Job Description Our valued client in the Denver Tech Center is seeking a Sr. Platform Engineer for their team. This is a hybrid role that requires you to reside in the Denver-Metro area. This engagement is a six-month contract-to-hire opportunity. Position Summary A senior, hands-on platform engineer with ownership across the whole internal developer platform: infrastructure, CI/CD, observability, security, and cost, not just one slice of it. This role carries more scope and more independent judgment than the Platform Engineer role, and may informally point the technical direction for other engineers on a given project, without a formal management title. Key Responsibilities • Own the internal developer platform (IDP): drive the design and evolution of the self-service workflows, the Golden Paths, that the rest of engineering relies on • Lead infrastructure as code practice: set the standard for how the team provisions and manages infrastructure, and build the automation others follow • Own CI/CD architecture: design and evolve the build, test, and deployment pipelines the platform depends on, including how GitOps practices get applied • Drive observability strategy: make sure the platform is monitored, logged, and traced well enough that problems surface before anyone has to ask • Own performance reporting: build and maintain the metrics and reporting layer that shows leadership and the rest of the organization how the platform is performing month to month • Set the security and access standard: establish how secrets, access control, and role-based access control (RBAC) get handled across the platform • Own platform cost and efficiency: track spend and bring cost-efficiency recommendations forward • Guide other engineers: give informal technical direction and review to the rest of the team Required Qualifications • Programming and automation: strong Python skills and a track record of building real automation and integrations at production scale • Cloud and containers: deep experience with a major cloud provider (AWS or Azure) and containerized infrastructure running in production • CI/CD and delivery practices: considerable experience owning pipelines end to end, including secure, modern deployment practices • Infrastructure as code at scale: experience running IaC practices, such as Terraform, across a real production environment • Security mindset: bake security into everything you build and hold the rest of the team to the same standard • Cost awareness: experience applying FinOps or similar cost-management practices to cloud spend at scale • Reporting and transparency: track record of building metrics or reporting capability that gives leadership and other teams real visibility into platform performance • Working with developers: track record of treating the platform's users as customers and adjusting the platform based on their feedback Preferred Qualifications • Experience informally mentoring or guiding other engineers • Experience with hybrid on-premises and cloud environments • Experience with observability or log management platforms • Exposure to cloud cost management or FinOps practices Certifications are a plus but not required. Hands-on experience is weighted more heavily
11/14/2026
Full time
Job Description Our valued client in the Denver Tech Center is seeking a Sr. Platform Engineer for their team. This is a hybrid role that requires you to reside in the Denver-Metro area. This engagement is a six-month contract-to-hire opportunity. Position Summary A senior, hands-on platform engineer with ownership across the whole internal developer platform: infrastructure, CI/CD, observability, security, and cost, not just one slice of it. This role carries more scope and more independent judgment than the Platform Engineer role, and may informally point the technical direction for other engineers on a given project, without a formal management title. Key Responsibilities • Own the internal developer platform (IDP): drive the design and evolution of the self-service workflows, the Golden Paths, that the rest of engineering relies on • Lead infrastructure as code practice: set the standard for how the team provisions and manages infrastructure, and build the automation others follow • Own CI/CD architecture: design and evolve the build, test, and deployment pipelines the platform depends on, including how GitOps practices get applied • Drive observability strategy: make sure the platform is monitored, logged, and traced well enough that problems surface before anyone has to ask • Own performance reporting: build and maintain the metrics and reporting layer that shows leadership and the rest of the organization how the platform is performing month to month • Set the security and access standard: establish how secrets, access control, and role-based access control (RBAC) get handled across the platform • Own platform cost and efficiency: track spend and bring cost-efficiency recommendations forward • Guide other engineers: give informal technical direction and review to the rest of the team Required Qualifications • Programming and automation: strong Python skills and a track record of building real automation and integrations at production scale • Cloud and containers: deep experience with a major cloud provider (AWS or Azure) and containerized infrastructure running in production • CI/CD and delivery practices: considerable experience owning pipelines end to end, including secure, modern deployment practices • Infrastructure as code at scale: experience running IaC practices, such as Terraform, across a real production environment • Security mindset: bake security into everything you build and hold the rest of the team to the same standard • Cost awareness: experience applying FinOps or similar cost-management practices to cloud spend at scale • Reporting and transparency: track record of building metrics or reporting capability that gives leadership and other teams real visibility into platform performance • Working with developers: track record of treating the platform's users as customers and adjusting the platform based on their feedback Preferred Qualifications • Experience informally mentoring or guiding other engineers • Experience with hybrid on-premises and cloud environments • Experience with observability or log management platforms • Exposure to cloud cost management or FinOps practices Certifications are a plus but not required. Hands-on experience is weighted more heavily
Job Description Title: Cloud Infrastructure Engineer Location: White Plains, NY (3 days onsite) Duration: 12 months contract About Cogent Infotech At Cogent Infotech, we believe in creating opportunities that empower individuals and transform organizations. With over 23 years of excellence in consulting and talent solutions, we pride ourselves on building inclusive workplaces and driving innovation in everything we do. Our diverse teams bring unique perspectives to help deliver cutting-edge solutions to global clients across both public and private sectors. Position Summary This Cloud Infrastructure Engineer role will participate in designs, builds, and maintenance of scalable foundations for cloud applications and infrastructure. They will collaborate across NYPA IT daily to implement Infrastructure as Code (IaC), manage and provision systems and services, and optimize costs and security across major platforms like Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP). Key Responsibilities Write and maintain automated scripts (using tools like Terraform or Ansible) to deploy cloud resources. Assist DevOps teams by supporting developers that build pipelines that enable rapid, reliable, and automated application delivery. Maintain consistency across environments by using immutable infrastructure principles, reducing deployment drift. Monitor cloud environments for performance bottlenecks and execute capacity planning. Diagnose and resolve complex, cloud-related issues during outages with minimal disruption to services. Set up proactive monitoring, logging, and alerting using tools like Datadog, CloudWatch, or Prometheus. Participate in on-call rotations to support production services, perform root cause analysis, and handle routine maintenance. Required Qualifications and Skills College Degree Cloud and systems related certifications. Cloud Platform Mastery (AWS, Azure, or GCP). Infrastructure as Code (Terraform, Ansible). Containerization (Docker, Kubernetes, Openshift). Strong foundational knowledge of networking, Windows, and Linux systems. Equal Opportunity & Inclusion Statement Cogent Infotech is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment where everyone feels welcome and valued. We encourage applications from individuals of all backgrounds, identities, abilities, and experiences. If you're excited about this role but don't meet every requirement, we still encourage you to apply Application Process Please submit your resume and a short cover letter through our online portal. Our process includes an initial resume review, a virtual interview, and a short technical assessment. If you need accommodations, feel free to inform us-we are happy to assist. Join Us At Cogent Infotech, your ideas matter. Join a purpose-driven organization that celebrates diversity, encourages collaboration, and invests in your future.
