Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: As an Advanced Network Engineer at Zebra Technologies, you will be a vital leader within our Global IT Network Team. In this role, you won't just keep things running-you will serve as the technical spearhead for complex, global network implementations. You will help shape the future of Zebra's infrastructure by establishing network architecture standards and directing the deployment of innovative solutions. If you are passionate about driving enterprise-level IT infrastructure forward, collaborating seamlessly across a global IT landscape, and mentoring junior engineers to reach their full potential, we want you on our team. What You Will Do: Architecture, Design & Strategy Architect the Future: Lead the research, design, and planning of our enterprise network and network security architecture. Evaluate & Innovate: Perform advanced technology evaluations and Proof of Concept (PoC) testing. Develop network security solutions, including financial analysis of alternatives, to meet evolving business needs. Set the Standard: Develop, review, and approve installation requirements across LAN, WAN, VPN, firewalls, routers, and related network devices. M&A Integration: Lead network assessments for Mergers and Acquisitions (M&A). Analyze pre-built environments and develop project timelines to establish standardization. Security, Resilience & Compliance Ensure Business Continuity: Design and implement robust network infrastructure to support critical Disaster Recovery and Cyber Recovery exercises. Strengthen Posture: Continuously review system network security measures and implement necessary enhancements while strictly adhering to change control processes. Maintain Compliance: Ensure all network operations comply with applicable policies, procedures, and industry best practices, while providing Level 3 validation of network security changes. Operations, Support & Leadership Act as the Expert: Serve as the Subject Matter Expert (SME) and provide strategic consulting support to business stakeholders. Level 3 Escalation: Respond to complex Network Security and Operations incidents, providing advanced troubleshooting, thorough post-event analysis, and participating in an on-call rotation. Drive Project Delivery: Independently manage projects, deliverables, and timelines for ongoing system upgrades. Empower the Team: Champion "shift-left" opportunities by producing detailed High-Level Designs (HLD), Low-Level Designs (LLD), standard operating procedures (SOPs), and knowledge base articles. Core Networking, Cloud & Security Expertise Deep Networking Knowledge: Master-level understanding of data networking theory, advanced routing (BGP, OSPF), TCP/IP fundamentals, directory services, and complex LAN/WAN switching topologies. WAN & Cloud Infrastructure: Proven hands-on experience manipulating routing metrics for WAN protocols. Thorough understanding of cloud networks (AWS/Azure/GCP), specifically designing intra- and inter-cloud secure routing utilizing native cloud technologies alongside enterprise firewalls. Advanced Security Foundation: Deep knowledge of security protocols, cryptography, and zero-trust concepts. Strong understanding of how systems are compromised based on known vulnerabilities to proactively secure the network. Leadership & Business Acumen Technical Mentorship: A natural leader who provides clear direction, guides cross-functional teams on standardized technology integration, and leads junior technical staff by example. Global & Customer-Centric Mindset: Demonstrates strong empathy for global cultural differences and a highly customer-centric approach to IT support. Analytical Problem Solving: Top-tier troubleshooting and root-cause analysis skills under pressure, paired with excellent communication skills to consult with cross-functional stakeholders. Minimum Qualifications: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field. Minimum of 8+ years of progressive, proven experience in enterprise-level network engineering, network security, and infrastructure architecture. Demonstrated experience operating within a large, complex, global IT environment. Zscaler Zero Trust Ecosystem: Deep familiarity with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Branch Connectors (ZTB). Data Center Automation & Visibility: Hands-on experience utilizing Cisco Nexus Dashboard for centralized fabric management, proactive network monitoring, and operational automation across complex data center environments. Enterprise Wireless & Edge: Proficiency in HPE Mist Wireless, Cisco Meraki, and Cisco Enterprise Wireless technologies. Next-Generation Firewalls: Extensive experience with Palo Alto Firewalls, supported by an active Palo Alto Networks Certified Network Security Engineer (PCNSE) or Administrator (PCNSA) certification to validate deep expertise in designing, deploying, and managing enterprise firewall. Travel Requirements: Willingness and ability to travel up to 10% globally or domestically as needed for major project implementations or M&A integrations.architectures. Preferred Qualifications: CCNP/CCIE (Enterprise and/or Data Center) JNCIP-MistAI Zscaler Digital Transformation Engineer (ZDTE) CISSP or PCNSE Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $108,960.00 - $163,440.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system . click apply for full job details
11/14/2026
Full time
Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: As an Advanced Network Engineer at Zebra Technologies, you will be a vital leader within our Global IT Network Team. In this role, you won't just keep things running-you will serve as the technical spearhead for complex, global network implementations. You will help shape the future of Zebra's infrastructure by establishing network architecture standards and directing the deployment of innovative solutions. If you are passionate about driving enterprise-level IT infrastructure forward, collaborating seamlessly across a global IT landscape, and mentoring junior engineers to reach their full potential, we want you on our team. What You Will Do: Architecture, Design & Strategy Architect the Future: Lead the research, design, and planning of our enterprise network and network security architecture. Evaluate & Innovate: Perform advanced technology evaluations and Proof of Concept (PoC) testing. Develop network security solutions, including financial analysis of alternatives, to meet evolving business needs. Set the Standard: Develop, review, and approve installation requirements across LAN, WAN, VPN, firewalls, routers, and related network devices. M&A Integration: Lead network assessments for Mergers and Acquisitions (M&A). Analyze pre-built environments and develop project timelines to establish standardization. Security, Resilience & Compliance Ensure Business Continuity: Design and implement robust network infrastructure to support critical Disaster Recovery and Cyber Recovery exercises. Strengthen Posture: Continuously review system network security measures and implement necessary enhancements while strictly adhering to change control processes. Maintain Compliance: Ensure all network operations comply with applicable policies, procedures, and industry best practices, while providing Level 3 validation of network security changes. Operations, Support & Leadership Act as the Expert: Serve as the Subject Matter Expert (SME) and provide strategic consulting support to business stakeholders. Level 3 Escalation: Respond to complex Network Security and Operations incidents, providing advanced troubleshooting, thorough post-event analysis, and participating in an on-call rotation. Drive Project Delivery: Independently manage projects, deliverables, and timelines for ongoing system upgrades. Empower the Team: Champion "shift-left" opportunities by producing detailed High-Level Designs (HLD), Low-Level Designs (LLD), standard operating procedures (SOPs), and knowledge base articles. Core Networking, Cloud & Security Expertise Deep Networking Knowledge: Master-level understanding of data networking theory, advanced routing (BGP, OSPF), TCP/IP fundamentals, directory services, and complex LAN/WAN switching topologies. WAN & Cloud Infrastructure: Proven hands-on experience manipulating routing metrics for WAN protocols. Thorough understanding of cloud networks (AWS/Azure/GCP), specifically designing intra- and inter-cloud secure routing utilizing native cloud technologies alongside enterprise firewalls. Advanced Security Foundation: Deep knowledge of security protocols, cryptography, and zero-trust concepts. Strong understanding of how systems are compromised based on known vulnerabilities to proactively secure the network. Leadership & Business Acumen Technical Mentorship: A natural leader who provides clear direction, guides cross-functional teams on standardized technology integration, and leads junior technical staff by example. Global & Customer-Centric Mindset: Demonstrates strong empathy for global cultural differences and a highly customer-centric approach to IT support. Analytical Problem Solving: Top-tier troubleshooting and root-cause analysis skills under pressure, paired with excellent communication skills to consult with cross-functional stakeholders. Minimum Qualifications: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field. Minimum of 8+ years of progressive, proven experience in enterprise-level network engineering, network security, and infrastructure architecture. Demonstrated experience operating within a large, complex, global IT environment. Zscaler Zero Trust Ecosystem: Deep familiarity with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Branch Connectors (ZTB). Data Center Automation & Visibility: Hands-on experience utilizing Cisco Nexus Dashboard for centralized fabric management, proactive network monitoring, and operational automation across complex data center environments. Enterprise Wireless & Edge: Proficiency in HPE Mist Wireless, Cisco Meraki, and Cisco Enterprise Wireless technologies. Next-Generation Firewalls: Extensive experience with Palo Alto Firewalls, supported by an active Palo Alto Networks Certified Network Security Engineer (PCNSE) or Administrator (PCNSA) certification to validate deep expertise in designing, deploying, and managing enterprise firewall. Travel Requirements: Willingness and ability to travel up to 10% globally or domestically as needed for major project implementations or M&A integrations.architectures. Preferred Qualifications: CCNP/CCIE (Enterprise and/or Data Center) JNCIP-MistAI Zscaler Digital Transformation Engineer (ZDTE) CISSP or PCNSE Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $108,960.00 - $163,440.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system . click apply for full job details
Job Description Position Summary: Sapient Logic is seeking a DDIL Subject Matter Expert (Infrastructure Engineer/Architect) to support a Government mission customer in Charleston, SC or Reston, VA. This full-time, on-site role will guide architecture for secure mission services operating under denied, disrupted, intermittent, or limited connectivity. The engineer will design resilient identity, authorization, and data protection capabilities that support disconnected operation and safe reconnection to enterprise services. Responsibilities: Develop DDIL strategies, architectural approaches, and implementation roadmaps for mission applications and supporting security services. Work with mission owners to define operational scenarios, connectivity constraints, mission priorities, and acceptable levels of degraded service. Translate those scenarios into requirements for local autonomy, bandwidth use, latency, outage duration, synchronization, and recovery. Define which identity, authorization, directory, credential, and data protection capabilities must remain available without enterprise reachback. Architect local identity and attribute services, including virtual directories and approved caching of security information. Establish approaches for cached attribute freshness, credential expiration, revocation awareness, authorization policy updates, and operation when authoritative sources cannot be reached. Evaluate access control tradeoffs, including when services should deny access, permit bounded local operation, or require additional safeguards. Design synchronization and reconnection approaches that address conflicting updates, stale identity data, audit records, and restoration of enterprise consistency. Define dependencies among applications, identity providers, policy services, directories, encryption services, and key management infrastructure. Assess data placement, replication, and protection requirements across connected and disconnected environments, including approved cross-domain interfaces. Develop architecture diagrams, interface requirements, alternatives analyses, risk assessments, and phased implementation recommendations. Support agreements and approval documentation governing the caching and use of identity and security attributes. Guide prototypes and demonstrations that validate architectural assumptions under representative network impairments. Define measurable acceptance criteria and help teams evaluate mission continuity, security behavior, and recovery during connectivity loss and restoration. Coordinate with Government stakeholders, mission partners, security personnel, and engineering teams to resolve architectural gaps and guide implementation. Required Qualifications: Demonstrated subject matter expertise designing, evaluating, or fielding systems that operate with denied, disrupted, intermittent, or limited connectivity. Experience developing mission or enterprise architectures that support disconnected operation, local processing, and eventual synchronization with authoritative services. Ability to translate operational constraints into technical requirements, architectural decisions, and testable performance criteria. Understanding of distributed systems concepts, including consistency, replication, caching, conflict resolution, and failure recovery. Experience addressing identity, authentication, authorization, or credential dependencies when enterprise services are unavailable. Understanding of the security implications of stale attributes, delayed revocation information, expired credentials, and unavailable policy or key services. Experience assessing bandwidth, latency, packet loss, and network availability constraints and their effects on application and service behavior. Experience developing technical strategies, architecture documentation, alternatives analyses, and implementation roadmaps. Ability to explain architectural tradeoffs and residual risks to Government decision-makers and provide actionable guidance to engineering teams. Experience working across mission, cybersecurity, infrastructure, and application development stakeholders. Experience deploying localized Policy Enforcement Points (PEPs) and lightweight Policy Decision Points (PDPs) on edge compute appliances and dismounted kits. Experience conducting modeling, simulation, and hardware-in-the-loop (HWIL) testing to replicate tactical link degradation, electronic warfare (EW) effects, and packet-loss profiles. Active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance with the ability to obtain a Counterintelligence (CI) Polygraph is required. U.S. Citizenship is required. Desired Qualifications: Prior experience supporting the Intelligence Community. Bachelor's or Master's degree. Operational DDIL experience: Experience supporting deployed, tactical, expeditionary, edge, or other mission environments with constrained reachback. Identity services: Experience with Identity, Credential, and Access Management (ICAM), virtual directories, identity federation, and local identity and attribute caching. Authorization design: Experience with attribute-based access control, local policy enforcement, bounded offline access, and synchronization of authorization policies. Data protection: Familiarity with Trusted Data Format (TDF), data tagging, encryption, and access enforcement when central services are unavailable. Key and certificate services: Experience addressing Public Key Infrastructure (PKI), certificate validation, credential renewal, and key availability in disconnected environments. Distributed applications: Experience with store-and-forward messaging, durable queues, retry behavior, duplicate handling, and reconciliation after reconnection. Cross-domain environments: Experience defining approved identity and data exchanges across security domains and mission partner boundaries. Cloud and edge platforms: Familiarity with Amazon Web Services (AWS), Kubernetes, Red Hat OpenShift, and deployment patterns spanning enterprise and local infrastructure. Validation and experimentation: Experience using network impairment testing, fault injection, or operational demonstrations to assess degraded-mode behavior. Zero Trust: Experience adapting identity, device, application, and data security controls to environments where continuous enterprise connectivity cannot be assumed. Segmentation: Experience implementing software-defined micro-segmentation, overlay networks, and dynamic perimeter controls across non-standard transport channels (e.g., HF/VHF/UHF, SATCOM, mesh radios, 5G tactical bubbles). Job Type:Full-time Benefits:401(k) 401(k) matching Dental insurance Employee assistance program Flexible spending account Health insurance Health savings account Life insurance Paid time off Parental leave Professional development assistance Retirement plan Vision insurance Schedule: 8-hour shift Monday to Friday Day shift Ability to work additional hours as needed to support mission requirements Work Location: On-site - Charleston, SC or Reston, VA (Washington, DC metro) Security Clearance: Active TS/SCI clearance required Salary: $145,000-$198,000
11/14/2026
Full time
Job Description Position Summary: Sapient Logic is seeking a DDIL Subject Matter Expert (Infrastructure Engineer/Architect) to support a Government mission customer in Charleston, SC or Reston, VA. This full-time, on-site role will guide architecture for secure mission services operating under denied, disrupted, intermittent, or limited connectivity. The engineer will design resilient identity, authorization, and data protection capabilities that support disconnected operation and safe reconnection to enterprise services. Responsibilities: Develop DDIL strategies, architectural approaches, and implementation roadmaps for mission applications and supporting security services. Work with mission owners to define operational scenarios, connectivity constraints, mission priorities, and acceptable levels of degraded service. Translate those scenarios into requirements for local autonomy, bandwidth use, latency, outage duration, synchronization, and recovery. Define which identity, authorization, directory, credential, and data protection capabilities must remain available without enterprise reachback. Architect local identity and attribute services, including virtual directories and approved caching of security information. Establish approaches for cached attribute freshness, credential expiration, revocation awareness, authorization policy updates, and operation when authoritative sources cannot be reached. Evaluate access control tradeoffs, including when services should deny access, permit bounded local operation, or require additional safeguards. Design synchronization and reconnection approaches that address conflicting updates, stale identity data, audit records, and restoration of enterprise consistency. Define dependencies among applications, identity providers, policy services, directories, encryption services, and key management infrastructure. Assess data placement, replication, and protection requirements across connected and disconnected environments, including approved cross-domain interfaces. Develop architecture diagrams, interface requirements, alternatives analyses, risk assessments, and phased implementation recommendations. Support agreements and approval documentation governing the caching and use of identity and security attributes. Guide prototypes and demonstrations that validate architectural assumptions under representative network impairments. Define measurable acceptance criteria and help teams evaluate mission continuity, security behavior, and recovery during connectivity loss and restoration. Coordinate with Government stakeholders, mission partners, security personnel, and engineering teams to resolve architectural gaps and guide implementation. Required Qualifications: Demonstrated subject matter expertise designing, evaluating, or fielding systems that operate with denied, disrupted, intermittent, or limited connectivity. Experience developing mission or enterprise architectures that support disconnected operation, local processing, and eventual synchronization with authoritative services. Ability to translate operational constraints into technical requirements, architectural decisions, and testable performance criteria. Understanding of distributed systems concepts, including consistency, replication, caching, conflict resolution, and failure recovery. Experience addressing identity, authentication, authorization, or credential dependencies when enterprise services are unavailable. Understanding of the security implications of stale attributes, delayed revocation information, expired credentials, and unavailable policy or key services. Experience assessing bandwidth, latency, packet loss, and network availability constraints and their effects on application and service behavior. Experience developing technical strategies, architecture documentation, alternatives analyses, and implementation roadmaps. Ability to explain architectural tradeoffs and residual risks to Government decision-makers and provide actionable guidance to engineering teams. Experience working across mission, cybersecurity, infrastructure, and application development stakeholders. Experience deploying localized Policy Enforcement Points (PEPs) and lightweight Policy Decision Points (PDPs) on edge compute appliances and dismounted kits. Experience conducting modeling, simulation, and hardware-in-the-loop (HWIL) testing to replicate tactical link degradation, electronic warfare (EW) effects, and packet-loss profiles. Active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance with the ability to obtain a Counterintelligence (CI) Polygraph is required. U.S. Citizenship is required. Desired Qualifications: Prior experience supporting the Intelligence Community. Bachelor's or Master's degree. Operational DDIL experience: Experience supporting deployed, tactical, expeditionary, edge, or other mission environments with constrained reachback. Identity services: Experience with Identity, Credential, and Access Management (ICAM), virtual directories, identity federation, and local identity and attribute caching. Authorization design: Experience with attribute-based access control, local policy enforcement, bounded offline access, and synchronization of authorization policies. Data protection: Familiarity with Trusted Data Format (TDF), data tagging, encryption, and access enforcement when central services are unavailable. Key and certificate services: Experience addressing Public Key Infrastructure (PKI), certificate validation, credential renewal, and key availability in disconnected environments. Distributed applications: Experience with store-and-forward messaging, durable queues, retry behavior, duplicate handling, and reconciliation after reconnection. Cross-domain environments: Experience defining approved identity and data exchanges across security domains and mission partner boundaries. Cloud and edge platforms: Familiarity with Amazon Web Services (AWS), Kubernetes, Red Hat OpenShift, and deployment patterns spanning enterprise and local infrastructure. Validation and experimentation: Experience using network impairment testing, fault injection, or operational demonstrations to assess degraded-mode behavior. Zero Trust: Experience adapting identity, device, application, and data security controls to environments where continuous enterprise connectivity cannot be assumed. Segmentation: Experience implementing software-defined micro-segmentation, overlay networks, and dynamic perimeter controls across non-standard transport channels (e.g., HF/VHF/UHF, SATCOM, mesh radios, 5G tactical bubbles). Job Type:Full-time Benefits:401(k) 401(k) matching Dental insurance Employee assistance program Flexible spending account Health insurance Health savings account Life insurance Paid time off Parental leave Professional development assistance Retirement plan Vision insurance Schedule: 8-hour shift Monday to Friday Day shift Ability to work additional hours as needed to support mission requirements Work Location: On-site - Charleston, SC or Reston, VA (Washington, DC metro) Security Clearance: Active TS/SCI clearance required Salary: $145,000-$198,000
Job Description Security Architect / Senior Information Security Engineer (3 Month Contract-to-Hire) - Onsite 4 days a week Oak Brook, IL 60523 - Prefer experience in a regulated or payment-card environment. - NO (Sponsorship, H1b, Transfers, OPT, Corp-to-Corp) CBTS is searching for an experienced Security Architect to design, implement, and maintain the enterprise security architecture across network, endpoint, cloud, identity, and application layers. This is a hands-on, senior-level role responsible for security architecture and controls, incident response leadership, compliance (PCI-DSS and SOX), and threat management, aligned to industry frameworks including NIST CSF, ISO 27001, and CIS Controls. The ideal candidate combines deep technical expertise with the ability to advise leadership and raise security maturity across the organization. This is a 3-month contract-to-hire engagement and must be able to work onsite four days per week out of our Oak Brook, IL 60523 office/location. Responsibilities Security Architecture & Controls Design, implement, and maintain the enterprise security architecture across network, endpoint, cloud, identity, and application layers, aligned to business objectives and industry frameworks (NIST CSF, ISO 27001, CIS Controls). Define security standards, reference architectures, and control baselines; review new projects, system changes, and vendor solutions against them. Identify critical gaps in existing security systems, research candidate tools, and lead their evaluation, selection, and deployment. Incident Response Lead end-to-end cyber incident response: detection, triage, containment, eradication, recovery, and post-incident review. Act as the primary technical contact for the Managed Security Service Provider (MSSP); triage and validate escalated alerts and tune detection rules to reduce false positives. Maintain the incident response plan and playbooks, run tabletop exercises, and coordinate with legal, communications, and business stakeholders to minimize downtime and impact. Compliance & Audit Own the security elements of the PCI-DSS and SOX programs: control design, evidence collection, gap remediation, and liaison with internal and external auditors. Improve audit workflows through automation, standardized evidence, and continuous control monitoring. Maintain security policies, standards, and procedures, and track exceptions through to closure. Threat Management & Operations Monitor emerging threats, vulnerabilities, and attack techniques; translate them into prioritized security measures and roadmap items. Oversee vulnerability management, penetration testing, and remediation tracking across infrastructure and applications. Troubleshoot and resolve network and security issues (firewalls, VPN, IDS/IPS, email security, EDR, SIEM) to keep systems secure and operational. Leadership & Advisory Advise leadership on security risk, investment priorities, and the security implications of business initiatives. Mentor IT and security staff and raise security awareness across the organization. Requirements: 7+ years in information security, including 3+ years designing security controls or architecture in an enterprise environment. Hands-on experience leading cyber incident response and working with an MSSP or SOC, including alert triage and threat investigation. Working knowledge of PCI-DSS and SOX IT general controls, including evidence preparation and auditor engagement. Strong understanding of network security (firewalls, segmentation, VPN, IDS/IPS), identity and access management, endpoint protection (EDR), email security, and SIEM. Experience with cloud security (Azure, AWS, or OCI) and securing hybrid environments. Proven record of evaluating, selecting, and deploying security tools that measurably reduced risk. Ability to analyze emerging threats and translate them into practical, prioritized security measures. Clear written and verbal communication, with the ability to explain risk to both technical teams and senior management. Experience with zero-trust architecture, secure SDLC, and DevSecOps practices. Familiarity with NIST CSF, ISO 27001, or CIS Controls as governance frameworks. Scripting or automation skills (PowerShell, Python) for security tooling and evidence collection. Experience in a regulated or payment-card environment. Certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, or GIAC (GCIH, GCIA, GSEC). CBTS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws.
