This job is with S&P Global, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 15 The Team: Enterprise Technology & Platforms delivers cross-enterprise technology products, services, and capabilities to S&P Global's organizations and employees worldwide. The Developer Experience and Product Enablement function will own and evolve the enterprise product and software development lifecycle toolchain - the agentic PDLC - bringing together platforms, governance, support, productivity insights, and AI-native product management and engineering capabilities. It spans the full path from discovery and customer insight through definition, design, build, release, and in-market measurement, treating product management and engineering as one connected system rather than two adjacent toolsets. The team will operate as an enterprise hub, partnering closely with divisional CTO and product organizations and embedded practitioners to preserve business context while creating a consistent, scalable experience for both builders and the product leaders who direct them. Responsibilities and Impact: Approximately 10,000 developers across S&P Global build software on a common toolchain, and the product managers, designers, and analysts who decide what gets built work alongside them on a second, largely disconnected one. This role owns both and joins them. That toolchain is critical infrastructure for product discovery, software delivery, engineering productivity, security, resilience, and AI-native development. The role will reduce fragmentation and duplication, close the handoff gaps between product intent and shipped software, strengthen governance and support, and make developer and product experience a measurable strategic capability. Set the enterprise Developer Experience and Product Enablement strategy, product vision, roadmap, operating model, and investment priorities in partnership with the CIO leadership team, divisional CTOs, divisional heads of product, and other senior technology and product leaders. Own the full lifecycle of enterprise software development platforms and tools, including source code management, code collaboration, CI/CD, build engineering, developer environments, code quality and scanning, cloud development infrastructure, and related integrations. Own the full lifecycle of enterprise product management platforms and tools, including customer and market research repositories, idea intake and opportunity assessment, roadmapping and portfolio planning, requirements and specification authoring, design and prototyping, work management and backlog tooling, experimentation and feature management, product analytics, and voice-of-customer and feedback aggregation. Connect the two halves into a single agentic PDLC, establishing the traceable thread from customer insight to opportunity, specification, design, commit, release, and in-market outcome, so that product intent, engineering work, and measured impact reconcile in one system of record rather than in status decks. Manage the toolchain as a coherent portfolio of enterprise products, with clear customer outcomes, service levels, adoption goals, cost transparency, platform health measures, and accountable product ownership. Build a trusted partnership model with divisional CTOs, heads of product, executive sponsors, and embedded divisional practitioners to align enterprise standards with business-specific product and engineering requirements. Lead the consolidation of fragmented tooling, resources, licenses, support processes, and automation across both the product and engineering estates, reducing duplication while managing transitions without disrupting delivery. Establish a scalable support and self-service ecosystem for developers and product teams, including developer and product portals, template and artifact libraries, knowledge management, onboarding, access and license management, AI-assisted triage, and expert escalation. Own advocacy and community across both disciplines, including communities of practice, technical and product evangelism, onboarding and enablement content, craft standards for specifications and discovery practice, change communications, and structured feedback loops that earn adoption rather than mandate it. Own the innersource ecosystem, applying open-source working practice to proprietary code so that shared libraries, contribution standards, maintainer stewardship, and IP guardrails make reuse across divisions the default rather than the exception. Define and govern the enterprise approach to AI-native and agentic product development and software engineering, including approved tools, guardrails, model and data access, reusable agent workflows spanning research synthesis, specification drafting, prototype generation, code generation, and release readiness, platform integrations, experimentation, and responsible adoption. Create an enterprise measurement system for product and developer productivity and experience, including DORA metrics, cycle time from idea to release, adoption and utilization measures, tool ROI, practitioner sentiment, friction mapping, product outcome and experimentation results, and executive reporting. Build and lead a high-performing global organization across platform engineering, product management, product operations, design and research enablement, developer support, data and analytics, and forward-deployed AI engineering, with clear accountability and a strong talent strategy. Maintain strong operational rigor, security, resilience, financial management, vendor governance, and continuous improvement across the enterprise toolchain. Compensation/Benefits Information: S&P Global states that the anticipated base salary range for this position is $220,000 to $350,000. Final base salary for this role will be based on the individual's geographic location, as well as experience level, skill set, training, licenses and certifications. In addition to base compensation, this role is eligible for an annual incentive plan. This role is not eligible for additional compensation such as an annual incentive bonus or sales commission plan. This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here . What We're Looking For: Basic Required Qualifications: A proven enterprise technology leader who has previously built, transformed, and operated a large-scale Developer Experience, developer platform, DevSecOps, or software engineering enablement function. Minimum of 15 years of progressive technology leadership experience, including responsibility for globally scaled engineering platforms, products, or shared services. Has held enterprise decision rights over tooling used by teams outside their own reporting line, with examples of contested standardization decisions reached alongside divisional CTOs and the trade-offs accepted on risk, cost, and developer experience. Direct ownership of modern product and software development lifecycle platforms in production, including design, source control, CI/CD, building systems, artifact management, developer environments, cloud development infrastructure, application security tooling, and platform integrations. Has owned a platform product roadmap with developers as the customer, including at least one decision to retire or deprioritize a tool that still had an installed user base. Has consolidated overlapping toolchains across multiple business units, and can speak to what was retired, what was recovered in licenses and effort, and how migrations were sequenced without interrupting delivery. Has rolled out AI-assisted development tooling to a developer population at scale, with measured adoption to show for it and defensible answers on guardrails, intellectual property, and model access. Has hired, built, and led a globally distributed organization spanning platform engineering, product management, developer support, and analytics. Excellent executive communication and stakeholder management skills, including the ability to translate technical complexity into clear business decisions, trade-offs, and measurable outcomes. Undergraduate degree required; advanced degree or equivalent relevant experience preferred. Additional Preferred Qualifications: Experience operating developer platforms in a highly regulated, security-conscious, or financial services environment. Experience designing hub-and-spoke operating models that combine enterprise platform ownership with embedded divisional engineering expertise. Has stood up a developer productivity measurement program - DORA metrics, developer sentiment research, adoption and cost data - and used its findings to change a roadmap or investment decision. Experience with enterprise platforms and integrations such as GitHub, Jira, Azure DevOps, Figma, Playwright, CI/CD systems, artifact repositories, developer portals, and API or model context protocol integration layers. Track record of using automation, self-service, data, and AI to improve developer experience and scale support without compromising quality or control. Actively maintains an external view of engineering platform and AI-assisted development practice - through vendor and peer networks, industry forums, or open-source and community participation. . click apply for full job details
11/13/2026
Full time