11/14/2026
Full time
Job Description Title: Cloud Infrastructure Engineer Location: White Plains, NY (3 days onsite) Duration: 12 months contract About Cogent Infotech At Cogent Infotech, we believe in creating opportunities that empower individuals and transform organizations. With over 23 years of excellence in consulting and talent solutions, we pride ourselves on building inclusive workplaces and driving innovation in everything we do. Our diverse teams bring unique perspectives to help deliver cutting-edge solutions to global clients across both public and private sectors. Position Summary This Cloud Infrastructure Engineer role will participate in designs, builds, and maintenance of scalable foundations for cloud applications and infrastructure. They will collaborate across NYPA IT daily to implement Infrastructure as Code (IaC), manage and provision systems and services, and optimize costs and security across major platforms like Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP). Key Responsibilities Write and maintain automated scripts (using tools like Terraform or Ansible) to deploy cloud resources. Assist DevOps teams by supporting developers that build pipelines that enable rapid, reliable, and automated application delivery. Maintain consistency across environments by using immutable infrastructure principles, reducing deployment drift. Monitor cloud environments for performance bottlenecks and execute capacity planning. Diagnose and resolve complex, cloud-related issues during outages with minimal disruption to services. Set up proactive monitoring, logging, and alerting using tools like Datadog, CloudWatch, or Prometheus. Participate in on-call rotations to support production services, perform root cause analysis, and handle routine maintenance. Required Qualifications and Skills College Degree Cloud and systems related certifications. Cloud Platform Mastery (AWS, Azure, or GCP). Infrastructure as Code (Terraform, Ansible). Containerization (Docker, Kubernetes, Openshift). Strong foundational knowledge of networking, Windows, and Linux systems. Equal Opportunity & Inclusion Statement Cogent Infotech is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment where everyone feels welcome and valued. We encourage applications from individuals of all backgrounds, identities, abilities, and experiences. If you're excited about this role but don't meet every requirement, we still encourage you to apply Application Process Please submit your resume and a short cover letter through our online portal. Our process includes an initial resume review, a virtual interview, and a short technical assessment. If you need accommodations, feel free to inform us-we are happy to assist. Join Us At Cogent Infotech, your ideas matter. Join a purpose-driven organization that celebrates diversity, encourages collaboration, and invests in your future.
Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: The Cloud AI Engineer, Lead plays a critical role in driving innovation across Zebra's IT Platform Engineering, Cloud Security, and Artificial Intelligence initiatives. Acting as a hands-on technical architect and strategic trailblazer, you will partner with key stakeholders to identify opportunities, translate ideas into actionable solutions, and deliver value through rapid proofs of concept. This role focuses heavily on designing, building, and scaling our next-generation cloud-native AI platforms, AI-powered log intelligence (AIOps), and semantic developer tooling. Location: This is a hybrid position requiring a minimum of three days per week on-site at either our Lincolnshire, IL, or Holtsville, NY office. Essential Duties/Responsabilities: Identify and evaluate emerging innovation opportunities across Platform Engineering and Cloud Infrastructure functions, matching business needs with cutting-edge technology solutions. Conduct comprehensive business and systems analyses, translating complex technical findings into clear user stories, system requirements, and actionable solution concepts. Coordinate and execute Proof of Concepts (PoCs) and hands-on delivery activities to rapidly validate and advance cloud and platform innovation initiatives. Research, analyze, and report on disruptive technologies-such as Generative AI, Machine Learning (ML), Robotic Process Automation (RPA), and Virtual Agents-providing strategic recommendations for corporate adoption. Act as the primary IT Cloud Innovation Liaison, driving cross-functional collaboration and alignment with other innovation and product teams across Zebra. Plan, coordinate, and facilitate structured ideation workshops, fostering a culture of collaborative brainstorming and innovative problem-solving. Serve as an active Innovation Evangelist within IT and the broader enterprise, promoting modern engineering methodologies and pushing the boundaries of cloud-native possibilities. Track, analyze, and report key performance indicators (KPIs), ensuring leadership has complete visibility into the progress, and business outcomes of all innovation initiatives. Establish and maintain a repeatable operating model for cloud-native AI/ML deployment, ensuring all initiatives consistently address pipeline architecture, performance metrics, and compliance guidelines across GCP and Azure. Lead and mentor a high-performing team of cloud and AI platform engineers, guiding their professional evolution toward predictive log analytics, automation (AIOps), and robust cloud data readiness. Translate complex AI governance, cloud security guardrails, and regulatory requirements into practical technical specifications, partnering directly with systems engineers to integrate PII masking and RBAC into automated CI/CD pipelines. Manage roadmap alignment within assigned technology portfolios. Minimum Qualifications: Bachelor's degree in Computer Science, Electronic Engineering, Computer Engineering, or related field. 