11/14/2026
Full time
Job Description Security Architect / Senior Information Security Engineer (3 Month Contract-to-Hire) - Onsite 4 days a week Oak Brook, IL 60523 - Prefer experience in a regulated or payment-card environment. - NO (Sponsorship, H1b, Transfers, OPT, Corp-to-Corp) CBTS is searching for an experienced Security Architect to design, implement, and maintain the enterprise security architecture across network, endpoint, cloud, identity, and application layers. This is a hands-on, senior-level role responsible for security architecture and controls, incident response leadership, compliance (PCI-DSS and SOX), and threat management, aligned to industry frameworks including NIST CSF, ISO 27001, and CIS Controls. The ideal candidate combines deep technical expertise with the ability to advise leadership and raise security maturity across the organization. This is a 3-month contract-to-hire engagement and must be able to work onsite four days per week out of our Oak Brook, IL 60523 office/location. Responsibilities Security Architecture & Controls Design, implement, and maintain the enterprise security architecture across network, endpoint, cloud, identity, and application layers, aligned to business objectives and industry frameworks (NIST CSF, ISO 27001, CIS Controls). Define security standards, reference architectures, and control baselines; review new projects, system changes, and vendor solutions against them. Identify critical gaps in existing security systems, research candidate tools, and lead their evaluation, selection, and deployment. Incident Response Lead end-to-end cyber incident response: detection, triage, containment, eradication, recovery, and post-incident review. Act as the primary technical contact for the Managed Security Service Provider (MSSP); triage and validate escalated alerts and tune detection rules to reduce false positives. Maintain the incident response plan and playbooks, run tabletop exercises, and coordinate with legal, communications, and business stakeholders to minimize downtime and impact. Compliance & Audit Own the security elements of the PCI-DSS and SOX programs: control design, evidence collection, gap remediation, and liaison with internal and external auditors. Improve audit workflows through automation, standardized evidence, and continuous control monitoring. Maintain security policies, standards, and procedures, and track exceptions through to closure. Threat Management & Operations Monitor emerging threats, vulnerabilities, and attack techniques; translate them into prioritized security measures and roadmap items. Oversee vulnerability management, penetration testing, and remediation tracking across infrastructure and applications. Troubleshoot and resolve network and security issues (firewalls, VPN, IDS/IPS, email security, EDR, SIEM) to keep systems secure and operational. Leadership & Advisory Advise leadership on security risk, investment priorities, and the security implications of business initiatives. Mentor IT and security staff and raise security awareness across the organization. Requirements: 7+ years in information security, including 3+ years designing security controls or architecture in an enterprise environment. Hands-on experience leading cyber incident response and working with an MSSP or SOC, including alert triage and threat investigation. Working knowledge of PCI-DSS and SOX IT general controls, including evidence preparation and auditor engagement. Strong understanding of network security (firewalls, segmentation, VPN, IDS/IPS), identity and access management, endpoint protection (EDR), email security, and SIEM. Experience with cloud security (Azure, AWS, or OCI) and securing hybrid environments. Proven record of evaluating, selecting, and deploying security tools that measurably reduced risk. Ability to analyze emerging threats and translate them into practical, prioritized security measures. Clear written and verbal communication, with the ability to explain risk to both technical teams and senior management. Experience with zero-trust architecture, secure SDLC, and DevSecOps practices. Familiarity with NIST CSF, ISO 27001, or CIS Controls as governance frameworks. Scripting or automation skills (PowerShell, Python) for security tooling and evidence collection. Experience in a regulated or payment-card environment. Certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, or GIAC (GCIH, GCIA, GSEC). CBTS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws.
Pay Range: $50.00hr - $55.00hr Job Overview: As a Consulting Data Engineer, the successful candidate will architect, build, and optimize the next generation of real-time healthcare data platforms and event-driven architectures. The candidate will play a foundational role in moving clinical, operational, and financial data away from legacy batch processing toward high-throughput, near-zero-latency streaming pipelines. In this role, the candidate will champion modern data engineering practices, design highly scalable cloud-native pipelines, and mentor a growing team of engineers. The candidate will bridge the gap between complex electronic health records (EHR) and data consumers-enabling data scientists, software engineers, and clinical analysts to securely access, stream, and query compliant data at scale to improve patient outcomes and operational efficiency. Core Responsibilities: Architect Real-Time Pipelines: Design, implement, and monitor high-throughput, fault-tolerant streaming pipelines that ingest and process millions of concurrent healthcare data events (e.g., live telemetry, HL7 feeds, ADT messages). Scale Google Cloud Infrastructure: Build and maintain scalable, secure, and cost-effective cloud data infrastructure using Google Cloud healthcare-native tools and Infrastructure as Code (IaC). Enforce Healthcare Compliance & Security: Uphold strict data security protocols (HIPAA, HITRUST, SOC2) by building robust data lakehouse architectures that enforce PHI/PII masking, role-based access control (RBAC), and encryption at rest and in transit. Enable Self-Service Data & Interoperability: Build out streaming data ecosystems that support modern healthcare interoperability, managing real-time data catalogs and schema registries. Promote Code Excellence: Write modular, highly reusable, and performance-tested code; lead code reviews and establish standardized CI/CD automated deployment workflows. Optimize Data Reliability: Set and champion strict SLAs for clinical data delivery, establish automated data-quality testing, and implement proactive system monitoring and alerting. Collaborate & Mentor: Work closely with Data Architects, Clinical Product Managers, and AI/ML teams to translate healthcare requirements into technical blueprints while mentoring mid-level engineers. Required Qualifications: 13+ years of experience in dedicated data engineering, data architecture, or distributed systems software engineering roles. 4+ years of experience specifically within the healthcare domain (payer, provider, digital health, or health tech). Google Cloud Certified Professional Data Engineer (or equivalent proven expert-level architecture experience on GCP). Advanced Event-Driven Architecture: Mastery of high-volume streaming technologies including Apache Kafka and Google Cloud Pub/Sub for decoupled, real-time message routing. Stream Processing: Deep hands-on experience with Apache Flink or Google Cloud Dataflow (Apache Beam) for real-time streaming, complex event processing (CEP), windowing, and streaming data transformations. Interoperability Standards: Deep expertise working with FHIR (Fast Healthcare Interoperability Resources) JSON structures, HL7 v2/v3 messaging, and DICOM imaging standard streams. GCP Healthcare Tools: Hands-on experience implementing and scaling the Google Cloud Healthcare API (specifically FHIR stores and HL7v2 stores). EHR Integration: Experience integrating streaming pipelines with major EHR systems (such as Epic, Cerner, or Meditech). Google Cloud Ecosystem: Technical mastery of BigQuery (including partitioning, clustering, and streaming inserts), Cloud Storage, Dataproc, and Cloud Composer (Apache Airflow). Programming Languages: Proficiency in Python, Scala, or Java, with a strong focus on writing optimized code for distributed computing platforms (like Spark or Beam). Modern Data Stack & Modeling: Mastery of modern analytics engineering frameworks (such as dbt), dimensional data modeling, and lakehouse architectures (e.g., Iceberg, Delta Lake). DevOps & Automation: Robust experience building automated CI/CD pipelines (GitHub Actions, GitLab CI) and managing infrastructure using Terraform. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
11/14/2026
Full time
Pay Range: $50.00hr - $55.00hr Job Overview: As a Consulting Data Engineer, the successful candidate will architect, build, and optimize the next generation of real-time healthcare data platforms and event-driven architectures. The candidate will play a foundational role in moving clinical, operational, and financial data away from legacy batch processing toward high-throughput, near-zero-latency streaming pipelines. In this role, the candidate will champion modern data engineering practices, design highly scalable cloud-native pipelines, and mentor a growing team of engineers. The candidate will bridge the gap between complex electronic health records (EHR) and data consumers-enabling data scientists, software engineers, and clinical analysts to securely access, stream, and query compliant data at scale to improve patient outcomes and operational efficiency. Core Responsibilities: Architect Real-Time Pipelines: Design, implement, and monitor high-throughput, fault-tolerant streaming pipelines that ingest and process millions of concurrent healthcare data events (e.g., live telemetry, HL7 feeds, ADT messages). Scale Google Cloud Infrastructure: Build and maintain scalable, secure, and cost-effective cloud data infrastructure using Google Cloud healthcare-native tools and Infrastructure as Code (IaC). Enforce Healthcare Compliance & Security: Uphold strict data security protocols (HIPAA, HITRUST, SOC2) by building robust data lakehouse architectures that enforce PHI/PII masking, role-based access control (RBAC), and encryption at rest and in transit. Enable Self-Service Data & Interoperability: Build out streaming data ecosystems that support modern healthcare interoperability, managing real-time data catalogs and schema registries. Promote Code Excellence: Write modular, highly reusable, and performance-tested code; lead code reviews and establish standardized CI/CD automated deployment workflows. Optimize Data Reliability: Set and champion strict SLAs for clinical data delivery, establish automated data-quality testing, and implement proactive system monitoring and alerting. Collaborate & Mentor: Work closely with Data Architects, Clinical Product Managers, and AI/ML teams to translate healthcare requirements into technical blueprints while mentoring mid-level engineers. Required Qualifications: 13+ years of experience in dedicated data engineering, data architecture, or distributed systems software engineering roles. 4+ years of experience specifically within the healthcare domain (payer, provider, digital health, or health tech). Google Cloud Certified Professional Data Engineer (or equivalent proven expert-level architecture experience on GCP). Advanced Event-Driven Architecture: Mastery of high-volume streaming technologies including Apache Kafka and Google Cloud Pub/Sub for decoupled, real-time message routing. Stream Processing: Deep hands-on experience with Apache Flink or Google Cloud Dataflow (Apache Beam) for real-time streaming, complex event processing (CEP), windowing, and streaming data transformations. Interoperability Standards: Deep expertise working with FHIR (Fast Healthcare Interoperability Resources) JSON structures, HL7 v2/v3 messaging, and DICOM imaging standard streams. GCP Healthcare Tools: Hands-on experience implementing and scaling the Google Cloud Healthcare API (specifically FHIR stores and HL7v2 stores). EHR Integration: Experience integrating streaming pipelines with major EHR systems (such as Epic, Cerner, or Meditech). Google Cloud Ecosystem: Technical mastery of BigQuery (including partitioning, clustering, and streaming inserts), Cloud Storage, Dataproc, and Cloud Composer (Apache Airflow). Programming Languages: Proficiency in Python, Scala, or Java, with a strong focus on writing optimized code for distributed computing platforms (like Spark or Beam). Modern Data Stack & Modeling: Mastery of modern analytics engineering frameworks (such as dbt), dimensional data modeling, and lakehouse architectures (e.g., Iceberg, Delta Lake). DevOps & Automation: Robust experience building automated CI/CD pipelines (GitHub Actions, GitLab CI) and managing infrastructure using Terraform. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
Job Title: Network Security Architect Duration: 1 Year Location: Los Angeles, CA (On Site) Job Summary We are seeking an experienced Network Security Architect to assess, design, review, and enhance enterprise network security architecture. The ideal candidate will have strong expertise in network infrastructure, network security, and secure architecture design. The candidate will be responsible for evaluating existing network architecture, identifying security vulnerabilities and architectural gaps, and developing secure, scalable, and resilient network architecture solutions. The role requires the ability to analyze complex network designs, validate security controls, recommend improvements, and visually represent network architecture through detailed technical diagrams. Key Responsibilities Review, assess, and analyze existing enterprise network architecture, infrastructure, and security designs. Design and develop secure, scalable, and resilient network architecture solutions. Evaluate network topology, routing, switching, firewalls, VPNs, and network segmentation. Identify security vulnerabilities, architectural weaknesses, and potential risks within existing network infrastructure. Develop secure network designs incorporating network segmentation, security zones, Zero Trust principles, and defence-in-depth strategies. Review and validate existing and proposed network architecture to ensure security, scalability, reliability, and compliance with industry best practices. Evaluate network security controls, firewall configurations, access management, and network traffic flows. Recommend appropriate security solutions and architectural improvements to address identified gaps. Develop current-state and future-state network architecture diagrams. Create detailed network topology diagrams, security architecture diagrams, and network traffic flow visualizations. Use architecture visualization tools to communicate complex network designs to technical teams and stakeholders. Collaborate with network engineering, infrastructure, cybersecurity, and other technical teams to develop and validate architecture solutions. Prepare technical documentation, architecture recommendations, and design specifications. Required Technical Skills Extensive experience in enterprise network architecture and network security. Strong understanding of LAN, WAN, TCP/IP, routing, switching, VLANs, and network protocols. Experience with enterprise firewall technologies such as Palo Alto, Cisco, Fortinet, or Check Point. Strong knowledge of network segmentation, DMZ, VPN, IDS/IPS, and secure network connectivity. Experience designing, reviewing, and evaluating secure enterprise network infrastructure. Knowledge of Zero Trust Network Architecture and defense-in-depth security principles. Understanding of network security policies, access controls, and threat mitigation strategies. Experience with network architecture visualization and diagramming tools such as Microsoft Visio, Lucid chart, or Draw.io. Ability to translate complex technical requirements into secure network architecture designs. Preferred Qualifications Experience working with large-scale enterprise network environments. Knowledge of cloud network security architecture (AWS or Azure). Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, and CIS Controls. Relevant networking or security certifications such as CCNP Security, CCIE Security, CISSP, or equivalent. Excellent analytical, problem-solving, documentation, and communication skills. Expected Deliverables Assessment and review of existing network architecture. Identification of network security gaps and architectural risks. Recommendations for secure network architecture improvements. Design and validation of proposed secure network architecture. Current-state and future-state network architecture diagrams. Network security design documentation and technical recommendations.
