Job Description Job Description Senior Cloud Security Specialist Washington, DC - 100% Onsite Per Federal contract U.S. citizenship is required Must be able to obtain Public Trust clearance W2 or C2C Application Deadline: Sept 15th We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division at the Board of Governors of the Federal Reserve. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: • Required Experience: o Minimum 5 years hands-on AWS security experience • Personnel Qualifications o AWS Certified Security - Specialty (strongly preferred) o AWS Certified Solutions Architect - Professional or Associate • Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. • Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 • Possess deep analytical, problem-solving, and troubleshooting experience, to • independently resolve complex security challenges. • Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. • Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. • Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) • Self-motivated and able to work independently • Strong attention to detail The Consultant shall deliver, but not limited to, the following: • Conduct regular security reviews of cloud infrastructure deployed by engineering teams • Evaluate infrastructure-as-code against security standards • Review and validate compliance with security policies and best practices • Assess adherence to AWS Well-Architected Framework security pillar • Identify and document security misconfigurations and non-compliant controls • Develop and maintain security posture dashboards • Create or update security configuration guides and playbooks • Offer technical consultation to engineering teams on secure implementation • Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. • Develop and update AWS security configuration standards • Conduct security training sessions for engineering teams • Present findings and recommendations in team meetings • Identify opportunities to automate security assessments • Recommend security tooling improvements Ref:
11/10/2026
Full time
Job Description Job Description Senior Cloud Security Specialist Washington, DC - 100% Onsite Per Federal contract U.S. citizenship is required Must be able to obtain Public Trust clearance W2 or C2C Application Deadline: Sept 15th We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division at the Board of Governors of the Federal Reserve. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: • Required Experience: o Minimum 5 years hands-on AWS security experience • Personnel Qualifications o AWS Certified Security - Specialty (strongly preferred) o AWS Certified Solutions Architect - Professional or Associate • Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. • Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 • Possess deep analytical, problem-solving, and troubleshooting experience, to • independently resolve complex security challenges. • Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. • Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. • Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) • Self-motivated and able to work independently • Strong attention to detail The Consultant shall deliver, but not limited to, the following: • Conduct regular security reviews of cloud infrastructure deployed by engineering teams • Evaluate infrastructure-as-code against security standards • Review and validate compliance with security policies and best practices • Assess adherence to AWS Well-Architected Framework security pillar • Identify and document security misconfigurations and non-compliant controls • Develop and maintain security posture dashboards • Create or update security configuration guides and playbooks • Offer technical consultation to engineering teams on secure implementation • Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. • Develop and update AWS security configuration standards • Conduct security training sessions for engineering teams • Present findings and recommendations in team meetings • Identify opportunities to automate security assessments • Recommend security tooling improvements Ref:
WEIDENHAMMER SYSTEMS CORPORATION
Wyomissing, Pennsylvania
Description: You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? Requirements: The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details
11/10/2026
Full time
Description: You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? Requirements: The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details
Job Description Job Description You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details
11/10/2026
Full time
Job Description Job Description You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details
The KPMG Advisory practice is at the forefront of transformation, offering excellent opportunities for individuals to advance their careers and expertise with KPMG. Looking ahead, we anticipate continued evolution and success within the practice, fostering both personal and professional development, thereby creating new pathways for growth. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our number one priority. With a wealth of learning and career development opportunities, a world-class training facility, and leading market tools, we help our people continue to grow both professionally and personally. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory. KPMG is currently seeking a Lead Specialist to join our Federal Advisory practice. Responsibilities: Lead the design, development, and deployment of secure, multi-cloud and hybrid environments, ensuring all architectures are in strict accordance with Zero Trust principals and aligned with the DoD Architecture Provide subject matter expertise on federal cybersecurity regulations, including the NIST Risk Management Framework (RMF), CMMC, and FedRAMP, ensuring solutions are secure and compliant by design Build, mentor, and lead a team of cybersecurity and cloud engineerings Provide hands-on technical guidance across core infrastructure domains Architect and implement advanced enterprise networking, virtualization, and containerization (e.g., Kupernetes, Docker) strategies to support secure, scalable, and resilient application deployments Interface directly with senior federal clients, translating complex mission requirements into robust, scalable, and resilient technical solutions Articulate complex technical concepts to both technical and non-technical stakeholders Qualifications: A minimum of five years of experience in systems engineering, cybersecurity, or enterprise architecture; U.S. Federal government consulting experience preferred Bachelor's degree from an accredited college/university; Master's degree preferred Experience with Identity, Credential, and Access Management (ICAM) solutions and architectures ICAM Solutions certification preferred (e.g. Okta, Sailpoint, Ping, CyberArk) Deep technical expertise in Microsoft Azure services, security controls, and government-specific environments (e.g. Azure Government) Hands-on expertise with a broad range of Zero Trust-enabling technologies such as SASE, micro-segmentation, software-defined networking, or advanced endpoint protection Experience designing and securing large-scale container orchestration platforms and complex virtualized data centers Ability to travel as required to support firm engagements Applicant must possess a U.S. Government Secret clearance KPMG LLP and its affiliates and subsidiaries ("KPMG") complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work. Follow this link to obtain salary ranges by city outside of CA: KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please. KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them. Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
11/10/2026
Full time