5+ years experience working on an operations style team (NOC, SOC, MOC, etc.) and troubleshooting networking, service desk, operations center and/or supporting cloud based Infrastructure. Hands-on Google Gemini Enterprise Expertise: Demonstrated experience working with Google Gemini Enterprise, with a proven ability to build and deploy custom agents using the Agent Development Kit (ADK). Multi-Cloud & GenAI Platform Proficiency: Deep familiarity with leading cloud platforms and generative AI solution providers, including Google Cloud Platform (GCP), Azure, OpenAI, and Anthropic. Experience working in a global, heterogeneous, cloud and on-prem environment. Practical knowledge of, or deep technical curiosity to develop, hands-on solutions involving Large Language Models (LLMs), Retrieval-Augmented Generation (RAG) architectures, and agentic AI patterns (including Model Context Protocol MCP , tool calling, and orchestration frameworks). Expertise in scripting or programming languages (e.g., Python) for automation or testing is a plus; software development background is welcomed. Proven track record of deploying containerized AI solutions using Kubernetes (GKE/AKS), Docker, and robust CI/CD pipelines, backed by verifiable metrics such as high availability, latency reduction, and infrastructure cost optimization. Comprehensive understanding of enterprise cloud security, application/API security, and fine-grained identity systems, with experience integrating PII masking and complex Role-Based Access Control (RBAC) frameworks. Strong software development background with advanced scripting capabilities in Python (or similar languages) to drive automation, infrastructure provisioning (IaC), and automated testing. Active professional-level cloud certifications are highly preferred, such as Google Cloud Professional Cloud Architect, Google Cloud Professional Machine Learning Engineer or AI Engineer Preferred Qualifications Some exposure to AI/ML systems, application security, or API security is a plus. Travel up to 10% Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $96,800.00 - $145,200.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 10% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department. AI Technology Statement: Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However . click apply for full job details
11/14/2026
Full time
Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: The Cloud AI Engineer, Lead plays a critical role in driving innovation across Zebra's IT Platform Engineering, Cloud Security, and Artificial Intelligence initiatives. Acting as a hands-on technical architect and strategic trailblazer, you will partner with key stakeholders to identify opportunities, translate ideas into actionable solutions, and deliver value through rapid proofs of concept. This role focuses heavily on designing, building, and scaling our next-generation cloud-native AI platforms, AI-powered log intelligence (AIOps), and semantic developer tooling. Location: This is a hybrid position requiring a minimum of three days per week on-site at either our Lincolnshire, IL, or Holtsville, NY office. Essential Duties/Responsabilities: Identify and evaluate emerging innovation opportunities across Platform Engineering and Cloud Infrastructure functions, matching business needs with cutting-edge technology solutions. Conduct comprehensive business and systems analyses, translating complex technical findings into clear user stories, system requirements, and actionable solution concepts. Coordinate and execute Proof of Concepts (PoCs) and hands-on delivery activities to rapidly validate and advance cloud and platform innovation initiatives. Research, analyze, and report on disruptive technologies-such as Generative AI, Machine Learning (ML), Robotic Process Automation (RPA), and Virtual Agents-providing strategic recommendations for corporate adoption. Act as the primary IT Cloud Innovation Liaison, driving cross-functional collaboration and alignment with other innovation and product teams across Zebra. Plan, coordinate, and facilitate structured ideation workshops, fostering a culture of collaborative brainstorming and innovative problem-solving. Serve as an active Innovation Evangelist within IT and the broader enterprise, promoting modern engineering methodologies and pushing the boundaries of cloud-native possibilities. Track, analyze, and report key performance indicators (KPIs), ensuring leadership has complete visibility into the progress, and business outcomes of all innovation initiatives. Establish and maintain a repeatable operating model for cloud-native AI/ML deployment, ensuring all initiatives consistently address pipeline architecture, performance metrics, and compliance guidelines across GCP and Azure. Lead and mentor a high-performing team of cloud and AI platform engineers, guiding their professional evolution toward predictive log analytics, automation (AIOps), and robust cloud data readiness. Translate complex AI governance, cloud security guardrails, and regulatory requirements into practical technical specifications, partnering directly with systems engineers to integrate PII masking and RBAC into automated CI/CD pipelines. Manage roadmap alignment within assigned technology portfolios. Minimum Qualifications: Bachelor's degree in Computer Science, Electronic Engineering, Computer Engineering, or related field. 5+ years experience working on an operations style team (NOC, SOC, MOC, etc.) and troubleshooting networking, service desk, operations center and/or supporting cloud based Infrastructure. Hands-on Google Gemini Enterprise Expertise: Demonstrated experience working with Google Gemini Enterprise, with a proven ability to build and deploy custom agents using the Agent Development Kit (ADK). Multi-Cloud & GenAI Platform Proficiency: Deep familiarity with leading cloud platforms and generative AI solution providers, including Google Cloud Platform (GCP), Azure, OpenAI, and Anthropic. Experience working in a global, heterogeneous, cloud and on-prem environment. Practical knowledge of, or deep technical curiosity to develop, hands-on solutions involving Large Language Models (LLMs), Retrieval-Augmented Generation (RAG) architectures, and agentic AI patterns (including Model Context Protocol MCP , tool calling, and orchestration frameworks). Expertise in scripting or programming languages (e.g., Python) for automation or testing is a plus; software development background is welcomed. Proven track record of deploying containerized AI solutions using Kubernetes (GKE/AKS), Docker, and robust CI/CD pipelines, backed by verifiable metrics such as high availability, latency reduction, and infrastructure cost optimization. Comprehensive understanding of enterprise cloud security, application/API security, and fine-grained identity systems, with experience integrating PII masking and complex Role-Based Access Control (RBAC) frameworks. Strong software development background with advanced scripting capabilities in Python (or similar languages) to drive automation, infrastructure provisioning (IaC), and automated testing. Active professional-level cloud certifications are highly preferred, such as Google Cloud Professional Cloud Architect, Google Cloud Professional Machine Learning Engineer or AI Engineer Preferred Qualifications Some exposure to AI/ML systems, application security, or API security is a plus. Travel up to 10% Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $96,800.00 - $145,200.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 10% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department. AI Technology Statement: Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However . click apply for full job details