This job is with S&P Global, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 15 The Team: Enterprise Technology & Platforms delivers cross-enterprise technology products, services, and capabilities to S&P Global's organizations and employees worldwide. The Developer Experience and Product Enablement function will own and evolve the enterprise product and software development lifecycle toolchain - the agentic PDLC - bringing together platforms, governance, support, productivity insights, and AI-native product management and engineering capabilities. It spans the full path from discovery and customer insight through definition, design, build, release, and in-market measurement, treating product management and engineering as one connected system rather than two adjacent toolsets. The team will operate as an enterprise hub, partnering closely with divisional CTO and product organizations and embedded practitioners to preserve business context while creating a consistent, scalable experience for both builders and the product leaders who direct them. Responsibilities and Impact: Approximately 10,000 developers across S&P Global build software on a common toolchain, and the product managers, designers, and analysts who decide what gets built work alongside them on a second, largely disconnected one. This role owns both and joins them. That toolchain is critical infrastructure for product discovery, software delivery, engineering productivity, security, resilience, and AI-native development. The role will reduce fragmentation and duplication, close the handoff gaps between product intent and shipped software, strengthen governance and support, and make developer and product experience a measurable strategic capability. Set the enterprise Developer Experience and Product Enablement strategy, product vision, roadmap, operating model, and investment priorities in partnership with the CIO leadership team, divisional CTOs, divisional heads of product, and other senior technology and product leaders. Own the full lifecycle of enterprise software development platforms and tools, including source code management, code collaboration, CI/CD, build engineering, developer environments, code quality and scanning, cloud development infrastructure, and related integrations. Own the full lifecycle of enterprise product management platforms and tools, including customer and market research repositories, idea intake and opportunity assessment, roadmapping and portfolio planning, requirements and specification authoring, design and prototyping, work management and backlog tooling, experimentation and feature management, product analytics, and voice-of-customer and feedback aggregation. Connect the two halves into a single agentic PDLC, establishing the traceable thread from customer insight to opportunity, specification, design, commit, release, and in-market outcome, so that product intent, engineering work, and measured impact reconcile in one system of record rather than in status decks. Manage the toolchain as a coherent portfolio of enterprise products, with clear customer outcomes, service levels, adoption goals, cost transparency, platform health measures, and accountable product ownership. Build a trusted partnership model with divisional CTOs, heads of product, executive sponsors, and embedded divisional practitioners to align enterprise standards with business-specific product and engineering requirements. Lead the consolidation of fragmented tooling, resources, licenses, support processes, and automation across both the product and engineering estates, reducing duplication while managing transitions without disrupting delivery. Establish a scalable support and self-service ecosystem for developers and product teams, including developer and product portals, template and artifact libraries, knowledge management, onboarding, access and license management, AI-assisted triage, and expert escalation. Own advocacy and community across both disciplines, including communities of practice, technical and product evangelism, onboarding and enablement content, craft standards for specifications and discovery practice, change communications, and structured feedback loops that earn adoption rather than mandate it. Own the innersource ecosystem, applying open-source working practice to proprietary code so that shared libraries, contribution standards, maintainer stewardship, and IP guardrails make reuse across divisions the default rather than the exception. Define and govern the enterprise approach to AI-native and agentic product development and software engineering, including approved tools, guardrails, model and data access, reusable agent workflows spanning research synthesis, specification drafting, prototype generation, code generation, and release readiness, platform integrations, experimentation, and responsible adoption. Create an enterprise measurement system for product and developer productivity and experience, including DORA metrics, cycle time from idea to release, adoption and utilization measures, tool ROI, practitioner sentiment, friction mapping, product outcome and experimentation results, and executive reporting. Build and lead a high-performing global organization across platform engineering, product management, product operations, design and research enablement, developer support, data and analytics, and forward-deployed AI engineering, with clear accountability and a strong talent strategy. Maintain strong operational rigor, security, resilience, financial management, vendor governance, and continuous improvement across the enterprise toolchain. Compensation/Benefits Information: S&P Global states that the anticipated base salary range for this position is $220,000 to $350,000. Final base salary for this role will be based on the individual's geographic location, as well as experience level, skill set, training, licenses and certifications. In addition to base compensation, this role is eligible for an annual incentive plan. This role is not eligible for additional compensation such as an annual incentive bonus or sales commission plan. This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here . What We're Looking For: Basic Required Qualifications: A proven enterprise technology leader who has previously built, transformed, and operated a large-scale Developer Experience, developer platform, DevSecOps, or software engineering enablement function. Minimum of 15 years of progressive technology leadership experience, including responsibility for globally scaled engineering platforms, products, or shared services. Has held enterprise decision rights over tooling used by teams outside their own reporting line, with examples of contested standardization decisions reached alongside divisional CTOs and the trade-offs accepted on risk, cost, and developer experience. Direct ownership of modern product and software development lifecycle platforms in production, including design, source control, CI/CD, building systems, artifact management, developer environments, cloud development infrastructure, application security tooling, and platform integrations. Has owned a platform product roadmap with developers as the customer, including at least one decision to retire or deprioritize a tool that still had an installed user base. Has consolidated overlapping toolchains across multiple business units, and can speak to what was retired, what was recovered in licenses and effort, and how migrations were sequenced without interrupting delivery. Has rolled out AI-assisted development tooling to a developer population at scale, with measured adoption to show for it and defensible answers on guardrails, intellectual property, and model access. Has hired, built, and led a globally distributed organization spanning platform engineering, product management, developer support, and analytics. Excellent executive communication and stakeholder management skills, including the ability to translate technical complexity into clear business decisions, trade-offs, and measurable outcomes. Undergraduate degree required; advanced degree or equivalent relevant experience preferred. Additional Preferred Qualifications: Experience operating developer platforms in a highly regulated, security-conscious, or financial services environment. Experience designing hub-and-spoke operating models that combine enterprise platform ownership with embedded divisional engineering expertise. Has stood up a developer productivity measurement program - DORA metrics, developer sentiment research, adoption and cost data - and used its findings to change a roadmap or investment decision. Experience with enterprise platforms and integrations such as GitHub, Jira, Azure DevOps, Figma, Playwright, CI/CD systems, artifact repositories, developer portals, and API or model context protocol integration layers. Track record of using automation, self-service, data, and AI to improve developer experience and scale support without compromising quality or control. Actively maintains an external view of engineering platform and AI-assisted development practice - through vendor and peer networks, industry forums, or open-source and community participation. . click apply for full job details
Cambridge International Systems Inc
Adams Run, South Carolina
Job Description Job Description AWS DevSecOps Engineer - Secret North Charleston, SC Cambridge International Systems, Inc. Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you'll work alongside top talent worldwide, tackling some of today's most complex and critical challenges in defense and security. We are currently seeking an AWS DevSecOps Engineer to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, SC. This is a full-time, CONUS, on-site office position requiring attendance five days per week, with one optional telework day. An active DoD Secret security clearance is required. What You'll Do As an AWS DevSecOps Engineer, you will combine cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering to design secure systems, automate operations, and ensure the reliability, scalability, and security of AWS cloud environments. An automation-first mindset is critical, with a focus on eliminating manual security tasks through self-healing and compliant infrastructure. You will: Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing. Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline. Automate operational tasks and security workflows using Python, Bash, or Go. Create SOAR-style automated incident response playbooks and threat detection routines. Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube. Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation). Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment. Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management. Deploy, configure, and manage AWS-native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs. Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS. Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats. Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services. Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch. Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management. Conduct performance, availability, and security assessments across cloud and container environments. Troubleshoot incidents, perform root cause analysis, and implement durable remediation. Maintain system documentation, architecture diagrams, and security procedures. Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations. Automate permission audits and cloud security posture monitoring. Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001. What You'll Bring Required Qualifications: Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position. Education & Experience: Bachelor's degree in Computer Science or related Engineering field from an Accreditation Board for Engineering and Technology (ABET) accredited program. Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps. Current Security+ certification required. Experience overseeing the creation of hybrid software, web, and hardware products from initial specifications through final rollout and maintenance. Technical Expertise: Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security. Strong automation mindset with a history of developing guardrails, auto-remediation, or security tooling. Proficiency in Python, Bash, or Go. Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub. Proficiency with Terraform or CloudFormation. Experience integrating various network operating systems, application programs, and hardware devices through system specification, design, coding, testing, and maintenance support. Clearance: Must have a current and active DoD Secret security clearance. Preferred (Nice to Have): Experience implementing SOAR platforms or building serverless auto-remediation using Lambda/Step Functions. AWS Security Specialty or AWS DevOps Professional certification. Experience securing Kubernetes/EKS workloads and container registries. Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001. Travel Requirements Physical & Work Environment Requirements On-site office environment in North Charleston, SC, requiring attendance five days per week, with one optional telework day. Periods of prolonged sitting and/or standing, including desk-based computer work. Regular use of computers, monitors, networking equipment, and other job-related technology. Work is performed in a secure facility where personal electronic devices (including Bluetooth- or Wi-Fi-enabled devices) may be restricted. Occasional extended work hours, including evenings or weekends, as needed. Communication with team members, customers, and stakeholders through verbal and written methods. Ability to manage competing priorities, work under deadlines, and maintain attention to detail. Vaccine Recommendations by AOR Health.mil Background & Security Employment is contingent upon successful background investigation Alcohol and Drug screening may be required for federal contract compliance Benefits & Perks We believe in investing in our team-both professionally and personally: Medical, dental, vision, life, accident, and critical illness insurance 401(k) immediate vesting and match Paid time off and company holidays Generous tuition & training support Relocation assistance Sign-on and performance-based bonuses Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Cambridge International Systems is committed to investing in our employees and their future by providing them with competitive compensation, career development opportunities and comfortable working conditions. Available to part-time and temporary employees are the benefits below: Referral bonuses Performance-based bonuses Community involvement & outreach Wellness program Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Join Us If you're driven by mission, technology, and teamwork-we want to hear from you. Cambridge is growing, and this position is just one of many opportunities on our global team. Know someone perfect for the role? Referrals are welcome-both employees and non-employees may qualify for a bonus. Apply today and help shape the future of secure cloud computing for national security. About Cambridge International Systems At Cambridge, we believe innovation and agility thrive when people work together. Our culture is built on teamwork, collaboration, and a commitment to listening, learning, and bringing out the best ideas in every employee. We empower our people to take on challenges, persevere to get the job done, and lead with integrity in everything we do. Our commitment to our employees and workplace culture has been recognized through the DAV Patriot Small Employer of the Year Award in 2026 and the Cigna Healthy Workforce Gold Designation in 2025. These recognitions reflect our ongoing commitment to creating a workplace where employees are valued, supported, and empowered to do their best work. At Cambridge, we are proud to foster an environment where people can grow, contribute, and make a meaningful impact. Learn more at . We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to any protected status under applicable law or other similar factors that are not job-related. We encourage all qualified individuals to apply for employment. Selected applicants may be subject to a background investigation and/or education verification. We provide reasonable accommodation for qualified individuals with disabilities in accordance with federal, state, and local law. If you require a reasonable accommodation to participate in the application process or to perform the essential functions of the position, please contact our Recruiting Team at . Powered by JazzHR 5zpssyT3Zw
11/12/2026
Full time
Job Description Job Description AWS DevSecOps Engineer - Secret North Charleston, SC Cambridge International Systems, Inc. Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you'll work alongside top talent worldwide, tackling some of today's most complex and critical challenges in defense and security. We are currently seeking an AWS DevSecOps Engineer to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, SC. This is a full-time, CONUS, on-site office position requiring attendance five days per week, with one optional telework day. An active DoD Secret security clearance is required. What You'll Do As an AWS DevSecOps Engineer, you will combine cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering to design secure systems, automate operations, and ensure the reliability, scalability, and security of AWS cloud environments. An automation-first mindset is critical, with a focus on eliminating manual security tasks through self-healing and compliant infrastructure. You will: Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing. Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline. Automate operational tasks and security workflows using Python, Bash, or Go. Create SOAR-style automated incident response playbooks and threat detection routines. Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube. Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation). Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment. Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management. Deploy, configure, and manage AWS-native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs. Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS. Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats. Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services. Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch. Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management. Conduct performance, availability, and security assessments across cloud and container environments. Troubleshoot incidents, perform root cause analysis, and implement durable remediation. Maintain system documentation, architecture diagrams, and security procedures. Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations. Automate permission audits and cloud security posture monitoring. Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001. What You'll Bring Required Qualifications: Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position. Education & Experience: Bachelor's degree in Computer Science or related Engineering field from an Accreditation Board for Engineering and Technology (ABET) accredited program. Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps. Current Security+ certification required. Experience overseeing the creation of hybrid software, web, and hardware products from initial specifications through final rollout and maintenance. Technical Expertise: Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security. Strong automation mindset with a history of developing guardrails, auto-remediation, or security tooling. Proficiency in Python, Bash, or Go. Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub. Proficiency with Terraform or CloudFormation. Experience integrating various network operating systems, application programs, and hardware devices through system specification, design, coding, testing, and maintenance support. Clearance: Must have a current and active DoD Secret security clearance. Preferred (Nice to Have): Experience implementing SOAR platforms or building serverless auto-remediation using Lambda/Step Functions. AWS Security Specialty or AWS DevOps Professional certification. Experience securing Kubernetes/EKS workloads and container registries. Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001. Travel Requirements Physical & Work Environment Requirements On-site office environment in North Charleston, SC, requiring attendance five days per week, with one optional telework day. Periods of prolonged sitting and/or standing, including desk-based computer work. Regular use of computers, monitors, networking equipment, and other job-related technology. Work is performed in a secure facility where personal electronic devices (including Bluetooth- or Wi-Fi-enabled devices) may be restricted. Occasional extended work hours, including evenings or weekends, as needed. Communication with team members, customers, and stakeholders through verbal and written methods. Ability to manage competing priorities, work under deadlines, and maintain attention to detail. Vaccine Recommendations by AOR Health.mil Background & Security Employment is contingent upon successful background investigation Alcohol and Drug screening may be required for federal contract compliance Benefits & Perks We believe in investing in our team-both professionally and personally: Medical, dental, vision, life, accident, and critical illness insurance 401(k) immediate vesting and match Paid time off and company holidays Generous tuition & training support Relocation assistance Sign-on and performance-based bonuses Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Cambridge International Systems is committed to investing in our employees and their future by providing them with competitive compensation, career development opportunities and comfortable working conditions. Available to part-time and temporary employees are the benefits below: Referral bonuses Performance-based bonuses Community involvement & outreach Wellness program Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Join Us If you're driven by mission, technology, and teamwork-we want to hear from you. Cambridge is growing, and this position is just one of many opportunities on our global team. Know someone perfect for the role? Referrals are welcome-both employees and non-employees may qualify for a bonus. Apply today and help shape the future of secure cloud computing for national security. About Cambridge International Systems At Cambridge, we believe innovation and agility thrive when people work together. Our culture is built on teamwork, collaboration, and a commitment to listening, learning, and bringing out the best ideas in every employee. We empower our people to take on challenges, persevere to get the job done, and lead with integrity in everything we do. Our commitment to our employees and workplace culture has been recognized through the DAV Patriot Small Employer of the Year Award in 2026 and the Cigna Healthy Workforce Gold Designation in 2025. These recognitions reflect our ongoing commitment to creating a workplace where employees are valued, supported, and empowered to do their best work. At Cambridge, we are proud to foster an environment where people can grow, contribute, and make a meaningful impact. Learn more at . We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to any protected status under applicable law or other similar factors that are not job-related. We encourage all qualified individuals to apply for employment. Selected applicants may be subject to a background investigation and/or education verification. We provide reasonable accommodation for qualified individuals with disabilities in accordance with federal, state, and local law. If you require a reasonable accommodation to participate in the application process or to perform the essential functions of the position, please contact our Recruiting Team at . Powered by JazzHR 5zpssyT3Zw
Job Description Job Description Pay: $53.35 - $88.03 hourly, depending on experience Benefits: Medical, Dental, Vision, Paid Time Off, Paid Holidays, Employee Assistance Program, and other company-sponsored benefits Security Clearance: Ability to obtain and maintain a government security clearance if required Are you an experienced software engineering professional who enjoys leading development efforts, solving complex technical challenges, and building innovative solutions that support mission success? PEMCCO is seeking a Senior Software Engineer to provide technical leadership in the design, development, integration, testing, and sustainment of software applications and systems supporting critical government operations. This role is ideal for a senior engineer who thrives in collaborative environments, enjoys mentoring technical teams, and is passionate about delivering secure, scalable, and high-performing software solutions. This opportunity is a strong fit for candidates with experience in software engineering, software architecture, systems development, application development, cloud computing, DevSecOps, Agile development, artificial intelligence, machine learning, or enterprise application support. About PEMCCO PEMCCO supports complex technical and operational programs by providing skilled professionals who help customers achieve mission success. We offer opportunities to work on impactful projects, collaborate with talented teams, and contribute to innovative solutions that support critical government operations. Job Overview As a Senior Software Engineer, you will serve as a senior software engineering professional responsible for designing, developing, integrating, testing, implementing, and maintaining mission-critical software applications and systems. You will provide technical leadership, evaluate software solutions, and guide development efforts while collaborating with engineers, analysts, cybersecurity professionals, and stakeholders. This position offers the opportunity to lead complex software initiatives, influence technical strategy, and contribute to high-impact programs that directly support customer missions. What You'll Do Lead the design, development, testing, implementation, and maintenance of software applications and systems Analyze user, system, and business requirements and develop software solutions that support operational objectives Develop software architectures, system designs, and technical approaches for complex development efforts Perform coding, debugging, testing, and troubleshooting activities throughout the software development lifecycle Support software integration, verification, validation, and deployment activities Evaluate software performance and recommend enhancements to improve efficiency, reliability, maintainability, and scalability Ensure software solutions comply with applicable standards, security requirements, and industry best practices Participate in code reviews, design reviews, and technical assessments Develop and maintain software documentation, technical specifications, and engineering artifacts Coordinate with engineers, system administrators, analysts, cybersecurity personnel, and stakeholders to support project objectives Support configuration management, version control, and software release activities Analyze and resolve complex software defects and technical issues Research and evaluate emerging technologies and development methodologies Provide technical guidance and mentorship to junior software engineers and developers What You Bring Required Qualifications Master's degree in Computer Science, Software Engineering, Computer Engineering, Information Systems, Information Technology, Mathematics, or a related technical discipline Ten (10) years of experience in software engineering, software development, application development, systems development, or a related technical field Advanced knowledge of software engineering principles, practices, and methodologies Knowledge of software development lifecycle processes and industry best practices Knowledge of software architecture, design patterns, and application integration concepts Knowledge of software testing, quality assurance, and debugging techniques Ability to analyze complex technical requirements and develop effective software solutions Ability to troubleshoot and resolve complex software defects and performance issues Strong analytical, organizational, and problem-solving skills Ability to communicate technical information effectively to technical and non-technical audiences Ability to lead technical efforts and collaborate across multidisciplinary teams Ability to develop, review, and maintain technical documentation and software artifacts Ability to obtain and maintain a government security clearance if required Preferred Experience Advanced coursework or specialized training in software engineering, cloud computing, cybersecurity, artificial intelligence, machine learning, or related disciplines Experience supporting Department of Defense or Federal Government programs Experience leading software development efforts or technical teams Experience working within Agile, Scrum, DevSecOps, or similar development environments Experience developing enterprise, distributed, or mission-critical applications Experience supporting software integration, testing, and deployment activities Experience mentoring software development personnel Why Join PEMCCO? Support critical government and customer missions through innovative software solutions Lead technical initiatives that directly impact operational success Collaborate with experienced engineers, developers, and technology professionals Help shape software architecture, development practices, and technical strategy Expand your expertise across modern software engineering frameworks and technologies Mentor the next generation of engineering talent Build a rewarding career in a collaborative and mission-focused environment Work Environment Professional office and technical work environments Work may be performed at company facilities, customer locations, or designated project sites as needed Regular use of computers, development platforms, and collaboration tools Frequent interaction with engineers, developers, analysts, customers, and stakeholders Benefits Medical Insurance Dental Insurance Vision Insurance Paid Time Off Paid Holidays Employee Assistance Program Additional company-sponsored benefits Apply Today If you're an experienced software engineer looking to lead innovative development efforts, solve complex technical challenges, and support mission-critical operations, we encourage you to apply. Join PEMCCO and help build the software systems and applications that power mission success. Equal Opportunity Employer PEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.