The KPMG Advisory practice is at the forefront of transformation, offering excellent opportunities for individuals to advance their careers and expertise with KPMG. Looking ahead, we anticipate continued evolution and success within the practice, fostering both personal and professional development, thereby creating new pathways for growth. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our number one priority. With a wealth of learning and career development opportunities, a world-class training facility, and leading market tools, we help our people continue to grow both professionally and personally. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory. KPMG is currently seeking a Lead Specialist to join our Federal Advisory practice. Responsibilities: Lead the design, development, and deployment of secure, multi-cloud and hybrid environments, ensuring all architectures are in strict accordance with Zero Trust principals and aligned with the DoD Architecture Provide subject matter expertise on federal cybersecurity regulations, including the NIST Risk Management Framework (RMF), CMMC, and FedRAMP, ensuring solutions are secure and compliant by design Build, mentor, and lead a team of cybersecurity and cloud engineerings Provide hands-on technical guidance across core infrastructure domains Architect and implement advanced enterprise networking, virtualization, and containerization (e.g., Kupernetes, Docker) strategies to support secure, scalable, and resilient application deployments Interface directly with senior federal clients, translating complex mission requirements into robust, scalable, and resilient technical solutions Articulate complex technical concepts to both technical and non-technical stakeholders Qualifications: A minimum of five years of experience in systems engineering, cybersecurity, or enterprise architecture; U.S. Federal government consulting experience preferred Bachelor's degree from an accredited college/university; Master's degree preferred Experience with Identity, Credential, and Access Management (ICAM) solutions and architectures ICAM Solutions certification preferred (e.g. Okta, Sailpoint, Ping, CyberArk) Deep technical expertise in Microsoft Azure services, security controls, and government-specific environments (e.g. Azure Government) Hands-on expertise with a broad range of Zero Trust-enabling technologies such as SASE, micro-segmentation, software-defined networking, or advanced endpoint protection Experience designing and securing large-scale container orchestration platforms and complex virtualized data centers Ability to travel as required to support firm engagements Applicant must possess a U.S. Government Secret clearance KPMG LLP and its affiliates and subsidiaries ("KPMG") complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work. Follow this link to obtain salary ranges by city outside of CA: KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please. KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them. Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Description: You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? Requirements: The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details
11/09/2026
Full time
Description: You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? Requirements: The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details
Integrated Staffing Corporation
New York, New York
Job Description Job Description Now Hiring: Lead Tenable One Implementation Engineer Location: New York, NY (Hybrid Minimum 2 Days Onsite) Employment Type: Contract 12 Months Anticipated Start Date: November 2026 Schedule: Monday Friday, 8:00 AM 5:00 PM EST (40 hours/week) Experience Level: Senior / Specialist III Position Overview We are seeking an experienced Lead Tenable One Implementation Engineer to lead the design, deployment, configuration, integration, and operationalization of an enterprise-wide vulnerability and exposure management platform. The ideal candidate will have extensive hands-on experience implementing Tenable One in complex enterprise environments, with expertise in vulnerability scanning, asset discovery, system integrations, troubleshooting, and security operations. This is a highly technical, hands-on engineering role focused on establishing centralized vulnerability management, improving asset visibility, and enabling risk-based vulnerability prioritization. Key Responsibilities Lead the architecture, deployment, configuration, and implementation of the Tenable One Exposure Management Platform. Install, configure, and maintain Tenable Nessus scanners, agents, connectors, repositories, and access controls. Configure credentialed and non-credentialed vulnerability scans, including policies, schedules, exclusions, and performance settings. Integrate cloud, on-premises, remote, and internet-facing assets into the exposure management platform. Integrate Tenable One with ServiceNow, SIEM platforms, asset management systems, and REST APIs. Validate asset discovery, scanning coverage, vulnerability data accuracy, dashboards, and reporting. Troubleshoot scanner connectivity, authentication issues, agent health, API errors, and platform performance. Lead pilot implementations, phased deployments, production validation, and operational transitions. Develop technical documentation, architecture diagrams, configuration guides, and operating procedures. Provide hands-on training, knowledge transfer, and technical support to internal teams. Collaborate with security, infrastructure, engineering, and vendor teams to ensure successful implementation. Required Qualifications Must have successfully completed at least one production Tenable One implementation as the lead or primary implementation engineer. Demonstrated hands-on experience designing, deploying, and configuring Tenable One and Tenable Vulnerability Management. Strong experience with Nessus scanners, agents, connectors, credentials, scan policies, and asset tagging. Expertise in credentialed and non-credentialed vulnerability scanning, scanner placement, scan scheduling, and performance optimization. Experience integrating vulnerability management platforms with ServiceNow or equivalent ITSM systems, SIEM solutions, and cloud environments. Strong troubleshooting skills involving scanner connectivity, authentication, APIs, agent health, and data quality. Understanding of security best practices, including role-based access control, least-privilege administration, credential protection, and audit logging. Experience managing enterprise-scale deployments, pilot testing, production rollouts, and operational handoffs. Ability to create detailed technical documentation and provide administrator training. Strong communication, collaboration, and technical problem-solving skills. Candidates must be able to clearly describe their previous production Tenable One implementation experience, including their specific responsibilities, technologies deployed, and project outcomes. Technical Skills & Tools Vulnerability Management: Tenable One, Tenable Vulnerability Management, Tenable Security Center, Nessus Scanners and Agents Security & Exposure Management: Tenable Web App Scanning, Tenable Cloud Exposure, Asset Discovery, Vulnerability Prioritization Integrations: ServiceNow Vulnerability Response, SIEM, REST APIs, Tenable Connectors Scripting & Automation: PowerShell, Python Additional Tools: Postman, Git, Microsoft Visio, Microsoft Teams, SharePoint Preferred Qualifications Experience implementing vulnerability management solutions across large, distributed enterprise environments. Experience integrating cloud and on-premises infrastructure with enterprise security platforms. Relevant Tenable, cybersecurity, cloud, vulnerability assessment, or ITIL certifications. Experience developing operational procedures, training materials, and technical knowledge-transfer documentation. Strong understanding of enterprise security architecture, exposure management, and vulnerability remediation workflows. Additional Information Hybrid Work Arrangement: Minimum of two days onsite per week in New York City. Contract Duration: 12 months. Occasional travel to additional project locations may be required. Background screening and security access approvals may be required. Candidates must comply with applicable information security, confidentiality, and data protection policies. Why This Opportunity? This is an excellent opportunity for an experienced cybersecurity engineer to lead a high-impact enterprise security implementation. You'll play a critical role in strengthening vulnerability management capabilities, improving security visibility, and establishing sustainable security operations across a complex environment.