11/14/2026
Full time
Job Title: Network Security Architect Duration: 1 Year Location: Los Angeles, CA (On Site) Job Summary We are seeking an experienced Network Security Architect to assess, design, review, and enhance enterprise network security architecture. The ideal candidate will have strong expertise in network infrastructure, network security, and secure architecture design. The candidate will be responsible for evaluating existing network architecture, identifying security vulnerabilities and architectural gaps, and developing secure, scalable, and resilient network architecture solutions. The role requires the ability to analyze complex network designs, validate security controls, recommend improvements, and visually represent network architecture through detailed technical diagrams. Key Responsibilities Review, assess, and analyze existing enterprise network architecture, infrastructure, and security designs. Design and develop secure, scalable, and resilient network architecture solutions. Evaluate network topology, routing, switching, firewalls, VPNs, and network segmentation. Identify security vulnerabilities, architectural weaknesses, and potential risks within existing network infrastructure. Develop secure network designs incorporating network segmentation, security zones, Zero Trust principles, and defence-in-depth strategies. Review and validate existing and proposed network architecture to ensure security, scalability, reliability, and compliance with industry best practices. Evaluate network security controls, firewall configurations, access management, and network traffic flows. Recommend appropriate security solutions and architectural improvements to address identified gaps. Develop current-state and future-state network architecture diagrams. Create detailed network topology diagrams, security architecture diagrams, and network traffic flow visualizations. Use architecture visualization tools to communicate complex network designs to technical teams and stakeholders. Collaborate with network engineering, infrastructure, cybersecurity, and other technical teams to develop and validate architecture solutions. Prepare technical documentation, architecture recommendations, and design specifications. Required Technical Skills Extensive experience in enterprise network architecture and network security. Strong understanding of LAN, WAN, TCP/IP, routing, switching, VLANs, and network protocols. Experience with enterprise firewall technologies such as Palo Alto, Cisco, Fortinet, or Check Point. Strong knowledge of network segmentation, DMZ, VPN, IDS/IPS, and secure network connectivity. Experience designing, reviewing, and evaluating secure enterprise network infrastructure. Knowledge of Zero Trust Network Architecture and defense-in-depth security principles. Understanding of network security policies, access controls, and threat mitigation strategies. Experience with network architecture visualization and diagramming tools such as Microsoft Visio, Lucid chart, or Draw.io. Ability to translate complex technical requirements into secure network architecture designs. Preferred Qualifications Experience working with large-scale enterprise network environments. Knowledge of cloud network security architecture (AWS or Azure). Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, and CIS Controls. Relevant networking or security certifications such as CCNP Security, CCIE Security, CISSP, or equivalent. Excellent analytical, problem-solving, documentation, and communication skills. Expected Deliverables Assessment and review of existing network architecture. Identification of network security gaps and architectural risks. Recommendations for secure network architecture improvements. Design and validation of proposed secure network architecture. Current-state and future-state network architecture diagrams. Network security design documentation and technical recommendations.
Pay Range: $50.00hr - $55.00hr Job Overview: As a Consulting Data Engineer, the successful candidate will architect, build, and optimize the next generation of real-time healthcare data platforms and event-driven architectures. The candidate will play a foundational role in moving clinical, operational, and financial data away from legacy batch processing toward high-throughput, near-zero-latency streaming pipelines. In this role, the candidate will champion modern data engineering practices, design highly scalable cloud-native pipelines, and mentor a growing team of engineers. The candidate will bridge the gap between complex electronic health records (EHR) and data consumers-enabling data scientists, software engineers, and clinical analysts to securely access, stream, and query compliant data at scale to improve patient outcomes and operational efficiency. Core Responsibilities: Architect Real-Time Pipelines: Design, implement, and monitor high-throughput, fault-tolerant streaming pipelines that ingest and process millions of concurrent healthcare data events (e.g., live telemetry, HL7 feeds, ADT messages). Scale Google Cloud Infrastructure: Build and maintain scalable, secure, and cost-effective cloud data infrastructure using Google Cloud healthcare-native tools and Infrastructure as Code (IaC). Enforce Healthcare Compliance & Security: Uphold strict data security protocols (HIPAA, HITRUST, SOC2) by building robust data lakehouse architectures that enforce PHI/PII masking, role-based access control (RBAC), and encryption at rest and in transit. Enable Self-Service Data & Interoperability: Build out streaming data ecosystems that support modern healthcare interoperability, managing real-time data catalogs and schema registries. Promote Code Excellence: Write modular, highly reusable, and performance-tested code; lead code reviews and establish standardized CI/CD automated deployment workflows. Optimize Data Reliability: Set and champion strict SLAs for clinical data delivery, establish automated data-quality testing, and implement proactive system monitoring and alerting. Collaborate & Mentor: Work closely with Data Architects, Clinical Product Managers, and AI/ML teams to translate healthcare requirements into technical blueprints while mentoring mid-level engineers. Required Qualifications: 13+ years of experience in dedicated data engineering, data architecture, or distributed systems software engineering roles. 4+ years of experience specifically within the healthcare domain (payer, provider, digital health, or health tech). Google Cloud Certified Professional Data Engineer (or equivalent proven expert-level architecture experience on GCP). Advanced Event-Driven Architecture: Mastery of high-volume streaming technologies including Apache Kafka and Google Cloud Pub/Sub for decoupled, real-time message routing. Stream Processing: Deep hands-on experience with Apache Flink or Google Cloud Dataflow (Apache Beam) for real-time streaming, complex event processing (CEP), windowing, and streaming data transformations. Interoperability Standards: Deep expertise working with FHIR (Fast Healthcare Interoperability Resources) JSON structures, HL7 v2/v3 messaging, and DICOM imaging standard streams. GCP Healthcare Tools: Hands-on experience implementing and scaling the Google Cloud Healthcare API (specifically FHIR stores and HL7v2 stores). EHR Integration: Experience integrating streaming pipelines with major EHR systems (such as Epic, Cerner, or Meditech). Google Cloud Ecosystem: Technical mastery of BigQuery (including partitioning, clustering, and streaming inserts), Cloud Storage, Dataproc, and Cloud Composer (Apache Airflow). Programming Languages: Proficiency in Python, Scala, or Java, with a strong focus on writing optimized code for distributed computing platforms (like Spark or Beam). Modern Data Stack & Modeling: Mastery of modern analytics engineering frameworks (such as dbt), dimensional data modeling, and lakehouse architectures (e.g., Iceberg, Delta Lake). DevOps & Automation: Robust experience building automated CI/CD pipelines (GitHub Actions, GitLab CI) and managing infrastructure using Terraform. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
11/14/2026
Full time
Pay Range: $50.00hr - $55.00hr Job Overview: As a Consulting Data Engineer, the successful candidate will architect, build, and optimize the next generation of real-time healthcare data platforms and event-driven architectures. The candidate will play a foundational role in moving clinical, operational, and financial data away from legacy batch processing toward high-throughput, near-zero-latency streaming pipelines. In this role, the candidate will champion modern data engineering practices, design highly scalable cloud-native pipelines, and mentor a growing team of engineers. The candidate will bridge the gap between complex electronic health records (EHR) and data consumers-enabling data scientists, software engineers, and clinical analysts to securely access, stream, and query compliant data at scale to improve patient outcomes and operational efficiency. Core Responsibilities: Architect Real-Time Pipelines: Design, implement, and monitor high-throughput, fault-tolerant streaming pipelines that ingest and process millions of concurrent healthcare data events (e.g., live telemetry, HL7 feeds, ADT messages). Scale Google Cloud Infrastructure: Build and maintain scalable, secure, and cost-effective cloud data infrastructure using Google Cloud healthcare-native tools and Infrastructure as Code (IaC). Enforce Healthcare Compliance & Security: Uphold strict data security protocols (HIPAA, HITRUST, SOC2) by building robust data lakehouse architectures that enforce PHI/PII masking, role-based access control (RBAC), and encryption at rest and in transit. Enable Self-Service Data & Interoperability: Build out streaming data ecosystems that support modern healthcare interoperability, managing real-time data catalogs and schema registries. Promote Code Excellence: Write modular, highly reusable, and performance-tested code; lead code reviews and establish standardized CI/CD automated deployment workflows. Optimize Data Reliability: Set and champion strict SLAs for clinical data delivery, establish automated data-quality testing, and implement proactive system monitoring and alerting. Collaborate & Mentor: Work closely with Data Architects, Clinical Product Managers, and AI/ML teams to translate healthcare requirements into technical blueprints while mentoring mid-level engineers. Required Qualifications: 13+ years of experience in dedicated data engineering, data architecture, or distributed systems software engineering roles. 4+ years of experience specifically within the healthcare domain (payer, provider, digital health, or health tech). Google Cloud Certified Professional Data Engineer (or equivalent proven expert-level architecture experience on GCP). Advanced Event-Driven Architecture: Mastery of high-volume streaming technologies including Apache Kafka and Google Cloud Pub/Sub for decoupled, real-time message routing. Stream Processing: Deep hands-on experience with Apache Flink or Google Cloud Dataflow (Apache Beam) for real-time streaming, complex event processing (CEP), windowing, and streaming data transformations. Interoperability Standards: Deep expertise working with FHIR (Fast Healthcare Interoperability Resources) JSON structures, HL7 v2/v3 messaging, and DICOM imaging standard streams. GCP Healthcare Tools: Hands-on experience implementing and scaling the Google Cloud Healthcare API (specifically FHIR stores and HL7v2 stores). EHR Integration: Experience integrating streaming pipelines with major EHR systems (such as Epic, Cerner, or Meditech). Google Cloud Ecosystem: Technical mastery of BigQuery (including partitioning, clustering, and streaming inserts), Cloud Storage, Dataproc, and Cloud Composer (Apache Airflow). Programming Languages: Proficiency in Python, Scala, or Java, with a strong focus on writing optimized code for distributed computing platforms (like Spark or Beam). Modern Data Stack & Modeling: Mastery of modern analytics engineering frameworks (such as dbt), dimensional data modeling, and lakehouse architectures (e.g., Iceberg, Delta Lake). DevOps & Automation: Robust experience building automated CI/CD pipelines (GitHub Actions, GitLab CI) and managing infrastructure using Terraform. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
Job Description Position Summary: Sapient Logic is seeking a Systems Software Engineer to support a Government mission customer in Charleston, SC or Reston, VA. This full-time, on-site role requires strong systems programming and database engineering expertise. The engineer will analyze and modify database engine internals, network protocols, and core services to support secure mission applications and integrations. Responsibilities: Develop, maintain, test, and deploy secure, scalable applications and services using C, C++, Rust, Go, Java, Python, or Node.js. Apply systems programming principles, particularly in C, C++, and Rust, to develop performant and reliable software components. Develop software supporting process creation, monitoring, control, and inter-process communication. Build concurrent and multithreaded applications using appropriate synchronization, signal handling, memory management, and resource-control techniques. Design, implement, and troubleshoot networked applications using sockets, client-server architectures, and applicable network protocols. Analyze database engine source code, communication protocols, request and response formats, serialization, and packet layouts to support development and integration. Trace requests through database engine code to identify processing logic, integration points, and the effects of proposed modifications. Develop relational data-storage solutions using Structured Query Language (SQL), including data modeling, query development, performance tuning, and access control. Develop and integrate graph database solutions supporting relationship-based data modeling, analysis, and retrieval. Work across relational databases, graph databases, object storage, and search/indexing engines, including technologies such as PostgreSQL, Redis, RxDB, Neo4j, Amazon S3, and Elasticsearch. Refactor and modernize existing services, including transitioning functionality from Python to other implementation languages where appropriate. Develop and maintain Infrastructure as Code (IaC) to provision, configure, and manage infrastructure through repeatable, version-controlled workflows. Deploy, monitor, and troubleshoot cloud-hosted software, including dependencies on compute, storage, networking, identity, and security services. Integrate applications with identity providers to support authentication, authorization, federation, single sign-on, and identity-aware access control. Implement OpenID Connect (OIDC) integrations, including token validation, claims processing, client registration, redirect flows, session management, and secure API access. Incorporate Zero Trust Architecture principles into software designs, including interactions among policy decision, administration, information, and enforcement components. Collaborate with cybersecurity, infrastructure, data, and mission stakeholders to integrate security controls, cryptographic protections, logging, monitoring, and auditability throughout the software development lifecycle. Produce and maintain software designs, interface specifications, deployment procedures, configuration baselines, security implementation details, and operational support materials. Required Qualifications: Bachelor's degree in a quantitative field such as engineering or mathematics is required. Relevant fields include Electrical Engineering, Computer Engineering, Computer Science, Information Technology, and Information Systems. 10 years of professional software engineering experience (typical). Prior experience supporting the Intelligence Community. Experience applying programming concepts in a professional or academic setting. Experience applying modern software development methodologies, such as Agile, DevOps, or DevSecOps, in a professional or academic setting. Hands-on systems programming experience in one or more of C, C++, or Rust, with the ability to work across additional languages and runtimes as needed. Experience with operating-system interfaces, process management, inter-process communication, concurrency, and multithreaded application development. Understanding of synchronization primitives, signal handling, memory management, and resource management. Experience developing or troubleshooting socket-based applications and client-server communications. Experience with database engine internals, network protocol development, or comparable source-code and low-level systems analysis. Ability to navigate unfamiliar source code, trace execution and data flows, and assess how changes affect performance, interoperability, concurrency, and security. Experience with relational database design, SQL, query optimization, and database access controls. Understanding of graph database concepts and their application to relationship-based data. Experience developing infrastructure automation and deploying or supporting software in cloud environments. Experience integrating applications with identity services using OIDC and applying authentication and authorization controls. Understanding of Zero Trust Architecture concepts, including Policy Decision Points (PDPs), Policy Administration Points (PAPs), Policy Information Points (PIPs), and Policy Enforcement Points (PEPs). Strong troubleshooting, technical documentation, and collaboration skills. Agile Developer certification or Certified Scrum Developer certification. CompTIA Security+ or higher-level cybersecurity certification. Active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance with the ability to obtain a Counterintelligence (CI) Polygraph is required. U.S. Citizenship is required. Candidates who meet the qualifications above do not need experience with every technology listed under desired qualifications. Depth in systems programming and database engineering, paired with the ability to learn adjacent technologies, is what matters most. Desired Qualifications: Advanced education: Master's degree in a quantitative field such as engineering or mathematics. Relevant fields include Electrical Engineering, Computer Engineering, Computer Science, Information Technology, and Information Systems. Database engineering: Experience with PostgreSQL and Neo4j, including database design, administration, performance optimization, and application integration. Protocol engineering: Experience interpreting packet captures, working with binary message formats, developing protocol parsers, or modifying database clients, drivers, extensions, or engine code. Infrastructure automation: Experience using Terraform and Ansible for cloud infrastructure provisioning, configuration management, and application deployment. Cloud and platform engineering: Experience deploying and maintaining applications and infrastructure in Amazon Web Services (AWS), including AWS GovCloud, Kubernetes, Red Hat OpenShift, and environments subject to Department of Defense Impact Level 5 requirements. Identity platforms: Experience with PingFederate, Keycloak, Radiant Logic, SailPoint, Secret Server, or Okta; experience migrating identity providers and adapting application code is especially useful. Public Key Infrastructure (PKI): Experience implementing certificate lifecycle management, key management, certificate validation, and cryptographic service integrations. Cryptographic interfaces: Experience using PKCS to integrate applications with cryptographic tokens, Hardware Security Modules (HSMs), or other secure key-storage mechanisms. Modern cryptography: Experience implementing, evaluating, or integrating cryptographic algorithms, including Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM). Data protection and service integration: Experience with Trusted Data Format (TDF), Go-based security services, enterprise service integration, or serialization technologies such as Protocol Buffers. Job Type: Full-time Benefits:401(k) 401(k) matching Dental insurance Employee assistance program Flexible spending account Health insurance Health savings account Life insurance Paid time off Parental leave Professional development assistance Retirement plan Vision insurance Schedule: 8-hour shift Monday to Friday Day shift Ability to work additional hours as needed to support mission requirements Work Location: On-site - Charleston, SC or Reston, VA (Washington, DC metro) Security Clearance: Active TS/SCI clearance required Salary: $160,000-$215,000
11/14/2026
Full time
Job Description Position Summary: Sapient Logic is seeking a Systems Software Engineer to support a Government mission customer in Charleston, SC or Reston, VA. This full-time, on-site role requires strong systems programming and database engineering expertise. The engineer will analyze and modify database engine internals, network protocols, and core services to support secure mission applications and integrations. Responsibilities: Develop, maintain, test, and deploy secure, scalable applications and services using C, C++, Rust, Go, Java, Python, or Node.js. Apply systems programming principles, particularly in C, C++, and Rust, to develop performant and reliable software components. Develop software supporting process creation, monitoring, control, and inter-process communication. Build concurrent and multithreaded applications using appropriate synchronization, signal handling, memory management, and resource-control techniques. Design, implement, and troubleshoot networked applications using sockets, client-server architectures, and applicable network protocols. Analyze database engine source code, communication protocols, request and response formats, serialization, and packet layouts to support development and integration. Trace requests through database engine code to identify processing logic, integration points, and the effects of proposed modifications. Develop relational data-storage solutions using Structured Query Language (SQL), including data modeling, query development, performance tuning, and access control. Develop and integrate graph database solutions supporting relationship-based data modeling, analysis, and retrieval. Work across relational databases, graph databases, object storage, and search/indexing engines, including technologies such as PostgreSQL, Redis, RxDB, Neo4j, Amazon S3, and Elasticsearch. Refactor and modernize existing services, including transitioning functionality from Python to other implementation languages where appropriate. Develop and maintain Infrastructure as Code (IaC) to provision, configure, and manage infrastructure through repeatable, version-controlled workflows. Deploy, monitor, and troubleshoot cloud-hosted software, including dependencies on compute, storage, networking, identity, and security services. Integrate applications with identity providers to support authentication, authorization, federation, single sign-on, and identity-aware access control. Implement OpenID Connect (OIDC) integrations, including token validation, claims processing, client registration, redirect flows, session management, and secure API access. Incorporate Zero Trust Architecture principles into software designs, including interactions among policy decision, administration, information, and enforcement components. Collaborate with cybersecurity, infrastructure, data, and mission stakeholders to integrate security controls, cryptographic protections, logging, monitoring, and auditability throughout the software development lifecycle. Produce and maintain software designs, interface specifications, deployment procedures, configuration baselines, security implementation details, and operational support materials. Required Qualifications: Bachelor's degree in a quantitative field such as engineering or mathematics is required. Relevant fields include Electrical Engineering, Computer Engineering, Computer Science, Information Technology, and Information Systems. 