11/12/2026
Full time
Job Description Job Description Pay: $53.35 - $88.03 hourly, depending on experience Benefits: Medical, Dental, Vision, Paid Time Off, Paid Holidays, Employee Assistance Program, and other company-sponsored benefits Security Clearance: Ability to obtain and maintain a government security clearance if required Are you an experienced software engineering professional who enjoys leading development efforts, solving complex technical challenges, and building innovative solutions that support mission success? PEMCCO is seeking a Senior Software Engineer to provide technical leadership in the design, development, integration, testing, and sustainment of software applications and systems supporting critical government operations. This role is ideal for a senior engineer who thrives in collaborative environments, enjoys mentoring technical teams, and is passionate about delivering secure, scalable, and high-performing software solutions. This opportunity is a strong fit for candidates with experience in software engineering, software architecture, systems development, application development, cloud computing, DevSecOps, Agile development, artificial intelligence, machine learning, or enterprise application support. About PEMCCO PEMCCO supports complex technical and operational programs by providing skilled professionals who help customers achieve mission success. We offer opportunities to work on impactful projects, collaborate with talented teams, and contribute to innovative solutions that support critical government operations. Job Overview As a Senior Software Engineer, you will serve as a senior software engineering professional responsible for designing, developing, integrating, testing, implementing, and maintaining mission-critical software applications and systems. You will provide technical leadership, evaluate software solutions, and guide development efforts while collaborating with engineers, analysts, cybersecurity professionals, and stakeholders. This position offers the opportunity to lead complex software initiatives, influence technical strategy, and contribute to high-impact programs that directly support customer missions. What You'll Do Lead the design, development, testing, implementation, and maintenance of software applications and systems Analyze user, system, and business requirements and develop software solutions that support operational objectives Develop software architectures, system designs, and technical approaches for complex development efforts Perform coding, debugging, testing, and troubleshooting activities throughout the software development lifecycle Support software integration, verification, validation, and deployment activities Evaluate software performance and recommend enhancements to improve efficiency, reliability, maintainability, and scalability Ensure software solutions comply with applicable standards, security requirements, and industry best practices Participate in code reviews, design reviews, and technical assessments Develop and maintain software documentation, technical specifications, and engineering artifacts Coordinate with engineers, system administrators, analysts, cybersecurity personnel, and stakeholders to support project objectives Support configuration management, version control, and software release activities Analyze and resolve complex software defects and technical issues Research and evaluate emerging technologies and development methodologies Provide technical guidance and mentorship to junior software engineers and developers What You Bring Required Qualifications Master's degree in Computer Science, Software Engineering, Computer Engineering, Information Systems, Information Technology, Mathematics, or a related technical discipline Ten (10) years of experience in software engineering, software development, application development, systems development, or a related technical field Advanced knowledge of software engineering principles, practices, and methodologies Knowledge of software development lifecycle processes and industry best practices Knowledge of software architecture, design patterns, and application integration concepts Knowledge of software testing, quality assurance, and debugging techniques Ability to analyze complex technical requirements and develop effective software solutions Ability to troubleshoot and resolve complex software defects and performance issues Strong analytical, organizational, and problem-solving skills Ability to communicate technical information effectively to technical and non-technical audiences Ability to lead technical efforts and collaborate across multidisciplinary teams Ability to develop, review, and maintain technical documentation and software artifacts Ability to obtain and maintain a government security clearance if required Preferred Experience Advanced coursework or specialized training in software engineering, cloud computing, cybersecurity, artificial intelligence, machine learning, or related disciplines Experience supporting Department of Defense or Federal Government programs Experience leading software development efforts or technical teams Experience working within Agile, Scrum, DevSecOps, or similar development environments Experience developing enterprise, distributed, or mission-critical applications Experience supporting software integration, testing, and deployment activities Experience mentoring software development personnel Why Join PEMCCO? Support critical government and customer missions through innovative software solutions Lead technical initiatives that directly impact operational success Collaborate with experienced engineers, developers, and technology professionals Help shape software architecture, development practices, and technical strategy Expand your expertise across modern software engineering frameworks and technologies Mentor the next generation of engineering talent Build a rewarding career in a collaborative and mission-focused environment Work Environment Professional office and technical work environments Work may be performed at company facilities, customer locations, or designated project sites as needed Regular use of computers, development platforms, and collaboration tools Frequent interaction with engineers, developers, analysts, customers, and stakeholders Benefits Medical Insurance Dental Insurance Vision Insurance Paid Time Off Paid Holidays Employee Assistance Program Additional company-sponsored benefits Apply Today If you're an experienced software engineer looking to lead innovative development efforts, solve complex technical challenges, and support mission-critical operations, we encourage you to apply. Join PEMCCO and help build the software systems and applications that power mission success. Equal Opportunity Employer PEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.
Job Description At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. The Boeing Company is currently seeking a Principal Software Engineer / Developer (Level 5) to support our Phantom Works Software Engineering team located in Berkeley, MO (St. Louis area). This position will focus on supporting the Boeing Defense, Space & Security (BDS) business organization. You will be part of the Phantom Works Open Architecture Systems Integrated Software (OASIS) Solutions team, where you will define, develop, and lead software development for real-time air and/or space systems in an Agile environment. This role requires close collaboration across teams to integrate software and hardware components, supporting mission-critical Defense infrastructure. Due to the scope and responsibilities of Phantom Works, this position requires a U.S. Top Secret security clearance for which the US Government requires US Citizenship. Join Us. Build the Future. You'll have the opportunity to make a meaningful impact early in the software development lifecycle while working alongside exceptional Boeing engineers in a collaborative, inclusive team environment. This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. (Berkeley, MO / St. Louis, MO area) Position Responsibilities: Own and maintain the software architecture with focus on interface clarity, stability, and versioning to minimize integration risk, with a focus on production type software that is easily maintainable. Partner with appropriate stakeholders to inform system definition and oversee translation of system-level requirements into software requirements and models that meet customer, operational and performance requirements and have clear traceability to design, code and test artifacts. Manage supplier/subcontractor software deliverables to ensure they meet team processes and integration requirements. Lead the software engineering team's agile delivery: facilitate sprint planning, daily stand-ups, sprint reviews/retrospectives, and remove impediments to flow. Serve as the Agile/Delivery lead for software-own backlog prioritization with product/system owners, define sprint goals, and ensure timely delivery of integration-ready increments. Define, document, and enforce software integration contracts (ICDs or equivalent living artifacts), data models, and message definitions in coordination with Integration & Test and Systems leads. Ensure software is designed for testability: require unit, component, integration, SIL/HIL test artifacts with code deliveries, include observability hooks, and ensure failures are diagnosable. Lead DevSecOps and CI/CD practices for the team: ensure pipelines support repeatable builds, automated testing, artifact traceability, and consistent deployments across dev, integration, and test environments. Collaborate with Integration & Test to align delivery cadence to integration increments and controlled configuration baselines. Drive verification & validation execution for software components: support development of test strategies, analyze test results, and triage defects with the team. Establish and track delivery metrics (velocity, cycle time, quality metrics, technical debt) and use them to improve predictability and quality. Coach and mentor engineers on agile practices, test automation, CI/CD, code quality, and observability. Contribute to risk and issue management that affects software delivery and integration readiness; escalate when necessary to protect integration milestones. Document integration results, test findings, and provide inputs for design reviews and readiness assessments. Basic Qualifications (Required Skills/ Experience): Bachelor's Degree Active Top Secret U.S. Security Clearance for which the US Government requires US Citizenship. (A U.S. Security Clearance that has been active in the past 24 months is considered active.) 