American Honda Motor Co., Inc.
Torrance, California
What Makes a Honda, is Who makes a Honda Honda has a clear vision for the future, and it's a joyful one. We are looking for individuals with the skills, courage, persistence, and dreams that will help us reach our future-focused goals. At our core is innovation. Honda is constantly innovating and developing solutions to drive our business with record success. We strive to be a company that serves as a source of "power" that supports people around the world who are trying to do things based on their own initiative and that helps people expand their own potential. To this end, Honda strives to realize "the joy and freedom of mobility" by developing new technologies and an innovative approach to achieve a "zero environmental footprint." We are looking for qualified individuals with diverse backgrounds, experiences, continuous improvement values, and a strong work ethic to join our team. If your goals and values align with Honda's, we want you to join our team to Bring the Future! Job Purpose The Dealer Applications Unit manages mission-critical systems providing essential connectivity and operational support for all Honda dealers, Independent Service Repair facilities, and field associates across all business lines. As a key member, the Team Manager leads the team responsible for the design, development, and maintenance of dealer and field application platforms, ensuring alignment with organizational objectives, compliance, operational excellence, and platform innovation. Strategic Leadership: Present IT strategy and updates to executives and senior leadership. Collaborate with business, IT teams, and partners to identify, recommend, develop, implement, and support fast, modern, and cost-effective technology solutions and services. Team Management: Provide leadership, direction, mentoring, and supervision for team members. Ensure the success of projects, enhancements, and support, including budget and QCD (Quality, Cost, and Delivery). Project and Support Oversight: Ensure all projects, enhancements, and portfolio support follow IT methodologies. Serve as the initial point of escalation for issues, reporting to the Unit Manager as needed. Technical Leadership: Act as Solutions Architect on multiple projects, leading technical workstreams and partnering with architects and review boards to obtain approvals. Build vision, technology roadmaps, and planning artifacts. Governance and Compliance: Provide governance and oversight for all team activities. Define and implement IT policies, procedures, and best practices. Ensure compliance with enterprise and industry standards, security, data privacy, SOX, and PII regulations. Support audits. Innovation and Improvement: Work with management, vendors, and partners to identify opportunities for business innovation and technology improvements. Develop relationships to ensure business requirements are met. Budget Management: Assist and contribute to budgetary processes. Ensure budgets are adhered to and allocated correctly. Talent Acquisition: Conduct interviews for candidates and assist with vendor/third-party agreements. The ideal candidate is a proactive leader who drives innovation, fosters teamwork, demonstrates strong service orientation, and delivers results in a dynamic IT environment Key Accountabilities Vision & Strategy: Lead the applications team and partner with the Unit Manager to set priorities, communicate business and IT strategy, and maintain technology roadmaps aligned with department, division, and enterprise objectives. Team Leadership: Build an inclusive, high-performing team through workforce planning, coaching, mentoring, engagement, performance management, clear goals, and thoughtful allocation of employees and contingent resources. Delivery & Operations: Deliver projects, enhancements, production support, system and security upgrades, operational KPIs, health reporting, and audit commitments. Manage scope, schedule, quality, budget, risk, escalations, asset compliance, and continuous improvement using established IT and PDCA practices. Technical & Solution Leadership: Direct solution design, architecture oversight, code and design reviews, methodologies, tooling, support models, gap analysis, and technical artifacts. Lead critical workstreams and secure Architecture Review Board approvals. Partnerships & Influence: Build trusted relationships with business, IT, finance, procurement, and vendor partners. Resolve escalations, influence product roadmaps, enforce governance expectations, and promote solutions that improve operations and customer service. Qualifications, Experience, and Skills Minimum educational qualifications: A Bachelor's degree in information technology (IT), computer science / data science, a related field, or equivalent relevant IT industry experience. Minimum work experience: At least 8 years of IT experience, including 5 or more years leading teams, managing resources and vendors, supporting technology delivery, and delivering multiple large-scale projects, platforms, or products. Must have in-depth knowledge of security, privacy, PII, SOX, governance, risk management, and audit practices. Demonstrated experience with application modernization, solution design, architecture governance, code and design reviews, estimation, planning, budgeting, contract negotiation, and Agile and Waterfall delivery. Strong project management, written and verbal communication, executive presentation, stakeholder management, coaching, negotiation, conflict resolution, problem-solving, and root-cause analysis skills. Ability to manage competing priorities and deadlines, develop team members, build executive-level networks, and partner effectively across business, IT, and vendor organizations. Experience with enterprise B2B web environments, architecture artifacts such as context and data-flow diagrams, capability and technology roadmaps, and Architecture Review Boards is preferred. Should have prior demonstrable industry experience in both cloud environment, e.g. - AWS, Azure etc and on premise. Proficiency with common productivity and diagramming tools, including PowerPoint, Excel, Word, and Visio. Highly desirable: Prior automotive industry experience. Workstyle This is an onsite job. One remote workday per week may be possible with prior departmental approval. Visa sponsorship issues This position is not eligible for work visa sponsorship. Relocation Assistance This position is not eligible for any relocation assistance What differentiates Honda and makes us an employer of choice? Total Rewards: Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.) Regional Bonus (when applicable) Manager Lease Car Program (No Cost - Car, Maintenance, and Insurance included) Industry-leading Benefit Plans (Medical, Dental, Vision, Rx) Paid time off, including vacation, holidays, shutdown Company Paid Short-Term and Long-Term Disability 401(K) Plan with company match + additional contribution Career Growth: Advancement Opportunities Career Mobility Education Reimbursement for Continued learning Training and Development Programs Additional Offerings: Lifestyle Account Childcare Reimbursement Account Elder Care Support Tuition Assistance & Student Loan Repayment Wellbeing Program Community Service and Engagement Programs Product Programs Honda is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.
11/09/2026
Full time
What Makes a Honda, is Who makes a Honda Honda has a clear vision for the future, and it's a joyful one. We are looking for individuals with the skills, courage, persistence, and dreams that will help us reach our future-focused goals. At our core is innovation. Honda is constantly innovating and developing solutions to drive our business with record success. We strive to be a company that serves as a source of "power" that supports people around the world who are trying to do things based on their own initiative and that helps people expand their own potential. To this end, Honda strives to realize "the joy and freedom of mobility" by developing new technologies and an innovative approach to achieve a "zero environmental footprint." We are looking for qualified individuals with diverse backgrounds, experiences, continuous improvement values, and a strong work ethic to join our team. If your goals and values align with Honda's, we want you to join our team to Bring the Future! Job Purpose The Dealer Applications Unit manages mission-critical systems providing essential connectivity and operational support for all Honda dealers, Independent Service Repair facilities, and field associates across all business lines. As a key member, the Team Manager leads the team responsible for the design, development, and maintenance of dealer and field application platforms, ensuring alignment with organizational objectives, compliance, operational excellence, and platform innovation. Strategic Leadership: Present IT strategy and updates to executives and senior leadership. Collaborate with business, IT teams, and partners to identify, recommend, develop, implement, and support fast, modern, and cost-effective technology solutions and services. Team Management: Provide leadership, direction, mentoring, and supervision for team members. Ensure the success of projects, enhancements, and support, including budget and QCD (Quality, Cost, and Delivery). Project and Support Oversight: Ensure all projects, enhancements, and portfolio support follow IT methodologies. Serve as the initial point of escalation for issues, reporting to the Unit Manager as needed. Technical Leadership: Act as Solutions Architect on multiple projects, leading technical workstreams and partnering with architects and review boards to obtain approvals. Build vision, technology roadmaps, and planning artifacts. Governance and Compliance: Provide governance and oversight for all team activities. Define and implement IT policies, procedures, and best practices. Ensure compliance with enterprise and industry standards, security, data privacy, SOX, and PII regulations. Support audits. Innovation and Improvement: Work with management, vendors, and partners to identify opportunities for business innovation and technology improvements. Develop relationships to ensure business requirements are met. Budget Management: Assist and contribute to budgetary processes. Ensure budgets are adhered to and allocated correctly. Talent Acquisition: Conduct interviews for candidates and assist with vendor/third-party agreements. The ideal candidate is a proactive leader who drives innovation, fosters teamwork, demonstrates strong service orientation, and delivers results in a dynamic IT environment Key Accountabilities Vision & Strategy: Lead the applications team and partner with the Unit Manager to set priorities, communicate business and IT strategy, and maintain technology roadmaps aligned with department, division, and enterprise objectives. Team Leadership: Build an inclusive, high-performing team through workforce planning, coaching, mentoring, engagement, performance management, clear goals, and thoughtful allocation of employees and contingent resources. Delivery & Operations: Deliver projects, enhancements, production support, system and security upgrades, operational KPIs, health reporting, and audit commitments. Manage scope, schedule, quality, budget, risk, escalations, asset compliance, and continuous improvement using established IT and PDCA practices. Technical & Solution Leadership: Direct solution design, architecture oversight, code and design reviews, methodologies, tooling, support models, gap analysis, and technical artifacts. Lead critical workstreams and secure Architecture Review Board approvals. Partnerships & Influence: Build trusted relationships with business, IT, finance, procurement, and vendor partners. Resolve escalations, influence product roadmaps, enforce governance expectations, and promote solutions that improve operations and customer service. Qualifications, Experience, and Skills Minimum educational qualifications: A Bachelor's degree in information technology (IT), computer science / data science, a related field, or equivalent relevant IT industry experience. Minimum work experience: At least 8 years of IT experience, including 5 or more years leading teams, managing resources and vendors, supporting technology delivery, and delivering multiple large-scale projects, platforms, or products. Must have in-depth knowledge of security, privacy, PII, SOX, governance, risk management, and audit practices. Demonstrated experience with application modernization, solution design, architecture governance, code and design reviews, estimation, planning, budgeting, contract negotiation, and Agile and Waterfall delivery. Strong project management, written and verbal communication, executive presentation, stakeholder management, coaching, negotiation, conflict resolution, problem-solving, and root-cause analysis skills. Ability to manage competing priorities and deadlines, develop team members, build executive-level networks, and partner effectively across business, IT, and vendor organizations. Experience with enterprise B2B web environments, architecture artifacts such as context and data-flow diagrams, capability and technology roadmaps, and Architecture Review Boards is preferred. Should have prior demonstrable industry experience in both cloud environment, e.g. - AWS, Azure etc and on premise. Proficiency with common productivity and diagramming tools, including PowerPoint, Excel, Word, and Visio. Highly desirable: Prior automotive industry experience. Workstyle This is an onsite job. One remote workday per week may be possible with prior departmental approval. Visa sponsorship issues This position is not eligible for work visa sponsorship. Relocation Assistance This position is not eligible for any relocation assistance What differentiates Honda and makes us an employer of choice? Total Rewards: Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.) Regional Bonus (when applicable) Manager Lease Car Program (No Cost - Car, Maintenance, and Insurance included) Industry-leading Benefit Plans (Medical, Dental, Vision, Rx) Paid time off, including vacation, holidays, shutdown Company Paid Short-Term and Long-Term Disability 401(K) Plan with company match + additional contribution Career Growth: Advancement Opportunities Career Mobility Education Reimbursement for Continued learning Training and Development Programs Additional Offerings: Lifestyle Account Childcare Reimbursement Account Elder Care Support Tuition Assistance & Student Loan Repayment Wellbeing Program Community Service and Engagement Programs Product Programs Honda is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.
American Honda Motor Co., Inc.