11/09/2026
Full time
Job Description Job Description Now Hiring: Lead Tenable One Implementation Engineer Location: New York, NY (Hybrid Minimum 2 Days Onsite) Employment Type: Contract 12 Months Anticipated Start Date: November 2026 Schedule: Monday Friday, 8:00 AM 5:00 PM EST (40 hours/week) Experience Level: Senior / Specialist III Position Overview We are seeking an experienced Lead Tenable One Implementation Engineer to lead the design, deployment, configuration, integration, and operationalization of an enterprise-wide vulnerability and exposure management platform. The ideal candidate will have extensive hands-on experience implementing Tenable One in complex enterprise environments, with expertise in vulnerability scanning, asset discovery, system integrations, troubleshooting, and security operations. This is a highly technical, hands-on engineering role focused on establishing centralized vulnerability management, improving asset visibility, and enabling risk-based vulnerability prioritization. Key Responsibilities Lead the architecture, deployment, configuration, and implementation of the Tenable One Exposure Management Platform. Install, configure, and maintain Tenable Nessus scanners, agents, connectors, repositories, and access controls. Configure credentialed and non-credentialed vulnerability scans, including policies, schedules, exclusions, and performance settings. Integrate cloud, on-premises, remote, and internet-facing assets into the exposure management platform. Integrate Tenable One with ServiceNow, SIEM platforms, asset management systems, and REST APIs. Validate asset discovery, scanning coverage, vulnerability data accuracy, dashboards, and reporting. Troubleshoot scanner connectivity, authentication issues, agent health, API errors, and platform performance. Lead pilot implementations, phased deployments, production validation, and operational transitions. Develop technical documentation, architecture diagrams, configuration guides, and operating procedures. Provide hands-on training, knowledge transfer, and technical support to internal teams. Collaborate with security, infrastructure, engineering, and vendor teams to ensure successful implementation. Required Qualifications Must have successfully completed at least one production Tenable One implementation as the lead or primary implementation engineer. Demonstrated hands-on experience designing, deploying, and configuring Tenable One and Tenable Vulnerability Management. Strong experience with Nessus scanners, agents, connectors, credentials, scan policies, and asset tagging. Expertise in credentialed and non-credentialed vulnerability scanning, scanner placement, scan scheduling, and performance optimization. Experience integrating vulnerability management platforms with ServiceNow or equivalent ITSM systems, SIEM solutions, and cloud environments. Strong troubleshooting skills involving scanner connectivity, authentication, APIs, agent health, and data quality. Understanding of security best practices, including role-based access control, least-privilege administration, credential protection, and audit logging. Experience managing enterprise-scale deployments, pilot testing, production rollouts, and operational handoffs. Ability to create detailed technical documentation and provide administrator training. Strong communication, collaboration, and technical problem-solving skills. Candidates must be able to clearly describe their previous production Tenable One implementation experience, including their specific responsibilities, technologies deployed, and project outcomes. Technical Skills & Tools Vulnerability Management: Tenable One, Tenable Vulnerability Management, Tenable Security Center, Nessus Scanners and Agents Security & Exposure Management: Tenable Web App Scanning, Tenable Cloud Exposure, Asset Discovery, Vulnerability Prioritization Integrations: ServiceNow Vulnerability Response, SIEM, REST APIs, Tenable Connectors Scripting & Automation: PowerShell, Python Additional Tools: Postman, Git, Microsoft Visio, Microsoft Teams, SharePoint Preferred Qualifications Experience implementing vulnerability management solutions across large, distributed enterprise environments. Experience integrating cloud and on-premises infrastructure with enterprise security platforms. Relevant Tenable, cybersecurity, cloud, vulnerability assessment, or ITIL certifications. Experience developing operational procedures, training materials, and technical knowledge-transfer documentation. Strong understanding of enterprise security architecture, exposure management, and vulnerability remediation workflows. Additional Information Hybrid Work Arrangement: Minimum of two days onsite per week in New York City. Contract Duration: 12 months. Occasional travel to additional project locations may be required. Background screening and security access approvals may be required. Candidates must comply with applicable information security, confidentiality, and data protection policies. Why This Opportunity? This is an excellent opportunity for an experienced cybersecurity engineer to lead a high-impact enterprise security implementation. You'll play a critical role in strengthening vulnerability management capabilities, improving security visibility, and establishing sustainable security operations across a complex environment.
This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .
11/09/2026
Full time
This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .
This job posting is anticipated to remain open for 30 days, from 19-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Overview: Edward Jones is seeking a Senior Security Architect to lead strategic alignment of infrastructure security tools, processes, and capabilities across all security domains. This role is pivotal in ensuring that security architecture supports the firm's broader technology and business strategy, including cloud transformation, operational resilience, enterprise encryption standards, and risk reduction. The ideal candidate will be a seasoned security leader with deep expertise in cryptography, governance, and architecture. They will own and maintain key security templates and artifacts, provide expert guidance during reviews, and drive alignment with enterprise architecture and other technical organizations. What You'll Do: Own and maintain templates for security artifacts (e.g., Patterns, Baseline Control Documents, Procedures, Architecture Decision Records, and Standards) and manage a repository of completed, approved versions. Provide expert infrastructure security guidance and oversight during security reviews and the development of security artifacts. Define and govern infrastructure security standards, including cryptographic controls for data in transit and at rest across hybrid environments. Provide architectural guidance on encryption, key management, and certificate usage as part of security reviews and standards development. Lead strategic alignment of infrastructure security capabilities and processes with enterprise architecture and other technical domains. Serve as a senior technical leader across the Information Security Division, influencing infrastructure security strategy and execution. Collaborate with cross functional teams to ensure infrastructure security solutions are scalable, resilient, and aligned with cloud native and hybrid environments. Monitor industry trends and emerging threats to inform infrastructure security strategy and tooling. Engage with vendors and external partners to evaluate solutions, negotiate contracts, and represent the firm in technical forums. Drive maturity of infrastructure security practices across cloud platforms (Azure, OCI, AWS, GCP) and on premises environments. What Experience You'll Need: Bachelor's degree in Computer Science, Engineering, or related field; or equivalent work experience. 10+ years of experience in infrastructure security architecture within a complex, matrixed organization. Deep understanding of infrastructure security domains including network security, endpoint protection, identity and access management, servers and containerization, applications, and cloud security, including encryption, key management, and certificate-based controls. Experience designing and implementing secure infrastructure architectures across hybrid cloud environments. Experience defining or applying enterprise encryption standards, including data-at-rest, data-in-transit, and key lifecycle management requirements. Extensive experience in securing endpoint devices (e.g., laptops, mobile devices, servers) through technologies such as EDR/XDR, antivirus, device hardening, and policy enforcement. Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO 27001). Strong knowledge of security tooling such as SIEM, vulnerability management, configuration management, and cloud-native security services. Proven ability to lead cross-functional initiatives and influence technical direction at the enterprise level. Excellent communication and interpersonal skills; able to build trust and credibility across technical and business teams. Ability to assess and integrate proposed standards and technologies across interdependent systems. Demonstrated experience in risk management and incident response within infrastructure environments. What Could Set You Apart: Relevant security certifications such as CISSP, CISM, CCSP, advanced network vendor certifications, ISC2 certifications, or SANS certifications Experience supporting advanced encryption solutions, certificate management, and post-quantum readiness Experience securing AI/ML systems, including model governance, data pipeline protection, and secure deployment strategies Technology background in the financial sector Understanding of various regulatory requirements and laws, including but not limited to NYDFS Cybersecurity Regulations and FINRA Regulations Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .
11/09/2026
Full time
This job posting is anticipated to remain open for 30 days, from 19-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Overview: Edward Jones is seeking a Senior Security Architect to lead strategic alignment of infrastructure security tools, processes, and capabilities across all security domains. This role is pivotal in ensuring that security architecture supports the firm's broader technology and business strategy, including cloud transformation, operational resilience, enterprise encryption standards, and risk reduction. The ideal candidate will be a seasoned security leader with deep expertise in cryptography, governance, and architecture. They will own and maintain key security templates and artifacts, provide expert guidance during reviews, and drive alignment with enterprise architecture and other technical organizations. What You'll Do: Own and maintain templates for security artifacts (e.g., Patterns, Baseline Control Documents, Procedures, Architecture Decision Records, and Standards) and manage a repository of completed, approved versions. Provide expert infrastructure security guidance and oversight during security reviews and the development of security artifacts. Define and govern infrastructure security standards, including cryptographic controls for data in transit and at rest across hybrid environments. Provide architectural guidance on encryption, key management, and certificate usage as part of security reviews and standards development. Lead strategic alignment of infrastructure security capabilities and processes with enterprise architecture and other technical domains. Serve as a senior technical leader across the Information Security Division, influencing infrastructure security strategy and execution. Collaborate with cross functional teams to ensure infrastructure security solutions are scalable, resilient, and aligned with cloud native and hybrid environments. Monitor industry trends and emerging threats to inform infrastructure security strategy and tooling. Engage with vendors and external partners to evaluate solutions, negotiate contracts, and represent the firm in technical forums. Drive maturity of infrastructure security practices across cloud platforms (Azure, OCI, AWS, GCP) and on premises environments. What Experience You'll Need: Bachelor's degree in Computer Science, Engineering, or related field; or equivalent work experience. 10+ years of experience in infrastructure security architecture within a complex, matrixed organization. Deep understanding of infrastructure security domains including network security, endpoint protection, identity and access management, servers and containerization, applications, and cloud security, including encryption, key management, and certificate-based controls. Experience designing and implementing secure infrastructure architectures across hybrid cloud environments. Experience defining or applying enterprise encryption standards, including data-at-rest, data-in-transit, and key lifecycle management requirements. Extensive experience in securing endpoint devices (e.g., laptops, mobile devices, servers) through technologies such as EDR/XDR, antivirus, device hardening, and policy enforcement. Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO 27001). Strong knowledge of security tooling such as SIEM, vulnerability management, configuration management, and cloud-native security services. Proven ability to lead cross-functional initiatives and influence technical direction at the enterprise level. Excellent communication and interpersonal skills; able to build trust and credibility across technical and business teams. Ability to assess and integrate proposed standards and technologies across interdependent systems. Demonstrated experience in risk management and incident response within infrastructure environments. What Could Set You Apart: Relevant security certifications such as CISSP, CISM, CCSP, advanced network vendor certifications, ISC2 certifications, or SANS certifications Experience supporting advanced encryption solutions, certificate management, and post-quantum readiness Experience securing AI/ML systems, including model governance, data pipeline protection, and secure deployment strategies Technology background in the financial sector Understanding of various regulatory requirements and laws, including but not limited to NYDFS Cybersecurity Regulations and FINRA Regulations Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .
This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .
11/09/2026
Full time
This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .
Leidos is seeking a Senior Azure Cyber Engineer to lead design, implementation, and defense of secure Azure cloud environments for mission-critical government and commercial programs. In this role, you will architect cloud security controls, integrate identity, network, and data protection, and drive Zero Trust and compliance best practices. You will support security operations, incident response, and automation, partnering closely with cross-functional teams in a collaborative, mission-driven culture that values innovation, learning, and impact at national scale. Responsibilities Design and implement secure Azure cloud architectures for government and commercial clients. Define and enforce Azure security standards, policies, and baselines aligned to NIST and Zero Trust. Configure and optimize Microsoft Defender, Sentinel, and related security tools. Lead threat modeling, risk assessments, and security design reviews for new solutions. Support and guide security operations, incident response, and forensic analysis in Azure. Automate security controls and compliance checks using scripts and Infrastructure as Code. Collaborate with cross-functional engineering, operations, and program teams to embed security. Produce security documentation, diagrams, runbooks, and technical guidance for stakeholders. Required Skills Azure security architecture Azure Sentinel/Microsoft Defender Identity and access management (AAD) Network security and firewalls Security operations and incident response Infrastructure as Code (ARM/Bicep/Terraform) Zero Trust design Threat modeling and risk assessment Compliance and governance (NIST, Fed RAMP, ISO) Scripting/automation (Power Shell, Python)
11/08/2026
Full time
Leidos is seeking a Senior Azure Cyber Engineer to lead design, implementation, and defense of secure Azure cloud environments for mission-critical government and commercial programs. In this role, you will architect cloud security controls, integrate identity, network, and data protection, and drive Zero Trust and compliance best practices. You will support security operations, incident response, and automation, partnering closely with cross-functional teams in a collaborative, mission-driven culture that values innovation, learning, and impact at national scale. Responsibilities Design and implement secure Azure cloud architectures for government and commercial clients. Define and enforce Azure security standards, policies, and baselines aligned to NIST and Zero Trust. Configure and optimize Microsoft Defender, Sentinel, and related security tools. Lead threat modeling, risk assessments, and security design reviews for new solutions. Support and guide security operations, incident response, and forensic analysis in Azure. Automate security controls and compliance checks using scripts and Infrastructure as Code. Collaborate with cross-functional engineering, operations, and program teams to embed security. Produce security documentation, diagrams, runbooks, and technical guidance for stakeholders. Required Skills Azure security architecture Azure Sentinel/Microsoft Defender Identity and access management (AAD) Network security and firewalls Security operations and incident response Infrastructure as Code (ARM/Bicep/Terraform) Zero Trust design Threat modeling and risk assessment Compliance and governance (NIST, Fed RAMP, ISO) Scripting/automation (Power Shell, Python)
Job Description Job Description CoreWeave is The Essential Cloud for AI . Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . About the role: The Data Service Team serves as the experts on managing data infrastructures as services for CoreWeave. The data infra includes but is not limited to managed databases, data ingestion, data flow, and data lake and analysis for CoreWeave and its customers. This team is responsible for the development of use cases, discovery of innovative solutions, automation and operations of our data service infrastructure. We are seeking a senior engineer manager with specialization in database space who can help us fulfill the goal of our data strategy and establish communication models for our data flow. This leadership role will work with a team of mixed skill engineers and have the opportunity to work on the full gamut of rewarding challenges that come with the business of building a cloud in a communicative, supportive, and high-performing environment. As a manager of the Data Service Team you will have the opportunity to: Build a world class engineering team by hiring and developing the best talent in the industry. Have curiosity and hunger to solve very hard system level problems in order to run the world's most demanding and advanced AI workloads. Design and implement services to deliver data to teams with a focus on providing managed solutions through APIs Improve the performance, security, reliability, and scalability of our data services. Establish guidelines, guard rails for data access and storage for stakeholder teams. Ensure compliance with standards for data protection regulation. Analyze telemetry and system data to drive improvements in throughput, latency, and resilience. Work cross-functionally with platform, product, and infrastructure teams to deliver seamless storage capabilities across the stack. Grow, change, invest in your teammates, be invested-in, share your ideas, listen to others, be curious, have fun, and, above all, be yourself. Wondering if you're a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams - even if you aren't a 100% skill or experience match. Here are some qualities we've found compatible with our team. If a portion of this resonates with you, we'd love to talk. 5+ years of experience managing or leading data service infra teams; 5+ years of hands-on software or infrastructure engineering. Understanding one of the database internals: MySQL, PostgreSQL, Aurora, CockroachDB, TiDB, MongoDB, CosmosDB, Oracle, SQL Server, DB2, SAP. Hands-on background with cloud native and separating compute from storage architecture. Expert on life of a query and life of a transaction. You enjoy helping your colleagues achieve more with less effort. You have experience operating services in production and at scale and are versed in reliability engineering concepts such as the different types of testing, progressive deployments, error budgets, the role observability, and fault-tolerant design. You understand CAP theorem and concurrency models, can clearly define data models and establish guidelines around data management. You're excited about new research in database systems. You're familiar with Kubernetes and have interest or comfortable with using it for event-driven and/or stateful orchestration. You can transform problems in elastic solutions, decompose them into achievable tasks, and socialize both to your teammates. You're excited about being part of a team of diverse perspectives and backgrounds that believe in tackling challenges, growing hand in hand, and winning together. Excellent communication skills with the ability to collaborate across engineering, product, and leadership teams. Proven ability to attract, retain, and grow world-class engineering talent. The base salary range for this role is $207,000 to $275,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: Medical, dental, and vision insurance - 100% paid for by CoreWeave Company-paid Life Insurance Voluntary supplemental life insurance Short and long-term disability insurance Flexible Spending Account Health Savings Account Tuition Reimbursement Ability to Participate in Employee Stock Purchase Program (ESPP) Mental Wellness Benefits through Spring Health Family-Forming support provided by Carrot Paid Parental Leave Flexible, full-service childcare support with Kinside 401(k) with a generous employer match Flexible PTO Catered lunch each day in our office and data center locations A casual work environment A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA) , CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. 1157, or (iv) asylee under 8 U.S.C. 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.
