. Experience with SQL, data transformation, ETL/ELT concepts, Agile/DevOps delivery practices, and/or relevant automation, cloud, analytics, or platform certifications such as Microsoft Power Platform, UiPath, Azure, or Splunk. LOCATION: On-site 100%. Norfolk, VA ADDITIONAL INFORMATION: CLEARANCE REQUIREMENT: Must possess an active DoD Secret Clearance . In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIRED. CRITICAL SOLUTIONS PAY AND BENEFITS: Salary range $87,00 - $112,000. The salary range for this position represent the typical salary range for this job level and this does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements. BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more. Job Posted by ApplicantPro

Job Description Job Description Must be a US Citizen with an active TS or eligible for TS. No Third Party. No H1B or Green Card holders. ABOUT THE ROLE Strategic Innovation Group (SIG) is seeking a Configuration Manager to own the platform-engineering and configuration-control backbone of a new analytics platform being built inside a federal client's on-premises FedRAMP Moderate environment. This role combines classic configuration management - baselines, change control, artifact integrity, document control - with hands-on DevSecOps: the CI/CD pipeline, container builds and security scanning, Kubernetes deployment, dependency approvals, and log integration. The successful candidate is the person who makes sure code moves from a developer's branch into the client environment repeatably, securely, and with a record, and who works directly with client CIO staff and the security lead to keep the pipeline aligned to the System Security Plan. ABOUT SIG SIG is a fast growing 8(a) government contractor based in Arlington, Virginia. We offer a broad range of technical expertise and experience in Digital Transformation, Data Management/Data Science, and Systems Modernization. At SIG, our people are our mission. Come join our team! A successful candidate will be offered the following: - Great work/life balance - Eligibility for performance-based participation in cash bonuses - Potential to participate in growth of the company through incentives - Excellent benefits, including health, dental, vision, generous PTO, a 401(k) with match, life insurance, short- and long-term disability, and a health savings account (HSA) RESPONSIBILITIES - Establish and operate the CI/CD pipeline (Jenkins or Azure DevOps) integrated with GitLab for code delivery, covering build, automated test, security scanning, artifact creation, and deployment to designated environments. - Manage container image builds, image and dependency vulnerability scanning, SBOM generation, and the process for requesting client approval of new dependencies and licenses. - Deploy and maintain application workloads on the client's Rancher-managed Kubernetes platform; manage environment configuration, secrets handling, and promotion between development, test, and production namespaces. - Define and maintain the configuration management plan: baselines for code, infrastructure-as-code, data models, and documents; change control and release procedures; version and tagging conventions. - Integrate application and platform logging with the client's Splunk instance and support audit-logging requirements from the security lead. - Coordinate the technical establishment of interconnections and environment access with client CIO staff; track and resolve blockers to environment readiness. - Maintain deliverable and document configuration control, including the source-code and documentation package delivered to the client repository at acceptance. - Support the System Security Plan with configuration-management (CM family) control implementation evidence. - Deliver pipeline and platform runbooks and knowledge transfer to the client-designated support team during transition. REQUIRED QUALIFICATIONS - Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent experience may be considered. - 5+ years in configuration management, release engineering, DevOps, or platform engineering roles, including 1+ years operating CI/CD and container platforms in a federal or FedRAMP environment (3+ years with a Master's degree). - Hands-on experience administering CI/CD pipelines in Jenkins and/or Azure DevOps, integrated with GitLab or a comparable Git platform. - Hands-on experience deploying and operating containerized applications on Kubernetes (Rancher, OpenShift, or comparable enterprise distribution). - Experience integrating security scanning (SAST, container image, dependency/SCA) into pipelines and managing findings with development teams. - Experience establishing configuration baselines, change control, and release management under a documented CM plan. - Working knowledge of NIST SP 800-53 configuration-management controls and experience supporting an ATO or FedRAMP authorization package. - Scripting proficiency (Bash, Python, or PowerShell) and infrastructure-as-code experience (Helm, Terraform, Ansible, or equivalent). PREFERRED QUALIFICATIONS - Experience working inside an on-premises federal environment with restricted internet access and Government-approved software lists. - Experience managing database schema migrations, connection secrets, and backup/restore procedures within a CI/CD pipeline (PostgreSQL or comparable RDBMS). - Splunk administration or log-forwarding configuration experience. - ITIL Foundation, Certified Kubernetes Administrator (CKA), or Azure DevOps certification. - Experience supporting GPU-enabled Kubernetes workloads. SIG is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.