10 years of professional software engineering experience (typical). Prior experience supporting the Intelligence Community. Experience applying programming concepts in a professional or academic setting. Experience applying modern software development methodologies, such as Agile, DevOps, or DevSecOps, in a professional or academic setting. Hands-on systems programming experience in one or more of C, C++, or Rust, with the ability to work across additional languages and runtimes as needed. Experience with operating-system interfaces, process management, inter-process communication, concurrency, and multithreaded application development. Understanding of synchronization primitives, signal handling, memory management, and resource management. Experience developing or troubleshooting socket-based applications and client-server communications. Experience with database engine internals, network protocol development, or comparable source-code and low-level systems analysis. Ability to navigate unfamiliar source code, trace execution and data flows, and assess how changes affect performance, interoperability, concurrency, and security. Experience with relational database design, SQL, query optimization, and database access controls. Understanding of graph database concepts and their application to relationship-based data. Experience developing infrastructure automation and deploying or supporting software in cloud environments. Experience integrating applications with identity services using OIDC and applying authentication and authorization controls. Understanding of Zero Trust Architecture concepts, including Policy Decision Points (PDPs), Policy Administration Points (PAPs), Policy Information Points (PIPs), and Policy Enforcement Points (PEPs). Strong troubleshooting, technical documentation, and collaboration skills. Agile Developer certification or Certified Scrum Developer certification. CompTIA Security+ or higher-level cybersecurity certification. Active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance with the ability to obtain a Counterintelligence (CI) Polygraph is required. U.S. Citizenship is required. Candidates who meet the qualifications above do not need experience with every technology listed under desired qualifications. Depth in systems programming and database engineering, paired with the ability to learn adjacent technologies, is what matters most. Desired Qualifications: Advanced education: Master's degree in a quantitative field such as engineering or mathematics. Relevant fields include Electrical Engineering, Computer Engineering, Computer Science, Information Technology, and Information Systems. Database engineering: Experience with PostgreSQL and Neo4j, including database design, administration, performance optimization, and application integration. Protocol engineering: Experience interpreting packet captures, working with binary message formats, developing protocol parsers, or modifying database clients, drivers, extensions, or engine code. Infrastructure automation: Experience using Terraform and Ansible for cloud infrastructure provisioning, configuration management, and application deployment. Cloud and platform engineering: Experience deploying and maintaining applications and infrastructure in Amazon Web Services (AWS), including AWS GovCloud, Kubernetes, Red Hat OpenShift, and environments subject to Department of Defense Impact Level 5 requirements. Identity platforms: Experience with PingFederate, Keycloak, Radiant Logic, SailPoint, Secret Server, or Okta; experience migrating identity providers and adapting application code is especially useful. Public Key Infrastructure (PKI): Experience implementing certificate lifecycle management, key management, certificate validation, and cryptographic service integrations. Cryptographic interfaces: Experience using PKCS to integrate applications with cryptographic tokens, Hardware Security Modules (HSMs), or other secure key-storage mechanisms. Modern cryptography: Experience implementing, evaluating, or integrating cryptographic algorithms, including Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM). Data protection and service integration: Experience with Trusted Data Format (TDF), Go-based security services, enterprise service integration, or serialization technologies such as Protocol Buffers. Job Type: Full-time Benefits:401(k) 401(k) matching Dental insurance Employee assistance program Flexible spending account Health insurance Health savings account Life insurance Paid time off Parental leave Professional development assistance Retirement plan Vision insurance Schedule: 8-hour shift Monday to Friday Day shift Ability to work additional hours as needed to support mission requirements Work Location: On-site - Charleston, SC or Reston, VA (Washington, DC metro) Security Clearance: Active TS/SCI clearance required Salary: $160,000-$215,000
This job is with eBay, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. Role Summary The Senior Engineer in the Identity Domain provides senior technical leadership for identity services across the platform. This role defines and evolves enterprise-wide identity and access management (IAM) capabilities, influencing architecture, engineering standards, and execution across multiple teams. The Senior Engineer sets technical direction for authentication, authorization, and identity federation, drives adoption of modern identity standards, and ensures identity is implemented as a consistent, secure platform capability. Key Responsibilities Technical Leadership Act as the senior technical authority for identity services across platforms and teams Define and evolve enterprise-wide IAM architecture and engineering standards Design and maintain reference implementations for core identity capabilities Review and influence system designs and code to ensure security, scalability, and correctness Authentication, Authorization & Access Management Architect and implement OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0 for SSO and federation across hybrid, multi-cloud, and SaaS environments Drive adoption of phishing-resistant, passwordless authentication, including FIDO2, WebAuthn, and Passkeys Define API authorization patterns using JWT and mTLS for service-to-service communication Lead the transition to adaptive, context-aware authorization models (RBAC/ABAC) aligned with Zero Trust principles Identity Lifecycle & Federation Define and implement automated identity lifecycle management using SCIM Guide teams on unified and federated identity constructs and cross-domain trust models Incorporate global trends in identity and identity verification into platform design and standards Influence & Mentorship Mentor engineers across teams, raising the bar for identity and security engineering Provide technical guidance to product and platform partners on identity-related decisions Influence roadmaps and priorities through technical leadership and domain expertise Required Qualifications Extensive experience designing and building identity and access management systems Strong knowledge of identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM) Experience with federated and unified identity architectures in distributed environments Proven ability to influence technical direction across multiple teams and platforms Preferred Qualifications Experience with identity verification, risk-based authentication, or trust signals Familiarity with Zero Trust architectures and adaptive access control models Experience operating identity platforms at scale in regulated or security-sensitive environments Impact & Scope Technical decisions have broad impact across the Identity Domain and adjacent platforms Establishes standards and patterns adopted by multiple teams Qualification Bachelor's degree in Computer Science, Engineering, or related field 12+ years of experience building large-scale distributed systems 5+ years as a technical lead or architect in identity management domain owning end-to-end system design Additional Details The base pay range for this position is expected in the range below: $217,600 - $290,500 Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Remote roles are not eligible for U.S. visa sponsorship. eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at . We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice , Privacy Center and AI Hiring Guideline .
11/14/2026
Full time
This job is with eBay, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. Role Summary The Senior Engineer in the Identity Domain provides senior technical leadership for identity services across the platform. This role defines and evolves enterprise-wide identity and access management (IAM) capabilities, influencing architecture, engineering standards, and execution across multiple teams. The Senior Engineer sets technical direction for authentication, authorization, and identity federation, drives adoption of modern identity standards, and ensures identity is implemented as a consistent, secure platform capability. Key Responsibilities Technical Leadership Act as the senior technical authority for identity services across platforms and teams Define and evolve enterprise-wide IAM architecture and engineering standards Design and maintain reference implementations for core identity capabilities Review and influence system designs and code to ensure security, scalability, and correctness Authentication, Authorization & Access Management Architect and implement OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0 for SSO and federation across hybrid, multi-cloud, and SaaS environments Drive adoption of phishing-resistant, passwordless authentication, including FIDO2, WebAuthn, and Passkeys Define API authorization patterns using JWT and mTLS for service-to-service communication Lead the transition to adaptive, context-aware authorization models (RBAC/ABAC) aligned with Zero Trust principles Identity Lifecycle & Federation Define and implement automated identity lifecycle management using SCIM Guide teams on unified and federated identity constructs and cross-domain trust models Incorporate global trends in identity and identity verification into platform design and standards Influence & Mentorship Mentor engineers across teams, raising the bar for identity and security engineering Provide technical guidance to product and platform partners on identity-related decisions Influence roadmaps and priorities through technical leadership and domain expertise Required Qualifications Extensive experience designing and building identity and access management systems Strong knowledge of identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM) Experience with federated and unified identity architectures in distributed environments Proven ability to influence technical direction across multiple teams and platforms Preferred Qualifications Experience with identity verification, risk-based authentication, or trust signals Familiarity with Zero Trust architectures and adaptive access control models Experience operating identity platforms at scale in regulated or security-sensitive environments Impact & Scope Technical decisions have broad impact across the Identity Domain and adjacent platforms Establishes standards and patterns adopted by multiple teams Qualification Bachelor's degree in Computer Science, Engineering, or related field 12+ years of experience building large-scale distributed systems 5+ years as a technical lead or architect in identity management domain owning end-to-end system design Additional Details The base pay range for this position is expected in the range below: $217,600 - $290,500 Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Remote roles are not eligible for U.S. visa sponsorship. eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at . We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice , Privacy Center and AI Hiring Guideline .
This job is with eBay, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. This role cannot offer any sort of visa sponsorship About the team and the role: The Identity team is responsible for building and evolving the foundational services that secure how people, applications, and platforms access eBay systems and experiences. This team partners broadly across engineering, security, and product organizations to deliver scalable, resilient, and modern identity capabilities that support a hybrid, multi-cloud, and SaaS ecosystem. As a senior technical leader in the Identity domain, this role will shape the future of authentication, authorization, federation, and identity lifecycle management across eBay. You will serve as a trusted authority on enterprise IAM architecture, define engineering standards embraced across teams, and guide the invent of secure, scalable, and reliable identity solutions. This role offers broad influence across platforms and roadmaps, with the opportunity to mentor engineers, elevate technical quality, and help drive secure innovation in an AI-first environment. What you will accomplish: Define and evolve enterprise-wide identity and access management architecture, standards, and reference implementations that improve consistency, scalability, and security across platforms. Own the design and adoption of modern authentication and federation solutions, including OAuth 2.0, OpenID Connect, SAML 2.0, FIDO2, WebAuthn, and Passkeys, to strengthen user and system trust. Establish secure authorization patterns for both user and service-to-service access, including JWT, mTLS, and adaptive access models aligned with Zero Trust principles. Drive automation of identity lifecycle management through SCIM and federated identity models, helping teams simplify provisioning, strengthen governance, and improve cross-domain interoperability. Influence technical direction across multiple teams by reviewing designs and code, guiding platform decisions, and ensuring identity services meet high standards for security, correctness, and reliability. Mentor engineers and partner with security, product, and platform leaders to set the standard on identity engineering, develop roadmaps, and embed guardrails and security checkpoints throughout the software development lifecycle. What you will bring: 12+ years of experience building large-scale distributed systems, including 5+ years as a technical lead or architect owning end-to-end identity or access management designs. Deep expertise in IAM technologies and standards, including OAuth 2.0, OpenID Connect, SAML, and SCIM, with experience designing federated or unified identity architectures. Strong experience building secure authentication, authorization, and federation solutions across distributed, hybrid cloud, multi-cloud, or SaaS environments. Proven ability to influence technical strategy, establish engineering standards, and lead through collaboration across multiple teams and platforms. Familiarity with Zero Trust architectures, adaptive access models such as RBAC and ABAC, and areas such as identity verification, risk-based authentication, or trust signals. Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience; experience operating in security-sensitive or regulated environments is a plus. Additional Details The base pay range for this position is expected in the range below: $156,800 - $255,300 Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Remote roles are not eligible for U.S. visa sponsorship. eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at . We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice , Privacy Center and AI Hiring Guidelines .
11/14/2026
Full time
This job is with eBay, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. This role cannot offer any sort of visa sponsorship About the team and the role: The Identity team is responsible for building and evolving the foundational services that secure how people, applications, and platforms access eBay systems and experiences. This team partners broadly across engineering, security, and product organizations to deliver scalable, resilient, and modern identity capabilities that support a hybrid, multi-cloud, and SaaS ecosystem. As a senior technical leader in the Identity domain, this role will shape the future of authentication, authorization, federation, and identity lifecycle management across eBay. You will serve as a trusted authority on enterprise IAM architecture, define engineering standards embraced across teams, and guide the invent of secure, scalable, and reliable identity solutions. This role offers broad influence across platforms and roadmaps, with the opportunity to mentor engineers, elevate technical quality, and help drive secure innovation in an AI-first environment. What you will accomplish: Define and evolve enterprise-wide identity and access management architecture, standards, and reference implementations that improve consistency, scalability, and security across platforms. Own the design and adoption of modern authentication and federation solutions, including OAuth 2.0, OpenID Connect, SAML 2.0, FIDO2, WebAuthn, and Passkeys, to strengthen user and system trust. Establish secure authorization patterns for both user and service-to-service access, including JWT, mTLS, and adaptive access models aligned with Zero Trust principles. Drive automation of identity lifecycle management through SCIM and federated identity models, helping teams simplify provisioning, strengthen governance, and improve cross-domain interoperability. Influence technical direction across multiple teams by reviewing designs and code, guiding platform decisions, and ensuring identity services meet high standards for security, correctness, and reliability. Mentor engineers and partner with security, product, and platform leaders to set the standard on identity engineering, develop roadmaps, and embed guardrails and security checkpoints throughout the software development lifecycle. What you will bring: 12+ years of experience building large-scale distributed systems, including 5+ years as a technical lead or architect owning end-to-end identity or access management designs. Deep expertise in IAM technologies and standards, including OAuth 2.0, OpenID Connect, SAML, and SCIM, with experience designing federated or unified identity architectures. Strong experience building secure authentication, authorization, and federation solutions across distributed, hybrid cloud, multi-cloud, or SaaS environments. Proven ability to influence technical strategy, establish engineering standards, and lead through collaboration across multiple teams and platforms. Familiarity with Zero Trust architectures, adaptive access models such as RBAC and ABAC, and areas such as identity verification, risk-based authentication, or trust signals. Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience; experience operating in security-sensitive or regulated environments is a plus. Additional Details The base pay range for this position is expected in the range below: $156,800 - $255,300 Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Remote roles are not eligible for U.S. visa sponsorship. eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at . We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice , Privacy Center and AI Hiring Guidelines .
Job Description Security Architect - Aviation Vienna, VA Aviation - Tech Team Full-time Hybrid SteerBridge is a modern technology company delivering innovative, mission focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial grade capabilities that accelerate operational effectiveness and drive measurable mission success. At the core of SteerBridge is our people-especially the veterans whose leadership, problem solving mindset, and commitment to excellence elevate every project we support. We don't simply hire exceptional talent; we cultivate it , creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve. Position Overview SteerBridge is seeking a Security Architect to define the security architecture and compliance strategy for a mission-critical Defense Aviation platform running in AWS GovCloud for federal customers. This role owns the security blueprint-controls, identity, zero-trust access, monitoring, and authorization strategy-for environments supporting federal aviation operations. The architect will work directly with solutions architects, security and cloud engineers, data teams, and stakeholders to translate DoD security requirements into enforceable, well-architected designs and to guide the platform toward and through authorization (ATO). This role stays close to implementation, setting security standards, designing control frameworks, reviewing architectures, and guiding engineers in implementing defense-in-depth and zero-trust access. This is a hybrid position based in Vienna, VA. Key Responsibilities Define and maintain security architecture for AWS GovCloud workloads, including identity, zero-trust access, network segmentation, encryption, monitoring, and data protection. Design and own zero-trust access architecture using Zscaler (ZTNA/SASE) and establish standards for least-privilege IAM, secure access, and hardened baselines. Design defense-in-depth security frameworks and ensure alignment with DoD and DISA requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and ATO processes. Develop security architecture documentation, control mappings, decision records, implementation strategies, and evidence required to support audits and assessments. Review architectures and designs to embed security from the outset and lead security and threat-model reviews. Guide engineering teams in implementing security controls, detection and response capabilities, remediation activities, and POA&M priorities. Partner with cloud and solutions architects to develop secure-by-design platforms and establish reusable security standards and reference patterns. Assess and communicate security posture, risks, and trade-offs to technical and non-technical stakeholders, advise leadership on security strategy, and mentor engineers to strengthen security practices. Required Qualifications U.S. citizenship required and ability to obtain and maintain the security clearance required for the role. Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Software Engineering, or a related field. 10+ years of security experience, including 3+ years in a security architecture or lead role, with experience leading security initiatives across multidisciplinary teams. Deep expertise in AWS cloud security architecture, identity, network segmentation, and zero-trust design, including experience with Zscaler or a comparable ZTNA/SASE platform. Strong knowledge of DoD security frameworks and authorization requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and experience guiding systems through ATO and authorization processes. Demonstrated ability to translate operational requirements into security controls and design resilient, defense-in-depth architectures using least-privilege principles, network security concepts, firewalls, encryption, and other cybersecurity methods. Ability to develop and maintain security architectures aligned with organizational objectives, assess the impact of changing operational conditions, and produce clear architecture documentation and risk assessments. One or more of the following certifications: CISSP, CISM, CCNP Enterprise, GCIA, GDSA, GICSP, ISSAP, or ISSEP. Preferred Qualifications Master's or PhD in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field. Extensive experience with AWS GovCloud or other federal or highly regulated environments. Advanced experience architecting Zscaler or comparable ZTNA/SASE solutions and integrating them with identity and conditional access. Experience with continuous monitoring, SIEM strategy, incident response programs, and data security for analytics and Medallion architectures. Senior-level certifications such as CCSP or AWS Certified Security - Specialty, and/or experience supporting aviation, defense, logistics, or fleet management systems. $170,000 - $180,000 a year The posted compensation range reflects the scope and requirements of this position. A final offer will be determined based on the candidate's relevant experience, skills, education, certifications, and work location, along with the responsibilities of the position. Where applicable, contract requirements, wage determinations, and federal contract labor categories may also inform the offer. SteerBridge also offers benefits that may include health and life insurance, paid time off, paid holidays, disability coverage, retirement savings, and professional development opportunities. Benefits vary by position and eligibility. SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity-regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law. We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.