Torrance, California
What Makes a Honda, is Who makes a Honda Honda has a clear vision for the future, and it's a joyful one. We are looking for individuals with the skills, courage, persistence, and dreams that will help us reach our future-focused goals. At our core is innovation. Honda is constantly innovating and developing solutions to drive our business with record success. We strive to be a company that serves as a source of "power" that supports people around the world who are trying to do things based on their own initiative and that helps people expand their own potential. To this end, Honda strives to realize "the joy and freedom of mobility" by developing new technologies and an innovative approach to achieve a "zero environmental footprint." We are looking for qualified individuals with diverse backgrounds, experiences, continuous improvement values, and a strong work ethic to join our team. If your goals and values align with Honda's, we want you to join our team to Bring the Future! Job Purpose The Global Group Lead/Unit Manager for Database and Integration Operations serves as a key leader, driving the efficient operation and continuous improvement of the IT Database and Integration Operations Unit in alignment with the Global (20%) and Regional/AHM (80%) Digital Unit/IT Business Unit objectives. This role is pivotal in setting direction, orchestrating planning, and providing decisive administrative leadership for daily operations. As a leader, the manager oversees both operational and analytical database platforms-including data warehouses, data marts, and data lakes-and ensures robust management of platforms supporting APIs, service buses, and messaging systems. The role demands proactive collaboration with decision-makers across the organization to champion, develop, and implement cost-effective technology solutions and services. Leadership extends to defining and enforcing IT and Data Platform Services strategies, standards, policies, procedures, and best practices, ensuring the unit's services and applications are aligned with organizational goals. The manager represents the unit in key meetings and workshops, often traveling domestically and internationally to foster global initiatives and cross-regional collaboration. A core aspect of this leadership role is preparing and delivering impactful presentations on strategy, roadmap, and QCD (Quality, Cost, Delivery) performance to stakeholders at all levels. The manager is deeply committed to coaching and mentoring team members, cultivating a culture of engagement, and driving improvements in people engagement scores throughout the unit. Key Accountabilities Collaborate with the Department Manager to help shape the direction of the Global Digital Unit/AHM IT, Division, and Department. Develop and present strategies, roadmaps, and QCD performance to stakeholders. Develop Global and North America relationships to build trust, credibility, and address customer needs. Leverage persuasion and influence to meet IT objectives. Periodically travel to company and partner sites to enhance collaboration and maintain alignment. Develop and sustain high-performing IT teams by teaching, coaching, mentoring, and managing individual performance. Boost people engagement through targeted actions and regular feedback. Keep the team motivated and focused on achieving goals. Meet the annually approved project goals for the Enterprise Platform Services Unit by adhering to schedule, budget, and quality standards. Emphasise QCD (Quality, Cost, Delivery) metrics and ongoing improvement throughout the process. Ensure unit operations meet platform and service availability targets, comply with governance standards, and stay updated on tools to manage risks and maintain performance. Qualifications, Experience, and Skills Bachelor's Degree in Information Science and/or equivalent work experience 12+ years of IT business work experience Prior Experience in Database Administration or Data Architecture or Data Engineering 3+ years leadership experience Other Job Specific Skills Professional writing skills Experience in management level presentations Experience in developing and managing a budget Experience in managing vendors Additional examples to select from: Strong technical knowledge of enterprise platforms and services architecture and solution architecture Strong technical knowledge and experience implementing and managing enterprise platform services like Databases, Middleware and Integration services in large enterprises Strong knowledge and experience supporting and managing large number of applications, databases and middleware components with a large team both on-site and outsourced in off-site locations. Excellent understanding of the organization's goals and objectives. In-depth knowledge of applicable data privacy practices and laws. Strong understanding of human resource management principles, practices, and procedures. Strong understanding of project management principles. Prior experience developing applications and supporting them Proven experience in IT Architecture and/or infrastructure planning and development Proven experience in data center / Cloud migration. Understanding and supporting operational aspects of database administration, middleware management. Strong understanding of Hybrid IT and Cloud solutions and supporting them. Experience in coaching, mentoring, and driving people engagement initiatives is highly desirable. Working Conditions Language: Due to the characteristics of the business division and organizational setup, there may be instances where documents in languages other than English, such as Japanese, are handled and communication with staff who do not speak English occurs. Therefore, communication through translation tools or interpreters may be necessary. (Approximately 10-25%) Time difference: As a global office, it may be necessary to attend meetings in different time zones as needed; Typically, late evenings or very early mornings (10-15%) What differentiates Honda and make us an employer of choice? Total Rewards: Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.) Regional Bonus (when applicable) Manager Lease Car Program (No Cost - Car, Maintenance, and Insurance included) Industry-leading Benefit Plans (Medical, Dental, Vision, Rx) Paid time off, including vacation, holidays, shutdown Company Paid Short-Term and Long-Term Disability 401K Plan with company match + additional contribution Relocation assistance (if eligible) Career Growth: Advancement Opportunities Career Mobility Education Reimbursement for Continued Learning Training and Development Programs Additional Offerings : Lifestyle Account Childcare Reimbursement Account Elder Care Support Tuition Assistance & Student Loan Repayment Wellbeing Program Community Service and Engagement Programs Product Programs Honda is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.
11/09/2026
Full time
What Makes a Honda, is Who makes a Honda Honda has a clear vision for the future, and it's a joyful one. We are looking for individuals with the skills, courage, persistence, and dreams that will help us reach our future-focused goals. At our core is innovation. Honda is constantly innovating and developing solutions to drive our business with record success. We strive to be a company that serves as a source of "power" that supports people around the world who are trying to do things based on their own initiative and that helps people expand their own potential. To this end, Honda strives to realize "the joy and freedom of mobility" by developing new technologies and an innovative approach to achieve a "zero environmental footprint." We are looking for qualified individuals with diverse backgrounds, experiences, continuous improvement values, and a strong work ethic to join our team. If your goals and values align with Honda's, we want you to join our team to Bring the Future! Job Purpose The Global Group Lead/Unit Manager for Database and Integration Operations serves as a key leader, driving the efficient operation and continuous improvement of the IT Database and Integration Operations Unit in alignment with the Global (20%) and Regional/AHM (80%) Digital Unit/IT Business Unit objectives. This role is pivotal in setting direction, orchestrating planning, and providing decisive administrative leadership for daily operations. As a leader, the manager oversees both operational and analytical database platforms-including data warehouses, data marts, and data lakes-and ensures robust management of platforms supporting APIs, service buses, and messaging systems. The role demands proactive collaboration with decision-makers across the organization to champion, develop, and implement cost-effective technology solutions and services. Leadership extends to defining and enforcing IT and Data Platform Services strategies, standards, policies, procedures, and best practices, ensuring the unit's services and applications are aligned with organizational goals. The manager represents the unit in key meetings and workshops, often traveling domestically and internationally to foster global initiatives and cross-regional collaboration. A core aspect of this leadership role is preparing and delivering impactful presentations on strategy, roadmap, and QCD (Quality, Cost, Delivery) performance to stakeholders at all levels. The manager is deeply committed to coaching and mentoring team members, cultivating a culture of engagement, and driving improvements in people engagement scores throughout the unit. Key Accountabilities Collaborate with the Department Manager to help shape the direction of the Global Digital Unit/AHM IT, Division, and Department. Develop and present strategies, roadmaps, and QCD performance to stakeholders. Develop Global and North America relationships to build trust, credibility, and address customer needs. Leverage persuasion and influence to meet IT objectives. Periodically travel to company and partner sites to enhance collaboration and maintain alignment. Develop and sustain high-performing IT teams by teaching, coaching, mentoring, and managing individual performance. Boost people engagement through targeted actions and regular feedback. Keep the team motivated and focused on achieving goals. Meet the annually approved project goals for the Enterprise Platform Services Unit by adhering to schedule, budget, and quality standards. Emphasise QCD (Quality, Cost, Delivery) metrics and ongoing improvement throughout the process. Ensure unit operations meet platform and service availability targets, comply with governance standards, and stay updated on tools to manage risks and maintain performance. Qualifications, Experience, and Skills Bachelor's Degree in Information Science and/or equivalent work experience 12+ years of IT business work experience Prior Experience in Database Administration or Data Architecture or Data Engineering 3+ years leadership experience Other Job Specific Skills Professional writing skills Experience in management level presentations Experience in developing and managing a budget Experience in managing vendors Additional examples to select from: Strong technical knowledge of enterprise platforms and services architecture and solution architecture Strong technical knowledge and experience implementing and managing enterprise platform services like Databases, Middleware and Integration services in large enterprises Strong knowledge and experience supporting and managing large number of applications, databases and middleware components with a large team both on-site and outsourced in off-site locations. Excellent understanding of the organization's goals and objectives. In-depth knowledge of applicable data privacy practices and laws. Strong understanding of human resource management principles, practices, and procedures. Strong understanding of project management principles. Prior experience developing applications and supporting them Proven experience in IT Architecture and/or infrastructure planning and development Proven experience in data center / Cloud migration. Understanding and supporting operational aspects of database administration, middleware management. Strong understanding of Hybrid IT and Cloud solutions and supporting them. Experience in coaching, mentoring, and driving people engagement initiatives is highly desirable. Working Conditions Language: Due to the characteristics of the business division and organizational setup, there may be instances where documents in languages other than English, such as Japanese, are handled and communication with staff who do not speak English occurs. Therefore, communication through translation tools or interpreters may be necessary. (Approximately 10-25%) Time difference: As a global office, it may be necessary to attend meetings in different time zones as needed; Typically, late evenings or very early mornings (10-15%) What differentiates Honda and make us an employer of choice? Total Rewards: Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.) Regional Bonus (when applicable) Manager Lease Car Program (No Cost - Car, Maintenance, and Insurance included) Industry-leading Benefit Plans (Medical, Dental, Vision, Rx) Paid time off, including vacation, holidays, shutdown Company Paid Short-Term and Long-Term Disability 401K Plan with company match + additional contribution Relocation assistance (if eligible) Career Growth: Advancement Opportunities Career Mobility Education Reimbursement for Continued Learning Training and Development Programs Additional Offerings : Lifestyle Account Childcare Reimbursement Account Elder Care Support Tuition Assistance & Student Loan Repayment Wellbeing Program Community Service and Engagement Programs Product Programs Honda is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.
Job Description Job Description Job Title: Senior Network Security Engineer. Location: Washington, DC (On-site). Employment Type: Contract (W2 through ZipStaff - No C2C or 1099). About the Opportunity: ZipStaff is seeking an experienced Senior Network Security Engineer to serve as a technical leader in designing, implementing, and optimizing perimeter and infrastructure security controls for a major transportation organization. In this high-impact role, you will safeguard critical enterprise infrastructure across on-premises networks and multi-cloud environments (AWS and Microsoft Azure) with a heavy focus on Palo Alto Networks firewalls. You will proactively manage network threats, drive security automation, align controls with regulatory frameworks, and mentor junior engineering staff to strengthen the organization's overall security posture. What You'll Do: Lead the design, configuration, rule maintenance, and optimization of enterprise Palo Alto Networks firewalls and associated perimeter security platforms. Maintain and support Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, and Network Access Control (NAC) technologies. Partner with cloud, network, and application teams to implement secure architectures across AWS and Microsoft Azure environments. Analyze and respond to network security incidents, monitor events via SIEM platforms, perform threat hunting, and conduct root-cause forensic investigations. Conduct security reviews and risk assessments for new systems and architectural designs, ensuring compliance with NIST, CIS, PCI-DSS, HIPAA, and ISO standards. Streamline operational security tasks by building automation scripts using Python, PowerShell, or Bash. Develop and maintain operational runbooks, network diagrams, and standard operating procedures to support long-term security strategy. Guide multi-disciplinary project teams throughout the system development lifecycle and provide mentorship to junior security engineers. Participate in planned maintenance windows, after-hours implementations, and emergency incident response activities. Required Qualifications: 11+ years of dedicated cybersecurity engineering experience, with a core focus on enterprise network and firewall security. Advanced, hands-on administration of Palo Alto Networks firewalls in complex enterprise environments. Deep knowledge of TCP/IP, routing, switching, VPNs, WAN/LAN architectures, and perimeter defense concepts. Practical experience managing IDS/IPS, SIEM, EDR, DLP, CASB, and WAF solutions. Direct experience supporting and securing cloud infrastructure within AWS and Microsoft Azure environments. Proficiency in scripting and automating security workflows using Python, PowerShell, or Bash. Solid understanding of industry frameworks and standards, including NIST, CIS Controls, PCI-DSS, HIPAA, and ISO 27001. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field. Exceptional problem-solving abilities, strong written and verbal communication, and proven stakeholder management skills. Ability to work on-site in Washington, DC. Preferred Qualifications: Master's degree in Cybersecurity, IT, or a related field. Active industry certifications such as PCNSE, CISSP, CCNP Security, GIAC, CEH, or Security+. Background working directly with or within a Security Operations Center (SOC). Experience implementing Zero Trust security architectures and cloud-native security tools. Prior experience supporting network security in transportation, operations-focused, or large distributed enterprise environments. Benefits: Health Insurance. Dental Insurance. Vision Insurance. 401(k) + 401(k) matching. Paid time off. Referral Program. About ZipStaff: ZipStaff partners with leading organizations to connect skilled technology professionals with high-impact contract opportunities. We focus on quality matches, clear communication, and long-term success for candidates and clients. To apply, submit your resume highlighting your 11+ years of network security engineering experience, hands-on Palo Alto Networks firewall administration, AWS/Azure cloud security, and automation scripting. Pure research or junior experience will not be considered.