3+ years of technical leadership experience in ground and software system systems engineering (requirements, design, and operation) 3+ years of experience as the technical leader of a software development or product deployment team 5+ years of experience with Development Operations (DevOps) and/or Development Security Operations (DevSecOps) 5+ years of experience with configuration management tools and best practices for Systems, Software, and Hardware design Preferred Qualifications (Desired Skills/Experience): Level 5 / Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science and 14+ years of related work experience OR Bachelor's Degree and 18+ years of directly related work experience OR 22+ years of related, relevant experience Advanced degree (MS/PhD) in a relevant field. Practical experience with requirements tracing and configuration management. Certified Scrum Master (CSM), Professional Scrum Master (PSM), SAFe Agilist, or equivalent agile certification. Prior leadership on aerospace, defense, avionics, or other safety critical systems. Experience with cloud-native infrastructures (Docker/Kubernetes, AWS GovCloud, Azure Government). Experience with model-based design/verification and SIL/HIL testing environments. Experience managing subcontractor software deliveries. Significant experience with real-time embedded software (C/C++), low-level driver development, network stacks, and hardware/software testing/debugging for microcontrollers and/or FPGAs Experience & ability to implement real-time embedded hardware, firmware & software Possess strong analytical skills, knowledge & proficiency with physical modeling and simulation tools High level software development experience for applied physics, modeling, and/or simulation using MATLAB, Python, and or Jupyter, etc. Experience in real-time embedded systems and low-level driver development with microcontrollers, single board computers, and/or FPGAs Perform control system logic/algorithm, hardware, and software development tasks Drug Free Workplace: Boeing is a Drug Free Workplace (DFW) where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. Relocation: This position offers relocation based on candidate eligibility. Note: Basic relocation will be offered for eligible internal candidates. Travel: Occasional travel (10%) to California may be required. Conflict of Interest: Successful candidates for this job must satisfy the Company's Conflict of Interest (COI) assessment process. CodeVue Coding Challenge: To be considered for this position you will be required to complete a technical assessment as part of the selection process. Failure to complete the assessment will remove you from consideration. Pay & Benefits: At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range for Senior/Lead Level: $198,050 - $267,950 Potential signing bonus for eligible/qualified external candidates. Applications for this position will be accepted until Nov. 18, 2026 Export Control Requirements: This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a "U.S. Person" as defined by 22 C.F.R. 120.62 is required. "U.S. Person" includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. Export Control Details: US based job, US Person required Education Bachelor's Degree or Equivalent Required Relocation This position offers relocation based on candidate eligibility. Security Clearance This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) Visa Sponsorship Employer will not sponsor applicants for employment visa status. Shift . click apply for full job details
11/04/2026
Full time
Job Description At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. The Boeing Company is currently seeking a Principal Software Engineer / Developer (Level 5) to support our Phantom Works Software Engineering team located in Berkeley, MO (St. Louis area). This position will focus on supporting the Boeing Defense, Space & Security (BDS) business organization. You will be part of the Phantom Works Open Architecture Systems Integrated Software (OASIS) Solutions team, where you will define, develop, and lead software development for real-time air and/or space systems in an Agile environment. This role requires close collaboration across teams to integrate software and hardware components, supporting mission-critical Defense infrastructure. Due to the scope and responsibilities of Phantom Works, this position requires a U.S. Top Secret security clearance for which the US Government requires US Citizenship. Join Us. Build the Future. You'll have the opportunity to make a meaningful impact early in the software development lifecycle while working alongside exceptional Boeing engineers in a collaborative, inclusive team environment. This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. (Berkeley, MO / St. Louis, MO area) Position Responsibilities: Own and maintain the software architecture with focus on interface clarity, stability, and versioning to minimize integration risk, with a focus on production type software that is easily maintainable. Partner with appropriate stakeholders to inform system definition and oversee translation of system-level requirements into software requirements and models that meet customer, operational and performance requirements and have clear traceability to design, code and test artifacts. Manage supplier/subcontractor software deliverables to ensure they meet team processes and integration requirements. Lead the software engineering team's agile delivery: facilitate sprint planning, daily stand-ups, sprint reviews/retrospectives, and remove impediments to flow. Serve as the Agile/Delivery lead for software-own backlog prioritization with product/system owners, define sprint goals, and ensure timely delivery of integration-ready increments. Define, document, and enforce software integration contracts (ICDs or equivalent living artifacts), data models, and message definitions in coordination with Integration & Test and Systems leads. Ensure software is designed for testability: require unit, component, integration, SIL/HIL test artifacts with code deliveries, include observability hooks, and ensure failures are diagnosable. Lead DevSecOps and CI/CD practices for the team: ensure pipelines support repeatable builds, automated testing, artifact traceability, and consistent deployments across dev, integration, and test environments. Collaborate with Integration & Test to align delivery cadence to integration increments and controlled configuration baselines. Drive verification & validation execution for software components: support development of test strategies, analyze test results, and triage defects with the team. Establish and track delivery metrics (velocity, cycle time, quality metrics, technical debt) and use them to improve predictability and quality. Coach and mentor engineers on agile practices, test automation, CI/CD, code quality, and observability. Contribute to risk and issue management that affects software delivery and integration readiness; escalate when necessary to protect integration milestones. Document integration results, test findings, and provide inputs for design reviews and readiness assessments. Basic Qualifications (Required Skills/ Experience): Bachelor's Degree Active Top Secret U.S. Security Clearance for which the US Government requires US Citizenship. (A U.S. Security Clearance that has been active in the past 24 months is considered active.) 3+ years of technical leadership experience in ground and software system systems engineering (requirements, design, and operation) 3+ years of experience as the technical leader of a software development or product deployment team 5+ years of experience with Development Operations (DevOps) and/or Development Security Operations (DevSecOps) 5+ years of experience with configuration management tools and best practices for Systems, Software, and Hardware design Preferred Qualifications (Desired Skills/Experience): Level 5 / Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science and 14+ years of related work experience OR Bachelor's Degree and 18+ years of directly related work experience OR 22+ years of related, relevant experience Advanced degree (MS/PhD) in a relevant field. Practical experience with requirements tracing and configuration management. Certified Scrum Master (CSM), Professional Scrum Master (PSM), SAFe Agilist, or equivalent agile certification. Prior leadership on aerospace, defense, avionics, or other safety critical systems. Experience with cloud-native infrastructures (Docker/Kubernetes, AWS GovCloud, Azure Government). Experience with model-based design/verification and SIL/HIL testing environments. Experience managing subcontractor software deliveries. Significant experience with real-time embedded software (C/C++), low-level driver development, network stacks, and hardware/software testing/debugging for microcontrollers and/or FPGAs Experience & ability to implement real-time embedded hardware, firmware & software Possess strong analytical skills, knowledge & proficiency with physical modeling and simulation tools High level software development experience for applied physics, modeling, and/or simulation using MATLAB, Python, and or Jupyter, etc. Experience in real-time embedded systems and low-level driver development with microcontrollers, single board computers, and/or FPGAs Perform control system logic/algorithm, hardware, and software development tasks Drug Free Workplace: Boeing is a Drug Free Workplace (DFW) where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. Relocation: This position offers relocation based on candidate eligibility. Note: Basic relocation will be offered for eligible internal candidates. Travel: Occasional travel (10%) to California may be required. Conflict of Interest: Successful candidates for this job must satisfy the Company's Conflict of Interest (COI) assessment process. CodeVue Coding Challenge: To be considered for this position you will be required to complete a technical assessment as part of the selection process. Failure to complete the assessment will remove you from consideration. Pay & Benefits: At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range for Senior/Lead Level: $198,050 - $267,950 Potential signing bonus for eligible/qualified external candidates. Applications for this position will be accepted until Nov. 18, 2026 Export Control Requirements: This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a "U.S. Person" as defined by 22 C.F.R. 120.62 is required. "U.S. Person" includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. Export Control Details: US based job, US Person required Education Bachelor's Degree or Equivalent Required Relocation This position offers relocation based on candidate eligibility. Security Clearance This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) Visa Sponsorship Employer will not sponsor applicants for employment visa status. Shift . click apply for full job details