Job Description JCW has partnered with a leading digital assets and data center infrastructure firm to identify a Vice President, DevOps/SRE to lead their infrastructure automation platform across data center operations. Based in Chicago, this is a senior technical leadership role for a DevOps/SRE professional who can steer an enterprise automation roadmap while remaining hands-on enough to dive into the code. The ideal candidate treats infrastructure as a product and has a proven track record building self-service automation platforms in complex hybrid environments. They are equally comfortable setting IaC governance standards and mentoring a team of engineers. This individual operates with an automate-first mindset, drives engineering velocity, and brings deep expertise across Terraform, Ansible, and VMware in large-scale environments. Key Qualifications 6-10 years of experience in infrastructure, DevOps, or SRE with a focus on automation at scale Deep proficiency with Terraform (providers, modules, state management) and Ansible (roles, playbooks, Tower/AWX) Hands-on experience with image creation tooling (Packer, SCCM) for hardened Windows and Linux builds in hybrid environments Strong experience managing and automating VMware (vSphere/vCenter) and cloud platforms (Azure, AWS) High-level scripting skills across Python, Go, PowerShell, and Bash Experience with observability tools such as Splunk, ELK, Prometheus, or Grafana Strong mastery of Git branching strategies and CI/CD platforms (Jenkins, GitLab CI, or GitHub Actions) Understanding of network topology with experience on platforms such as Juniper or Palo Alto Prior team leadership or management experience strongly preferred
11/14/2026
Full time
Job Description JCW has partnered with a leading digital assets and data center infrastructure firm to identify a Vice President, DevOps/SRE to lead their infrastructure automation platform across data center operations. Based in Chicago, this is a senior technical leadership role for a DevOps/SRE professional who can steer an enterprise automation roadmap while remaining hands-on enough to dive into the code. The ideal candidate treats infrastructure as a product and has a proven track record building self-service automation platforms in complex hybrid environments. They are equally comfortable setting IaC governance standards and mentoring a team of engineers. This individual operates with an automate-first mindset, drives engineering velocity, and brings deep expertise across Terraform, Ansible, and VMware in large-scale environments. Key Qualifications 6-10 years of experience in infrastructure, DevOps, or SRE with a focus on automation at scale Deep proficiency with Terraform (providers, modules, state management) and Ansible (roles, playbooks, Tower/AWX) Hands-on experience with image creation tooling (Packer, SCCM) for hardened Windows and Linux builds in hybrid environments Strong experience managing and automating VMware (vSphere/vCenter) and cloud platforms (Azure, AWS) High-level scripting skills across Python, Go, PowerShell, and Bash Experience with observability tools such as Splunk, ELK, Prometheus, or Grafana Strong mastery of Git branching strategies and CI/CD platforms (Jenkins, GitLab CI, or GitHub Actions) Understanding of network topology with experience on platforms such as Juniper or Palo Alto Prior team leadership or management experience strongly preferred
Senior / Lead .NET Software Engineer / SRE DETAILS Location: Arlington, TX 76014 (hybrid onsite 2-days per week) Openings: 2 (1 Senior .NET / 1 Lead .NET) Position Type: 6M C2H Hourly / Salary: to $160K+ (based on experience level) JOB SUMMARY Vaco is currently seeking a Senior .NET Software Engineer / SRE for a 6M C2H opportunity that is located in Arlington, TX 76014 (hybrid onsite 2-days per week). About the Project: This is an ongoing multi-year digital transformation initiative (now roughly 2+ years in) focused on modernizing financial services platforms, making them more scalable, reliable, automated, and cloud-native. The .NET Engineer / SRE will be building and extending tools / frameworks for SRE practices, including automation scripts, custom monitoring, CI/CD enhancements, reliability tooling, etc. The .NET Engineer / SRE will help bridge the gap between development teams (writing .NET) and SREs (ensuring reliability at scale), especially within this strategic / tool building-focused SRE practice. This is not a traditional .NET Developer (no owning user-facing APIs or business logic for financial services), but rather applying .NET skills to SRE tasks, including building custom tools for automation, reliability, and release engineering, creating GITHub Copilot context files to embed SRE practices (security / performance checks) early in development cycles, debugging / refactoring code in production environments, performing root-cause analysis, and iterating post-deployment. Additionally, there's no traditional on-call production monitoring / support, whereas the focus will be on design, architecture, automation, and enabling scalable DevOps / SRE practices for development teams, rather than day-to-day firefighting. Ideal Senior Candidate:The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Senior Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). Ideal LEAD Candidate (leading teams of 5+): The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Lead Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). JOB REQUIREMETS .NET Core Development (hands-on core expertise) - C# / .NET Core Development Building / Maintaining Production-Grade Applications / APIs / Services Cloud Modernization - Migrating Legacy .NET Applications to Cloud-Native Azure Architectures Azure-Native Application Development - Designing / Deploying / Supporting .NET Applications Directly in Azure with Real Production Workloads (Beyond Portal-Based "Click-Ops") AKS / Containerization - Containerizing .NET Applications (Docker Multi-Stage Builds) Deploying / Managing within AKS (Deployments / Services / ConfigMaps / Secrets / Helm / Node Pools / Autoscaling / Ingress / Cluster-Level Troubleshooting) CI/CD / Azure DevOps - Building / Maintaining