11/09/2026
Full time
Job Description Job Description Job Title: Senior Network Security Engineer. Location: Washington, DC (On-site). Employment Type: Contract (W2 through ZipStaff - No C2C or 1099). About the Opportunity: ZipStaff is seeking an experienced Senior Network Security Engineer to serve as a technical leader in designing, implementing, and optimizing perimeter and infrastructure security controls for a major transportation organization. In this high-impact role, you will safeguard critical enterprise infrastructure across on-premises networks and multi-cloud environments (AWS and Microsoft Azure) with a heavy focus on Palo Alto Networks firewalls. You will proactively manage network threats, drive security automation, align controls with regulatory frameworks, and mentor junior engineering staff to strengthen the organization's overall security posture. What You'll Do: Lead the design, configuration, rule maintenance, and optimization of enterprise Palo Alto Networks firewalls and associated perimeter security platforms. Maintain and support Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, and Network Access Control (NAC) technologies. Partner with cloud, network, and application teams to implement secure architectures across AWS and Microsoft Azure environments. Analyze and respond to network security incidents, monitor events via SIEM platforms, perform threat hunting, and conduct root-cause forensic investigations. Conduct security reviews and risk assessments for new systems and architectural designs, ensuring compliance with NIST, CIS, PCI-DSS, HIPAA, and ISO standards. Streamline operational security tasks by building automation scripts using Python, PowerShell, or Bash. Develop and maintain operational runbooks, network diagrams, and standard operating procedures to support long-term security strategy. Guide multi-disciplinary project teams throughout the system development lifecycle and provide mentorship to junior security engineers. Participate in planned maintenance windows, after-hours implementations, and emergency incident response activities. Required Qualifications: 11+ years of dedicated cybersecurity engineering experience, with a core focus on enterprise network and firewall security. Advanced, hands-on administration of Palo Alto Networks firewalls in complex enterprise environments. Deep knowledge of TCP/IP, routing, switching, VPNs, WAN/LAN architectures, and perimeter defense concepts. Practical experience managing IDS/IPS, SIEM, EDR, DLP, CASB, and WAF solutions. Direct experience supporting and securing cloud infrastructure within AWS and Microsoft Azure environments. Proficiency in scripting and automating security workflows using Python, PowerShell, or Bash. Solid understanding of industry frameworks and standards, including NIST, CIS Controls, PCI-DSS, HIPAA, and ISO 27001. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field. Exceptional problem-solving abilities, strong written and verbal communication, and proven stakeholder management skills. Ability to work on-site in Washington, DC. Preferred Qualifications: Master's degree in Cybersecurity, IT, or a related field. Active industry certifications such as PCNSE, CISSP, CCNP Security, GIAC, CEH, or Security+. Background working directly with or within a Security Operations Center (SOC). Experience implementing Zero Trust security architectures and cloud-native security tools. Prior experience supporting network security in transportation, operations-focused, or large distributed enterprise environments. Benefits: Health Insurance. Dental Insurance. Vision Insurance. 401(k) + 401(k) matching. Paid time off. Referral Program. About ZipStaff: ZipStaff partners with leading organizations to connect skilled technology professionals with high-impact contract opportunities. We focus on quality matches, clear communication, and long-term success for candidates and clients. To apply, submit your resume highlighting your 11+ years of network security engineering experience, hands-on Palo Alto Networks firewall administration, AWS/Azure cloud security, and automation scripting. Pure research or junior experience will not be considered.
CSL is seeking an IT Infrastructure Director, Global Network & Connectivity Services to lead the design, delivery, and optimization of our worldwide network environment supporting life saving biotherapies. This role oversees global WAN/LAN, cloud and data center connectivity, network security, and collaboration services across research, manufacturing, and corporate sites. The director will define strategy, manage vendors and budgets, ensure high availability and compliance, and drive modernization initiatives. Partnering with cybersecurity, R&D, and operations teams, this leader will enable secure, reliable connectivity that supports CSL's patient focused, science driven mission. Responsibilities Develop and execute global network and connectivity strategy aligned to CSL's business and R&D priorities Lead design, implementation, and operations of WAN/LAN, wireless, SD WAN, VPN, and internet services Oversee cloud and data center connectivity, including hybrid and multi cloud network architectures Partner with cybersecurity to implement and maintain secure, compliant network and access controls Ensure high availability, performance, and resilience of network services across global sites Manage vendor relationships, contracts, and SLAs for telecom, network hardware, and managed services Direct network capacity planning, lifecycle management, and technology modernization initiatives Establish and enforce network standards, policies, and documentation in regulated environments Lead and develop a global technical team; foster collaboration and continuous improvement Monitor budgets, optimize costs, and report performance and risk to senior leadership Required Skills Enterprise network architecture (WAN/LAN/WLAN) SD WAN and VPN technologies Cloud and hybrid network design (AWS, Azure, etc.) Network security, firewalls, and zero trust concepts Routing and switching (BGP, OSPF, MPLS, Qo S) Network monitoring and performance management tools ITIL based service management Vendor and contract management Budgeting and cost optimization for infrastructure Leadership of global, cross functional technical teams
11/09/2026
Full time
CSL is seeking an IT Infrastructure Director, Global Network & Connectivity Services to lead the design, delivery, and optimization of our worldwide network environment supporting life saving biotherapies. This role oversees global WAN/LAN, cloud and data center connectivity, network security, and collaboration services across research, manufacturing, and corporate sites. The director will define strategy, manage vendors and budgets, ensure high availability and compliance, and drive modernization initiatives. Partnering with cybersecurity, R&D, and operations teams, this leader will enable secure, reliable connectivity that supports CSL's patient focused, science driven mission. Responsibilities Develop and execute global network and connectivity strategy aligned to CSL's business and R&D priorities Lead design, implementation, and operations of WAN/LAN, wireless, SD WAN, VPN, and internet services Oversee cloud and data center connectivity, including hybrid and multi cloud network architectures Partner with cybersecurity to implement and maintain secure, compliant network and access controls Ensure high availability, performance, and resilience of network services across global sites Manage vendor relationships, contracts, and SLAs for telecom, network hardware, and managed services Direct network capacity planning, lifecycle management, and technology modernization initiatives Establish and enforce network standards, policies, and documentation in regulated environments Lead and develop a global technical team; foster collaboration and continuous improvement Monitor budgets, optimize costs, and report performance and risk to senior leadership Required Skills Enterprise network architecture (WAN/LAN/WLAN) SD WAN and VPN technologies Cloud and hybrid network design (AWS, Azure, etc.) Network security, firewalls, and zero trust concepts Routing and switching (BGP, OSPF, MPLS, Qo S) Network monitoring and performance management tools ITIL based service management Vendor and contract management Budgeting and cost optimization for infrastructure Leadership of global, cross functional technical teams
Job Description Job Description CoreWeave is The Essential Cloud for AI . Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . Role Overview CoreWeave is seeking an experienced Network Security Engineer for our network security initiatives to help protect our rapidly scaling cloud infrastructure hosting high-performance AI workloads. In this role, you will architect and implement cutting-edge security solutions focused on network security across our data center perimeter and internal networks. You will work in a high-scale environment (CoreWeave is positioning itself as the next major hyperscaler) and ensure our network and services remain secure, resilient, and trustworthy. The ideal candidate is a seasoned security expert (3-7 years experience) with a deep understanding of modern cloud/network architectures and a passion for educating cross-functional partners in a security-first culture. Key Responsibilities Network Security Architecture: Design and deploy robust security measures across the network perimeter and internal fabrics (e.g., firewalls, IPS/IDS, segmentation, configuration health, best practicies) to protect CoreWeave's globally distributed hyperscale infrastructure hosting large-scale AI workloads. Ensure that all entry points, high-speed interconnects, and cloud services are fortified against unauthorized access and attacks. Zero Trust Implementation: Champion a Zero Trust security model across CoreWeave's network and cloud environments. Architect solutions that enforce least-privilege access, continuous verification, and micro-segmentation of services - ensuring no implicit trust at any layer. Security Monitoring & Incident Response: Establish robust monitoring for network security events and potential breaches across high-density AI cluster networks. Proactively identify vulnerabilities or indicators of compromise, and coordinate incident response efforts for any network-related security incidents to minimize impact. Cross-Functional Collaboration: Work closely with Networking, Infrastructure, and Software Engineering teams to integrate security best practices into architecture, deployments, and processes. Provide expert guidance during design and code reviews to ensure new services and features are secure by design. AI Infrastructure & Interconnect Security: Secure high-density GPU clusters and ultra-low latency backend fabrics. Implement security controls to protect customer data in transport. Leadership & Education: Contribute to security initiatives and foster a security-first mindset across the organization. Educate partners in other teams on network security principles, conduct security training sessions, and lead by example in following and enforcing security policies and standards. Policy Enforcement: Help refine, implement, and enforce security policies and standard operating procedures for a highly scalable, distributed environment. Regularly review network and cloud security postures, ensuring compliance with industry best practices and adapting policies as the company grows. Required Qualifications Experience: 3-7 years of hands-on experience in network security engineering, with exposure to large-scale cloud or hyperscaler environments. Proven track record protecting complex, distributed systems at scale. Network Security Expertise: Deep understanding of network security principles and technologies - including experience mitigating DDoS attacks, securing high-speed data center fabrics, defending against web exploits, and implementing zero trust methodologies. Cloud & Network Architecture: Strong conceptual and practical knowledge of securing modern cloud and network architectures. Proficient in network protocols (TCP/IP, DNS, BGP, HTTP/S, etc.), network segmentation, VPNs, and firewall configurations. Experience securing cloud platforms (AWS, GCP, Azure or custom hyperscale infrastructure) and containerized environments. Security Contributions: Demonstrated ability to contribute key input to security initiatives and projects end-to-end. Experience educating peer engineers and partner teams, with a talent for instilling a security-first mindset across diverse teams. Cross-Team Collaboration: Excellent communication and collaboration skills. Ability to work closely with cross-functional teams (Networking, Infrastructure, DevOps/SRE, Software) to design and implement security solutions that enable the business while protecting critical assets. Policy and Compliance: Experience in implementing, refining, and enforcing security policies and controls for highly scalable, distributed systems. Familiarity with industry standards and compliance frameworks (e.g., NIST, ISO 27001, SOC2) and how they apply in a cloud environment. Preferred Skills & Qualifications Hyperscaler Environment: Prior experience working in a top-tier cloud provider or hyperscale environment is a strong plus (FAANG or similar organization). Understanding of the unique security challenges at massive scale. Zero Trust & Identity: Experience designing zero trust networks, including identity and access management (IAM) systems, single sign-on, multi-factor authentication, and network access control solutions. Automation & Scripting: Proficiency in scripting or programming (Python, Go, or similar) for automating security tasks, integrating security tools, and handling infrastructure-as-code. Experience with DevSecOps practices and CI/CD pipeline security is a plus. Security Certifications: Relevant certifications such as CISSP, CCSP, GIAC (GSEC, GCIH, etc.), or cloud security certifications (AWS/Azure Security Specialty) are advantageous, demonstrating a strong foundation in security best practices. Continuous Learning: Active involvement in the security community or contributions to open-source security projects. Up-to-date knowledge of the latest threats, vulnerabilities, and mitigation strategies in network and cloud security. The base salary range for this role is $153,000 to $204,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: Medical, dental, and vision insurance - 100% paid for by CoreWeave Company-paid Life Insurance Voluntary supplemental life insurance Short and long-term disability insurance Flexible Spending Account Health Savings Account Tuition Reimbursement Ability to Participate in Employee Stock Purchase Program (ESPP) Mental Wellness Benefits through Spring Health Family-Forming support provided by Carrot Paid Parental Leave Flexible, full-service childcare support with Kinside 401(k) with a generous employer match Flexible PTO Catered lunch each day in our office and data center locations A casual work environment A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA) , CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. 1157, or (iv) asylee under 8 U.S.C. 1158 . click apply for full job details
11/09/2026
Full time