11/07/2026
Full time
Job Description Job Description CoreWeave is The Essential Cloud for AI . Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . About the role: The Data Service Team serves as the experts on managing data infrastructures as services for CoreWeave. The data infra includes but is not limited to managed databases, data ingestion, data flow, and data lake and analysis for CoreWeave and its customers. This team is responsible for the development of use cases, discovery of innovative solutions, automation and operations of our data service infrastructure. We are seeking a senior engineer manager with specialization in database space who can help us fulfill the goal of our data strategy and establish communication models for our data flow. This leadership role will work with a team of mixed skill engineers and have the opportunity to work on the full gamut of rewarding challenges that come with the business of building a cloud in a communicative, supportive, and high-performing environment. As a manager of the Data Service Team you will have the opportunity to: Build a world class engineering team by hiring and developing the best talent in the industry. Have curiosity and hunger to solve very hard system level problems in order to run the world's most demanding and advanced AI workloads. Design and implement services to deliver data to teams with a focus on providing managed solutions through APIs Improve the performance, security, reliability, and scalability of our data services. Establish guidelines, guard rails for data access and storage for stakeholder teams. Ensure compliance with standards for data protection regulation. Analyze telemetry and system data to drive improvements in throughput, latency, and resilience. Work cross-functionally with platform, product, and infrastructure teams to deliver seamless storage capabilities across the stack. Grow, change, invest in your teammates, be invested-in, share your ideas, listen to others, be curious, have fun, and, above all, be yourself. Wondering if you're a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams - even if you aren't a 100% skill or experience match. Here are some qualities we've found compatible with our team. If a portion of this resonates with you, we'd love to talk. 5+ years of experience managing or leading data service infra teams; 5+ years of hands-on software or infrastructure engineering. Understanding one of the database internals: MySQL, PostgreSQL, Aurora, CockroachDB, TiDB, MongoDB, CosmosDB, Oracle, SQL Server, DB2, SAP. Hands-on background with cloud native and separating compute from storage architecture. Expert on life of a query and life of a transaction. You enjoy helping your colleagues achieve more with less effort. You have experience operating services in production and at scale and are versed in reliability engineering concepts such as the different types of testing, progressive deployments, error budgets, the role observability, and fault-tolerant design. You understand CAP theorem and concurrency models, can clearly define data models and establish guidelines around data management. You're excited about new research in database systems. You're familiar with Kubernetes and have interest or comfortable with using it for event-driven and/or stateful orchestration. You can transform problems in elastic solutions, decompose them into achievable tasks, and socialize both to your teammates. You're excited about being part of a team of diverse perspectives and backgrounds that believe in tackling challenges, growing hand in hand, and winning together. Excellent communication skills with the ability to collaborate across engineering, product, and leadership teams. Proven ability to attract, retain, and grow world-class engineering talent. The base salary range for this role is $207,000 to $275,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: Medical, dental, and vision insurance - 100% paid for by CoreWeave Company-paid Life Insurance Voluntary supplemental life insurance Short and long-term disability insurance Flexible Spending Account Health Savings Account Tuition Reimbursement Ability to Participate in Employee Stock Purchase Program (ESPP) Mental Wellness Benefits through Spring Health Family-Forming support provided by Carrot Paid Parental Leave Flexible, full-service childcare support with Kinside 401(k) with a generous employer match Flexible PTO Catered lunch each day in our office and data center locations A casual work environment A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA) , CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. 1157, or (iv) asylee under 8 U.S.C. 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.
Job Description Job Description Company Description Every minute of every day, Smiths Detection's threat detection and security screening technology helps to protect people and infrastructure, making the world a safer place. Smiths Detection is a global leader in the development, manufacture and management of security and detection solutions designed to make the world a safer place. Our technology provides threat detection and screening solutions for customers in our key markets: aviation, ports and borders, defense, and urban security. Our expertise spans 21 global offices, seven manufacturing sites and five R&D centers, with a global network of 3,500 dedicated colleagues contributing towards over 40 years at the frontline of advances in safety and security. This results in careers built on variety and the opportunity to work on a range of state-of-the-art solutions, where you can develop your knowledge and experience every day. Job Description Job Purpose: The Digital Applications Engineer enables the digital (pre) sales team by providing application expertise and technical customer support throughout complex sales opportunities. Acting as a bridge between Sales, Product Management, Solution Architects, and customers, the role translates customer challenges into value-driven digital solutions. Through deep knowledge of digital applications, aviation X-ray networking, and AI-powered screening technologies, the Technical Applications Engineer supports customer engagements, demonstrates solution value, addresses technical concerns, and helps advance opportunities toward successful closure. The role focuses on technical sales enablement and solution consulting, without ownership of product strategy, pricing, architecture, implementation, or commercial opportunities. Duties: Partner with Digital Sales Executives and Key Account Managers (KAMs) on proposal for wider digital portfolio upsell opportunities. Run technical demonstrations, workshops and proof-of-concept engagements with prospective and existing customers. Feed customer and market technical requirements back into Digital Portfolio/Product teams to inform the roadmap (e.g. ELECTORA feature prioritisation). Support senior and C-level technical engagement with strategic accounts and regulators (e.g. TSA), positioning Smiths Detection's open-architecture and interoperability credentials. Build and maintain standardised technical playbooks and collateral to make pursuits repeatable across regions. Apply strong technical and commercial judgement to support business case development, solution pricing input, and contract technical schedules. Maintain accurate technical opportunity records and handover documentation through CRM and governance processes to support delivery planning. Monitor technology trends, competitor architectures and emerging standards to identify risks and opportunities for the digital portfolio. Prioritise support for strategic aviation pursuits while extending technical