YAML-Based CI/CD Pipelines (Automated Builds / Testing / Security Scans / Docker Image Creation / Deployments to AKS / App Services) Azure Platform Services Integration - Integrating Core Azure Services into .NET Applications (App Services / Azure Functions / Service Bus / Event Grid / Azure Monitor / Application Insights With Custom Telemetry / Distributed Tracing / Metrics) IaC / Terraform - Developing / Managing Terraform-Based Infrastructure (AKS / VNETs / Private Endpoints / Service Bus / SQL Database / Storage) Aligned with Application Development Identity / Security (Azure) - Implementing Secure Patterns (Managed Identities / Entra ID / RBAC / Secure Connectivity / Polly Retry Policies / Private Endpoints / VNET Integration) within .NET Services Observability / SRE Practices - Applying SRE Principles within Development (Application Insights / Log Analytics / Alerting / Performance Monitoring / Production Troubleshooting) Database Design / Optimization - Oracle / MS SQL Server / NoSQL (CosmosDB) SQL Scripting (hands-on) Designing / Evolving Database Schemas Performing Query Performance Analysis Indexing to Deliver Scalable / Performant Services Problem Solving / Collaboration - Driving Root Cause Analysis / Debugging for .NET Applications in Azure Collaborating within SRE / Cross-Functional Teams PREFERRED (not required) Azure Governance / Best Practices - Azure Policy / GitHub Copilot Context / Embedding SRE Practices Early in Development Lifecycle Architecture Frameworks (Familiarity) - Azure Well-Architected Framework (Reliability / Operational Excellence) Advanced AKS / Hybrid - Exposure to Advanced AKS Topics (Cluster Autoscaling / Service Mesh / Cost Optimization) / Hybrid Scenarios (Azure Arc) AI / Automation Enablement - Driving Adoption of AI-Powered Tools (GitHub Copilot) to Improve Developer Productivity / Code Quality By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.
10/07/2026
Full time
Senior / Lead .NET Software Engineer / SRE DETAILS Location: Arlington, TX 76014 (hybrid onsite 2-days per week) Openings: 2 (1 Senior .NET / 1 Lead .NET) Position Type: 6M C2H Hourly / Salary: to $160K+ (based on experience level) JOB SUMMARY Vaco is currently seeking a Senior .NET Software Engineer / SRE for a 6M C2H opportunity that is located in Arlington, TX 76014 (hybrid onsite 2-days per week). About the Project: This is an ongoing multi-year digital transformation initiative (now roughly 2+ years in) focused on modernizing financial services platforms, making them more scalable, reliable, automated, and cloud-native. The .NET Engineer / SRE will be building and extending tools / frameworks for SRE practices, including automation scripts, custom monitoring, CI/CD enhancements, reliability tooling, etc. The .NET Engineer / SRE will help bridge the gap between development teams (writing .NET) and SREs (ensuring reliability at scale), especially within this strategic / tool building-focused SRE practice. This is not a traditional .NET Developer (no owning user-facing APIs or business logic for financial services), but rather applying .NET skills to SRE tasks, including building custom tools for automation, reliability, and release engineering, creating GITHub Copilot context files to embed SRE practices (security / performance checks) early in development cycles, debugging / refactoring code in production environments, performing root-cause analysis, and iterating post-deployment. Additionally, there's no traditional on-call production monitoring / support, whereas the focus will be on design, architecture, automation, and enabling scalable DevOps / SRE practices for development teams, rather than day-to-day firefighting. Ideal Senior Candidate:The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Senior Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). Ideal LEAD Candidate (leading teams of 5+): The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Lead Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). JOB REQUIREMETS .NET Core Development (hands-on core expertise) - C# / .NET Core Development Building / Maintaining Production-Grade Applications / APIs / Services Cloud Modernization - Migrating Legacy .NET Applications to Cloud-Native Azure Architectures Azure-Native Application Development - Designing / Deploying / Supporting .NET Applications Directly in Azure with Real Production Workloads (Beyond Portal-Based "Click-Ops") AKS / Containerization - Containerizing .NET Applications (Docker Multi-Stage Builds) Deploying / Managing within AKS (Deployments / Services / ConfigMaps / Secrets / Helm / Node Pools / Autoscaling / Ingress / Cluster-Level Troubleshooting) CI/CD / Azure DevOps - Building / Maintaining YAML-Based CI/CD Pipelines (Automated Builds / Testing / Security Scans / Docker Image Creation / Deployments to AKS / App Services) Azure Platform Services Integration - Integrating Core Azure Services into .NET Applications (App Services / Azure Functions / Service Bus / Event Grid / Azure Monitor / Application Insights With Custom Telemetry / Distributed Tracing / Metrics) IaC / Terraform - Developing / Managing Terraform-Based Infrastructure (AKS / VNETs / Private Endpoints / Service Bus / SQL Database / Storage) Aligned with Application Development Identity / Security (Azure) - Implementing Secure Patterns (Managed Identities / Entra ID / RBAC / Secure Connectivity / Polly Retry Policies / Private Endpoints / VNET Integration) within .NET Services Observability / SRE Practices - Applying SRE Principles within Development (Application Insights / Log Analytics / Alerting / Performance Monitoring / Production Troubleshooting) Database Design / Optimization - Oracle / MS SQL Server / NoSQL (CosmosDB) SQL Scripting (hands-on) Designing / Evolving Database Schemas Performing Query Performance Analysis Indexing to Deliver Scalable / Performant Services Problem Solving / Collaboration - Driving Root Cause Analysis / Debugging for .NET Applications in Azure Collaborating within SRE / Cross-Functional Teams PREFERRED (not required) Azure Governance / Best Practices - Azure Policy / GitHub Copilot Context / Embedding SRE Practices Early in Development Lifecycle Architecture Frameworks (Familiarity) - Azure Well-Architected Framework (Reliability / Operational Excellence) Advanced AKS / Hybrid - Exposure to Advanced AKS Topics (Cluster Autoscaling / Service Mesh / Cost Optimization) / Hybrid Scenarios (Azure Arc) AI / Automation Enablement - Driving Adoption of AI-Powered Tools (GitHub Copilot) to Improve Developer Productivity / Code Quality By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.
