49 jobs found

Job Description Job Description Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation and synthetic reality technologies. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI's technology actively supports operations worldwide. For more information, visit . Follow Shield AI on LinkedIn, X, Instagram, and YouTube. Job Description: The Senior IT Systems Engineer builds, improves, and sustains classified infrastructure supporting engineering work. The role covers compute, virtualization, storage, networking, identity, endpoints, and security tooling in standalone and air-gapped environments. This is a hands-on senior individual contributor position. Responsibilities include racking and imaging hardware, building and hardening systems, automating repeatable work, troubleshooting difficult issues, and helping establish technical standards across sites. The engineer must be comfortable working independently, shifting across infrastructure disciplines when needed, and owning work from design through testing, documentation, and support. The role sits between IT operations and accreditation. Systems must be secure, reliable, and ready for review by ISSMs and government assessors. Correct implementation the first time, backed by complete documentation and technical evidence, is an expected part of every build. What you'll do: Build and operate classified infrastructure Deploy, configure, and sustain Windows Server and Red Hat Enterprise Linux systems, virtualization clusters, enterprise storage, and core infrastructure services in standalone and air-gapped enclaves. Build and support VMware, Nutanix AHV/Prism, or similar virtualization environments. Nutanix experience is preferred. Support high-density compute for AI/ML, simulation, and engineering workloads, including GPU node provisioning, performance troubleshooting, capacity planning, and coordination with facilities on rack space, power, and cooling. Administer and support Active Directory, DNS, DHCP, Group Policy, PKI, certificate services, privileged access, and role-based access for isolated forests with no connection to corporate IT. Build and maintain golden images and hardened baselines for servers, workstations, virtual desktops, and supporting infrastructure. Manage patching, updates, software packages, and security content in disconnected environments through approved transfer and validation processes. Administer backup, recovery, and continuity capabilities. Perform scheduled restore testing and document results and corrective actions. Design, configure, and troubleshoot managed switching, VLANs, firewall rules, network segmentation, and approved network connections between facilities. Coordinate with network and security teams to maintain secure, supportable network standards. Automate and standardize Automate provisioning, configuration, patching, reporting, and compliance tasks using PowerShell, Ansible, Python, Terraform, or similar tools. Create repeatable build processes, system baselines, checklists, and runbooks so systems can be deployed consistently rather than built by hand each time. Improve existing processes by reducing manual steps, preventing common errors, and documenting effective methods for building and supporting systems. Apply and validate DISA STIGs and SRGs using SCAP, STIG Viewer, ACAS/Nessus, scripted remediation, and other approved tools. Maintain configuration-management records, as-built documentation, change records, and scan evidence so system configurations can be understood and defended later. Review technical changes before production implementation, with attention to security, availability, rollback planning, and operational impact. Support accreditation and security operations Work with ISSMs, ISSOs, security teams, and program stakeholders to implement NIST SP 800-53, JSIG, RMF, and program-specific technical controls. Provide technical documentation and evidence for authorization packages, continuous monitoring, assessments, and audits. Implement and maintain audit logging and forwarding, including Elastic or similar centralized logging and SIEM tools. Support vulnerability management through ACAS/Nessus scanning, findings triage, remediation planning, patching, and validation during approved maintenance windows. Help resolve technical POA&M items and document remediation steps, validation results, and remaining risks. Support approved media handling, file transfer, cross-domain processes, and contamination or spillage response alongside the security team. Support users and sites Act as a senior escalation point for classified IT issues that block engineering work or require deeper troubleshooting across multiple systems. Identify and correct root causes rather than relying on repeated fixes or workarounds. Support user-account, privileged-access, and workstation-access requests consistent with least privilege and separation-of-duties requirements. Support new facility and enclave stand-ups from rack layout and cabling through infrastructure deployment, user onboarding, and operational handoff. Mentor junior system administrators and site IT staff, review implementation work before production release, and help improve team standards. Work independently, manage competing priorities, communicate risks early, and bring practical solutions to the team. Required qualifications: Strong hands-on experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, PKI, and enterprise endpoint management. Experience administering Red Hat Enterprise Linux or similar enterprise Linux systems. Experience with VMware, Nutanix, Hyper-V, or similar enterprise virtualization platforms. Nutanix AHV/Prism experience is preferred. Experience with enterprise storage, backup/recovery, and capacity planning. Experience with managed switching, VLANs, firewall administration, network segmentation, and troubleshooting network connectivity. Experience with PowerShell and infrastructure automation. Experience with Ansible, Python, Terraform, or similar tools is a plus. Experience applying DISA STIGs, using SCAP/STIG Viewer, supporting ACAS/Nessus findings, and working in RMF, NIST SP 800-53, JSIG, or similarly regulated environments. Experience operating in disconnected, air-gapped, classified, or highly controlled environments. Ability to document work clearly, follow change control, validate results, and build systems that are easy for others to support. Ability to work independently in a fast-moving environment, shift between infrastructure disciplines when needed, and make sound technical decisions without requiring detailed direction. Preferred qualifications: Nutanix AHV, Prism Central, Files, Flow, or cluster lifecycle management. GPU server, AI/ML, simulation, VDI, or high-performance compute infrastructure. Elastic, Splunk, or other centralized logging and SIEM platforms. Disconnected WSUS, offline patching, software-repository management, or approved media-transfer workflows. Data-center buildouts, rack-and-stack, structured cabling, power/cooling coordination, and new-facility stand-ups. Relevant technical or security certifications, such as Security+, CISSP, RHCSA/RHCE, VMware VCP, Nutanix NCA/NCP, Microsoft certifications, or CCNA/CCNP. Full-time regular employee offer package: Pay within range listed + Bonus + Benefits + Equity Temporary employee offer package: Pay within range listed above + temporary benefits package (applicable after 60 days of employment) Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information. Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Job Description Description: Nemean Solutions, headquartered in Sierra Vista, AZ, is a certified SBA 8(a) Native Hawaiian Organization (NHO) and veteran-operated company providing advanced Military Intelligence, Enterprise and Cloud IT services, Cybersecurity, Special Operations Forces (SOF) Exercise and Training, and niche Program Support and Professional Services to Federal and State Agencies supporting the US Government Defense, Intelligence and Aerospace sectors. Job Overview: Nemean Solutions is seeking a Senior Network Engineer / FISMA Compliance Support professional to support the Privacy and Civil Liberties Oversight Board (PCLOB). The primary focus of this position is hands-on ownership of PCLOB's enterprise network environment and the network/security engineering responsibilities. The engineer will independently operate, maintain, secure, troubleshoot, and improve Cisco network and unified communications services. As a secondary responsibility, the position will support the FISMA readiness and continuous compliance activities, including NIST SP 800-53 control documentation, POA&M management, technical evidence, remediation, and Xacta 360 administration. The ideal candidate is first and foremost a senior network engineer who also understands federal FISMA/RMF compliance and can translate network configurations and remediation actions into auditable security-control evidence. Support Hours: Applicant shall be available during core work hours as established the Government customer. Essential Duties & Responsibilities: Enterprise Network Operations and Cisco Engineering - Primary Responsibility Serve as the primary technical owner for PCLOB enterprise network operations and maintenance, ensuring the continuous availability, performance, security, and reliability of production network services. Design, configure, administer, operate, maintain, and troubleshoot Cisco routing and switching infrastructure, including VLANs, subnetting, ACLs, TCP/IP, DNS, DHCP, routing protocols, IP addressing, and related network services. Independently resolve complex production incidents involving routing, switching, firewalls, VPNs, connectivity, name resolution, and IP services; perform root-cause analysis and implement sustainable corrective actions. Plan, implement, operate, and maintain network-security technologies and services, including firewalls, VPNs, IDS/IPS, network segmentation, secure remote access, vulnerability remediation, network monitoring, and security policy enforcement. Develop and execute network technology project plans, including Cisco Unified Communications Manager (CUCM)/Call Manager and enterprise VoIP capabilities, SIP, QoS, voice VLANs, voice gateways, and wireless/network modernization activities. Maintain highly available network services and support integrations with Windows Server, Hyper-V, Linux, server virtualization, Active Directory/identity and access services, Citrix, and related enterprise infrastructure. Maintain accurate physical/logical network diagrams, device inventories, configurations, change records, operating procedures, and troubleshooting documentation. Security Architecture and Engineering - Primary/Shared