Job Description Job Description CoreWeave is The Essential Cloud for AI . Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . Role Overview CoreWeave is seeking an experienced Network Security Engineer for our network security initiatives to help protect our rapidly scaling cloud infrastructure hosting high-performance AI workloads. In this role, you will architect and implement cutting-edge security solutions focused on network security across our data center perimeter and internal networks. You will work in a high-scale environment (CoreWeave is positioning itself as the next major hyperscaler) and ensure our network and services remain secure, resilient, and trustworthy. The ideal candidate is a seasoned security expert (3-7 years experience) with a deep understanding of modern cloud/network architectures and a passion for educating cross-functional partners in a security-first culture. Key Responsibilities Network Security Architecture: Design and deploy robust security measures across the network perimeter and internal fabrics (e.g., firewalls, IPS/IDS, segmentation, configuration health, best practicies) to protect CoreWeave's globally distributed hyperscale infrastructure hosting large-scale AI workloads. Ensure that all entry points, high-speed interconnects, and cloud services are fortified against unauthorized access and attacks. Zero Trust Implementation: Champion a Zero Trust security model across CoreWeave's network and cloud environments. Architect solutions that enforce least-privilege access, continuous verification, and micro-segmentation of services - ensuring no implicit trust at any layer. Security Monitoring & Incident Response: Establish robust monitoring for network security events and potential breaches across high-density AI cluster networks. Proactively identify vulnerabilities or indicators of compromise, and coordinate incident response efforts for any network-related security incidents to minimize impact. Cross-Functional Collaboration: Work closely with Networking, Infrastructure, and Software Engineering teams to integrate security best practices into architecture, deployments, and processes. Provide expert guidance during design and code reviews to ensure new services and features are secure by design. AI Infrastructure & Interconnect Security: Secure high-density GPU clusters and ultra-low latency backend fabrics. Implement security controls to protect customer data in transport. Leadership & Education: Contribute to security initiatives and foster a security-first mindset across the organization. Educate partners in other teams on network security principles, conduct security training sessions, and lead by example in following and enforcing security policies and standards. Policy Enforcement: Help refine, implement, and enforce security policies and standard operating procedures for a highly scalable, distributed environment. Regularly review network and cloud security postures, ensuring compliance with industry best practices and adapting policies as the company grows. Required Qualifications Experience: 3-7 years of hands-on experience in network security engineering, with exposure to large-scale cloud or hyperscaler environments. Proven track record protecting complex, distributed systems at scale. Network Security Expertise: Deep understanding of network security principles and technologies - including experience mitigating DDoS attacks, securing high-speed data center fabrics, defending against web exploits, and implementing zero trust methodologies. Cloud & Network Architecture: Strong conceptual and practical knowledge of securing modern cloud and network architectures. Proficient in network protocols (TCP/IP, DNS, BGP, HTTP/S, etc.), network segmentation, VPNs, and firewall configurations. Experience securing cloud platforms (AWS, GCP, Azure or custom hyperscale infrastructure) and containerized environments. Security Contributions: Demonstrated ability to contribute key input to security initiatives and projects end-to-end. Experience educating peer engineers and partner teams, with a talent for instilling a security-first mindset across diverse teams. Cross-Team Collaboration: Excellent communication and collaboration skills. Ability to work closely with cross-functional teams (Networking, Infrastructure, DevOps/SRE, Software) to design and implement security solutions that enable the business while protecting critical assets. Policy and Compliance: Experience in implementing, refining, and enforcing security policies and controls for highly scalable, distributed systems. Familiarity with industry standards and compliance frameworks (e.g., NIST, ISO 27001, SOC2) and how they apply in a cloud environment. Preferred Skills & Qualifications Hyperscaler Environment: Prior experience working in a top-tier cloud provider or hyperscale environment is a strong plus (FAANG or similar organization). Understanding of the unique security challenges at massive scale. Zero Trust & Identity: Experience designing zero trust networks, including identity and access management (IAM) systems, single sign-on, multi-factor authentication, and network access control solutions. Automation & Scripting: Proficiency in scripting or programming (Python, Go, or similar) for automating security tasks, integrating security tools, and handling infrastructure-as-code. Experience with DevSecOps practices and CI/CD pipeline security is a plus. Security Certifications: Relevant certifications such as CISSP, CCSP, GIAC (GSEC, GCIH, etc.), or cloud security certifications (AWS/Azure Security Specialty) are advantageous, demonstrating a strong foundation in security best practices. Continuous Learning: Active involvement in the security community or contributions to open-source security projects. Up-to-date knowledge of the latest threats, vulnerabilities, and mitigation strategies in network and cloud security. The base salary range for this role is $153,000 to $204,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: Medical, dental, and vision insurance - 100% paid for by CoreWeave Company-paid Life Insurance Voluntary supplemental life insurance Short and long-term disability insurance Flexible Spending Account Health Savings Account Tuition Reimbursement Ability to Participate in Employee Stock Purchase Program (ESPP) Mental Wellness Benefits through Spring Health Family-Forming support provided by Carrot Paid Parental Leave Flexible, full-service childcare support with Kinside 401(k) with a generous employer match Flexible PTO Catered lunch each day in our office and data center locations A casual work environment A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA) , CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. 1157, or (iv) asylee under 8 U.S.C. 1158 . click apply for full job details
Job Description Job Description: Company Description WD is building the infrastructure behind the AI-driven data economy. As AI scales, so does data. Every interaction, every model, every system generates data that must be stored, managed, and made accessible over time. That's where we come in. We combine deep engineering expertise with global-scale manufacturing to deliver the storage systems that make AI possible, powering hyperscale data centers, cloud platforms, and enterprise infrastructure worldwide. This isn't theoretical work. It's real systems, at real scale, people solving some of the hardest challenges in technology today. We're looking for people who want to build, solve, and operate at that level. Join us and let's shape the future of data.Job Description The Senior Systems Architect is a senior technical leader responsible for the architecture, engineering, standardization, and evolution of enterprise compute and infrastructure platforms. This role requires broad hands-on expertise across enterprise virtualization, Windows and Linux, server infrastructure, automation, containers, and compute integration with storage and networking. The successful candidate will be equally comfortable developing architecture strategy, evaluating new technologies, creating automation, and troubleshooting complex production issues. A primary objective of the role is transforming infrastructure operations from manual administration into standardized, automated, policy-driven platform services. The architect will establish technical standards, lead modernization efforts, reduce operational complexity, and improve reliability, scalability, security, and cost efficiency. The role works closely with Data Center Operations, Storage Architecture, Network Engineering, Security, Cloud Engineering, Application teams, Manufacturing, and technology vendors. Key Responsibilities Infrastructure Architecture & Engineering Serve as a senior technical authority for enterprise compute, virtualization, Windows, Linux, container, and server infrastructure. Develop architecture standards and reference designs for scalable, resilient, secure, and supportable infrastructure. Architect virtualization and compute solutions across platforms such as Hyper-V, VMware, Nutanix AHV/KVM, and emerging technologies. Define standards for operating system deployment, configuration, lifecycle management, patching, upgrades, security, high availability, disaster recovery, capacity, and performance. Establish enterprise server hardware standards covering compute, memory, accelerators, firmware, network interfaces, power, cooling, and lifecycle management. Evaluate new infrastructure technologies through technical assessments, proof-of-concepts, benchmarking, and total-cost-of-ownership analysis. Lead complex troubleshooting and root-cause analysis across compute, virtualization, operating systems, storage, networking, and application dependencies. Drive platform modernization, consolidation, migration, technology refresh, and infrastructure lifecycle initiatives. Automation, AI & Platform Engineering Lead infrastructure automation and platform-engineering strategy across compute and related data center technologies. Identify repetitive operational activities and replace them with standardized, automated, policy-driven workflows. Develop automation using technologies such as PowerShell, Python, Ansible, Terraform, APIs, Git, and CI/CD platforms. Apply Infrastructure as Code and software-engineering practices including source control, reusable modules, peer review, testing, release management, and automated validation. Automate provisioning, configuration, patching, upgrades, firmware, compliance, vulnerability remediation, monitoring integration, and infrastructure retirement. Integrate automation with enterprise systems including ITSM, CMDB, observability, security, vulnerability management, and asset management. Develop self-service and API-driven infrastructure capabilities that reduce manual administrative work. Evaluate and responsibly apply AI, AI agents, and agentic automation to infrastructure engineering, operations, troubleshooting, documentation, and analysis. Infrastructure Integration Partner with the Principal Storage Architect to ensure compute and virtualization platforms integrate effectively with enterprise storage. Define compute-side requirements for storage connectivity, availability, capacity, performance, resiliency, and interoperability. Own architecture and standards for server and hypervisor networking, including host connectivity, NIC configuration, virtual networking, resiliency, performance, and storage-related network traffic. Partner with Network Engineering on physical connectivity, VLANs, routing, addressing, network fabrics, and data center network integration. Maintain clear ownership boundaries: this role owns server and hypervisor networking; enterprise switching, routing, firewall, and network architecture remain with Network Engineering. Work with infrastructure vendors on technology roadmaps, platform supportability, lifecycle planning, technical escalations, and architecture evaluations. Technical Leadership Develop and maintain architecture standards, reference architectures, technology roadmaps, design documentation, and architecture decisions. Establish standards for infrastructure reliability, security, observability, lifecycle management, automation, and supportability. Evaluate technologies based on scalability, performance, reliability, security, operational complexity, automation potential, and total cost of ownership. Partner with Security teams on infrastructure hardening, vulnerability management, compliance, and Zero Trust requirements. Present technical strategies, risks, tradeoffs, and investment recommendations to engineering and executive leadership. Serve as a senior escalation resource and mentor engineers across the infrastructure organization. Lead cross-functional technical initiatives and drive consensus across organizations without requiring direct authority. Qualifications 12+ years of progressive enterprise infrastructure engineering, architecture, or closely related experience, including substantial hands-on responsibility for production environments. Demonstrated experience designing and supporting large-scale, business-critical enterprise infrastructure. Deep experience with one or more enterprise virtualization platforms such as Hyper-V, VMware, Nutanix AHV, KVM, or comparable technologies, with the ability to rapidly learn additional platforms. Strong enterprise experience with Windows Server and Linux. Experience with container technologies and orchestration platforms such as Docker, Kubernetes, OpenShift, or comparable platforms. Significant experience with enterprise server platforms such as HPE, Dell, or comparable technologies. Strong understanding of storage and networking sufficient to design and troubleshoot compute integration with those technologies. Demonstrated infrastructure automation experience using PowerShell, Python, Ansible, Terraform, APIs, or comparable technologies. Experience applying Infrastructure as Code, source control, CI/CD, configuration management, or similar software-engineering practices to infrastructure. Proven ability to troubleshoot complex issues across multiple infrastructure domains. Demonstrated ability to create technical standards and translate architecture into successful production implementations. Preferred Experience Experience in several of the following areas is beneficial; candidates are not expected to have expertise in all of them: Nutanix, KVM, HCI, or software-defined infrastructure Kubernetes or enterprise container platforms Azure Arc, Azure Local, or hybrid infrastructure GitOps, Infrastructure as Code, and CI/CD AI-assisted engineering and agentic automation Enterprise monitoring and observability ITSM, CMDB, security, and vulnerability-management integration Redfish, REST APIs, and hardware-management automation Data center infrastructure management Large-scale platform migrations and technology refresh programs Manufacturing, semiconductor, high-performance engineering, or similarly complex environments Key Competencies Deep technical curiosity and the ability to rapidly learn unfamiliar technologies. Comfortable moving between strategic architecture and hands-on technical investigation. Strong bias toward automation, standardization, simplification, and elimination of repetitive work. Strong analytical approach to reliability, performance, scalability, security, supportability, and cost. Ability to communicate complex technical concepts to both engineering and executive audiences. Ability to work across organizational boundaries and influence technical direction without direct authority. Strong mentoring skills and a desire to raise the technical capability of the broader organization. Willingness to challenge established assumptions using data, testing, and engineering analysis. Additional Information Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person's gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person's assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status . click apply for full job details
11/09/2026
Full time
Job Description Job Description: Company Description WD is building the infrastructure behind the AI-driven data economy. As AI scales, so does data. Every interaction, every model, every system generates data that must be stored, managed, and made accessible over time. That's where we come in. We combine deep engineering expertise with global-scale manufacturing to deliver the storage systems that make AI possible, powering hyperscale data centers, cloud platforms, and enterprise infrastructure worldwide. This isn't theoretical work. It's real systems, at real scale, people solving some of the hardest challenges in technology today. We're looking for people who want to build, solve, and operate at that level. Join us and let's shape the future of data.Job Description The Senior Systems Architect is a senior technical leader responsible for the architecture, engineering, standardization, and evolution of enterprise compute and infrastructure platforms. This role requires broad hands-on expertise across enterprise virtualization, Windows and Linux, server infrastructure, automation, containers, and compute integration with storage and networking. The successful candidate will be equally comfortable developing architecture strategy, evaluating new technologies, creating automation, and troubleshooting complex production issues. A primary objective of the role is transforming infrastructure operations from manual administration into standardized, automated, policy-driven platform services. The architect will establish technical standards, lead modernization efforts, reduce operational complexity, and improve reliability, scalability, security, and cost efficiency. The role works closely with Data Center Operations, Storage Architecture, Network Engineering, Security, Cloud Engineering, Application teams, Manufacturing, and technology vendors. Key Responsibilities Infrastructure Architecture & Engineering Serve as a senior technical authority for enterprise compute, virtualization, Windows, Linux, container, and server infrastructure. Develop architecture standards and reference designs for scalable, resilient, secure, and supportable infrastructure. Architect virtualization and compute solutions across platforms such as Hyper-V, VMware, Nutanix AHV/KVM, and emerging technologies. Define standards for operating system deployment, configuration, lifecycle management, patching, upgrades, security, high availability, disaster recovery, capacity, and performance. Establish enterprise server hardware standards covering compute, memory, accelerators, firmware, network interfaces, power, cooling, and lifecycle management. Evaluate new infrastructure technologies through technical assessments, proof-of-concepts, benchmarking, and total-cost-of-ownership analysis. Lead complex troubleshooting and root-cause analysis across compute, virtualization, operating systems, storage, networking, and application dependencies. Drive platform modernization, consolidation, migration, technology refresh, and infrastructure