09/30/2026
Full time
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.
Job Description Job Description Essential Responsibilities Define enterprise-wide platform strategy, vision, and target-state architectures for platforms such as Microsoft Fabric, Foundry/OpenAI, Databricks, and Synapse. Own the end-to-end lifecycle of cloud platforms. Establish standards and guardrails across all platform engineering domains. Drive innovation in cloud, data, and AI platforms (Fabric, OpenAI/Foundry, etc.). Lead large-scale transformation initiatives (e.g., platform modernization, DC exit, AI adoption). Act as the highest-level escalation point for technical decisions and complex issues. Influence enterprise architecture boards, governance, and regulatory alignment. Drive cost optimization strategies and large-scale efficiency improvements. Foster platform product mindset across the organization (self-service, reuse, enablement). Mentor senior and lead engineers; shape engineering culture and technical direction. Partner with executives and business leaders to translate strategy into platform capabilities. Education & Years of Experience Minimum - 4 Year Bachelors Degree in Computer Science, Engineering or related Minimum - 10 Years of Platform engineering, cloud infrastructure, SRE roles or related In Lieu of Education 12 Years of Supporting enterprise-level environments in platform engineering, cloud infrastructure or SRE roles or related License/Certifications/Training Preferred - Azure DevOps Engineer Expert (or equivalent DevOps focused certification) Preferred - Fabric Analytics Engineer Associate (or equivalent data platform focused certification) Preferred - Azure AI Engineer Associate (or equivalent AI focused certification) Preferred - HashiCorp Certified: Terraform Professional (or equivalent IaC focused certification) Preferred - Azure Solutions Architect Expert (or equivalent Cloud focused certification) Compensation & Benefits: Typical hiring range: $119,400.00 to $204,600.00 Annually. Actual compensation will be determined using factors such as experience, skills & knowledge. Benefits: Alliant provides a benefits package including health care, vision, dental, and 401k with employer match including: Annual performance bonus Work from home up to 3 days a week Paid parental leave Employee discount programs Time off including paid personal and sick days 11 paid holidays Education reimbursement Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours, and job status such as regular full-time, regular part-time, or temporary employment. Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives. The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.
09/28/2026
Full time
Job Description Job Description Essential Responsibilities Define enterprise-wide platform strategy, vision, and target-state architectures for platforms such as Microsoft Fabric, Foundry/OpenAI, Databricks, and Synapse. Own the end-to-end lifecycle of cloud platforms. Establish standards and guardrails across all platform engineering domains. Drive innovation in cloud, data, and AI platforms (Fabric, OpenAI/Foundry, etc.). Lead large-scale transformation initiatives (e.g., platform modernization, DC exit, AI adoption). Act as the highest-level escalation point for technical decisions and complex issues. Influence enterprise architecture boards, governance, and regulatory alignment. Drive cost optimization strategies and large-scale efficiency improvements. Foster platform product mindset across the organization (self-service, reuse, enablement). Mentor senior and lead engineers; shape engineering culture and technical direction. Partner with executives and business leaders to translate strategy into platform capabilities. Education & Years of Experience Minimum - 4 Year Bachelors Degree in Computer Science, Engineering or related Minimum - 10 Years of Platform engineering, cloud infrastructure, SRE roles or related In Lieu of Education 12 Years of Supporting enterprise-level environments in platform engineering, cloud infrastructure or SRE roles or related License/Certifications/Training Preferred - Azure DevOps Engineer Expert (or equivalent DevOps focused certification) Preferred - Fabric Analytics Engineer Associate (or equivalent data platform focused certification) Preferred - Azure AI Engineer Associate (or equivalent AI focused certification) Preferred - HashiCorp Certified: Terraform Professional (or equivalent IaC focused certification) Preferred - Azure Solutions Architect Expert (or equivalent Cloud focused certification) Compensation & Benefits: Typical hiring range: $119,400.00 to $204,600.00 Annually. Actual compensation will be determined using factors such as experience, skills & knowledge. Benefits: Alliant provides a benefits package including health care, vision, dental, and 401k with employer match including: Annual performance bonus Work from home up to 3 days a week Paid parental leave Employee discount programs Time off including paid personal and sick days 11 paid holidays Education reimbursement Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours, and job status such as regular full-time, regular part-time, or temporary employment. Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives. The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
09/28/2026
Full time
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description Description: MDVIP: Transforming Primary Care, One Patient at a Time MDVIP is a national leader in personalized healthcare, empowering over 425,000 members to achieve their health and wellness goals through a network of more than 1,400 concierge primary care physicians. Our program emphasizes preventive medicine, offering comprehensive screenings, advanced diagnostics, and individualized wellness plans. Recognized as a Great Place to Work since 2018, MDVIP is committed to excellence in patient care and employee satisfaction. Position Summary The Network Security Engineer is an individual contributor role reporting to the Sr. Network Operations Manager. This is a contract-to-perm position (6-month contract), based in Boca Raton, FL (Hybrid), supporting the Boca Raton and Atlanta (ATL) data centers. This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization's on-premises and hybrid infrastructure. The Network Security Engineer sustains a predictable remediation cadence across recurring security obligations - including monthly patching, zero-day response, vulnerability remediation, OS hardening, and cloud security score - while maintaining core platform services that underpin 24/7 operational reliability. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads and existing staffing, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments is completed on schedule. Key Responsibilities Security Remediation & Compliance Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs; work with Project Managers, technology stack owners, and third-party resources to ensure timely delivery. Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments. Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere). Perform vulnerability remediation and OS/system hardening in line with established security baselines and audit requirements. Maintain a remediation burndown and support reporting on patch/vulnerability KPIs, including critical remediation timelines and cloud security score. Core Platform & Infrastructure Ownership Track Azure Security Score trends and drive remediation of flagged recommendations, providing regular posture reporting to leadership and audit stakeholders. Manage the full PKI infrastructure/SSL certificate lifecycle, including issuance, renewal, tracking, and remediation of expiring or non-compliant certificates, and manage key vault rotations for critical cloud-hosted applications. Utilize automation tools to deploy required machine certificates across the organization. Manage syslog retention and forwarding across on-premises and cloud infrastructure, supporting the Security team's SIEM ingestion, correlation, and compliance reporting needs. Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning. Review and administer security tools to harden network edge security, including next generation firewalls, SD-WAN, and switching, striving for zero trust networks. Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass. Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls. Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices. Review and secure SDLC servers and hosted applications, both on-premises and in Azure, applying measures to keep all public endpoints secure. Operational Reliability & Risk Reduction Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables. Identify and reduce single-point-of-failure risk by documenting procedures and cross-training across PKI, AD, cloud access, segmentation, and patching functions. Partner with the Azure DevOps and Security teams to align on-prem/hybrid remediation with broader cloud governance and security initiatives. Escalate emerging risks, audit exceptions, and outage-driving conflicts between operational and remediation priorities to leadership. Key Competencies Analytical: synthesizes complex or diverse technical information, using intuition and experience to complement data. Collaboration: openly partners with security operations, DevOps, and business stakeholders, valuing diverse perspectives and building productive relationships. Communication: listens and responds effectively to stakeholder needs; writes and speaks clearly and persuasively. Initiative and personal accountability: identifies and creates solutions independently, sets and meets deadlines, and reports timely and prepared. Problem solving/decision making: thinks strategically, drawing on diverse sources to identify issues, risks, and trends and determine optimal, timely solutions. Strong troubleshooting skills and the ability to manage competing priorities between reactive operational work and scheduled remediation projects. Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours. Ability to travel periodically between the Boca Raton, FL and Atlanta (ATL) data centers as needed. Requirements: Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Security, or a related field; at least five (5) years of related business experience in network security, systems engineering, or infrastructure operations in an enterprise environment, or an equivalent combination of education and professional experience. Hands-on experience with both on-premises and cloud infrastructure platforms, including vulnerability management, patch management, and OS hardening across Windows and/or Linux server environments. Experience with PKI/SSL certificate lifecycle management and IAM/PAM tools (e.g., BeyondTrust or equivalent). Experience partnering with security operations/SIEM teams to onboard new log sources and ensure reliable syslog delivery from network infrastructure. Working knowledge of hybrid Active Directory/Microsoft Entra ID environments and familiarity with network segmentation concepts and tools (e.g., Illumio or comparable micro-segmentation platforms). Experience supporting audit and compliance remediation cycles, such as HIPAA assessments, SRAs, or penetration test findings. Proficiency with firewalls and network security appliances (Palo Alto, Fortinet, Cisco Meraki, Cisco switches), SD-WAN/next-generation firewall administration, and wireless security/NAC (Cisco wireless, HPE Aruba ClearPass). This is a hybrid role based in Boca Raton, FL, with periodic on-site support required at the Boca Raton and Atlanta (ATL) data centers. At no time may work be performed, or computer systems accessed, from outside of the U.S. Preferred Qualifications Vendor-specific certifications, Microsoft Azure, Security+, CISSP, GIAC, or an equivalent security certification. Scripting/automation experience (e.g., PowerShell) for remediation and hardening tasks. Why Join MDVIP? Be part of a mission-driven organization leading innovation in personalized healthcare. Drive transformation and growth in a dynamic, fast-paced environment. Competitive Compensation: Attractive base salary complemented by performance-based incentives. Comprehensive Benefits: Health, dental, vision insurance, and retirement plans. Professional Development: Access to ongoing training and leadership development programs. Positive Work Environment: Consistently recognized as a Great Place to Work , fostering a culture of collaboration and excellence. MDVIP is an Equal Opportunity Employer and is committed to fostering an inclusive and diverse workplace. We welcome applicants of all backgrounds and do not discriminate based on race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other protected status. We believe that diversity and inclusion drive innovation and strengthen our company culture. If you require accommodations during the application or interview process, please let us know, and we will be happy to assist. Pay Transparency: Our compensation reflects the cost of labor across appropriate US geographic markets. Pay is based on several factors including but not limited to market location and may vary depending on job-related knowledge, skills, and education/training and a candidate's work experience. Hired applicants are offered annual incentive compensation programs, subject to applicable eligibility requirements . click apply for full job details
09/28/2026
Full time