coverage into Ports & Borders, Urban Security, and other target market segments. Contribute to onboarding and enablement of new digital and technical sales colleagues, sharing solution and architecture expertise. Ensure all technical and commercial activities are conducted in accordance with company policies, ethical standards, regulatory requirements and applicable governance processes. Identify technical, operational, and business risks early in the sales cycle and support opportunity qualification activities. Serve as a trusted technical advisor during customer engagements, workshops, executive briefings, demonstrations, and industry events. Support customers in understanding best practices and operational use cases for digital solutions. Qualifications Technical Application and Product Expertise Knowledge & Experience: Bachelor's degree or equivalent experience in Engineering, Computer Science, IT, or a related technical field. Background in solutions architecture, network/systems engineering, or technical pre-sales - ideally in security screening, aviation, critical infrastructure, or enterprise software/SaaS. Strong grasp of networking, systems integration and cloud/on-prem deployment models; comfortable working across IT and OT environments. Experience supporting complex, multi-stakeholder tenders and RFPs. The ability to assess customer environments, interpret operational requirements, and identify practical ways in which digital applications can support improved performance. You take a structured approach to technical questions and customer challenges. (DNSA role) Knowledge of cybersecurity, cloud solutions, AI-enabled applications or digital transformation programs. Experience participating in government procurement and tender processes. Willingness to travel to support regional pursuits. The ability to explain complex technical concepts in clear, accessible, and value-focused language. You are comfortable communicating with both technical and non-technical stakeholders, including IT teams, security operations, procurement, and operational leadership. Competence and Abilities: A strong understanding of how technical capabilities contribute to customer value and commercial success. You can connect application functionality to customer priorities such as operational performance, productivity, cost efficiency, investment protection, compliance, and risk reduction. The understanding and recognition of the organisation's commercial environment and positioning themselves, their role and their actions to support the organisation's commercial success. Strong understanding of Digital/IT technology, procurement processes, and industry regulations. Exposure to customers in market segments such as Aviation, Ports & Borders and Urban Security. Excellent communication, presentation and stakeholder management skills. The ability to explain complex technical concepts in clear, accessible, and value-focused language. You are comfortable communicating with both technical and non-technical stakeholders, including IT teams, security operations, procurement, and operational leadership. Collaboration and influencing with a Global mindset, cultural awareness. The ability to engage, challenge and work effectively with others. Strong relationship-building skills with both technical and commercial stakeholders. Proven matrix and stakeholder management skills/experience working virtually in diverse teams. Collaborative style - comfortable working closely with sales, product and delivery teams. Strong analytical and structured problem-solving skills. Effective planning, prioritisation and multi-pursuit management capability. Willing and able to identify and support change and continuous improvement in own and wider business environment. High degree of resilience, self-motivation and accountability. What Success Looks Like Success in this role means that the digital sales force has access to the specialist knowledge and customer-facing support needed to progress opportunities confidently and effectively. Customers clearly understand how our digital applications address their operational challenges and what value they can expect from their investment. Drive a measurable increase in the conversion rate of upsell opportunities within supported tenders. Reusable technical playbooks and collateral adopted across regions. Strong technical credibility with strategic accounts and regulators (e.g. TSA). Positive customer adoption of digital solutions following technical engagement. Growth in software penetration across the installed base, tracking to the group ambition as defined. Additional Information We offer Join us and we'll help build your career, with excellent training and opportunities for career growth across the business, both locally and globally. You'll experience an inclusive environment, with strong leadership and a focus on safety and wellbeing. You'll also have the flexibility to choose from a wide range of benefits to suit your lifestyle, offering you and your family support from a health and wellbeing, financial and lifestyle perspective. Join us and work for a world-leader, with the benefits and training to reward your dedication and skills. Be part of a team where we are making the world a safer place. Smiths Detection is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Equal Employment Opportunity PostersIf you'd like to view a copy of the company's affirmative action plan or policy statement, please email . The total compensation for this position ranges from $147,521.25 - $221,281.25/yr (Salary to be determined by the education, experience, knowledge, skills, & abilities of the applicant and the alignment with the internal team & market data). This role offers a competitive Business Profit Plan. This position includes a competitive benefits package. The comprehensive benefits package includes medical, dental & vision insurance; 401(k) with company match; paid time off; and other benefits. For details . click apply for full job details
11/07/2026
Full time
Job Description Job Description Company Description Every minute of every day, Smiths Detection's threat detection and security screening technology helps to protect people and infrastructure, making the world a safer place. Smiths Detection is a global leader in the development, manufacture and management of security and detection solutions designed to make the world a safer place. Our technology provides threat detection and screening solutions for customers in our key markets: aviation, ports and borders, defense, and urban security. Our expertise spans 21 global offices, seven manufacturing sites and five R&D centers, with a global network of 3,500 dedicated colleagues contributing towards over 40 years at the frontline of advances in safety and security. This results in careers built on variety and the opportunity to work on a range of state-of-the-art solutions, where you can develop your knowledge and experience every day. Job Description Job Purpose: The Digital Applications Engineer enables the digital (pre) sales team by providing application expertise and technical customer support throughout complex sales opportunities. Acting as a bridge between Sales, Product Management, Solution Architects, and customers, the role translates customer challenges into value-driven digital solutions. Through deep knowledge of digital applications, aviation X-ray networking, and AI-powered screening technologies, the Technical Applications Engineer supports customer engagements, demonstrates solution value, addresses technical concerns, and helps advance opportunities toward successful closure. The role focuses on technical sales enablement