Responsibility Assess network and security architecture, identify gaps in the security stack, and develop practical roadmaps and implementation plans that improve capability, tune existing tools, reduce unnecessary overlap, and maintain reliable operations. Review IT security policies with PCLOB OCIO and provide technical solutions for enforcement through network/security architecture, configuration, access controls, monitoring, and engineering changes. Collaborate with PCLOB OCIO, system, cloud, cybersecurity, and security-operations personnel on security-engineering deployments and integrated projects; define milestones, completion dates, resource needs, testing, dependencies, and coordination requirements. Provide weekly project updates when requested, identify concerns that could affect milestones or completion dates, and drive assigned network/security engineering actions to closure. Provide Security Engineering SME reviews, technical analyses, recommendations, and decision-ready write-ups on an ad hoc basis; support security administrator questions and technical remediation activities. FISMA, NIST, and Xacta 360 Compliance Support - Secondary Responsibility Support Task 3 FISMA readiness and continuous compliance activities by applying the NIST Risk Management Framework (RMF) and NIST SP 800-53 Rev. 5 requirements to network/security controls, technical configurations, evidence, findings, and remediation. Use and maintain Xacta 360 to support security-control tracking, control implementation documentation, assessments, evidence repositories, Plans of Action and Milestones (POA&Ms), remediation milestones, technical validation, and ongoing compliance status. Support recurring SSP updates, control inheritance, annual FISMA pre-assessment preparation, baseline compliance evidence, annual submission data/metrics, corrective-action planning, and audit/assessment readiness; ensure network-related artifacts accurately reflect the production environment. Review STIG, vulnerability, configuration, and compliance findings; validate technical impact, implement or coordinate corrective actions, document closure evidence, and support compliance briefings, assessor requests, ATO/accreditation activities, and leadership reporting. Program Support and Customer Engagement Coordinate directly with PCLOB OCIO leadership, system administrators, cybersecurity personnel, and other stakeholders to clarify network and security requirements, communicate technical risk, and drive assigned actions to closure. Prepare concise network analyses, implementation plans, status updates, risk summaries, and decision-ready technical recommendations for Government and Nemean leadership. Participate in change-management reviews, technical exchanges, audit/assessment activities, incident-response exercises, and recurring status meetings as required. Maintain project milestones, risks, dependencies, action items, completion dates, and documentation for assigned network, security-engineering, and FISMA-support activities. Competencies: Excellent verbal and written communication skills. Excellent interpersonal and customer service skills. Excellent organizational skills and attention to detail. Excellent time management skills with a proven ability to meet deadlines. Ability to prioritize tasks and to delegate them when appropriate. Ability to function well in a high-paced and at times stressful environment. Requirements: Minimum Requirements/Education: Bachelor's degree in information technology or a related technical field, plus strong technical documentation, communication, organization, and customer-engagement skills. Seven or more years of hands-on enterprise network/security administration and engineering experience, including network design, installation, operations, maintenance, troubleshooting, security, and performance optimization. Three or more years of federal FISMA/RMF security-control validation and compliance experience, including NIST SP 800-53 controls, SSPs, POA&Ms, continuous monitoring, technical control evidence, vulnerability/configuration findings, remediation, annual assessment readiness, and hands-on Xacta/Xacta 360 experience. Current Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP) certification. CCNP is strongly preferred. Must have experience administering Cisco CUCM/Call Manager and enterprise VoIP technologies, including SIP, QoS, voice VLANs, and voice gateways. Demonstrated ability to independently own enterprise network operations and complex Cisco routing, switching, VLAN, firewall, VPN, DNS/DHCP, IP addressing, network monitoring, and connectivity troubleshooting in a production environment. Hands-on experience configuring, administering, and maintaining firewalls, VPNs, IDS/IPS, network segmentation, ACLs, secure remote-access solutions, network security devices, and vulnerability remediation. Hands-on experience with Windows operating systems, Windows Server/Hyper-V, and Linux, with the ability to support network dependencies across virtualized and identity/access environments. Security Requirement: An active TS / SCI security clearance. Preferred Requirements: CompTIA Network+ and/or Security+ certification. Advanced hands-on experience with Xacta 360 supporting authorization packages, control inheritance, assessments, POA&Ms, evidence management, remediation, and ongoing FISMA compliance. Certification in IT audit, internal controls, cybersecurity compliance, or a related field. Hands-on experience with Cisco ISE/NAC/802.1X, Active Directory/identity services, Citrix, NetScaler, Nutanix, Azure/cloud networking, next-generation firewalls, or related enterprise network/security technologies. Experience supporting STIG compliance, ATO/accreditation activities, independent assessments, secure federal enterprise environments, and configuration/change -management processes. The pay range listed represents a good-faith estimate, in accordance with pay transparency requirements, and may vary depending on the candidate's experience, education, and other job-related factors. What Nemean Solutions, LLC offers: Medical, Dental . click apply for full job details