11/14/2026
Full time
Job Description Security Architect - Aviation Vienna, VA Aviation - Tech Team Full-time Hybrid SteerBridge is a modern technology company delivering innovative, mission focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial grade capabilities that accelerate operational effectiveness and drive measurable mission success. At the core of SteerBridge is our people-especially the veterans whose leadership, problem solving mindset, and commitment to excellence elevate every project we support. We don't simply hire exceptional talent; we cultivate it , creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve. Position Overview SteerBridge is seeking a Security Architect to define the security architecture and compliance strategy for a mission-critical Defense Aviation platform running in AWS GovCloud for federal customers. This role owns the security blueprint-controls, identity, zero-trust access, monitoring, and authorization strategy-for environments supporting federal aviation operations. The architect will work directly with solutions architects, security and cloud engineers, data teams, and stakeholders to translate DoD security requirements into enforceable, well-architected designs and to guide the platform toward and through authorization (ATO). This role stays close to implementation, setting security standards, designing control frameworks, reviewing architectures, and guiding engineers in implementing defense-in-depth and zero-trust access. This is a hybrid position based in Vienna, VA. Key Responsibilities Define and maintain security architecture for AWS GovCloud workloads, including identity, zero-trust access, network segmentation, encryption, monitoring, and data protection. Design and own zero-trust access architecture using Zscaler (ZTNA/SASE) and establish standards for least-privilege IAM, secure access, and hardened baselines. Design defense-in-depth security frameworks and ensure alignment with DoD and DISA requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and ATO processes. Develop security architecture documentation, control mappings, decision records, implementation strategies, and evidence required to support audits and assessments. Review architectures and designs to embed security from the outset and lead security and threat-model reviews. Guide engineering teams in implementing security controls, detection and response capabilities, remediation activities, and POA&M priorities. Partner with cloud and solutions architects to develop secure-by-design platforms and establish reusable security standards and reference patterns. Assess and communicate security posture, risks, and trade-offs to technical and non-technical stakeholders, advise leadership on security strategy, and mentor engineers to strengthen security practices. Required Qualifications U.S. citizenship required and ability to obtain and maintain the security clearance required for the role. Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Software Engineering, or a related field. 10+ years of security experience, including 3+ years in a security architecture or lead role, with experience leading security initiatives across multidisciplinary teams. Deep expertise in AWS cloud security architecture, identity, network segmentation, and zero-trust design, including experience with Zscaler or a comparable ZTNA/SASE platform. Strong knowledge of DoD security frameworks and authorization requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and experience guiding systems through ATO and authorization processes. Demonstrated ability to translate operational requirements into security controls and design resilient, defense-in-depth architectures using least-privilege principles, network security concepts, firewalls, encryption, and other cybersecurity methods. Ability to develop and maintain security architectures aligned with organizational objectives, assess the impact of changing operational conditions, and produce clear architecture documentation and risk assessments. One or more of the following certifications: CISSP, CISM, CCNP Enterprise, GCIA, GDSA, GICSP, ISSAP, or ISSEP. Preferred Qualifications Master's or PhD in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field. Extensive experience with AWS GovCloud or other federal or highly regulated environments. Advanced experience architecting Zscaler or comparable ZTNA/SASE solutions and integrating them with identity and conditional access. Experience with continuous monitoring, SIEM strategy, incident response programs, and data security for analytics and Medallion architectures. Senior-level certifications such as CCSP or AWS Certified Security - Specialty, and/or experience supporting aviation, defense, logistics, or fleet management systems. $170,000 - $180,000 a year The posted compensation range reflects the scope and requirements of this position. A final offer will be determined based on the candidate's relevant experience, skills, education, certifications, and work location, along with the responsibilities of the position. Where applicable, contract requirements, wage determinations, and federal contract labor categories may also inform the offer. SteerBridge also offers benefits that may include health and life insurance, paid time off, paid holidays, disability coverage, retirement savings, and professional development opportunities. Benefits vary by position and eligibility. SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity-regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law. We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.
Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Cloud Network Engineer to design and run the network that connects a federal customer's private cloud, data centers, and four public cloud providers. You will build hub-and-spoke topologies, dedicated cloud interconnects, and firewall policies that put Zero Trust principles into practice across AWS, Azure, Google Cloud, and Oracle Cloud. You will work with cloud engineers, security specialists, and customer network teams to integrate cloud networks with the customer's enterprise network and WAN. You will then keep that connectivity secure, observable, and resilient in production. Key Responsibilities Design and implement hub-and-spoke network architectures across AWS, Azure, GCP, and OCI, integrated with the customer's WAN and DNS services. Provision and manage dedicated connections and VPNs: AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, OCI FastConnect, and IPsec site-to-site VPN. Configure BGP routing, route tables, transit gateways, and failover between on-premises data centers and cloud regions. Create and maintain firewall policies, security groups, and network segmentation for production, integration, development, and sandbox environments. Implement Zero Trust network controls (micro-segmentation, private endpoints, identity-aware access) aligned with NIST SP 800-207 and customer security standards. Build network configurations as code with Terraform and track changes through ServiceNow change management. Monitor network performance and flows with CSP-native tools (VPC Flow Logs, Network Watcher, Network Intelligence Center, OCI Network Path Analyzer) and forward events to Splunk. Troubleshoot connectivity, latency, and DNS issues and support incident response as part of 24/7 operations. Document network designs, runbooks, and diagrams, and provide evidence for ATO packages. Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. At least 5 years of network engineering experience, including cloud networking in at least one major cloud provider. Hands-on experience creating and managing firewall policies in cloud-native and/or next-generation firewalls. Experience provisioning dedicated cloud connections (Direct Connect, ExpressRoute, Cloud Interconnect, or FastConnect) and IPsec VPNs. Strong working knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS. Experience implementing Zero Trust network architecture or segmentation. Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications Cisco CCNP Enterprise or CCNP Security, or Palo Alto Networks PCNSE. AWS Certified Advanced Networking - Specialty, Microsoft Azure Network Engineer Associate (AZ-700), or Google Professional Cloud Network Engineer. Networking experience across more than one of AWS, Azure, GCP, and OCI. Experience with Terraform or Ansible for network automation. Experience with multi-cloud network or Zero Trust platforms (e.g., Aviatrix, Zscaler, Palo Alto Prisma Access). Experience in federal environments and with NIST SP 800-53 network controls. Prior support of a civilian federal agency.
11/14/2026
Full time
Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Cloud Network Engineer to design and run the network that connects a federal customer's private cloud, data centers, and four public cloud providers. You will build hub-and-spoke topologies, dedicated cloud interconnects, and firewall policies that put Zero Trust principles into practice across AWS, Azure, Google Cloud, and Oracle Cloud. You will work with cloud engineers, security specialists, and customer network teams to integrate cloud networks with the customer's enterprise network and WAN. You will then keep that connectivity secure, observable, and resilient in production. Key Responsibilities Design and implement hub-and-spoke network architectures across AWS, Azure, GCP, and OCI, integrated with the customer's WAN and DNS services. Provision and manage dedicated connections and VPNs: AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, OCI FastConnect, and IPsec site-to-site VPN. Configure BGP routing, route tables, transit gateways, and failover between on-premises data centers and cloud regions. Create and maintain firewall policies, security groups, and network segmentation for production, integration, development, and sandbox environments. Implement Zero Trust network controls (micro-segmentation, private endpoints, identity-aware access) aligned with NIST SP 800-207 and customer security standards. Build network configurations as code with Terraform and track changes through ServiceNow change management. Monitor network performance and flows with CSP-native tools (VPC Flow Logs, Network Watcher, Network Intelligence Center, OCI Network Path Analyzer) and forward events to Splunk. Troubleshoot connectivity, latency, and DNS issues and support incident response as part of 24/7 operations. Document network designs, runbooks, and diagrams, and provide evidence for ATO packages. Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. At least 5 years of network engineering experience, including cloud networking in at least one major cloud provider. Hands-on experience creating and managing firewall policies in cloud-native and/or next-generation firewalls. Experience provisioning dedicated cloud connections (Direct Connect, ExpressRoute, Cloud Interconnect, or FastConnect) and IPsec VPNs. Strong working knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS. Experience implementing Zero Trust network architecture or segmentation. Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications Cisco CCNP Enterprise or CCNP Security, or Palo Alto Networks PCNSE. AWS Certified Advanced Networking - Specialty, Microsoft Azure Network Engineer Associate (AZ-700), or Google Professional Cloud Network Engineer. Networking experience across more than one of AWS, Azure, GCP, and OCI. Experience with Terraform or Ansible for network automation. Experience with multi-cloud network or Zero Trust platforms (e.g., Aviatrix, Zscaler, Palo Alto Prisma Access). Experience in federal environments and with NIST SP 800-53 network controls. Prior support of a civilian federal agency.
The Applied Research Laboratory at Penn State University
Mundelein, Illinois
Job Description We seek a experienced Application Security Engineer to join the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office at the Applied Research Laboratory (ARL) at Penn State, based in San Diego, CA . The JMIE Division delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross domain data movement, tactical compute environments, and resilient edge processing strengthen secure software design, development, and deployment across our mission focused environments. You will champion application security best practices, embed security across the software development lifecycle, and work closely with engineering teams to ensure applications are resilient, compliant, and securely architected from concept to production. You will: Lead the integration of application security best practices into Agile and DevSecOps workflows, ensuring security requirements are included from initial design through deployment Conduct deep dive secure code reviews, threat modeling, and architecture analysis to identify vulnerabilities and guide remediation strategies Perform static (SAST), dynamic (DAST), and interactive application security testing, ensuring coverage across microservices, APIs, and containerized applications Develop and maintain secure coding standards, patterns, and guidance used across engineering teams Partner with developers and product owners to ensure secure design decisions, using approaches such as least privilege, secure defaults, zero trust principles, and defense in depth Manage and optimize tools supporting application security, including SAST/DAST platforms, software composition analysis (SCA), secret scanning, and container/CI pipeline security tool Evaluate open source and third party components for vulnerabilities, license risks, and supply chain integrity Guide teams in secure API development, authentication/authorization best practices, cryptographic use, and secure data handling Validate security controls and perform risk analysis for applications undergoing release, modernization, or cloud migration Assist in building a security focused engineering culture through training, documentation, and hands on developer engagement Collaborate with cybersecurity, cloud, and network teams to ensure application security aligns with enterprise risk, RMF requirements, and overall mission objectives Strong background in application security, including secure development practices, vulnerability analysis, and secure design principles Versed in SAST, DAST, SCA, and CI/CD security integration Required: Proficiency with secure coding techniques in one or more languages (e.g., Python, Java, C#, JavaScript/TypeScript, Go) Experience reviewing application architectures, microservices, and containerized workloads for security weaknesses Familiarity with NIST or similar control frameworks as they relate to application-level security requirements Strong understanding of authentication, authorization, encryption, and API security best practices Strong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation Experience interpreting security policy, generating evidence, and documenting test results for NIST / JSIG security controls Active TS/SCI clearance Preferred: Experience operating within DevSecOps pipelines and modern CI/CD ecosystems Knowledge of cloud-native application security (AWS, Azure, or DoD cloud environments) Experience with secure design reviews for APIs, distributed systems, mobile applications, or cross-domain solutions Background with eMASS, STIGs, or ACAS in support of application accreditation efforts Relevant certifications: CSSLP, GWAPT, GWEB, GCSA, GSSP, or CISSP Prior experience delivering developer security training or building secure coding programs
11/14/2026
Full time
Job Description We seek a experienced Application Security Engineer to join the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office at the Applied Research Laboratory (ARL) at Penn State, based in San Diego, CA . The JMIE Division delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross domain data movement, tactical compute environments, and resilient edge processing strengthen secure software design, development, and deployment across our mission focused environments. You will champion application security best practices, embed security across the software development lifecycle, and work closely with engineering teams to ensure applications are resilient, compliant, and securely architected from concept to production. You will: Lead the integration of application security best practices into Agile and DevSecOps workflows, ensuring security requirements are included from initial design through deployment Conduct deep dive secure code reviews, threat modeling, and architecture analysis to identify vulnerabilities and guide remediation strategies Perform static (SAST), dynamic (DAST), and interactive application security testing, ensuring coverage across microservices, APIs, and containerized applications Develop and maintain secure coding standards, patterns, and guidance used across engineering teams Partner with developers and product owners to ensure secure design decisions, using approaches such as least privilege, secure defaults, zero trust principles, and defense in depth Manage and optimize tools supporting application security, including SAST/DAST platforms, software composition analysis (SCA), secret scanning, and container/CI pipeline security tool Evaluate open source and third party components for vulnerabilities, license risks, and supply chain integrity Guide teams in secure API development, authentication/authorization best practices, cryptographic use, and secure data handling Validate security controls and perform risk analysis for applications undergoing release, modernization, or cloud migration Assist in building a security focused engineering culture through training, documentation, and hands on developer engagement Collaborate with cybersecurity, cloud, and network teams to ensure application security aligns with enterprise risk, RMF requirements, and overall mission objectives Strong background in application security, including secure development practices, vulnerability analysis, and secure design principles Versed in SAST, DAST, SCA, and CI/CD security integration Required: Proficiency with secure coding techniques in one or more languages (e.g., Python, Java, C#, JavaScript/TypeScript, Go) Experience reviewing application architectures, microservices, and containerized workloads for security weaknesses Familiarity with NIST or similar control frameworks as they relate to application-level security requirements Strong understanding of authentication, authorization, encryption, and API security best practices Strong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation Experience interpreting security policy, generating evidence, and documenting test results for NIST / JSIG security controls Active TS/SCI clearance Preferred: Experience operating within DevSecOps pipelines and modern CI/CD ecosystems Knowledge of cloud-native application security (AWS, Azure, or DoD cloud environments) Experience with secure design reviews for APIs, distributed systems, mobile applications, or cross-domain solutions Background with eMASS, STIGs, or ACAS in support of application accreditation efforts Relevant certifications: CSSLP, GWAPT, GWEB, GCSA, GSSP, or CISSP Prior experience delivering developer security training or building secure coding programs
The Applied Research Laboratory at Penn State University
Job Description We seek a experienced Application Security Engineer to join the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office at the Applied Research Laboratory (ARL) at Penn State, based in San Diego, CA . The JMIE Division delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross domain data movement, tactical compute environments, and resilient edge processing strengthen secure software design, development, and deployment across our mission focused environments. You will champion application security best practices, embed security across the software development lifecycle, and work closely with engineering teams to ensure applications are resilient, compliant, and securely architected from concept to production. You will: Lead the integration of application security best practices into Agile and DevSecOps workflows, ensuring security requirements are included from initial design through deployment Conduct deep dive secure code reviews, threat modeling, and architecture analysis to identify vulnerabilities and guide remediation strategies Perform static (SAST), dynamic (DAST), and interactive application security testing, ensuring coverage across microservices, APIs, and containerized applications Develop and maintain secure coding standards, patterns, and guidance used across engineering teams Partner with developers and product owners to ensure secure design decisions, using approaches such as least privilege, secure defaults, zero trust principles, and defense in depth Manage and optimize tools supporting application security, including SAST/DAST platforms, software composition analysis (SCA), secret scanning, and container/CI pipeline security tool Evaluate open source and third party components for vulnerabilities, license risks, and supply chain integrity Guide teams in secure API development, authentication/authorization best practices, cryptographic use, and secure data handling Validate security controls and perform risk analysis for applications undergoing release, modernization, or cloud migration Assist in building a security focused engineering culture through training, documentation, and hands on developer engagement Collaborate with cybersecurity, cloud, and network teams to ensure application security aligns with enterprise risk, RMF requirements, and overall mission objectives Strong background in application security, including secure development practices, vulnerability analysis, and secure design principles Versed in SAST, DAST, SCA, and CI/CD security integration Required: Proficiency with secure coding techniques in one or more languages (e.g., Python, Java, C#, JavaScript/TypeScript, Go) Experience reviewing application architectures, microservices, and containerized workloads for security weaknesses Familiarity with NIST or similar control frameworks as they relate to application-level security requirements Strong understanding of authentication, authorization, encryption, and API security best practices Strong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation Experience interpreting security policy, generating evidence, and documenting test results for NIST / JSIG security controls Active TS/SCI clearance Preferred: Experience operating within DevSecOps pipelines and modern CI/CD ecosystems Knowledge of cloud-native application security (AWS, Azure, or DoD cloud environments) Experience with secure design reviews for APIs, distributed systems, mobile applications, or cross-domain solutions Background with eMASS, STIGs, or ACAS in support of application accreditation efforts Relevant certifications: CSSLP, GWAPT, GWEB, GCSA, GSSP, or CISSP Prior experience delivering developer security training or building secure coding programs
11/14/2026
Full time
Job Description We seek a experienced Application Security Engineer to join the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office at the Applied Research Laboratory (ARL) at Penn State, based in San Diego, CA . The JMIE Division delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross domain data movement, tactical compute environments, and resilient edge processing strengthen secure software design, development, and deployment across our mission focused environments. You will champion application security best practices, embed security across the software development lifecycle, and work closely with engineering teams to ensure applications are resilient, compliant, and securely architected from concept to production. You will: Lead the integration of application security best practices into Agile and DevSecOps workflows, ensuring security requirements are included from initial design through deployment Conduct deep dive secure code reviews, threat modeling, and architecture analysis to identify vulnerabilities and guide remediation strategies Perform static (SAST), dynamic (DAST), and interactive application security testing, ensuring coverage across microservices, APIs, and containerized applications Develop and maintain secure coding standards, patterns, and guidance used across engineering teams Partner with developers and product owners to ensure secure design decisions, using approaches such as least privilege, secure defaults, zero trust principles, and defense in depth Manage and optimize tools supporting application security, including SAST/DAST platforms, software composition analysis (SCA), secret scanning, and container/CI pipeline security tool Evaluate open source and third party components for vulnerabilities, license risks, and supply chain integrity Guide teams in secure API development, authentication/authorization best practices, cryptographic use, and secure data handling Validate security controls and perform risk analysis for applications undergoing release, modernization, or cloud migration Assist in building a security focused engineering culture through training, documentation, and hands on developer engagement Collaborate with cybersecurity, cloud, and network teams to ensure application security aligns with enterprise risk, RMF requirements, and overall mission objectives Strong background in application security, including secure development practices, vulnerability analysis, and secure design principles Versed in SAST, DAST, SCA, and CI/CD security integration Required: Proficiency with secure coding techniques in one or more languages (e.g., Python, Java, C#, JavaScript/TypeScript, Go) Experience reviewing application architectures, microservices, and containerized workloads for security weaknesses Familiarity with NIST or similar control frameworks as they relate to application-level security requirements Strong understanding of authentication, authorization, encryption, and API security best practices Strong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation Experience interpreting security policy, generating evidence, and documenting test results for NIST / JSIG security controls Active TS/SCI clearance Preferred: Experience operating within DevSecOps pipelines and modern CI/CD ecosystems Knowledge of cloud-native application security (AWS, Azure, or DoD cloud environments) Experience with secure design reviews for APIs, distributed systems, mobile applications, or cross-domain solutions Background with eMASS, STIGs, or ACAS in support of application accreditation efforts Relevant certifications: CSSLP, GWAPT, GWEB, GCSA, GSSP, or CISSP Prior experience delivering developer security training or building secure coding programs
Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Senior Cloud Engineer who is fluent in both Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI). You will be the program's go-to engineer for both platforms, splitting your time roughly evenly between them. You will build GCP and OCI foundations that match the same enterprise standards the team applies on AWS and Azure. On GCP, you will establish the organization and folder hierarchy, Shared VPC networking, and organization policies. On OCI, you will build tenancies, compartments, VCN/DRG networking, and Security Zones. On both, you will automate with Infrastructure-as-Code, integrate with the customer's identity, monitoring, and service management tools, and support the platforms in production. Key Responsibilities Design and deploy GCP landing zones: resource hierarchy (organization, folders, projects), Shared VPC hub-and-spoke networking, Cloud Interconnect or HA VPN, and Cloud DNS. Design and deploy OCI landing zones: tenancy and compartment structure, VCN and Dynamic Routing Gateway (DRG) hub-and-spoke networking, FastConnect or IPsec VPN, and DNS. Build and maintain Terraform modules (including OCI Resource Manager) and GitOps workflows for production, integration, development, and sandbox environments on both platforms. Configure IAM and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles. Enforce guardrails with GCP Organization Policy and Security Command Center, and with OCI Cloud Guard and Security Zones, against NIST SP 800-53 Rev 5 and customer security standards. Apply the enterprise tagging and labeling strategy for asset management and chargeback/showback using GCP Billing Reports and OCI Cost Analysis. Monitor environments with Google Cloud Operations Suite and OCI Monitoring, integrated with Datadog, Splunk, and ServiceNow. Perform patching, routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support. Design and test high availability, backup, and disaster recovery on both platforms. Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff. Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. At least 9 years of experience deploying and configuring cloud environments. Hands-on production experience with both Google Cloud Platform and Oracle Cloud Infrastructure. Production experience with Infrastructure-as-Code using Terraform on GCP and OCI. Experience with cloud network design, including private connectivity (Cloud Interconnect, FastConnect, or IPsec VPN), routing, and DNS. Experience implementing IAM and single sign-on federation (SAML 2.0/OIDC). Working knowledge of NIST SP 800-53 security controls in a federal environment. Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications Google Cloud Certified Professional Cloud Architect or Professional Cloud Security Engineer. Oracle Cloud Infrastructure Architect Professional or OCI Multicloud Architect Professional. Experience hosting Oracle Database workloads on OCI (Autonomous Database, Exadata Cloud Service, Base Database Service). Experience with GCP Assured Workloads, OCI US Government regions, or FedRAMP Moderate/High environments. Experience with GCP Cloud Build/Cloud Deploy or OCI DevOps pipelines. Working knowledge of AWS or Azure. Prior support of a civilian federal agency.