lifecycle initiatives. Automation, AI & Platform Engineering Lead infrastructure automation and platform-engineering strategy across compute and related data center technologies. Identify repetitive operational activities and replace them with standardized, automated, policy-driven workflows. Develop automation using technologies such as PowerShell, Python, Ansible, Terraform, APIs, Git, and CI/CD platforms. Apply Infrastructure as Code and software-engineering practices including source control, reusable modules, peer review, testing, release management, and automated validation. Automate provisioning, configuration, patching, upgrades, firmware, compliance, vulnerability remediation, monitoring integration, and infrastructure retirement. Integrate automation with enterprise systems including ITSM, CMDB, observability, security, vulnerability management, and asset management. Develop self-service and API-driven infrastructure capabilities that reduce manual administrative work. Evaluate and responsibly apply AI, AI agents, and agentic automation to infrastructure engineering, operations, troubleshooting, documentation, and analysis. Infrastructure Integration Partner with the Principal Storage Architect to ensure compute and virtualization platforms integrate effectively with enterprise storage. Define compute-side requirements for storage connectivity, availability, capacity, performance, resiliency, and interoperability. Own architecture and standards for server and hypervisor networking, including host connectivity, NIC configuration, virtual networking, resiliency, performance, and storage-related network traffic. Partner with Network Engineering on physical connectivity, VLANs, routing, addressing, network fabrics, and data center network integration. Maintain clear ownership boundaries: this role owns server and hypervisor networking; enterprise switching, routing, firewall, and network architecture remain with Network Engineering. Work with infrastructure vendors on technology roadmaps, platform supportability, lifecycle planning, technical escalations, and architecture evaluations. Technical Leadership Develop and maintain architecture standards, reference architectures, technology roadmaps, design documentation, and architecture decisions. Establish standards for infrastructure reliability, security, observability, lifecycle management, automation, and supportability. Evaluate technologies based on scalability, performance, reliability, security, operational complexity, automation potential, and total cost of ownership. Partner with Security teams on infrastructure hardening, vulnerability management, compliance, and Zero Trust requirements. Present technical strategies, risks, tradeoffs, and investment recommendations to engineering and executive leadership. Serve as a senior escalation resource and mentor engineers across the infrastructure organization. Lead cross-functional technical initiatives and drive consensus across organizations without requiring direct authority. Qualifications 12+ years of progressive enterprise infrastructure engineering, architecture, or closely related experience, including substantial hands-on responsibility for production environments. Demonstrated experience designing and supporting large-scale, business-critical enterprise infrastructure. Deep experience with one or more enterprise virtualization platforms such as Hyper-V, VMware, Nutanix AHV, KVM, or comparable technologies, with the ability to rapidly learn additional platforms. Strong enterprise experience with Windows Server and Linux. Experience with container technologies and orchestration platforms such as Docker, Kubernetes, OpenShift, or comparable platforms. Significant experience with enterprise server platforms such as HPE, Dell, or comparable technologies. Strong understanding of storage and networking sufficient to design and troubleshoot compute integration with those technologies. Demonstrated infrastructure automation experience using PowerShell, Python, Ansible, Terraform, APIs, or comparable technologies. Experience applying Infrastructure as Code, source control, CI/CD, configuration management, or similar software-engineering practices to infrastructure. Proven ability to troubleshoot complex issues across multiple infrastructure domains. Demonstrated ability to create technical standards and translate architecture into successful production implementations. Preferred Experience Experience in several of the following areas is beneficial; candidates are not expected to have expertise in all of them: Nutanix, KVM, HCI, or software-defined infrastructure Kubernetes or enterprise container platforms Azure Arc, Azure Local, or hybrid infrastructure GitOps, Infrastructure as Code, and CI/CD AI-assisted engineering and agentic automation Enterprise monitoring and observability ITSM, CMDB, security, and vulnerability-management integration Redfish, REST APIs, and hardware-management automation Data center infrastructure management Large-scale platform migrations and technology refresh programs Manufacturing, semiconductor, high-performance engineering, or similarly complex environments Key Competencies Deep technical curiosity and the ability to rapidly learn unfamiliar technologies. Comfortable moving between strategic architecture and hands-on technical investigation. Strong bias toward automation, standardization, simplification, and elimination of repetitive work. Strong analytical approach to reliability, performance, scalability, security, supportability, and cost. Ability to communicate complex technical concepts to both engineering and executive audiences. Ability to work across organizational boundaries and influence technical direction without direct authority. Strong mentoring skills and a desire to raise the technical capability of the broader organization. Willingness to challenge established assumptions using data, testing, and engineering analysis. Additional Information Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person's gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person's assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status . click apply for full job details
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
11/09/2026
Full time
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
Compu-Vision Consulting Inc.
Pennington, New Jersey
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
11/09/2026
Full time
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
11/09/2026
Full time
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
Compu-Vision Consulting Inc.
Jacksonville, Florida
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
11/09/2026
Full time
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
Job Description Job Description Job Description Title: Sr. MS 365 Systems Engineer / Architect Location: Hybrid / Irvine, CA Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands. Summary: We are seeking a senior-level Microsoft 365 Systems Engineer / Architect. In this role, you will act as the principal technical authority for our cloud infrastructure, driving advanced optimization, security remediation, and operational governance across our entire cloud-native Microsoft 365 ecosystem. The ideal candidate is an expert in cloud architecture who can evaluate our existing tenant, enforce zero-trust security controls, optimize modern device management via Intune, and implement thorough compliance policies. Responsibilities: Cloud Identity & Access Governance Audit and optimize the core Microsoft Entra ID configuration, reinforcing enterprise best practices for cloud-only identity structures. Architect and implement robust Conditional Access Policies (CAPs), deploy phishing-resistant Multi-Factor Authentication (MFA), and configure Entra ID Protection policies. Standardize global administrative roles using Privileged Identity Management (PIM) and configure secure external collaboration settings. Endpoint Management & Cloud Deployment Design and deploy enterprise configuration, compliance, and application protection profiles within Microsoft Intune across Windows, macOS, and mobile operating systems. Streamline hardware provisioning infrastructure using cloud-native deployment methods including Windows Autopilot and Apple Business Manager. Set up automated patch management via Windows Update for Business and establish standardized security baselines. Collaboration, Messaging & Content Compliance Review and maximize the performance, structural organization, and sharing configurations of Exchange Online, SharePoint Online, and Microsoft Teams. Configure Microsoft Purview Data Loss Prevention (DLP) rules, sensitivity labels, and retention schedules to safeguard intellectual property. Enforce robust tenant governance models including Microsoft Teams lifecycle automation, guest access reviews, and application permission policies. Security Engineering & Documentation Systematically remediate tenant vulnerabilities to improve the organization's overall Microsoft Secure Score and security posture. Configure comprehensive audit logs, alert notifications, and diagnostic data integrations with core security monitoring systems. Author technical as-built architecture manuals, governance charters, and clear operational runbooks to ensure an effective handover to internal IT personnel at project conclusion. Qualifications: Experience Profile: Minimum 8+ years of enterprise systems engineering experience, with at least 5+ years dedicated strictly to cloud-native Microsoft 365 infrastructure and architecture design. Cloud-Only Specialization: Proven mastery managing pure cloud environments with zero hybrid constraints (no local Active Directory, no hybrid Exchange servers, and no write-back dependencies). Identity & Access Management: Expert-level knowledge of Microsoft Entra ID governance, Conditional Access design parameters, and identity boundary security. Unified Endpoint Management: Extensive experience engineering worldwide device fleets using Microsoft Intune, provisioning workflows, and custom app deployments. Information Governance: Direct hands-on proficiency executing data protection policies via Microsoft Purview, records management, and discovery engines. Automation Engineering: Strong PowerShell scripting skills utilizing the native Microsoft Graph SDK and modern API endpoints to automate tenant configuration management. Preferred Certifications Microsoft Certified: Microsoft 365 Enterprise Administrator Expert MCSA, MCSE Qualified Candidates Only : If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our website at .
11/09/2026
Full time
Job Description Job Description Job Description Title: Sr. MS 365 Systems Engineer / Architect Location: Hybrid / Irvine, CA Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands. Summary: We are seeking a senior-level Microsoft 365 Systems Engineer / Architect. In this role, you will act as the principal technical authority for our cloud infrastructure, driving advanced optimization, security remediation, and operational governance across our entire cloud-native Microsoft 365 ecosystem. The ideal candidate is an expert in cloud architecture who can evaluate our existing tenant, enforce zero-trust security controls, optimize modern device management via Intune, and implement thorough compliance policies. Responsibilities: Cloud Identity & Access Governance Audit and optimize the core Microsoft Entra ID configuration, reinforcing enterprise best practices for cloud-only identity structures. Architect and implement robust Conditional Access Policies (CAPs), deploy phishing-resistant Multi-Factor Authentication (MFA), and configure Entra ID Protection policies. Standardize global administrative roles using Privileged Identity Management (PIM) and configure secure external collaboration settings. Endpoint Management & Cloud Deployment Design and deploy enterprise configuration, compliance, and application protection profiles within Microsoft Intune across Windows, macOS, and mobile operating systems. Streamline hardware provisioning infrastructure using cloud-native deployment methods including Windows Autopilot and Apple Business Manager. Set up automated patch management via Windows Update for Business and establish standardized security baselines. Collaboration, Messaging & Content Compliance Review and maximize the performance, structural organization, and sharing configurations of Exchange Online, SharePoint Online, and Microsoft Teams. Configure Microsoft Purview Data Loss Prevention (DLP) rules, sensitivity labels, and retention schedules to safeguard intellectual property. Enforce robust tenant governance models including Microsoft Teams lifecycle automation, guest access reviews, and application permission policies. Security Engineering & Documentation Systematically remediate tenant vulnerabilities to improve the organization's overall Microsoft Secure Score and security posture. Configure comprehensive audit logs, alert notifications, and diagnostic data integrations with core security monitoring systems. Author technical as-built architecture manuals, governance charters, and clear operational runbooks to ensure an effective handover to internal IT personnel at project conclusion. Qualifications: Experience Profile: Minimum 8+ years of enterprise systems engineering experience, with at least 5+ years dedicated strictly to cloud-native Microsoft 365 infrastructure and architecture design. Cloud-Only Specialization: Proven mastery managing pure cloud environments with zero hybrid constraints (no local Active Directory, no hybrid Exchange servers, and no write-back dependencies). Identity & Access Management: Expert-level knowledge of Microsoft Entra ID governance, Conditional Access design parameters, and identity boundary security. Unified Endpoint Management: Extensive experience engineering worldwide device fleets using Microsoft Intune, provisioning workflows, and custom app deployments. Information Governance: Direct hands-on proficiency executing data protection policies via Microsoft Purview, records management, and discovery engines. Automation Engineering: Strong PowerShell scripting skills utilizing the native Microsoft Graph SDK and modern API endpoints to automate tenant configuration management. Preferred Certifications Microsoft Certified: Microsoft 365 Enterprise Administrator Expert MCSA, MCSE Qualified Candidates Only : If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our website at .
Job Description Job Description System Architect (SME) Bethesda, MD Full-Time On-site Join Synertex LLC and bring your expertise to a mission that matters. We're looking for a System Architect Subject Matter Expert (SME) with a background in cloud architecture, enterprise IT design, and data-centric infrastructure to support critical government and intelligence initiatives. If you're passionate about building scalable, secure, and future-ready architectures and thrive in a strategic, innovation-driven, and collaborative role-this opportunity is for you. RESPONSIBILITIES Design enterprise-level IT architectures with a focus on cloud-native and hybrid environments Define system integration patterns and infrastructure components to support mission requirements Develop architectural roadmaps and ensure alignment with organizational strategy Lead cloud adoption initiatives and advise on platform selection, migration, and optimization Document system components, data flows, and security boundaries in compliance with federal standards Collaborate with cross-functional teams including cybersecurity, data services, and software development Evaluate emerging technologies to drive IT modernization and innovation REQUIREMENTS TS/SCI clearance required , including additional security screenings Full Performance : High school diploma/GED with 8 years, associate's with 6 years, bachelor's with 4 years, or master's with 2 years of relevant experience Senior Level : High school diploma/GED with 10 years, associate's with 8 years, bachelor's with 6 years, master's with 4 years, or PhD with 2 years Expert/Master Level : High school diploma/GED with 12 years, associate's with 10 years, bachelor's with 8 years, master's with 6 years, or PhD with 4 years Strong experience in enterprise system design, cloud computing (AWS, Azure, GCP), and data-driven infrastructure Proficiency with architecture modeling tools (e.g., ArchiMate, Sparx EA, Visio) Deep understanding of system interoperability, security architecture, and service-oriented design Strong communication and leadership skills with the ability to interface with senior stakeholders Experience designing IT systems for defense, intelligence, or federal agencies Knowledge of Zero Trust architecture, DevSecOps, and infrastructure-as-code (IaC) practices Familiarity with DoD Architecture Framework (DoDAF) or other federal architecture standards Background in transitioning legacy systems to modern cloud-based architectures Join a mission-driven team advancing government communication capabilities and operational readiness. Apply today and become part of Synertex LLC's legacy of innovation, leadership, and excellence.