Job Description Job Description Description: MDVIP: Transforming Primary Care, One Patient at a Time MDVIP is a national leader in personalized healthcare, empowering over 425,000 members to achieve their health and wellness goals through a network of more than 1,400 concierge primary care physicians. Our program emphasizes preventive medicine, offering comprehensive screenings, advanced diagnostics, and individualized wellness plans. Recognized as a Great Place to Work since 2018, MDVIP is committed to excellence in patient care and employee satisfaction. Position Summary The Network Security Engineer is an individual contributor role reporting to the Sr. Network Operations Manager. This is a contract-to-perm position (6-month contract), based in Boca Raton, FL (Hybrid), supporting the Boca Raton and Atlanta (ATL) data centers. This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization's on-premises and hybrid infrastructure. The Network Security Engineer sustains a predictable remediation cadence across recurring security obligations - including monthly patching, zero-day response, vulnerability remediation, OS hardening, and cloud security score - while maintaining core platform services that underpin 24/7 operational reliability. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads and existing staffing, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments is completed on schedule. Key Responsibilities Security Remediation & Compliance Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs; work with Project Managers, technology stack owners, and third-party resources to ensure timely delivery. Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments. Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere). Perform vulnerability remediation and OS/system hardening in line with established security baselines and audit requirements. Maintain a remediation burndown and support reporting on patch/vulnerability KPIs, including critical remediation timelines and cloud security score. Core Platform & Infrastructure Ownership Track Azure Security Score trends and drive remediation of flagged recommendations, providing regular posture reporting to leadership and audit stakeholders. Manage the full PKI infrastructure/SSL certificate lifecycle, including issuance, renewal, tracking, and remediation of expiring or non-compliant certificates, and manage key vault rotations for critical cloud-hosted applications. Utilize automation tools to deploy required machine certificates across the organization. Manage syslog retention and forwarding across on-premises and cloud infrastructure, supporting the Security team's SIEM ingestion, correlation, and compliance reporting needs. Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning. Review and administer security tools to harden network edge security, including next generation firewalls, SD-WAN, and switching, striving for zero trust networks. Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass. Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls. Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices. Review and secure SDLC servers and hosted applications, both on-premises and in Azure, applying measures to keep all public endpoints secure. Operational Reliability & Risk Reduction Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables. Identify and reduce single-point-of-failure risk by documenting procedures and cross-training across PKI, AD, cloud access, segmentation, and patching functions. Partner with the Azure DevOps and Security teams to align on-prem/hybrid remediation with broader cloud governance and security initiatives. Escalate emerging risks, audit exceptions, and outage-driving conflicts between operational and remediation priorities to leadership. Key Competencies Analytical: synthesizes complex or diverse technical information, using intuition and experience to complement data. Collaboration: openly partners with security operations, DevOps, and business stakeholders, valuing diverse perspectives and building productive relationships. Communication: listens and responds effectively to stakeholder needs; writes and speaks clearly and persuasively. Initiative and personal accountability: identifies and creates solutions independently, sets and meets deadlines, and reports timely and prepared. Problem solving/decision making: thinks strategically, drawing on diverse sources to identify issues, risks, and trends and determine optimal, timely solutions. Strong troubleshooting skills and the ability to manage competing priorities between reactive operational work and scheduled remediation projects. Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours. Ability to travel periodically between the Boca Raton, FL and Atlanta (ATL) data centers as needed. Requirements: Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Security, or a related field; at least five (5) years of related business experience in network security, systems engineering, or infrastructure operations in an enterprise environment, or an equivalent combination of education and professional experience. Hands-on experience with both on-premises and cloud infrastructure platforms, including vulnerability management, patch management, and OS hardening across Windows and/or Linux server environments. Experience with PKI/SSL certificate lifecycle management and IAM/PAM tools (e.g., BeyondTrust or equivalent). Experience partnering with security operations/SIEM teams to onboard new log sources and ensure reliable syslog delivery from network infrastructure. Working knowledge of hybrid Active Directory/Microsoft Entra ID environments and familiarity with network segmentation concepts and tools (e.g., Illumio or comparable micro-segmentation platforms). Experience supporting audit and compliance remediation cycles, such as HIPAA assessments, SRAs, or penetration test findings. Proficiency with firewalls and network security appliances (Palo Alto, Fortinet, Cisco Meraki, Cisco switches), SD-WAN/next-generation firewall administration, and wireless security/NAC (Cisco wireless, HPE Aruba ClearPass). This is a hybrid role based in Boca Raton, FL, with periodic on-site support required at the Boca Raton and Atlanta (ATL) data centers. At no time may work be performed, or computer systems accessed, from outside of the U.S. Preferred Qualifications Vendor-specific certifications, Microsoft Azure, Security+, CISSP, GIAC, or an equivalent security certification. Scripting/automation experience (e.g., PowerShell) for remediation and hardening tasks. Why Join MDVIP? Be part of a mission-driven organization leading innovation in personalized healthcare. Drive transformation and growth in a dynamic, fast-paced environment. Competitive Compensation: Attractive base salary complemented by performance-based incentives. Comprehensive Benefits: Health, dental, vision insurance, and retirement plans. Professional Development: Access to ongoing training and leadership development programs. Positive Work Environment: Consistently recognized as a Great Place to Work , fostering a culture of collaboration and excellence. MDVIP is an Equal Opportunity Employer and is committed to fostering an inclusive and diverse workplace. We welcome applicants of all backgrounds and do not discriminate based on race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other protected status. We believe that diversity and inclusion drive innovation and strengthen our company culture. If you require accommodations during the application or interview process, please let us know, and we will be happy to assist. Pay Transparency: Our compensation reflects the cost of labor across appropriate US geographic markets. Pay is based on several factors including but not limited to market location and may vary depending on job-related knowledge, skills, and education/training and a candidate's work experience. Hired applicants are offered annual incentive compensation programs, subject to applicable eligibility requirements . click apply for full job details