11/14/2026
Full time
Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Senior Cloud Engineer who is fluent in both Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI). You will be the program's go-to engineer for both platforms, splitting your time roughly evenly between them. You will build GCP and OCI foundations that match the same enterprise standards the team applies on AWS and Azure. On GCP, you will establish the organization and folder hierarchy, Shared VPC networking, and organization policies. On OCI, you will build tenancies, compartments, VCN/DRG networking, and Security Zones. On both, you will automate with Infrastructure-as-Code, integrate with the customer's identity, monitoring, and service management tools, and support the platforms in production. Key Responsibilities Design and deploy GCP landing zones: resource hierarchy (organization, folders, projects), Shared VPC hub-and-spoke networking, Cloud Interconnect or HA VPN, and Cloud DNS. Design and deploy OCI landing zones: tenancy and compartment structure, VCN and Dynamic Routing Gateway (DRG) hub-and-spoke networking, FastConnect or IPsec VPN, and DNS. Build and maintain Terraform modules (including OCI Resource Manager) and GitOps workflows for production, integration, development, and sandbox environments on both platforms. Configure IAM and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles. Enforce guardrails with GCP Organization Policy and Security Command Center, and with OCI Cloud Guard and Security Zones, against NIST SP 800-53 Rev 5 and customer security standards. Apply the enterprise tagging and labeling strategy for asset management and chargeback/showback using GCP Billing Reports and OCI Cost Analysis. Monitor environments with Google Cloud Operations Suite and OCI Monitoring, integrated with Datadog, Splunk, and ServiceNow. Perform patching, routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support. Design and test high availability, backup, and disaster recovery on both platforms. Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff. Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. At least 9 years of experience deploying and configuring cloud environments. Hands-on production experience with both Google Cloud Platform and Oracle Cloud Infrastructure. Production experience with Infrastructure-as-Code using Terraform on GCP and OCI. Experience with cloud network design, including private connectivity (Cloud Interconnect, FastConnect, or IPsec VPN), routing, and DNS. Experience implementing IAM and single sign-on federation (SAML 2.0/OIDC). Working knowledge of NIST SP 800-53 security controls in a federal environment. Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications Google Cloud Certified Professional Cloud Architect or Professional Cloud Security Engineer. Oracle Cloud Infrastructure Architect Professional or OCI Multicloud Architect Professional. Experience hosting Oracle Database workloads on OCI (Autonomous Database, Exadata Cloud Service, Base Database Service). Experience with GCP Assured Workloads, OCI US Government regions, or FedRAMP Moderate/High environments. Experience with GCP Cloud Build/Cloud Deploy or OCI DevOps pipelines. Working knowledge of AWS or Azure. Prior support of a civilian federal agency.
Job Description Role Overview: The Vice President, Workforce Identity and Directory Services, serves as the primary owner of all Active Directory-related infrastructure and strategy. This role leads the design, governance, and modernization of the enterprise identity platform across on-premises, hybrid, and cloud environments. The VP is responsible for developing long-term technology roadmaps, driving security best practices, and partnering with Security, Infrastructure, and Application teams to deliver scalable, resilient identity services aligned with business objectives. Key Responsibilities: Serve as the primary owner and point of contact for all Active Directory infrastructure, strategy, and operations across on-premises and cloud environments. Lead and execute a long-term technology roadmap to modernize the Active Directory environment, including forest and domain consolidation, AD tiering model implementation, strategic reduction and decommissioning of on-premises domain controllers, and accelerating workload migration from on-premises AD to Microsoft Entra ID. Architect and govern enterprise Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), DNS, and DHCP, PKI, ensuring high availability, disaster recovery readiness, and security at scale. Drive the adoption and optimization of Microsoft Entra ID security features, including Conditional Access, Identity Protection, Identity Governance, Workload Identities, and Entra Permissions Management. Govern Entra ID external collaboration and application identity, including cross-tenant access policies, B2B guest account lifecycle, app registration and enterprise application management, API permission and consent policy governance, and service principal security and credential rotation. Manage hybrid Active Directory environments, including Azure AD Connect / Cloud Sync configuration, seamless SSO, pass-through authentication, and directory synchronization health monitoring. Design and enforce Group Policy architecture at scale, including GPO lifecycle management, security baselines, and policy inheritance strategies across complex OU structures. Establish and enforce identity security best practices, policies, and standards across the organization in alignment with zero trust principles and AD tiering models (Enhanced Security Admin Environment). Oversee Kerberos, NTLM, LDAP, and certificate-based authentication protocols, driving migration away from legacy protocols toward modern authentication standards. Lead AD Forest and domain trust management, replication topology optimization, Sites and Services configuration, and schema extension governance. Partner with Security, Compliance, and Risk teams to ensure identity infrastructure meets regulatory and audit requirements, including SOX, NIST, and industry-specific mandates. Oversee incident response, disaster recovery, and root cause analysis for identity-related security events, AD replication failures, and service disruptions. Evaluate emerging identity technologies and industry trends including passwordless authentication, decentralized identity, and AI-driven threat detection to inform strategic planning and investment decisions. Required Qualifications: 10+ years of progressive experience in IT infrastructure with a focus on Active Directory and identity management, including at least 5 years in an architect or senior engineering capacity. Deep knowledge of Microsoft 365 from an identity and access management perspective, including Exchange Online, SharePoint Online, and Teams integration with Entra ID, M365 group and license management, app consent frameworks, service principals, and Microsoft 365 Defender for identity-related threat detection. Deep fluency in authentication and federation protocols, including SAML, OAuth 2.0, OpenID Connect, WS-Federation, Kerberos, LDAP, and NTLM, with a track record of migrating environments away from legacy protocols. Experience implementing passwordless authentication strategies, including FIDO2, Windows Hello for Business, and certificate-based authentication via PKI. Hands-on experience with Active Directory security assessment and hardening tools such as BloodHound, PingCastle, and Purple Knight for attack path analysis and security posture evaluation. Knowledge of service account governance, including Group Managed Service Accounts (gMSA), and endpoint security tooling such as LAPS. Proficiency with PowerShell, Terraform, DSC, and Microsoft Graph API for identity infrastructure automation, reporting, and configuration drift detection. Working knowledge of NIST, SOX, or other regulatory compliance frameworks as they relate to identity management and PKI governance. Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Azure Solutions Architect Expert, or Cybersecurity Architect Expert. Proven track record of building, mentoring, and managing high-performing identity engineering teams. Excellent communication and stakeholder management skills, to include translating complex identity concepts for non-technical audiences and influence at all levels of the organization. Preferred Qualifications: Identity architecture and strategic technology vision Enterprise security and zero trust mindset Deep technical problem solving across complex, multi-forest AD environments Stakeholder management and executive communication Strong ownership, accountability, and bias toward action Experience in financial services, private equity, or other highly regulated industries.
11/14/2026
Full time
Job Description Role Overview: The Vice President, Workforce Identity and Directory Services, serves as the primary owner of all Active Directory-related infrastructure and strategy. This role leads the design, governance, and modernization of the enterprise identity platform across on-premises, hybrid, and cloud environments. The VP is responsible for developing long-term technology roadmaps, driving security best practices, and partnering with Security, Infrastructure, and Application teams to deliver scalable, resilient identity services aligned with business objectives. Key Responsibilities: Serve as the primary owner and point of contact for all Active Directory infrastructure, strategy, and operations across on-premises and cloud environments. Lead and execute a long-term technology roadmap to modernize the Active Directory environment, including forest and domain consolidation, AD tiering model implementation, strategic reduction and decommissioning of on-premises domain controllers, and accelerating workload migration from on-premises AD to Microsoft Entra ID. Architect and govern enterprise Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), DNS, and DHCP, PKI, ensuring high availability, disaster recovery readiness, and security at scale. Drive the adoption and optimization of Microsoft Entra ID security features, including Conditional Access, Identity Protection, Identity Governance, Workload Identities, and Entra Permissions Management. Govern Entra ID external collaboration and application identity, including cross-tenant access policies, B2B guest account lifecycle, app registration and enterprise application management, API permission and consent policy governance, and service principal security and credential rotation. Manage hybrid Active Directory environments, including Azure AD Connect / Cloud Sync configuration, seamless SSO, pass-through authentication, and directory synchronization health monitoring. Design and enforce Group Policy architecture at scale, including GPO lifecycle management, security baselines, and policy inheritance strategies across complex OU structures. Establish and enforce identity security best practices, policies, and standards across the organization in alignment with zero trust principles and AD tiering models (Enhanced Security Admin Environment). Oversee Kerberos, NTLM, LDAP, and certificate-based authentication protocols, driving migration away from legacy protocols toward modern authentication standards. Lead AD Forest and domain trust management, replication topology optimization, Sites and Services configuration, and schema extension governance. Partner with Security, Compliance, and Risk teams to ensure identity infrastructure meets regulatory and audit requirements, including SOX, NIST, and industry-specific mandates. Oversee incident response, disaster recovery, and root cause analysis for identity-related security events, AD replication failures, and service disruptions. Evaluate emerging identity technologies and industry trends including passwordless authentication, decentralized identity, and AI-driven threat detection to inform strategic planning and investment decisions. Required Qualifications: 10+ years of progressive experience in IT infrastructure with a focus on Active Directory and identity management, including at least 5 years in an architect or senior engineering capacity. Deep knowledge of Microsoft 365 from an identity and access management perspective, including Exchange Online, SharePoint Online, and Teams integration with Entra ID, M365 group and license management, app consent frameworks, service principals, and Microsoft 365 Defender for identity-related threat detection. Deep fluency in authentication and federation protocols, including SAML, OAuth 2.0, OpenID Connect, WS-Federation, Kerberos, LDAP, and NTLM, with a track record of migrating environments away from legacy protocols. Experience implementing passwordless authentication strategies, including FIDO2, Windows Hello for Business, and certificate-based authentication via PKI. Hands-on experience with Active Directory security assessment and hardening tools such as BloodHound, PingCastle, and Purple Knight for attack path analysis and security posture evaluation. Knowledge of service account governance, including Group Managed Service Accounts (gMSA), and endpoint security tooling such as LAPS. Proficiency with PowerShell, Terraform, DSC, and Microsoft Graph API for identity infrastructure automation, reporting, and configuration drift detection. Working knowledge of NIST, SOX, or other regulatory compliance frameworks as they relate to identity management and PKI governance. Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Azure Solutions Architect Expert, or Cybersecurity Architect Expert. Proven track record of building, mentoring, and managing high-performing identity engineering teams. Excellent communication and stakeholder management skills, to include translating complex identity concepts for non-technical audiences and influence at all levels of the organization. Preferred Qualifications: Identity architecture and strategic technology vision Enterprise security and zero trust mindset Deep technical problem solving across complex, multi-forest AD environments Stakeholder management and executive communication Strong ownership, accountability, and bias toward action Experience in financial services, private equity, or other highly regulated industries.
Job Description Regional Director of Information Technology & Services (Healthcare) Location: Western Arizona / Lower Colorado River Region (100% On-Site Relocation Assistance Not Provided) Position Type: Full-Time, Direct Hire Compensation: $100,000 - $135,000 / year (DOE) Travel: 25% - 50% regional travel (day and overnight) Recruiting Partner: PMC Medical Staffing Position Overview PMC Medical Staffing has been retained by a leading regional healthcare network to recruit a Regional Director of Information Technology & Services (IT&S) . This executive IT leadership position serves as the senior technology authority across an integrated multi-facility healthcare market. Working as the primary bridge between local executive teams, clinical directors, and corporate enterprise IT governance, you will guide digital strategy, guarantee infrastructure resilience, ensure strict regulatory compliance, and align local technical capabilities with modern patient-care delivery standards. Core Responsibilities Strategic Governance & Enterprise Alignment Serve as the senior liaison connecting local hospital leadership, regional stakeholders, and enterprise IT executives to ensure market-level clinical workflows and infrastructure needs are represented in long-term technology roadmaps. Actively engage in enterprise IT steering committees, ensuring system-wide data governance, zero-trust cybersecurity policies, and IT architectural standards are executed across local operations. Formulate and drive annual technology strategic plans that directly advance institutional clinical outcomes, operational throughput, and organizational security. Operational Leadership & Service Delivery Direct day-to-day healthcare IT operations across all regional sites, encompassing LAN/WAN infrastructure, enterprise clinical applications, data centers, end-user support, and technical services. Enforce rigorous IT Service Management (ITSM) workflows, change-control protocols, and rapid incident response frameworks to uphold continuous high availability across critical clinical and operational platforms. Maintain rigorous adherence to all federal and state regulatory mandates (including HIPAA,HITECH, and Joint Commission standards); direct IT readiness and evidence delivery for all accreditation reviews and security audits. Enterprise Projects & Change Enablement Oversee the regional deployment of enterprise-wide initiatives, including electronic health record (EHR) enhancements, core infrastructure modernization, security stack overhauls, and the mitigation of data center technical debt. Serve as the key change management sponsor across all facilities, championing clinical adoption of emerging technologies through clear communication, tailored user education, and direct workflow support. Stakeholder Collaboration & Vendor Oversight Cultivate close working partnerships across medical staff, nursing executives, facility administrators,and centralized technical teams to align technology deployments with bedside priorities. Direct third-party vendor relationships, contract execution, and hardware/software procurement in compliance with corporate enterprise vendor-management policies. Fiscal Stewardship & Resource Optimization Partner with regional executive financial leadership to direct capital and operational IT expenditures,identify workflow automations, and eliminate technical redundancies. Champion efficiency measures that maximize system ROI while protecting patient data and bedside workflows. Team Leadership & Talent Development Lead, recruit, and mentor a multidisciplinary market IT workforce, creating an environment centered on technical excellence, accountability, and ongoing skill development. Oversee team succession planning, performance benchmarking, and workload balancing across the market. Candidate Qualifications Minimum Qualifications (Must-Have) Education & Experience: Bachelor's degree in Computer Science, Management Information Systems (MIS), Healthcare Administration, Business, or a related discipline OR 7+ years of equivalent, verifiable professional IT experience in lieu of a degree. Leadership Background: 5+ years of progressive IT leadership experience, including a minimum of 3 years in healthcare IT environments spanning multi-facility, regional, or enterprise networks . Clinical & Cross-Functional Acumen: Demonstrated history of successfully partnering with executive leadership, hospital administrators, physicians, and clinical staff to align technology with healthcare delivery. On-Site & Travel Commitment: Ability to work 100% on-site within the Western Arizona market with the capacity to travel 25% to 50% across regional facilities as required. Preferred Qualifications (Nice-to-Have) Direct leadership experience managing acute-care hospital IT infrastructure, inpatient/outpatient EHR platforms, multi-layered cybersecurity, and complex clinical rollouts. Proven background managing departmental budgets, vendor SLAs, and distributed technical support teams across acute and ambulatory sites. In-depth understanding of healthcare compliance standards, accreditation audits, and emerging digital health ecosystems. Work Environment & Physical Demands Primary duties are conducted on-site across climate-controlled administrative offices, hospital data centers, and active clinical environments. Walking rounds within clinical facilities may involve proximity to standard medical center operating environments, adhering strictly to facility infection control, biosafety, and PPE guidelines. Requires standard business schedule availability (typically 8:00 AM - 5:00 PM, Monday through Friday), with flexibility required to support critical system upgrades, emergency incidents, or operational escalations. Total Rewards & Benefits Package Health & Wellness: Comprehensive medical, dental, and vision insurance packages with multiple tier options for employees and dependents. Financial Protection: Employer-provided life and AD&D insurance; short-term and long-term disability; supplemental critical illness and accident policies. Retirement: 401(k) plan featuring an employer match program. Time Off: Generous Paid Time Off (PTO) bank and paid family leave policies. Professional Growth: Tuition assistance, professional certification reimbursement, and ongoing leadership development programs. Wellness Perks: Access to employee assistance programs (EAP), virtual care options,and health wellness incentives. Who We Are: For over 30 years, PMC Medical Staffing has been more than just a staffing agency-we've been a career partner for thousands of healthcare professionals nationwide. Whether you're seeking travel assignments, per diem flexibility, permanent placements, or something in between, we connect you with rewarding opportunities at top-tier healthcare facilities across the country. Not sure if this role is the perfect fit? Apply anyway! We work with healthcare professionals across specialties, locations, and experience levels. Even if this specific position isn't right for you, we likely have others that are. Let's start a conversation about where your career could go next! Equal Opportunity Employer: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by law.