11/09/2026
Full time
Job Description Job Description System Architect (SME) Bethesda, MD Full-Time On-site Join Synertex LLC and bring your expertise to a mission that matters. We're looking for a System Architect Subject Matter Expert (SME) with a background in cloud architecture, enterprise IT design, and data-centric infrastructure to support critical government and intelligence initiatives. If you're passionate about building scalable, secure, and future-ready architectures and thrive in a strategic, innovation-driven, and collaborative role-this opportunity is for you. RESPONSIBILITIES Design enterprise-level IT architectures with a focus on cloud-native and hybrid environments Define system integration patterns and infrastructure components to support mission requirements Develop architectural roadmaps and ensure alignment with organizational strategy Lead cloud adoption initiatives and advise on platform selection, migration, and optimization Document system components, data flows, and security boundaries in compliance with federal standards Collaborate with cross-functional teams including cybersecurity, data services, and software development Evaluate emerging technologies to drive IT modernization and innovation REQUIREMENTS TS/SCI clearance required , including additional security screenings Full Performance : High school diploma/GED with 8 years, associate's with 6 years, bachelor's with 4 years, or master's with 2 years of relevant experience Senior Level : High school diploma/GED with 10 years, associate's with 8 years, bachelor's with 6 years, master's with 4 years, or PhD with 2 years Expert/Master Level : High school diploma/GED with 12 years, associate's with 10 years, bachelor's with 8 years, master's with 6 years, or PhD with 4 years Strong experience in enterprise system design, cloud computing (AWS, Azure, GCP), and data-driven infrastructure Proficiency with architecture modeling tools (e.g., ArchiMate, Sparx EA, Visio) Deep understanding of system interoperability, security architecture, and service-oriented design Strong communication and leadership skills with the ability to interface with senior stakeholders Experience designing IT systems for defense, intelligence, or federal agencies Knowledge of Zero Trust architecture, DevSecOps, and infrastructure-as-code (IaC) practices Familiarity with DoD Architecture Framework (DoDAF) or other federal architecture standards Background in transitioning legacy systems to modern cloud-based architectures Join a mission-driven team advancing government communication capabilities and operational readiness. Apply today and become part of Synertex LLC's legacy of innovation, leadership, and excellence.
Job Description Job Description We are seeking a hands-on Systems Architect (SME) with deep expertise across infrastructure, platforms, and application ecosystems spanning cloud and on-premises environments. This role requires a proven practitioner who can analyze existing ("as-is") systems and applications, document current state architectures, design future- state solutions, and implement system enhancements or technology transformations end-to-end. The ideal candidate is a technical leader and doer, not just an advisor - someone who can seamlessly collaborate across infrastructure, platform, application, DevSecOps, information systems security, and data teams while maintaining ownership of system reliability, performance, scalability, and security. QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact o Ability to work across organizations (internal and IC) to implement complex solutions Ideal Candidate Profile Recognized SME with deep, hands-on technical expertise Strong systems thinker with the ability to see and engineer across the full stack Comfortable operating at both strategic architecture and tactical implementation levels Excellent communication and collaboration skills across technical and non-technical teams Proven ability to own complex systems from design through production Requirements QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact . click apply for full job details
11/09/2026
Full time
Job Description Job Description We are seeking a hands-on Systems Architect (SME) with deep expertise across infrastructure, platforms, and application ecosystems spanning cloud and on-premises environments. This role requires a proven practitioner who can analyze existing ("as-is") systems and applications, document current state architectures, design future- state solutions, and implement system enhancements or technology transformations end-to-end. The ideal candidate is a technical leader and doer, not just an advisor - someone who can seamlessly collaborate across infrastructure, platform, application, DevSecOps, information systems security, and data teams while maintaining ownership of system reliability, performance, scalability, and security. QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact o Ability to work across organizations (internal and IC) to implement complex solutions Ideal Candidate Profile Recognized SME with deep, hands-on technical expertise Strong systems thinker with the ability to see and engineer across the full stack Comfortable operating at both strategic architecture and tactical implementation levels Excellent communication and collaboration skills across technical and non-technical teams Proven ability to own complex systems from design through production Requirements QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact . click apply for full job details
Compu-Vision Consulting Inc.
Charlotte, North Carolina
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
11/09/2026
Full time
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
Job Description Job Description We are seeking a hands-on Systems Architect (SME) with deep expertise across infrastructure, platforms, and application ecosystems spanning cloud and on-premises environments. This role requires a proven practitioner who can analyze existing ("as-is") systems and applications, document current state architectures, design future- state solutions, and implement system enhancements or technology transformations end-to-end. The ideal candidate is a technical leader and doer, not just an advisor - someone who can seamlessly collaborate across infrastructure, platform, application, DevSecOps, information systems security, and data teams while maintaining ownership of system reliability, performance, scalability, and security. QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact o Ability to work across organizations (internal and IC) to implement complex solutions Ideal Candidate Profile Recognized SME with deep, hands-on technical expertise Strong systems thinker with the ability to see and engineer across the full stack Comfortable operating at both strategic architecture and tactical implementation levels Excellent communication and collaboration skills across technical and non-technical teams Proven ability to own complex systems from design through production Requirements QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact . click apply for full job details
11/09/2026
Full time
Job Description Job Description We are seeking a hands-on Systems Architect (SME) with deep expertise across infrastructure, platforms, and application ecosystems spanning cloud and on-premises environments. This role requires a proven practitioner who can analyze existing ("as-is") systems and applications, document current state architectures, design future- state solutions, and implement system enhancements or technology transformations end-to-end. The ideal candidate is a technical leader and doer, not just an advisor - someone who can seamlessly collaborate across infrastructure, platform, application, DevSecOps, information systems security, and data teams while maintaining ownership of system reliability, performance, scalability, and security. QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact o Ability to work across organizations (internal and IC) to implement complex solutions Ideal Candidate Profile Recognized SME with deep, hands-on technical expertise Strong systems thinker with the ability to see and engineer across the full stack Comfortable operating at both strategic architecture and tactical implementation levels Excellent communication and collaboration skills across technical and non-technical teams Proven ability to own complex systems from design through production Requirements QUALIFICATIONS Bachelor's degree in Computer Science, IT or related technical discipline, or the equivalent combination of education, technical training, or work/military experience. Minimum ten (10) years of related experience REQUIRED KNOWLEDGE/SKILLS Candidates must demonstrate hands-on experience in all the following areas: Infrastructure Platforms Enterprise networking (e.g., routing, switching, firewalls, load balancers, DNS) Storage technologies (e.g., SAN, NAS, object storage) Container platforms (e.g., Kubernetes, Docker) Linux (Redhat, CentOS) operating systems (administration, hardening, automation) IdAM - Public Key Infrastructure (PKI) hands-on for AuthN and AuthZ Cloud On-Prem Technologies Cloud platforms (AWS, Azure, and/or GCP) Hybrid and on-prem infrastructure design and integration Cloud networking, identity, security, and cost optimization Data Application Platforms Relational and NoSQL databases - relational (e.g., Oracle, PostgreSQL, MySQL, SQL Server) and NoSQL (e.g., MongoDB, Cassandra, DynamoDB, Redis) databases Web services, APIs, and middleware Software development lifecycle (SDLC) fundamentals Event-based messaging systems (e.g., SQS, SNS, RabbitMQ) Engineering Automation Infrastructure as Code - Scripting Automation: Python, Bash, PowerShell, Terraform, Ansible, or CloudFormation Configuration management and scripting (e.g., PowerShell, Bash, Python, etc.) CI/CD integration with infrastructure and platforms (e.g., Jenkins, Gitlab CI/CD, GitHub Actions, GitOps, ArgoCD) Security best practices and system hardening Monitoring Incident Response: Proficiency with tools like Prometheus, Grafana, Splunk, ELK Stack, CloudWatch Architecture Design Ability to create: o As-is architecture documentation o To-be architecture and detailed engineering designs o Implementation and migration plans DESIRED KNOWLEDGE/SKILLS Observability and monitoring tools (e.g., logging, metrics, tracing) Zero Trust and modern security architectures Data analytics, AI/ML platform exposure Experience supporting production or mission-critical environments Relevant certifications (e.g., cloud, systems, security, or architecture) Knowledge of machine learning platforms (e.g., TensorFlow, PyTorch, SageMaker) Familiarity with big data ecosystems (e.g., Hadoop, Databricks, Snowflake, Google, BigQuery) Strong background in ITIL processes and agile methodologies Certifications: AWS Solutions Architect / DevOps Engineer, Azure Administrator, Kubernetes CKA/CKAD, ITIL Foundation KEY RESPONSIBILITIES Perform hands-on systems engineering across network, compute, storage, operating systems, middleware, databases, and applications Analyze and document as-is infrastructure, platform, and application architectures Work with the System Architect and Cloud Architect to create the detail engineering designs for modernization, optimization, and transformation initiatives Lead and execute cloud and on-prem system implementations, migrations, and upgrades Ensure systems meet availability, scalability, performance, security, and compliance requirements Integrate infrastructure and platforms with DevOps and DevSecOps pipelines Troubleshoot complex, cross-stack issues spanning infrastructure, platforms, and applications Collaborate effectively with: o Infrastructure Platform Engineers o Software Engineers o DevOps / DevSecOps Engineers o Data Engineers (ETL) o Data Modelers, Data Scientists, and Data Analysts Produce clear technical documentation, diagrams, standards, and runbooks Serve as a technical authority and escalation point for complex system issues Communication Skills: o Ability to brief executives clearly and translate technical issues into business impact . click apply for full job details
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
11/09/2026
Full time
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
Job Description Job Description Request ID: SAIJP Title: System Architect - SME (Storage) Locations: Remote Duration: 6 - 12 Months Contract with Possible Extension Clearance: Active Public Trust Job Description: The System Architect - SME (Storage) provides senior technical leadership for enterprise infrastructure architecture and modernization in support of the SEC ISS contract. This role translates mission and functional requirements into scalable, secure technical solutions across on-premises and hybrid/multi-cloud environments. The architect leads cross-functional engineering and operations teams to improve reliability, automation, and service performance aligned to SEC OIT objectives. The position drives technology evaluations, proofs of concept, pilots, and demos while ensuring designs integrate with 24x7x365 enterprise operations and observability requirements. This role ensures architecture decisions align with Zero Trust, FISMA, and SEC governance expectations. PRIMARY RESPONSIBILITIES: Enterprise Architecture and Solution Design Architect and manage enterprise IT systems across multiple functional areas, including server, platform, storage, and cloud domains. Translate functional and operational requirements into technical architectures, integration patterns, and implementation roadmaps. Define scalable, resilient target-state designs and transitional architectures for hybrid environments. Develop and maintain architecture documentation, standards, and technical decision artifacts to support execution and governance. Design, implement, and maintain enterprise SAN/NAS and storage virtualization solutions for mission-critical systems. Develop storage strategies, standards, and policies aligned with organizational and federal compliance requirements. Lead complex storage projects, including migrations, upgrades, and integration with cloud and on-premises environments. Ensure storage platforms are engineered for high availability, data integrity, and scalability across SEC environments. Technology Evaluation and Modernization Identify, assess, and recommend technologies that meet defined technical and business requirements. Lead and execute proofs of concept (POCs), pilots, and demos to validate feasibility, risk, and operational fit. Guide modernization efforts across virtualization, cloud integration, and enterprise infrastructure transformation initiatives. Drive adoption of advanced technologies that improve efficiency, interoperability, and long-term maintainability. Operations Leadership and Service Reliability Provide technical leadership to multi-discipline server and system operations teams in enterprise environments. Establish architecture requirements for monitoring, alerting, incident response, and operational visibility for production systems. Support root-cause analysis, corrective actions, and continuous improvement efforts tied to SLA and performance objectives. Ensure designs are supportable in 24x7x365 operations, including change/release coordination and lifecycle management. Technical Leadership and Cross-Functional Delivery Lead storage workstreams for migrations, technology refreshes, and modernization efforts with minimal operational disruption. Collaborate with infrastructure, network, security, virtualization, and cloud teams to integrate storage services end-to- end. Conduct risk assessments and recommend remediation strategies for storage resiliency, security, and operational risk. Mentor junior engineers and serve as the storage SME for incident response, strategic planning, and continuous improvement initiatives. Storage Operations, Performance, and Capacity Management Administer and optimize large-scale enterprise storage environments, including proactive monitoring and health management. Perform capacity planning and forecasting to maintain service continuity and prevent resource constraints. Troubleshoot and resolve advanced storage incidents, including latency, throughput, replication, and platform stability issues. Establish and track operational metrics and trend analysis to support service-level performance. Security, Compliance, and Integration Governance Provide technical leadership for system integration, scalability, and security architecture across multi-vendor platforms. Embed security controls and compliance requirements into infrastructure and platform designs. Ensure architectural approaches support FISMA-aligned controls, vulnerability remediation, and secure configuration baselines. Collaborate with cross-functional stakeholders to align technical solutions with SEC policy, risk, and operational governance. Data Protection, Recovery, and Compliance Architect and maintain enterprise backup and recovery strategies to protect mission-critical data. Implement and validate disaster recovery and business continuity storage controls, including cross-site replication and recovery readiness. Ensure retention, recovery, and data protection practices meet organizational policy and federal compliance requirements. Support audit readiness by maintaining storage documentation, configuration baselines, and implementation evidence. REQUIRED QUALIFICATIONS: Citizenship/Work Authorization: Must meet contract requirements. Clearance: Ability to obtain and maintain SEC Public Trust (or higher if required). Education: Bachelor's degree in a relevant field. Experience: 12+ years of experience in engineering and architecting enterprise IT storage systems. Proven experience managing multi-discipline server and system operations teams. Demonstrated experience translating functional requirements into enterprise technical solutions and leading integration/scalability efforts. Strong analytical and problem-solving skills with the ability to collaborate effectively across cross-functional teams. Hands-on experience with enterprise storage platforms and large-scale storage administration. Expertise with SAN/NAS technologies, storage virtualization, and enterprise backup/recovery solutions. Experience leading complex storage migrations, upgrades, and integration with cloud and on-premises environments. Experience supporting storage compliance, audit readiness, and documentation in federal IT environments. Advanced expertise in storage performance tuning, capacity planning, risk assessment, and disaster recovery strategies. Must have experience working with Clustered Data ONTAP software. Technical Skills: Enterprise infrastructure design and architecture Multi-vendor server operating systems Virtualization and cloud integration architecture System integration and scalability architecture Security architecture for enterprise platforms Technology evaluation, POC/pilot execution, and solution validation Cross-functional technical leadership and stakeholder communication Cross-functional integration with infrastructure, network, and security teams Enterprise SAN/NAS platforms and storage virtualization Enterprise backup/recovery, replication, and disaster recovery operations Storage performance monitoring, tuning, and capacity management methodologies Advanced troubleshooting of mission-critical storage issues and operational risk assessment PREFERRED QUALIFICATIONS: Experience supporting U.S. federal IT environments with FISMA/NIST/OMB compliance requirements. Experience architecting or supporting observability platforms and enterprise monitoring integrations in large environments. Hands-on experience with container platforms and automation frameworks (e.g., OpenShift, Kubernetes, Ansible, GitOps toolchains). Experience leading architecture initiatives in 24x7x365 enterprise operations organizations. Prior support to SEC or similarly regulated financial-sector federal agencies. NetApp Certified Data Administrator Certification (NCDA) or equivalent Proficiency in Ansible, Python, BASH Experience developing and enforcing storage standards, policies, and operational best practices.