and solution consulting, without ownership of product strategy, pricing, architecture, implementation, or commercial opportunities. Duties: Partner with Digital Sales Executives and Key Account Managers (KAMs) on proposal for wider digital portfolio upsell opportunities. Run technical demonstrations, workshops and proof-of-concept engagements with prospective and existing customers. Feed customer and market technical requirements back into Digital Portfolio/Product teams to inform the roadmap (e.g. ELECTORA feature prioritisation). Support senior and C-level technical engagement with strategic accounts and regulators (e.g. TSA), positioning Smiths Detection's open-architecture and interoperability credentials. Build and maintain standardised technical playbooks and collateral to make pursuits repeatable across regions. Apply strong technical and commercial judgement to support business case development, solution pricing input, and contract technical schedules. Maintain accurate technical opportunity records and handover documentation through CRM and governance processes to support delivery planning. Monitor technology trends, competitor architectures and emerging standards to identify risks and opportunities for the digital portfolio. Prioritise support for strategic aviation pursuits while extending technical coverage into Ports & Borders, Urban Security, and other target market segments. Contribute to onboarding and enablement of new digital and technical sales colleagues, sharing solution and architecture expertise. Ensure all technical and commercial activities are conducted in accordance with company policies, ethical standards, regulatory requirements and applicable governance processes. Identify technical, operational, and business risks early in the sales cycle and support opportunity qualification activities. Serve as a trusted technical advisor during customer engagements, workshops, executive briefings, demonstrations, and industry events. Support customers in understanding best practices and operational use cases for digital solutions. Qualifications Technical Application and Product Expertise Knowledge & Experience: Bachelor's degree or equivalent experience in Engineering, Computer Science, IT, or a related technical field. Background in solutions architecture, network/systems engineering, or technical pre-sales - ideally in security screening, aviation, critical infrastructure, or enterprise software/SaaS. Strong grasp of networking, systems integration and cloud/on-prem deployment models; comfortable working across IT and OT environments. Experience supporting complex, multi-stakeholder tenders and RFPs. The ability to assess customer environments, interpret operational requirements, and identify practical ways in which digital applications can support improved performance. You take a structured approach to technical questions and customer challenges. (DNSA role) Knowledge of cybersecurity, cloud solutions, AI-enabled applications or digital transformation programs. Experience participating in government procurement and tender processes. Willingness to travel to support regional pursuits. The ability to explain complex technical concepts in clear, accessible, and value-focused language. You are comfortable communicating with both technical and non-technical stakeholders, including IT teams, security operations, procurement, and operational leadership. Competence and Abilities: A strong understanding of how technical capabilities contribute to customer value and commercial success. You can connect application functionality to customer priorities such as operational performance, productivity, cost efficiency, investment protection, compliance, and risk reduction. The understanding and recognition of the organisation's commercial environment and positioning themselves, their role and their actions to support the organisation's commercial success. Strong understanding of Digital/IT technology, procurement processes, and industry regulations. Exposure to customers in market segments such as Aviation, Ports & Borders and Urban Security. Excellent communication, presentation and stakeholder management skills. The ability to explain complex technical concepts in clear, accessible, and value-focused language. You are comfortable communicating with both technical and non-technical stakeholders, including IT teams, security operations, procurement, and operational leadership. Collaboration and influencing with a Global mindset, cultural awareness. The ability to engage, challenge and work effectively with others. Strong relationship-building skills with both technical and commercial stakeholders. Proven matrix and stakeholder management skills/experience working virtually in diverse teams. Collaborative style - comfortable working closely with sales, product and delivery teams. Strong analytical and structured problem-solving skills. Effective planning, prioritisation and multi-pursuit management capability. Willing and able to identify and support change and continuous improvement in own and wider business environment. High degree of resilience, self-motivation and accountability. What Success Looks Like Success in this role means that the digital sales force has access to the specialist knowledge and customer-facing support needed to progress opportunities confidently and effectively. Customers clearly understand how our digital applications address their operational challenges and what value they can expect from their investment. Drive a measurable increase in the conversion rate of upsell opportunities within supported tenders. Reusable technical playbooks and collateral adopted across regions. Strong technical credibility with strategic accounts and regulators (e.g. TSA). Positive customer adoption of digital solutions following technical engagement. Growth in software penetration across the installed base, tracking to the group ambition as defined. Additional Information We offer Join us and we'll help build your career, with excellent training and opportunities for career growth across the business, both locally and globally. You'll experience an inclusive environment, with strong leadership and a focus on safety and wellbeing. You'll also have the flexibility to choose from a wide range of benefits to suit your lifestyle, offering you and your family support from a health and wellbeing, financial and lifestyle perspective. Join us and work for a world-leader, with the benefits and training to reward your dedication and skills. Be part of a team where we are making the world a safer place. Smiths Detection is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Equal Employment Opportunity PostersIf you'd like to view a copy of the company's affirmative action plan or policy statement, please email . The total compensation for this position ranges from $147,521.25 - $221,281.25/yr (Salary to be determined by the education, experience, knowledge, skills, & abilities of the applicant and the alignment with the internal team & market data). This role offers a competitive Business Profit Plan. This position includes a competitive benefits package. The comprehensive benefits package includes medical, dental & vision insurance; 401(k) with company match; paid time off; and other benefits. For details . click apply for full job details
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
11/07/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
11/07/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
11/07/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
11/07/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
11/07/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