11/14/2026
Full time
Job Description Regional Director of Information Technology & Services (Healthcare) Location: Western Arizona / Lower Colorado River Region (100% On-Site Relocation Assistance Not Provided) Position Type: Full-Time, Direct Hire Compensation: $100,000 - $135,000 / year (DOE) Travel: 25% - 50% regional travel (day and overnight) Recruiting Partner: PMC Medical Staffing Position Overview PMC Medical Staffing has been retained by a leading regional healthcare network to recruit a Regional Director of Information Technology & Services (IT&S) . This executive IT leadership position serves as the senior technology authority across an integrated multi-facility healthcare market. Working as the primary bridge between local executive teams, clinical directors, and corporate enterprise IT governance, you will guide digital strategy, guarantee infrastructure resilience, ensure strict regulatory compliance, and align local technical capabilities with modern patient-care delivery standards. Core Responsibilities Strategic Governance & Enterprise Alignment Serve as the senior liaison connecting local hospital leadership, regional stakeholders, and enterprise IT executives to ensure market-level clinical workflows and infrastructure needs are represented in long-term technology roadmaps. Actively engage in enterprise IT steering committees, ensuring system-wide data governance, zero-trust cybersecurity policies, and IT architectural standards are executed across local operations. Formulate and drive annual technology strategic plans that directly advance institutional clinical outcomes, operational throughput, and organizational security. Operational Leadership & Service Delivery Direct day-to-day healthcare IT operations across all regional sites, encompassing LAN/WAN infrastructure, enterprise clinical applications, data centers, end-user support, and technical services. Enforce rigorous IT Service Management (ITSM) workflows, change-control protocols, and rapid incident response frameworks to uphold continuous high availability across critical clinical and operational platforms. Maintain rigorous adherence to all federal and state regulatory mandates (including HIPAA,HITECH, and Joint Commission standards); direct IT readiness and evidence delivery for all accreditation reviews and security audits. Enterprise Projects & Change Enablement Oversee the regional deployment of enterprise-wide initiatives, including electronic health record (EHR) enhancements, core infrastructure modernization, security stack overhauls, and the mitigation of data center technical debt. Serve as the key change management sponsor across all facilities, championing clinical adoption of emerging technologies through clear communication, tailored user education, and direct workflow support. Stakeholder Collaboration & Vendor Oversight Cultivate close working partnerships across medical staff, nursing executives, facility administrators,and centralized technical teams to align technology deployments with bedside priorities. Direct third-party vendor relationships, contract execution, and hardware/software procurement in compliance with corporate enterprise vendor-management policies. Fiscal Stewardship & Resource Optimization Partner with regional executive financial leadership to direct capital and operational IT expenditures,identify workflow automations, and eliminate technical redundancies. Champion efficiency measures that maximize system ROI while protecting patient data and bedside workflows. Team Leadership & Talent Development Lead, recruit, and mentor a multidisciplinary market IT workforce, creating an environment centered on technical excellence, accountability, and ongoing skill development. Oversee team succession planning, performance benchmarking, and workload balancing across the market. Candidate Qualifications Minimum Qualifications (Must-Have) Education & Experience: Bachelor's degree in Computer Science, Management Information Systems (MIS), Healthcare Administration, Business, or a related discipline OR 7+ years of equivalent, verifiable professional IT experience in lieu of a degree. Leadership Background: 5+ years of progressive IT leadership experience, including a minimum of 3 years in healthcare IT environments spanning multi-facility, regional, or enterprise networks . Clinical & Cross-Functional Acumen: Demonstrated history of successfully partnering with executive leadership, hospital administrators, physicians, and clinical staff to align technology with healthcare delivery. On-Site & Travel Commitment: Ability to work 100% on-site within the Western Arizona market with the capacity to travel 25% to 50% across regional facilities as required. Preferred Qualifications (Nice-to-Have) Direct leadership experience managing acute-care hospital IT infrastructure, inpatient/outpatient EHR platforms, multi-layered cybersecurity, and complex clinical rollouts. Proven background managing departmental budgets, vendor SLAs, and distributed technical support teams across acute and ambulatory sites. In-depth understanding of healthcare compliance standards, accreditation audits, and emerging digital health ecosystems. Work Environment & Physical Demands Primary duties are conducted on-site across climate-controlled administrative offices, hospital data centers, and active clinical environments. Walking rounds within clinical facilities may involve proximity to standard medical center operating environments, adhering strictly to facility infection control, biosafety, and PPE guidelines. Requires standard business schedule availability (typically 8:00 AM - 5:00 PM, Monday through Friday), with flexibility required to support critical system upgrades, emergency incidents, or operational escalations. Total Rewards & Benefits Package Health & Wellness: Comprehensive medical, dental, and vision insurance packages with multiple tier options for employees and dependents. Financial Protection: Employer-provided life and AD&D insurance; short-term and long-term disability; supplemental critical illness and accident policies. Retirement: 401(k) plan featuring an employer match program. Time Off: Generous Paid Time Off (PTO) bank and paid family leave policies. Professional Growth: Tuition assistance, professional certification reimbursement, and ongoing leadership development programs. Wellness Perks: Access to employee assistance programs (EAP), virtual care options,and health wellness incentives. Who We Are: For over 30 years, PMC Medical Staffing has been more than just a staffing agency-we've been a career partner for thousands of healthcare professionals nationwide. Whether you're seeking travel assignments, per diem flexibility, permanent placements, or something in between, we connect you with rewarding opportunities at top-tier healthcare facilities across the country. Not sure if this role is the perfect fit? Apply anyway! We work with healthcare professionals across specialties, locations, and experience levels. Even if this specific position isn't right for you, we likely have others that are. Let's start a conversation about where your career could go next! Equal Opportunity Employer: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by law.
POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI65aebe2bcb05-7712
11/14/2026
Full time
POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI65aebe2bcb05-7712
This job is with HP, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Android OS SW Developer Description - Job Summary HP is seeking a Software Developer to join the team responsible for developing Android operating-system solutions for HP products. This role will contribute to the design, development, integration, and maintenance of HP value-added Android OS capabilities that differentiate HP products and address the specialized needs of enterprise and retail customers. The developer will work across the Android platform stack to deliver features that improve device manageability, platform security, deployment, servicing, and integration with retail peripherals. The role requires hands-on Android platform development experience and the ability to collaborate with hardware, firmware, security, quality, product, and external technology partners. Responsibilities Design, develop, integrate, and maintain Android OS components for HP products. Develop HP-specific Android features and system services that extend the capabilities of the Android Open Source Project. Implement device-management functionality, including enterprise configuration, provisioning, policy enforcement, telemetry, and integration with MDM and UEM solutions. Develop security features that strengthen platform integrity, protect system services and data, and support trusted software execution. Develop and enhance standardized peripheral interfaces and services that reduce device-specific application integration. Use Android debugging and analysis tools to investigate system failures, performance issues, compatibility problems, and security defects. Participate in architecture and design reviews, code reviews, test planning, and release-readiness activities. Create technical documentation covering architecture, interfaces, configuration, development, testing, and troubleshooting. Collaborate with geographically distributed engineering teams, ODMs, silicon vendors, peripheral suppliers, independent software vendors, and product teams. HP currently differentiates its Android platform through areas such as OEMConfig, provisioning and OS-management tools, HP signing, restricted root access, peripheral firmware updates, and a standardized JPOS-based peripheral framework. Education & Experience Recommended Four-year or Graduate Degree in Computer Science, Information Systems, or any other related discipline or commensurate work experience or demonstrated competence. Typically has 7-10 years of work experience, preferably in applications engineering, programming, or a related field. Preferred Certifications Programming Language/s Certification (Kotlin, Java, C++, Python, or similar) Knowledge & Skills Experience developing Android platform or system-level software. Experience with Android Enterprise, device-policy management, OEMConfig, zero-touch enrollment, MDM, or UEM platforms. Knowledge of Android platform security, including SELinux, verified boot, secure boot, and application or image signing. Experience with Android compatibility and security testing, such as CTS, VTS, GTS, STS, or related test suites. Familiarity with Android HAL development, AIDL, Binder IPC, native services, and Linux device drivers. Knowledge of retail or point-of-sale technologies, including barcode scanners, printers, cash drawers, payment devices, customer-facing displays, or JPOS/UnifiedPOS. Experience collaborating with ODMs, chipset vendors, peripheral manufacturers, and external software partners. Cross-Org Skills Effective Communication Results Orientation Learning Agility Digital Fluency Customer Centricity The successful candidate will: Deliver reliable Android OS features that solve meaningful enterprise and retail customer problems. Improve HP Android products through differentiated manageability, security, servicing, and peripheral capabilities. Produce maintainable, well-tested code suitable for long-lived commercial products. Resolve platform-level issues through disciplined, evidence-based root-cause analysis. Work effectively across software, hardware, security, quality, and product-management organizations. Help establish consistent Android platform capabilities across multiple HP product families. The pay range for this role is $116,150 to $182,400 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience. Benefits: HP offers a comprehensive benefits package for this position, including: Health insurance Dental insurance Vision insurance Long term/short term disability insurance Employee assistance program Flexible spending account Life insurance Generous time off policies, including; 4-12 weeks fully paid parental leave based on tenure 11 paid holidays Additional flexible paid vacation and sick leave ( US benefits overview ) The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law. Job - Software Schedule - Full time Shift - No shift premium (United States of America) Travel - Relocation - Equal Opportunity Employer (EEO) - HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s). Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence. For more information, review HP's EEO Policy or read about your rights as an applicant under the law here: " Know Your Rights: Workplace Discrimination is Illegal "
11/13/2026
Full time
This job is with HP, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Android OS SW Developer Description - Job Summary HP is seeking a Software Developer to join the team responsible for developing Android operating-system solutions for HP products. This role will contribute to the design, development, integration, and maintenance of HP value-added Android OS capabilities that differentiate HP products and address the specialized needs of enterprise and retail customers. The developer will work across the Android platform stack to deliver features that improve device manageability, platform security, deployment, servicing, and integration with retail peripherals. The role requires hands-on Android platform development experience and the ability to collaborate with hardware, firmware, security, quality, product, and external technology partners. Responsibilities Design, develop, integrate, and maintain Android OS components for HP products. Develop HP-specific Android features and system services that extend the capabilities of the Android Open Source Project. Implement device-management functionality, including enterprise configuration, provisioning, policy enforcement, telemetry, and integration with MDM and UEM solutions. Develop security features that strengthen platform integrity, protect system services and data, and support trusted software execution. Develop and enhance standardized peripheral interfaces and services that reduce device-specific application integration. Use Android debugging and analysis tools to investigate system failures, performance issues, compatibility problems, and security defects. Participate in architecture and design reviews, code reviews, test planning, and release-readiness activities. Create technical documentation covering architecture, interfaces, configuration, development, testing, and troubleshooting. Collaborate with geographically distributed engineering teams, ODMs, silicon vendors, peripheral suppliers, independent software vendors, and product teams. HP currently differentiates its Android platform through areas such as OEMConfig, provisioning and OS-management tools, HP signing, restricted root access, peripheral firmware updates, and a standardized JPOS-based peripheral framework. Education & Experience Recommended Four-year or Graduate Degree in Computer Science, Information Systems, or any other related discipline or commensurate work experience or demonstrated competence. Typically has 7-10 years of work experience, preferably in applications engineering, programming, or a related field. Preferred Certifications Programming Language/s Certification (Kotlin, Java, C++, Python, or similar) Knowledge & Skills Experience developing Android platform or system-level software. Experience with Android Enterprise, device-policy management, OEMConfig, zero-touch enrollment, MDM, or UEM platforms. Knowledge of Android platform security, including SELinux, verified boot, secure boot, and application or image signing. Experience with Android compatibility and security testing, such as CTS, VTS, GTS, STS, or related test suites. Familiarity with Android HAL development, AIDL, Binder IPC, native services, and Linux device drivers. Knowledge of retail or point-of-sale technologies, including barcode scanners, printers, cash drawers, payment devices, customer-facing displays, or JPOS/UnifiedPOS. Experience collaborating with ODMs, chipset vendors, peripheral manufacturers, and external software partners. Cross-Org Skills Effective Communication Results Orientation Learning Agility Digital Fluency Customer Centricity The successful candidate will: Deliver reliable Android OS features that solve meaningful enterprise and retail customer problems. Improve HP Android products through differentiated manageability, security, servicing, and peripheral capabilities. Produce maintainable, well-tested code suitable for long-lived commercial products. Resolve platform-level issues through disciplined, evidence-based root-cause analysis. Work effectively across software, hardware, security, quality, and product-management organizations. Help establish consistent Android platform capabilities across multiple HP product families. The pay range for this role is $116,150 to $182,400 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience. Benefits: HP offers a comprehensive benefits package for this position, including: Health insurance Dental insurance Vision insurance Long term/short term disability insurance Employee assistance program Flexible spending account Life insurance Generous time off policies, including; 4-12 weeks fully paid parental leave based on tenure 11 paid holidays Additional flexible paid vacation and sick leave ( US benefits overview ) The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law. Job - Software Schedule - Full time Shift - No shift premium (United States of America) Travel - Relocation - Equal Opportunity Employer (EEO) - HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s). Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence. For more information, review HP's EEO Policy or read about your rights as an applicant under the law here: " Know Your Rights: Workplace Discrimination is Illegal "
Description: GXM is seeking a full-time Enterprise Architect to support enterprise architecture development, digital engineering initiatives, and strategic mission integration activities supporting advanced operational Command and Control (C2) environments. The ideal candidate will possess deep expertise in Enterprise Architecture, operational mission systems, Digital Engineering, and Model-Based Systems Engineering (MBSE) with the ability to architect scalable operational solutions across cloud infrastructure, mission applications, operational data environments, cyber security domains and distributed mission systems. This role serves as the strategic architecture authority responsible for defining the target state operational architecture, integrations standards, interoperability frameworks, and long-term scalability model supporting integrated multi-domain mission operations. This individual will support modernization initiatives involving integrated C2 architectures, cloud-native mission systems, operational data fusion environments, AI/ML-enabled analytics platforms, and Joint Force operational integration constructs across defense environments. This role is onsite in Colorado Springs, CO. Hybrid flexibility may be available over time based on mission requirements, program execution needs and achievement of objectives. Responsibilities Serve as the strategic architecture authority for integrated multi-domain C2 mission environment. Develop and maintain enterprise and operational system architectures supporting integrated operational and mission environments. Define and maintain the overall C2 architecture baseline, including operational concepts, integration standards, interface strategies, interoperability frameworks, and long-term scalability models. Apply Model-Based Systems Engineering (MBSE) methodologies to support system architecture development, requirements traceability, integration planning, digital engineering and lifecycle engineering activities. Develop and maintain engineering artifacts, system models, interface definitions, and architecture products, operational workflows, and reference architectures supporting integrated mission operations. Utilize MBSE tools and enterprise architecture frameworks to support digital engineering and operational mission architecture activities. Develop integrated engineering execution plans and schedules using Cameo Systems Modeler or similar enterprise planning tools. Architect scalable cloud, hybrid-cloud, and distributed system environments supporting operational mission needs. Define enterprise integration standards supporting APIs, middleware, event-driven architectures, operational data exchange frameworks, and mission interoperability requirements. Contribute to technical solution development involving AI/ML-enabled operation analytics, DevSecOps pipelines, cybersecurity architectures, software engineering, and operational data fusion capabilities. Develop integrated engineering execution roadmaps, transition architectures, modernization strategies, and scalability frameworks supporting follow-on operational deployment. Collaborate with engineering teams, leadership, and government stakeholders to refine operational mission architectures. Requirements: U.S. Citizen and Active TS/SCI clearance required. Bachelor's degree in systems engineering, Computer Science, Engineering, Information Systems, or related technical field. 8+ years of experience supporting enterprise architecture, operational mission systems, systems engineering, or strategic modernization initiatives within defense or intelligence environments. Strong understanding of Enterprise Architecture, Digital Engineering, and Model-Based Systems Engineering (MBSE) principles. Experience defining architecture governance standards, integration frameworks, interface strategies, and target-state operational architecture. Experience developing enterprise/system architectures, engineering artifacts, integration strategies, and operational workflows. Experience using Cameo Systems Modeler or other Digital Engineering toolsets to develop operational architecture products, integrated engineering execution models, system interaction diagrams, mission workflows, interface definitions, and requirements traceability artifacts supporting complex mission and operational environments. Understanding of cloud architectures, DevSecOps, cybersecurity, AI/ML, system integration, and enterprise modernization approaches. Strong communication, collaboration, and technical writing skills. Proven ability to communicate complex technical architectures to Government leadership, operational stakeholders, and engineering teams. Desired Qualifications Experience supporting defense, space, or multi-domain operational environments. Experience supporting DoD, federal mission systems, enterprise modernization, or operational C2 environments. Experience with MBSE tools such as Cameo Systems Modeler or other Digital Engineering tools. Expert with DoDAF, UAF, SysML, BPMN, and related enterprise architecture, operational architecture, MBSE frameworks supporting DoD mission engineering and digital engineering initiatives. Experience with enterprise cloud platforms, cloud-native and hybrid-cloud environments, container orchestration technologies, and distributed mission infrastructure supporting secure operational workloads. Knowledge of RMF, DISA STIGs, and Zero Trust cybersecurity frameworks. Experience supporting proposals, capture, or strategic modernization efforts for federal or defense programs. $150,000-$235,000 salary + annual bonus eligibility + medical/dental/vision/STD/LTD/Life + 401(k) + PTO Equal Employment Opportunity / Legal Disclaimer GXM Technologies LLC is an Equal Opportunity Employer and participates in E-Verify to confirm employment eligibility. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other legally protected status. GXM Technologies LLC provides reasonable accommodations in accordance with applicable law. This job description is not intended to be a complete list of duties and responsibilities, which may change at any time with or without notice. Employment is at-will where permitted by law , meaning either the employee or the Company may terminate employment at any time, with or without cause or notice, subject to applicable legal requirements. PIc68a4-6194
11/13/2026
Full time