11/09/2026
Full time
Job Description Job Description Request ID: SAIJP Title: System Architect - SME (Storage) Locations: Remote Duration: 6 - 12 Months Contract with Possible Extension Clearance: Active Public Trust Job Description: The System Architect - SME (Storage) provides senior technical leadership for enterprise infrastructure architecture and modernization in support of the SEC ISS contract. This role translates mission and functional requirements into scalable, secure technical solutions across on-premises and hybrid/multi-cloud environments. The architect leads cross-functional engineering and operations teams to improve reliability, automation, and service performance aligned to SEC OIT objectives. The position drives technology evaluations, proofs of concept, pilots, and demos while ensuring designs integrate with 24x7x365 enterprise operations and observability requirements. This role ensures architecture decisions align with Zero Trust, FISMA, and SEC governance expectations. PRIMARY RESPONSIBILITIES: Enterprise Architecture and Solution Design Architect and manage enterprise IT systems across multiple functional areas, including server, platform, storage, and cloud domains. Translate functional and operational requirements into technical architectures, integration patterns, and implementation roadmaps. Define scalable, resilient target-state designs and transitional architectures for hybrid environments. Develop and maintain architecture documentation, standards, and technical decision artifacts to support execution and governance. Design, implement, and maintain enterprise SAN/NAS and storage virtualization solutions for mission-critical systems. Develop storage strategies, standards, and policies aligned with organizational and federal compliance requirements. Lead complex storage projects, including migrations, upgrades, and integration with cloud and on-premises environments. Ensure storage platforms are engineered for high availability, data integrity, and scalability across SEC environments. Technology Evaluation and Modernization Identify, assess, and recommend technologies that meet defined technical and business requirements. Lead and execute proofs of concept (POCs), pilots, and demos to validate feasibility, risk, and operational fit. Guide modernization efforts across virtualization, cloud integration, and enterprise infrastructure transformation initiatives. Drive adoption of advanced technologies that improve efficiency, interoperability, and long-term maintainability. Operations Leadership and Service Reliability Provide technical leadership to multi-discipline server and system operations teams in enterprise environments. Establish architecture requirements for monitoring, alerting, incident response, and operational visibility for production systems. Support root-cause analysis, corrective actions, and continuous improvement efforts tied to SLA and performance objectives. Ensure designs are supportable in 24x7x365 operations, including change/release coordination and lifecycle management. Technical Leadership and Cross-Functional Delivery Lead storage workstreams for migrations, technology refreshes, and modernization efforts with minimal operational disruption. Collaborate with infrastructure, network, security, virtualization, and cloud teams to integrate storage services end-to- end. Conduct risk assessments and recommend remediation strategies for storage resiliency, security, and operational risk. Mentor junior engineers and serve as the storage SME for incident response, strategic planning, and continuous improvement initiatives. Storage Operations, Performance, and Capacity Management Administer and optimize large-scale enterprise storage environments, including proactive monitoring and health management. Perform capacity planning and forecasting to maintain service continuity and prevent resource constraints. Troubleshoot and resolve advanced storage incidents, including latency, throughput, replication, and platform stability issues. Establish and track operational metrics and trend analysis to support service-level performance. Security, Compliance, and Integration Governance Provide technical leadership for system integration, scalability, and security architecture across multi-vendor platforms. Embed security controls and compliance requirements into infrastructure and platform designs. Ensure architectural approaches support FISMA-aligned controls, vulnerability remediation, and secure configuration baselines. Collaborate with cross-functional stakeholders to align technical solutions with SEC policy, risk, and operational governance. Data Protection, Recovery, and Compliance Architect and maintain enterprise backup and recovery strategies to protect mission-critical data. Implement and validate disaster recovery and business continuity storage controls, including cross-site replication and recovery readiness. Ensure retention, recovery, and data protection practices meet organizational policy and federal compliance requirements. Support audit readiness by maintaining storage documentation, configuration baselines, and implementation evidence. REQUIRED QUALIFICATIONS: Citizenship/Work Authorization: Must meet contract requirements. Clearance: Ability to obtain and maintain SEC Public Trust (or higher if required). Education: Bachelor's degree in a relevant field. Experience: 12+ years of experience in engineering and architecting enterprise IT storage systems. Proven experience managing multi-discipline server and system operations teams. Demonstrated experience translating functional requirements into enterprise technical solutions and leading integration/scalability efforts. Strong analytical and problem-solving skills with the ability to collaborate effectively across cross-functional teams. Hands-on experience with enterprise storage platforms and large-scale storage administration. Expertise with SAN/NAS technologies, storage virtualization, and enterprise backup/recovery solutions. Experience leading complex storage migrations, upgrades, and integration with cloud and on-premises environments. Experience supporting storage compliance, audit readiness, and documentation in federal IT environments. Advanced expertise in storage performance tuning, capacity planning, risk assessment, and disaster recovery strategies. Must have experience working with Clustered Data ONTAP software. Technical Skills: Enterprise infrastructure design and architecture Multi-vendor server operating systems Virtualization and cloud integration architecture System integration and scalability architecture Security architecture for enterprise platforms Technology evaluation, POC/pilot execution, and solution validation Cross-functional technical leadership and stakeholder communication Cross-functional integration with infrastructure, network, and security teams Enterprise SAN/NAS platforms and storage virtualization Enterprise backup/recovery, replication, and disaster recovery operations Storage performance monitoring, tuning, and capacity management methodologies Advanced troubleshooting of mission-critical storage issues and operational risk assessment PREFERRED QUALIFICATIONS: Experience supporting U.S. federal IT environments with FISMA/NIST/OMB compliance requirements. Experience architecting or supporting observability platforms and enterprise monitoring integrations in large environments. Hands-on experience with container platforms and automation frameworks (e.g., OpenShift, Kubernetes, Ansible, GitOps toolchains). Experience leading architecture initiatives in 24x7x365 enterprise operations organizations. Prior support to SEC or similarly regulated financial-sector federal agencies. NetApp Certified Data Administrator Certification (NCDA) or equivalent Proficiency in Ansible, Python, BASH Experience developing and enforcing storage standards, policies, and operational best practices.
Job Description Job Description REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH DAn Solutions is seeking experienced Systems Software Engineers with strong systems programming and database engineering backgrounds to support a mission-critical federal government program. This position focuses on understanding and modifying how database engines and core software services operate internally. The ideal candidate is comfortable analyzing source code, examining network communications, tracing application behavior, and developing secure, scalable solutions across integrated technology environments. Key Responsibilities Develop, test, maintain, and deploy software using C, C++, Rust, Go, Java, Python, or Node.js. Develop concurrent and multithreaded applications using systems programming principles. Analyze database engine source code, communication protocols, serialization formats, and packet structures. Design and troubleshoot networked applications using sockets and client-server architectures. Develop relational and graph database solutions, including SQL optimization and performance tuning. Support technologies such as PostgreSQL, Redis, Neo4j, Amazon S3, and Elasticsearch. Modernize existing services and develop Infrastructure as Code (IaC). Deploy and troubleshoot cloud-hosted applications and supporting infrastructure. Integrate identity services using OpenID Connect (OIDC), authentication, authorization, and Zero Trust principles. Maintain technical documentation, software designs, and operational procedures. Required Qualifications Active TS/SCI clearance with the ability to obtain a CI Polygraph. Bachelor's degree in Computer Science, Engineering, Information Technology, Mathematics, or a related quantitative discipline. Typically 10 years of professional software engineering experience. Previous Intelligence Community experience. Hands-on systems programming experience with C, C++, or Rust. Experience with operating-system interfaces, process management, concurrency, and multithreaded applications. Experience analyzing database internals, network protocols, or low-level software behavior. Strong SQL, relational database, and graph database knowledge. Experience with cloud infrastructure, automation, and identity integration using OIDC. Knowledge of Zero Trust Architecture and enterprise security controls. Experience with Agile, DevOps, or DevSecOps methodologies. Agile Developer or Certified Scrum Developer certification. CompTIA Security+ or higher cybersecurity certification. Preferred Qualifications Master's degree in a related technical discipline. Experience with PostgreSQL, Neo4j, and database engine internals. Terraform, Ansible, AWS GovCloud, Kubernetes, or Red Hat OpenShift. Experience with PingFederate, Keycloak, SailPoint, Okta, or similar identity platforms. Experience with PKI, cryptographic integrations, Hardware Security Modules, or PKCS . Familiarity with Trusted Data Format, Protocol Buffers, and modern cryptographic technologies. Work Location This position requires full-time work at a government facility in Charleston, SC or the Washington Metropolitan Area. Candidates in other locations may be considered. Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications
11/09/2026
Full time
Job Description Job Description REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH DAn Solutions is seeking experienced Systems Software Engineers with strong systems programming and database engineering backgrounds to support a mission-critical federal government program. This position focuses on understanding and modifying how database engines and core software services operate internally. The ideal candidate is comfortable analyzing source code, examining network communications, tracing application behavior, and developing secure, scalable solutions across integrated technology environments. Key Responsibilities Develop, test, maintain, and deploy software using C, C++, Rust, Go, Java, Python, or Node.js. Develop concurrent and multithreaded applications using systems programming principles. Analyze database engine source code, communication protocols, serialization formats, and packet structures. Design and troubleshoot networked applications using sockets and client-server architectures. Develop relational and graph database solutions, including SQL optimization and performance tuning. Support technologies such as PostgreSQL, Redis, Neo4j, Amazon S3, and Elasticsearch. Modernize existing services and develop Infrastructure as Code (IaC). Deploy and troubleshoot cloud-hosted applications and supporting infrastructure. Integrate identity services using OpenID Connect (OIDC), authentication, authorization, and Zero Trust principles. Maintain technical documentation, software designs, and operational procedures. Required Qualifications Active TS/SCI clearance with the ability to obtain a CI Polygraph. Bachelor's degree in Computer Science, Engineering, Information Technology, Mathematics, or a related quantitative discipline. Typically 10 years of professional software engineering experience. Previous Intelligence Community experience. Hands-on systems programming experience with C, C++, or Rust. Experience with operating-system interfaces, process management, concurrency, and multithreaded applications. Experience analyzing database internals, network protocols, or low-level software behavior. Strong SQL, relational database, and graph database knowledge. Experience with cloud infrastructure, automation, and identity integration using OIDC. Knowledge of Zero Trust Architecture and enterprise security controls. Experience with Agile, DevOps, or DevSecOps methodologies. Agile Developer or Certified Scrum Developer certification. CompTIA Security+ or higher cybersecurity certification. Preferred Qualifications Master's degree in a related technical discipline. Experience with PostgreSQL, Neo4j, and database engine internals. Terraform, Ansible, AWS GovCloud, Kubernetes, or Red Hat OpenShift. Experience with PingFederate, Keycloak, SailPoint, Okta, or similar identity platforms. Experience with PKI, cryptographic integrations, Hardware Security Modules, or PKCS . Familiarity with Trusted Data Format, Protocol Buffers, and modern cryptographic technologies. Work Location This position requires full-time work at a government facility in Charleston, SC or the Washington Metropolitan Area. Candidates in other locations may be considered. Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications
Job Description Job Description We are seeking a highly accomplished Subject Matter Expert (SME) Systems Engineer to serve as a Senior Digital Transformation Architect & Strategist. In this role, you will define, integrate, and modernize the technical architecture for a centralized enterprise IT systems data ecosystem. You will serve as a strategic technical advisor to executive leadership, bridging the gap between high-level vision and engineering execution. The ideal candidate will have extensive experience designing secure, scalable architectures that support advanced threat detection, real-time monitoring, automation, predictive analytics, and compliance strategies within complex multi-network Intelligence Community (IC) environments. Specifically, you will lead the architectural evolution and integration of enterprise platform standards including Splunk, ServiceNow, and AppDynamics to drive end-to-end visibility and operational excellence. Future & Integrated Enterprise Architecture: Drive the development, evolution, and alignment of the future-state and integrated technical architecture for critical enterprise platforms, specifically ensuring seamless interoperability between Splunk, ServiceNow, and AppDynamics. Enterprise Technical Architecture: Define and maintain the end-to-end technical architecture for a centralized IT systems data ecosystem, ensuring complete alignment with strategic modernization goals and federal IT mandates. Digital Transformation Leadership: Drive mission enablement for Cyber, IT, and Insight Operations through the deployment of an AI-driven ecosystem that optimizes resources for data-driven success. Strategic Facilitation: Lead and facilitate leadership offsites, multi-agency working groups, and strategic technical discussions to identify and mitigate infrastructure gaps, platform limitations, technical debt, and disconnected workflows. Systems Integration: Lead massive-scale systems integration efforts across disparate technical teams, ensuring seamless integration of Commercial Off-The-Shelf (COTS) and custom-built solutions. Data Governance & Integrity: Build and operationalize robust data governance, data classification, and access control policies across hybrid cloud and on-premise environments in compliance with ICD 503, ICD 504, and upcoming AI mandates (e.g., ICD 505). Security & Compliance Architecture: Architect secure network segmentations, zero-trust frameworks, and cross-domain solutions (CDS) within highly complex security enclaves. Ensure technical systems satisfy strict federal accreditation and assessment (A&A) standards. Technical Mentorship & Governance: Provide technical leadership, conduct comprehensive code/architecture reviews, promote DevSecOps cultures, and establish rigorous performance benchmarks for engineering teams. Program Advisory Support: Assist in managing program scope, schedules, milestones, technical dependencies, and risk mitigation strategies to optimize the return on investment (ROI) for critical technical solutions. Requirements Required Qualifications Experience: Minimum of 20+ years of technical experience in Systems Engineering, Enterprise Architecture, Systems Integration, and Digital Transformation. Minimum of 15+ years of dedicated experience supporting the Intelligence Community (IC) and/or Department of Defense (DoD). Education: Bachelor's Degree in Information Technology, Systems Engineering, Business and IT, or a related technical discipline (or equivalent combination of education and experience). Security Clearance: Must possess an active TS/SCI with Polygraph. Required Technical & Core Competencies Enterprise Monitoring & ITSM Integration: Deep architectural understanding and proven ability to support the development of integrated future-state architectures combining Splunk (enterprise logging/SIEM), ServiceNow (ITSM/ITOM), and AppDynamics (application performance monitoring) to deliver holistic operational observability. Architectural Frameworks: Proven expertise using enterprise architecture methodologies (e.g., JARM, Gartner Enterprise Architecture, FEAF) to manage complex system-of-systems configurations. AI/ML Strategy: Broad understanding of the notional AI stack, machine learning lifecycles, full lifecycle model management, and integrating massive enterprise datasets with machine learning tools. Cloud & Infrastructure: Deep familiarity with secure, scalable hybrid cloud engineering solutions (e.g., AWS, cloud-native architectures) and cross-domain communications. Security Standards: Expert-level knowledge of Risk Management Frameworks (RMF), A&A processes, system hardening, and IC directives (including ICD 503, ICD 504, and NIST 800-53 standards). Agile & DevSecOps Mindset: Demonstrated experience championing SecDevOps best practices (automated security testing, IaC, CI/CD pipelines) and working within or across Agile/Scrum delivery teams. Tools: Proficiency utilizing workflow tracking and documentation platforms like JIRA and Confluence to manage system requirements and backlogs. Communication: Exceptional ability to synthesize complex architectural designs and technical issues into high-impact briefings and customer-facing dashboard presentations for senior executive leadership.
11/09/2026
Full time
Job Description Job Description We are seeking a highly accomplished Subject Matter Expert (SME) Systems Engineer to serve as a Senior Digital Transformation Architect & Strategist. In this role, you will define, integrate, and modernize the technical architecture for a centralized enterprise IT systems data ecosystem. You will serve as a strategic technical advisor to executive leadership, bridging the gap between high-level vision and engineering execution. The ideal candidate will have extensive experience designing secure, scalable architectures that support advanced threat detection, real-time monitoring, automation, predictive analytics, and compliance strategies within complex multi-network Intelligence Community (IC) environments. Specifically, you will lead the architectural evolution and integration of enterprise platform standards including Splunk, ServiceNow, and AppDynamics to drive end-to-end visibility and operational excellence. Future & Integrated Enterprise Architecture: Drive the development, evolution, and alignment of the future-state and integrated technical architecture for critical enterprise platforms, specifically ensuring seamless interoperability between Splunk, ServiceNow, and AppDynamics. Enterprise Technical Architecture: Define and maintain the end-to-end technical architecture for a centralized IT systems data ecosystem, ensuring complete alignment with strategic modernization goals and federal IT mandates. Digital Transformation Leadership: Drive mission enablement for Cyber, IT, and Insight Operations through the deployment of an AI-driven ecosystem that optimizes resources for data-driven success. Strategic Facilitation: Lead and facilitate leadership offsites, multi-agency working groups, and strategic technical discussions to identify and mitigate infrastructure gaps, platform limitations, technical debt, and disconnected workflows. Systems Integration: Lead massive-scale systems integration efforts across disparate technical teams, ensuring seamless integration of Commercial Off-The-Shelf (COTS) and custom-built solutions. Data Governance & Integrity: Build and operationalize robust data governance, data classification, and access control policies across hybrid cloud and on-premise environments in compliance with ICD 503, ICD 504, and upcoming AI mandates (e.g., ICD 505). Security & Compliance Architecture: Architect secure network segmentations, zero-trust frameworks, and cross-domain solutions (CDS) within highly complex security enclaves. Ensure technical systems satisfy strict federal accreditation and assessment (A&A) standards. Technical Mentorship & Governance: Provide technical leadership, conduct comprehensive code/architecture reviews, promote DevSecOps cultures, and establish rigorous performance benchmarks for engineering teams. Program Advisory Support: Assist in managing program scope, schedules, milestones, technical dependencies, and risk mitigation strategies to optimize the return on investment (ROI) for critical technical solutions. Requirements Required Qualifications Experience: Minimum of 20+ years of technical experience in Systems Engineering, Enterprise Architecture, Systems Integration, and Digital Transformation. Minimum of 15+ years of dedicated experience supporting the Intelligence Community (IC) and/or Department of Defense (DoD). Education: Bachelor's Degree in Information Technology, Systems Engineering, Business and IT, or a related technical discipline (or equivalent combination of education and experience). Security Clearance: Must possess an active TS/SCI with Polygraph. Required Technical & Core Competencies Enterprise Monitoring & ITSM Integration: Deep architectural understanding and proven ability to support the development of integrated future-state architectures combining Splunk (enterprise logging/SIEM), ServiceNow (ITSM/ITOM), and AppDynamics (application performance monitoring) to deliver holistic operational observability. Architectural Frameworks: Proven expertise using enterprise architecture methodologies (e.g., JARM, Gartner Enterprise Architecture, FEAF) to manage complex system-of-systems configurations. AI/ML Strategy: Broad understanding of the notional AI stack, machine learning lifecycles, full lifecycle model management, and integrating massive enterprise datasets with machine learning tools. Cloud & Infrastructure: Deep familiarity with secure, scalable hybrid cloud engineering solutions (e.g., AWS, cloud-native architectures) and cross-domain communications. Security Standards: Expert-level knowledge of Risk Management Frameworks (RMF), A&A processes, system hardening, and IC directives (including ICD 503, ICD 504, and NIST 800-53 standards). Agile & DevSecOps Mindset: Demonstrated experience championing SecDevOps best practices (automated security testing, IaC, CI/CD pipelines) and working within or across Agile/Scrum delivery teams. Tools: Proficiency utilizing workflow tracking and documentation platforms like JIRA and Confluence to manage system requirements and backlogs. Communication: Exceptional ability to synthesize complex architectural designs and technical issues into high-impact briefings and customer-facing dashboard presentations for senior executive leadership.
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.
11/09/2026
Full time
Job Description Job Description Mainframe Logical Security Engineer Contract Duration: 6 Months NO BENEFITS Work Locations: Phoenix, AZ; Plano, TX; Charlotte, NC; Richmond, VA; Jacksonville, FL; Pennington, NJ; Chicago, IL Work Arrangement: Hybrid - 3 Days Onsite and 2 Days Work From Home Position Summary We are seeking an experienced Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role focuses on protecting enterprise systems and sensitive data by maintaining robust access controls, enforcing security policies, and ensuring compliance with applicable regulatory and organizational requirements. Key Responsibilities RACF Administration and Access Management Administer and maintain the RACF security environment across IBM z/OS systems. Create, modify, and revoke user IDs, groups, resource profiles, and dataset or subsystem access permissions. Implement and maintain least-privilege access controls for datasets, applications, and system resources. Manage access permissions for mainframe applications and subsystems, including CICS, DB2, IMS, and MQ. Security Controls and Compliance Configure and maintain security policies aligned with enterprise security standards. Conduct periodic access reviews, security audits, and compliance assessments. Support regulatory compliance requirements, including SOX, PCI, and HIPAA, where applicable. Implement data protection controls and access-monitoring mechanisms. Maintain security documentation and support internal and external audit activities. Security Monitoring and Incident Response Analyze security logs and reports, including SMF records, RACF reports, and SIEM alerts. Investigate access violations, unauthorized access attempts, and other security incidents. Troubleshoot and resolve authorization failures, RACF-related abends, and access issues. Identify potential security weaknesses and recommend appropriate corrective actions. Security Architecture and Integration Secure mainframe subsystems and integrations, including CICS, DB2, IMS, MQ, TCP/IP, and UNIX System Services (USS). Support integration with enterprise Identity and Access Management (IAM) solutions. Assist with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integration, where applicable. Define and maintain RACF classes, resource profiles, and security rules to protect system-wide resources. Encryption and Advanced Security Support digital certificates, TLS/SSL configurations, and ICSF cryptographic services. Ensure adherence to secure key management and encryption practices. Assist in implementing and maintaining security controls for sensitive data and communications. Required Qualifications Strong hands-on experience administering RACF security in IBM z/OS environments. In-depth knowledge of RACF profiles, classes, dataset security, and access control models. Experience managing mainframe user IDs, groups, permissions, and resource access. Experience analyzing SMF data and using security reporting and audit tools. Strong understanding of z/OS security concepts, system internals, and mainframe security controls. Ability to investigate and resolve access-related issues and security incidents. Preferred Qualifications Experience working in banking, financial services, or other highly regulated environments. Exposure to alternative mainframe security products such as ACF2 or Top Secret. Familiarity with SIEM tools such as Splunk or IBM QRadar. Experience with security automation using REXX or Python. Exposure to identity governance and enterprise IAM solutions. Experience supporting enterprise-wide security transformations or IAM integrations. Knowledge of Zero Trust principles and modern security frameworks. Experience supporting regulatory audits and security assessments in large enterprise environments.