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
10/02/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking an experienced Security Lead to own the Program security posture, compliance artifacts, and coordination with Program Security Oversight leadership. This role shares leadership of the security team with a Co-Lead and directs the work of the Information Security Specialist team, ensuring compliance documentation, vulnerability management, and ATO artifacts are complete, current, and defensible in a complex federal healthcare IT environment. The ideal candidate brings deep federal cybersecurity experience, a track record of leading security teams, and the judgment to represent the program's security posture to executive and government stakeholders. What You Will Do: Own Task 3 security management deliverables, including compliance documentation, risk register maintenance, and coordination with the Program Security Oversight Leader. Direct and coordinate the Information Security Specialist team, including workload distribution and quality oversight of security deliverables, alongside the Sr. Information Security Specialist (Co-Lead). Support Authorization to Operate (ATO) maintenance, continuous Assessment & Authorization (A&A) activities, and FISMA/FedRAMP compliance documentation for Client-managed systems. Author and review security documentation, including System Security Plans (SSPs), Risk Assessments, and Security Impact Analyses (SIA), prior to submission to Program Security Oversight leadership. Oversee vulnerability scanning, remediation tracking, and security findings reporting across enterprise tools; review results and recommended corrective actions from the Information Security Specialist team. Serve as the primary security point of contact with Program Security Oversight Leadership, and maintain collaborative relationships with federal ISSOs, CSPs (e.g., AWS, Azure), system owners, and vendors. Coordinate with the Tools Management team through the combined Security/Tools scrum cadence. Track and maintain the centralized Security Risk Register, map vulnerabilities to POA&Ms, and support FISMA/FedRAMP compliance efforts across the program. Provide guidance and privacy/security insight to Agile teams across projects, and support Privacy and Security Compliance through all stages of the systems development lifecycle (SDLC). Work within Client system repositories such as CFACTS and BOX. Oversee declared game day events, ensuring after-action reports and other required game day artifacts are completed by the security team. Develop and maintain standard operating procedures (SOPs) for repeatable security processes across the team. Perform additional duties as assigned by the Program Security Oversight Leader. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, Systems Engineering, or a related field (or equivalent professional experience). 8+ years of information security experience in a federal or enterprise environment, including team leadership. Experience with FISMA compliance, ATO processes, and continuous Assessment & Authorization (A working understanding of NIST 800-53/37. Experience co-leading or managing a multi-person security team, including workload distribution and quality oversight of deliverables. Working knowledge of vulnerability scanning and compliance/POA&M platforms, Jira, Confluence, and FISMA/ATO documentation standards and processes. Ability to obtain and maintain Program EUA access and required Public Trust clearance. Strong communication skills and ability to coordinate across multi-disciplinary teams and government stakeholders. Even Better: Prior Program or HHS security program experience strongly preferred. Relevant security certification (CISSP, CISM, CEH, CCNA Security, or Security+). Familiarity with federal control tracking systems (e.g., CFACTS and BOX). Working knowledge of cloud environments (AWS, Azure) and associated security controls. Exposure to pen testing, application security, and CDN security services (e.g., Akamai). Experience providing security and privacy input within Agile development environments. Knowledge about emerging industry or technology trends such as Artificial Intelligence (AI) frameworks. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
09/30/2026
Full time
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking an experienced Security Lead to own the Program security posture, compliance artifacts, and coordination with Program Security Oversight leadership. This role shares leadership of the security team with a Co-Lead and directs the work of the Information Security Specialist team, ensuring compliance documentation, vulnerability management, and ATO artifacts are complete, current, and defensible in a complex federal healthcare IT environment. The ideal candidate brings deep federal cybersecurity experience, a track record of leading security teams, and the judgment to represent the program's security posture to executive and government stakeholders. What You Will Do: Own Task 3 security management deliverables, including compliance documentation, risk register maintenance, and coordination with the Program Security Oversight Leader. Direct and coordinate the Information Security Specialist team, including workload distribution and quality oversight of security deliverables, alongside the Sr. Information Security Specialist (Co-Lead). Support Authorization to Operate (ATO) maintenance, continuous Assessment & Authorization (A&A) activities, and FISMA/FedRAMP compliance documentation for Client-managed systems. Author and review security documentation, including System Security Plans (SSPs), Risk Assessments, and Security Impact Analyses (SIA), prior to submission to Program Security Oversight leadership. Oversee vulnerability scanning, remediation tracking, and security findings reporting across enterprise tools; review results and recommended corrective actions from the Information Security Specialist team. Serve as the primary security point of contact with Program Security Oversight Leadership, and maintain collaborative relationships with federal ISSOs, CSPs (e.g., AWS, Azure), system owners, and vendors. Coordinate with the Tools Management team through the combined Security/Tools scrum cadence. Track and maintain the centralized Security Risk Register, map vulnerabilities to POA&Ms, and support FISMA/FedRAMP compliance efforts across the program. Provide guidance and privacy/security insight to Agile teams across projects, and support Privacy and Security Compliance through all stages of the systems development lifecycle (SDLC). Work within Client system repositories such as CFACTS and BOX. Oversee declared game day events, ensuring after-action reports and other required game day artifacts are completed by the security team. Develop and maintain standard operating procedures (SOPs) for repeatable security processes across the team. Perform additional duties as assigned by the Program Security Oversight Leader. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, Systems Engineering, or a related field (or equivalent professional experience). 8+ years of information security experience in a federal or enterprise environment, including team leadership. Experience with FISMA compliance, ATO processes, and continuous Assessment & Authorization (A working understanding of NIST 800-53/37. Experience co-leading or managing a multi-person security team, including workload distribution and quality oversight of deliverables. Working knowledge of vulnerability scanning and compliance/POA&M platforms, Jira, Confluence, and FISMA/ATO documentation standards and processes. Ability to obtain and maintain Program EUA access and required Public Trust clearance. Strong communication skills and ability to coordinate across multi-disciplinary teams and government stakeholders. Even Better: Prior Program or HHS security program experience strongly preferred. Relevant security certification (CISSP, CISM, CEH, CCNA Security, or Security+). Familiarity with federal control tracking systems (e.g., CFACTS and BOX). Working knowledge of cloud environments (AWS, Azure) and associated security controls. Exposure to pen testing, application security, and CDN security services (e.g., Akamai). Experience providing security and privacy input within Agile development environments. Knowledge about emerging industry or technology trends such as Artificial Intelligence (AI) frameworks. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking a Tools Technical Lead to own the technical leadership of enterprise tools and platforms within a highly dynamic federal healthcare environment, carrying deep, hands-on responsibility for the enterprise toolset supporting Client development teams. This is one of the most institutionally critical roles on the program given the breadth of tooling under management, and the role carries an explicit expectation of thorough documentation and knowledge-sharing given the historical concentration of tooling knowledge in a single individual. As the Tools Technical Lead, you will direct the technical approach, architecture decisions, and troubleshooting for the Tools Management team while remaining hands-on with the administration, integration, automation, and continuous improvement of the broad suite of tools that enable Agile development, DevSecOps practices, and collaboration across multiple teams. This position requires a strong technical foundation across cloud infrastructure, DevSecOps tooling, identity management, and enterprise system integrations, along with the judgment and communication skills to lead a team and represent tooling matters to Client stakeholders. What You Will Do: Serve as the primary technical authority for the enterprise tooling stack; direct the Tools Management team's technical approach, architecture decisions, and troubleshooting for complex, cross-tool issues. Provide technical direction to and oversee the Tools Management team, including workload distribution, technical mentorship, and cross-training of Systems Engineers. Serve as the Client-facing technical lead for tooling matters and coordinate with the Security team during the combined Security/Tools scrum cadence. Support operations and maintenance activities for enterprise tools used by development and operations teams. Administer and maintain Atlassian Tooling, Jira including workflows, permissions, automation rules, custom fields, and system upgrades. Manage and support Confluence, including space administration, user access, templates, plugin management, and upgrades. Oversee GitHub Enterprise repositories, including access controls, branching strategies, integrations, and license management. Configure and maintain Slack integrations, user provisioning, and communication workflows across enterprise teams. Administer MiniOrange and OKTA for identity and access management, including SSO (SAML/OAuth), MFA, and enterprise integrations. Manage and support SonarQube, including installation, configuration, upgrades, permissions, and code quality enforcement. Lead troubleshooting and resolution for tooling-related incidents and outages, and serve as the escalation point for complex, cross-tool issues, including Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, and VictorOps. Perform tool upgrades, vulnerability checks, and compatibility assessments for plugins and integrations. Integrate enterprise tools with CI/CD pipelines and other systems to support secure and efficient development workflows. Support automation initiatives using tools such as Packer, Ansible, Selenium, and API-based frameworks. Assist in implementing DevSecOps and Infrastructure-as-Code practices using AWS, Terraform, and CloudFormation. Support monitoring and incident response activities using tools such as New Relic, Splunk, AWS CloudWatch, and similar platforms. Maintain comprehensive, current technical documentation of tool configurations, integrations, and dependencies, and develop SOPs and runbooks to support knowledge management and operational continuity, a designated priority for this role given the risk of concentrated, undocumented institutional knowledge. Ensure compliance with security requirements, including ATO support, API authentication, and Client governance processes. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience). 8+ years of experience supporting enterprise tools, systems engineering, or DevSecOps environments, including technical leadership of a multi-tool environment. Hands-on experience administering tools such as Jira, Confluence, GitHub, Slack, MiniOrange, OKTA, and/or SonarQube, along with the broader enterprise toolset (Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, VictorOps). Experience with identity and access management, including SSO, SAML, OAuth, and LDAP integrations. Familiarity with cloud environments (AWS preferred) and Infrastructure-as-Code practices. Experience with CI/CD tools (e.g., CloudBees, Jenkins) and automation frameworks. Demonstrated ability to document and transfer complex technical knowledge, a critical requirement for this role. Strong troubleshooting and problem-solving skills with the ability to support multiple systems simultaneously. Experience working in Agile/DevSecOps environments supporting development teams. Strong communication skills with the ability to interact with technical and non-technical stakeholders, including Client-facing coordination. Experience in a federal or large enterprise environment; Federal Healthcare support experience strongly preferred. Ability to obtain and maintain required public trust clearance. Even Better: Experience supporting federal government environments, particularly federal healthcare systems. Familiarity with NIST, FISMA, and ATO processes. Experience with containerization and orchestration technologies. Knowledge of monitoring and observability platforms (Datadog, New Relic, Splunk). Experience developing automation scripts and improving operational efficiency. Atlassian, AWS, or DevSecOps-related certifications. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
09/30/2026
Full time
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking a Tools Technical Lead to own the technical leadership of enterprise tools and platforms within a highly dynamic federal healthcare environment, carrying deep, hands-on responsibility for the enterprise toolset supporting Client development teams. This is one of the most institutionally critical roles on the program given the breadth of tooling under management, and the role carries an explicit expectation of thorough documentation and knowledge-sharing given the historical concentration of tooling knowledge in a single individual. As the Tools Technical Lead, you will direct the technical approach, architecture decisions, and troubleshooting for the Tools Management team while remaining hands-on with the administration, integration, automation, and continuous improvement of the broad suite of tools that enable Agile development, DevSecOps practices, and collaboration across multiple teams. This position requires a strong technical foundation across cloud infrastructure, DevSecOps tooling, identity management, and enterprise system integrations, along with the judgment and communication skills to lead a team and represent tooling matters to Client stakeholders. What You Will Do: Serve as the primary technical authority for the enterprise tooling stack; direct the Tools Management team's technical approach, architecture decisions, and troubleshooting for complex, cross-tool issues. Provide technical direction to and oversee the Tools Management team, including workload distribution, technical mentorship, and cross-training of Systems Engineers. Serve as the Client-facing technical lead for tooling matters and coordinate with the Security team during the combined Security/Tools scrum cadence. Support operations and maintenance activities for enterprise tools used by development and operations teams. Administer and maintain Atlassian Tooling, Jira including workflows, permissions, automation rules, custom fields, and system upgrades. Manage and support Confluence, including space administration, user access, templates, plugin management, and upgrades. Oversee GitHub Enterprise repositories, including access controls, branching strategies, integrations, and license management. Configure and maintain Slack integrations, user provisioning, and communication workflows across enterprise teams. Administer MiniOrange and OKTA for identity and access management, including SSO (SAML/OAuth), MFA, and enterprise integrations. Manage and support SonarQube, including installation, configuration, upgrades, permissions, and code quality enforcement. Lead troubleshooting and resolution for tooling-related incidents and outages, and serve as the escalation point for complex, cross-tool issues, including Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, and VictorOps. Perform tool upgrades, vulnerability checks, and compatibility assessments for plugins and integrations. Integrate enterprise tools with CI/CD pipelines and other systems to support secure and efficient development workflows. Support automation initiatives using tools such as Packer, Ansible, Selenium, and API-based frameworks. Assist in implementing DevSecOps and Infrastructure-as-Code practices using AWS, Terraform, and CloudFormation. Support monitoring and incident response activities using tools such as New Relic, Splunk, AWS CloudWatch, and similar platforms. Maintain comprehensive, current technical documentation of tool configurations, integrations, and dependencies, and develop SOPs and runbooks to support knowledge management and operational continuity, a designated priority for this role given the risk of concentrated, undocumented institutional knowledge. Ensure compliance with security requirements, including ATO support, API authentication, and Client governance processes. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience). 8+ years of experience supporting enterprise tools, systems engineering, or DevSecOps environments, including technical leadership of a multi-tool environment. Hands-on experience administering tools such as Jira, Confluence, GitHub, Slack, MiniOrange, OKTA, and/or SonarQube, along with the broader enterprise toolset (Splunk, Jenkins/CloudBees CI, JFrog Artifactory, Grafana, Datadog, NewRelic, LaunchDarkly, VictorOps). Experience with identity and access management, including SSO, SAML, OAuth, and LDAP integrations. Familiarity with cloud environments (AWS preferred) and Infrastructure-as-Code practices. Experience with CI/CD tools (e.g., CloudBees, Jenkins) and automation frameworks. Demonstrated ability to document and transfer complex technical knowledge, a critical requirement for this role. Strong troubleshooting and problem-solving skills with the ability to support multiple systems simultaneously. Experience working in Agile/DevSecOps environments supporting development teams. Strong communication skills with the ability to interact with technical and non-technical stakeholders, including Client-facing coordination. Experience in a federal or large enterprise environment; Federal Healthcare support experience strongly preferred. Ability to obtain and maintain required public trust clearance. Even Better: Experience supporting federal government environments, particularly federal healthcare systems. Familiarity with NIST, FISMA, and ATO processes. Experience with containerization and orchestration technologies. Knowledge of monitoring and observability platforms (Datadog, New Relic, Splunk). Experience developing automation scripts and improving operational efficiency. Atlassian, AWS, or DevSecOps-related certifications. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/28/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/28/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/28/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/26/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/26/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