Description: GXM is seeking a full-time Enterprise Architect to support enterprise architecture development, digital engineering initiatives, and strategic mission integration activities supporting advanced operational Command and Control (C2) environments. The ideal candidate will possess deep expertise in Enterprise Architecture, operational mission systems, Digital Engineering, and Model-Based Systems Engineering (MBSE) with the ability to architect scalable operational solutions across cloud infrastructure, mission applications, operational data environments, cyber security domains and distributed mission systems. This role serves as the strategic architecture authority responsible for defining the target state operational architecture, integrations standards, interoperability frameworks, and long-term scalability model supporting integrated multi-domain mission operations. This individual will support modernization initiatives involving integrated C2 architectures, cloud-native mission systems, operational data fusion environments, AI/ML-enabled analytics platforms, and Joint Force operational integration constructs across defense environments. This role is onsite in Colorado Springs, CO. Hybrid flexibility may be available over time based on mission requirements, program execution needs and achievement of objectives. Responsibilities Serve as the strategic architecture authority for integrated multi-domain C2 mission environment. Develop and maintain enterprise and operational system architectures supporting integrated operational and mission environments. Define and maintain the overall C2 architecture baseline, including operational concepts, integration standards, interface strategies, interoperability frameworks, and long-term scalability models. Apply Model-Based Systems Engineering (MBSE) methodologies to support system architecture development, requirements traceability, integration planning, digital engineering and lifecycle engineering activities. Develop and maintain engineering artifacts, system models, interface definitions, and architecture products, operational workflows, and reference architectures supporting integrated mission operations. Utilize MBSE tools and enterprise architecture frameworks to support digital engineering and operational mission architecture activities. Develop integrated engineering execution plans and schedules using Cameo Systems Modeler or similar enterprise planning tools. Architect scalable cloud, hybrid-cloud, and distributed system environments supporting operational mission needs. Define enterprise integration standards supporting APIs, middleware, event-driven architectures, operational data exchange frameworks, and mission interoperability requirements. Contribute to technical solution development involving AI/ML-enabled operation analytics, DevSecOps pipelines, cybersecurity architectures, software engineering, and operational data fusion capabilities. Develop integrated engineering execution roadmaps, transition architectures, modernization strategies, and scalability frameworks supporting follow-on operational deployment. Collaborate with engineering teams, leadership, and government stakeholders to refine operational mission architectures. Requirements: U.S. Citizen and Active TS/SCI clearance required. Bachelor's degree in systems engineering, Computer Science, Engineering, Information Systems, or related technical field. 8+ years of experience supporting enterprise architecture, operational mission systems, systems engineering, or strategic modernization initiatives within defense or intelligence environments. Strong understanding of Enterprise Architecture, Digital Engineering, and Model-Based Systems Engineering (MBSE) principles. Experience defining architecture governance standards, integration frameworks, interface strategies, and target-state operational architecture. Experience developing enterprise/system architectures, engineering artifacts, integration strategies, and operational workflows. Experience using Cameo Systems Modeler or other Digital Engineering toolsets to develop operational architecture products, integrated engineering execution models, system interaction diagrams, mission workflows, interface definitions, and requirements traceability artifacts supporting complex mission and operational environments. Understanding of cloud architectures, DevSecOps, cybersecurity, AI/ML, system integration, and enterprise modernization approaches. Strong communication, collaboration, and technical writing skills. Proven ability to communicate complex technical architectures to Government leadership, operational stakeholders, and engineering teams. Desired Qualifications Experience supporting defense, space, or multi-domain operational environments. Experience supporting DoD, federal mission systems, enterprise modernization, or operational C2 environments. Experience with MBSE tools such as Cameo Systems Modeler or other Digital Engineering tools. Expert with DoDAF, UAF, SysML, BPMN, and related enterprise architecture, operational architecture, MBSE frameworks supporting DoD mission engineering and digital engineering initiatives. Experience with enterprise cloud platforms, cloud-native and hybrid-cloud environments, container orchestration technologies, and distributed mission infrastructure supporting secure operational workloads. Knowledge of RMF, DISA STIGs, and Zero Trust cybersecurity frameworks. Experience supporting proposals, capture, or strategic modernization efforts for federal or defense programs. $150,000-$235,000 salary + annual bonus eligibility + medical/dental/vision/STD/LTD/Life + 401(k) + PTO Equal Employment Opportunity / Legal Disclaimer GXM Technologies LLC is an Equal Opportunity Employer and participates in E-Verify to confirm employment eligibility. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other legally protected status. GXM Technologies LLC provides reasonable accommodations in accordance with applicable law. This job description is not intended to be a complete list of duties and responsibilities, which may change at any time with or without notice. Employment is at-will where permitted by law , meaning either the employee or the Company may terminate employment at any time, with or without cause or notice, subject to applicable legal requirements. PIc68a4-6194
This job is with S&P Global, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 14 The Team The Head of Enterprise Digital Assets & Tokenization leads S&P Global's central Digital Assets & Tokenization team, reporting to S&P DJI's Head of Business Acceleration & Special Projects, who oversees the team on behalf of S&P Global's Head of DeFi (Chief Product & Operations Officer, S&P DJI). S&P Global's position is straightforward: markets execute on trust, and S&P anchors it - on every rail. Our data, identifiers, benchmarks, indices and risk assessments are the infrastructure of trusted workflows, and they must be as authoritative onchain as they are today. This is a small, senior team with an enterprise mandate to make that happen: set direction, prioritize where the firm invests, unblock divisions, and land the external partnerships that de-risk each initiative. The team is deliberately lean. It is not a shadow product organization and not a research function. Divisions own delivery and revenue; this team sets the agenda, sponsors funding, brings partners to the table and holds the enterprise to a bias for in-production outcomes rather than pilots. Delivery capacity is drawn from divisional execution pods and from Kensho engineering. The role has two direct reports at the outset, with scope to grow as the portfolio warrants. Responsibilities and Impact Enterprise Strategy, Prioritization & Capital Allocation Own the enterprise digital assets and tokenization strategy day-to-day, translating it into a prioritized, funded and sequenced portfolio of initiatives across divisions. Run a single intake for divisional requests and enterprise-originated opportunities; apply and continuously sharpen the "Start Now" screening criteria and stage gates covering division readiness, resourcing, partner commitment and regulatory sensitivity. Co-own and sponsor business cases that secure investment at both enterprise and divisional level; make explicit recommendations on what to start, what to hold and what to stop. Maintain a defensible, evidence-based view of market direction - tokenization economics, onchain market structure, and the AI blockchain intersection - and use it to keep the firm's portfolio ahead of, not behind, client demand. Delivery & Execution with Divisions Drive priority initiatives to in-production status with paying customers, augmenting divisional teams that lack capacity, depth or delivery muscle. Appoint and hold a single accountable owner for each enterprise or divisional opportunity; empower them to execute and remove the obstacles they cannot clear themselves. Build the playbooks, trained people and repeatable processes that divisions own after handover, so central involvement is time-boxed by design. Maintain a live enterprise view of initiative milestones, decisions and dependencies; cut duplication and connect complementary work across divisions. External Partnerships & Commercial Development Build and personally hold senior relationships across the institutions that matter most in onchain capital markets - onchain-native platforms, issuers, protocols and infrastructure providers, and the banks, asset managers and market infrastructure firms moving onto these rails. Negotiate partnerships in which counterparties co-invest, commit to production use and provide the requirements that ensure fit within their workflows; avoid peripheral collaborations that consume time without producing adoption. Shape commercial constructs for onchain distribution - consumption and per-call economics, licensing terms, and pricing models suited to agent- and protocol-mediated consumption - in partnership with divisional commercial and legal teams. Represent S&P Global externally with credibility: conferences, standards bodies, working groups, industry consortia, and direct engagement with founders, investors and executives. Internal Alignment, Governance & Risk Convene and run the enterprise governance forum for digital assets, preparing the material and framing the decisions that senior sponsors need to make. Align divisions, corporate functions and enterprise leadership behind a shared set of priorities, resolving competing interests and sequencing trade-offs so that initiatives advance on mutual benefit rather than mandate. Keep Legal, Risk and Compliance sighted on everything in flight; run a lightweight, fast checkpoint before any initiative moves from exploration to pilot or commitment, protecting the firm from legal, compliance and reputational exposure. Escalate cleanly and early: surface new opportunities, emerging risks and stop decisions to the governing council with a clear recommendation. Leadership & Influence Lead a small, high-calibre team and grow it as the portfolio warrants; set a standard of ownership, pace and evidence-based argument. Work with talent and engineering leadership to build protocol and AI blockchain capability across the firm, including through Kensho. Act as a trusted advisor to divisional and enterprise leaders: direct about trade-offs, credible on the technology, and grounded in commercial reality. Operate almost entirely through influence rather than direct authority, across a global, matrixed organization. What We're Looking For Required Qualifications 10+ years of experience in capital markets, asset management, financial data and infrastructure, or digital assets, including senior roles with enterprise-wide or firm-building scope. Demonstrated hands-on experience in digital assets: tokenized products, digital asset funds or indices, onchain infrastructure, or the operational and control build-out required to bring them to market. Operator experience is valued well above observer experience. Proven track record of standing up new businesses, products or functions from zero to production, including vendor, counterparty and partner selection, launch, and the operating processes that sustain them. An established external network across onchain-native firms and traditional financial institutions, and the credibility to open and hold senior relationships from a standing start. Commercial judgment: experience building business cases, structuring partnerships and commercial terms, and making disciplined calls on where to invest and where to walk away. Demonstrated success aligning competing priorities and stakeholder interests across independent business units, and delivering through influence rather than direct authority. Executive-level communication: able to brief senior leadership and external principals with equal clarity, and to challenge as well as partner. Comfort operating within regulatory, legal and compliance constraints, and partnering with control functions to move quickly without creating exposure. Preferred Qualifications Experience launching regulated, index-linked or benchmark-linked products, or working with ratings, reference data, identifiers or index production. Sufficient technical fluency in blockchain architecture, smart contracts and onchain data to engage engineering teams and partners substantively; a hands-on engineering background is not required. Experience building and scaling small teams, and handing capability over to larger organizations. Exposure to board, investment committee or council-level governance. Compensation/Benefits Information: (This section is only applicable to US candidates) S&P Global states that the anticipated base salary range for this position is $185,000 to $265,000 . Final base salary for this role will be based on the individual's geographic location, as well as experience level, skill set, training, licenses and certifications. In addition to base compensation, this role is eligible for an annual incentive plan. This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here . About S&P Global Dow Jones Indic e s At S&P Dow Jones Indices, we provide iconic and innovative index solutions backed by unparalleled expertise across the asset-class spectrum. By bringing transparency to the global capital markets, we empower investors everywhere to make decisions with conviction. We're the largest global resource for index-based concepts, data and research, and home to iconic financial market indicators, such as the S&P 500 and the Dow Jones Industrial Average . More assets are invested in products based upon our indices than any other index provider in the world. With over USD 7.4 trillion in passively managed assets linked to our indices and over USD 11.3 trillion benchmarked to our indices, our solutions are widely considered indispensable in tracking market performance, evaluating portfolios and developing investment strategies. S&P Dow Jones Indices is a division of S&P Global (NYSE: SPGI). S&P Global is the world's foremost provider of credit ratings, benchmarks, analytics and workflow solutions in the global capital, commodity and automotive markets. With every one of our offerings, we help many of the world's leading organizations navigate the economic landscape so they can plan for tomorrow, today. For more information, visit . . click apply for full job details
11/13/2026
Full time
This job is with S&P Global, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 14 The Team The Head of Enterprise Digital Assets & Tokenization leads S&P Global's central Digital Assets & Tokenization team, reporting to S&P DJI's Head of Business Acceleration & Special Projects, who oversees the team on behalf of S&P Global's Head of DeFi (Chief Product & Operations Officer, S&P DJI). S&P Global's position is straightforward: markets execute on trust, and S&P anchors it - on every rail. Our data, identifiers, benchmarks, indices and risk assessments are the infrastructure of trusted workflows, and they must be as authoritative onchain as they are today. This is a small, senior team with an enterprise mandate to make that happen: set direction, prioritize where the firm invests, unblock divisions, and land the external partnerships that de-risk each initiative. The team is deliberately lean. It is not a shadow product organization and not a research function. Divisions own delivery and revenue; this team sets the agenda, sponsors funding, brings partners to the table and holds the enterprise to a bias for in-production outcomes rather than pilots. Delivery capacity is drawn from divisional execution pods and from Kensho engineering. The role has two direct reports at the outset, with scope to grow as the portfolio warrants. Responsibilities and Impact Enterprise Strategy, Prioritization & Capital Allocation Own the enterprise digital assets and tokenization strategy day-to-day, translating it into a prioritized, funded and sequenced portfolio of initiatives across divisions. Run a single intake for divisional requests and enterprise-originated opportunities; apply and continuously sharpen the "Start Now" screening criteria and stage gates covering division readiness, resourcing, partner commitment and regulatory sensitivity. Co-own and sponsor business cases that secure investment at both enterprise and divisional level; make explicit recommendations on what to start, what to hold and what to stop. Maintain a defensible, evidence-based view of market direction - tokenization economics, onchain market structure, and the AI blockchain intersection - and use it to keep the firm's portfolio ahead of, not behind, client demand. Delivery & Execution with Divisions Drive priority initiatives to in-production status with paying customers, augmenting divisional teams that lack capacity, depth or delivery muscle. Appoint and hold a single accountable owner for each enterprise or divisional opportunity; empower them to execute and remove the obstacles they cannot clear themselves. Build the playbooks, trained people and repeatable processes that divisions own after handover, so central involvement is time-boxed by design. Maintain a live enterprise view of initiative milestones, decisions and dependencies; cut duplication and connect complementary work across divisions. External Partnerships & Commercial Development Build and personally hold senior relationships across the institutions that matter most in onchain capital markets - onchain-native platforms, issuers, protocols and infrastructure providers, and the banks, asset managers and market infrastructure firms moving onto these rails. Negotiate partnerships in which counterparties co-invest, commit to production use and provide the requirements that ensure fit within their workflows; avoid peripheral collaborations that consume time without producing adoption. Shape commercial constructs for onchain distribution - consumption and per-call economics, licensing terms, and pricing models suited to agent- and protocol-mediated consumption - in partnership with divisional commercial and legal teams. Represent S&P Global externally with credibility: conferences, standards bodies, working groups, industry consortia, and direct engagement with founders, investors and executives. Internal Alignment, Governance & Risk Convene and run the enterprise governance forum for digital assets, preparing the material and framing the decisions that senior sponsors need to make. Align divisions, corporate functions and enterprise leadership behind a shared set of priorities, resolving competing interests and sequencing trade-offs so that initiatives advance on mutual benefit rather than mandate. Keep Legal, Risk and Compliance sighted on everything in flight; run a lightweight, fast checkpoint before any initiative moves from exploration to pilot or commitment, protecting the firm from legal, compliance and reputational exposure. Escalate cleanly and early: surface new opportunities, emerging risks and stop decisions to the governing council with a clear recommendation. Leadership & Influence Lead a small, high-calibre team and grow it as the portfolio warrants; set a standard of ownership, pace and evidence-based argument. Work with talent and engineering leadership to build protocol and AI blockchain capability across the firm, including through Kensho. Act as a trusted advisor to divisional and enterprise leaders: direct about trade-offs, credible on the technology, and grounded in commercial reality. Operate almost entirely through influence rather than direct authority, across a global, matrixed organization. What We're Looking For Required Qualifications 10+ years of experience in capital markets, asset management, financial data and infrastructure, or digital assets, including senior roles with enterprise-wide or firm-building scope. Demonstrated hands-on experience in digital assets: tokenized products, digital asset funds or indices, onchain infrastructure, or the operational and control build-out required to bring them to market. Operator experience is valued well above observer experience. Proven track record of standing up new businesses, products or functions from zero to production, including vendor, counterparty and partner selection, launch, and the operating processes that sustain them. An established external network across onchain-native firms and traditional financial institutions, and the credibility to open and hold senior relationships from a standing start. Commercial judgment: experience building business cases, structuring partnerships and commercial terms, and making disciplined calls on where to invest and where to walk away. Demonstrated success aligning competing priorities and stakeholder interests across independent business units, and delivering through influence rather than direct authority. Executive-level communication: able to brief senior leadership and external principals with equal clarity, and to challenge as well as partner. Comfort operating within regulatory, legal and compliance constraints, and partnering with control functions to move quickly without creating exposure. Preferred Qualifications Experience launching regulated, index-linked or benchmark-linked products, or working with ratings, reference data, identifiers or index production. Sufficient technical fluency in blockchain architecture, smart contracts and onchain data to engage engineering teams and partners substantively; a hands-on engineering background is not required. Experience building and scaling small teams, and handing capability over to larger organizations. Exposure to board, investment committee or council-level governance. Compensation/Benefits Information: (This section is only applicable to US candidates) S&P Global states that the anticipated base salary range for this position is $185,000 to $265,000 . Final base salary for this role will be based on the individual's geographic location, as well as experience level, skill set, training, licenses and certifications. In addition to base compensation, this role is eligible for an annual incentive plan. This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here . About S&P Global Dow Jones Indic e s At S&P Dow Jones Indices, we provide iconic and innovative index solutions backed by unparalleled expertise across the asset-class spectrum. By bringing transparency to the global capital markets, we empower investors everywhere to make decisions with conviction. We're the largest global resource for index-based concepts, data and research, and home to iconic financial market indicators, such as the S&P 500 and the Dow Jones Industrial Average . More assets are invested in products based upon our indices than any other index provider in the world. With over USD 7.4 trillion in passively managed assets linked to our indices and over USD 11.3 trillion benchmarked to our indices, our solutions are widely considered indispensable in tracking market performance, evaluating portfolios and developing investment strategies. S&P Dow Jones Indices is a division of S&P Global (NYSE: SPGI). S&P Global is the world's foremost provider of credit ratings, benchmarks, analytics and workflow solutions in the global capital, commodity and automotive markets. With every one of our offerings, we help many of the world's leading organizations navigate the economic landscape so they can plan for tomorrow, today. For more information, visit . . click apply for full job details