Job Description Job Description Title: Information Systems Security Officer (ISSO) Location: Annapolis Junction, MD Type: Direct Hire Compensation: $200,000/year (salary) Schedule: 40 hours/week Clearance Required: Active TS/SCI with FSP Role Overview We're hiring an Information Systems Security Officer (ISSO) to support mission-critical, classified environments . In this role, you'll help ensure information systems stay compliant throughout the Risk Management Framework (RMF) lifecycle-supporting ATO packages, continuous monitoring, assessments, and audit readiness . You'll partner closely with technical teams and security stakeholders to drive secure, compliant system operations. What You'll Do (Key Responsibilities) Support the full RMF lifecycle for classified information systems Build and maintain security authorization packages and RMF documentation Coordinate and support Authority to Operate (ATO) efforts Perform/control security assessments , compliance reviews, and control validation Track vulnerabilities, findings, and remediation activities (POA&Ms, etc.) Support Continuous Monitoring (ConMon) and ongoing security activities Review scan results/configurations to ensure alignment with security requirements Work with system teams to implement/maintain required security controls Participate in audits, inspections, and cybersecurity compliance reviews Provide risk-based recommendations to improve security posture Required Qualifications (Must-Haves) Active TS/SCI with Polygraph Experience in ISSO / Information Assurance / cybersecurity compliance in classified environments Strong knowledge of RMF and the security authorization process (ATO) Familiarity with: NIST SP 800-53 (Rev 3 and/or Rev 5) NIST SP 800-37 Experience with compliance/configuration scanning and assessment workflows Strong communication skills (written + verbal) and comfort working cross-functionally Tools/Platforms (Experience With) Experience with RMF/cyber compliance tools such as: XACTA LATTE / ART BISCOTTI WATCHCAT STE (Experience with similar tools is also valuable.) Documentation You Should Be Comfortable With Hands-on experience developing/reviewing security documentation such as: SSP, POA&M, SAR, RAR CMP, CP, BIA SPFs / exceptions and related artifacts AARs and audit support documentation Preferred / Nice-to-Have Prior support of classified government systems Experience partnering with ISSMs, System Owners, Security Control Assessors, and Authorizing Officials Familiarity with vulnerability remediation and system administration security concepts Certifications like Security+ , CISSP , CAP , CASP+ , or CISM System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref:

Job Description Job Description This position is contingent on contract award and position availability Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America. RMC is seeking an Information Systems Security Officer (ISSO) to support the authorization and ongoing security of mission applications, cloud infrastructure, and enterprise core services. The ISSO will work with Government security personnel, software developers, and infrastructure engineers to maintain security documentation, assess risk, and ensure systems meet applicable Department of Defense and Intelligence Community requirements. This role requires someone who can connect security requirements to how systems are built and operated. Candidates should be comfortable reviewing technical evidence, investigating compliance gaps, and working with engineers to resolve findings as software, infrastructure, and system configurations change. What You'll Do: Support Risk Management Framework (RMF) activities to obtain and maintain Authority to Operate (ATO) for systems across applicable classification levels. Develop and maintain authorization documentation, including System Security Plans (SSPs), security control implementation statements, system boundary descriptions, and supporting evidence. Coordinate with system owners, Information System Security Managers (ISSMs), assessors, and engineering teams to prepare authorization packages and resolve assessment findings. Maintain Plans of Action and Milestones (POA&Ms), track remediation progress, and communicate unresolved risks and dependencies. Use the DISA Enterprise Mission Assurance Support Service (eMASS) to maintain authorization records, security control documentation, assessment evidence, and remediation status, as applicable. Review Assured Compliance Assessment Solution (ACAS) scan results, security configuration assessments, and application security testing reports; work with technical teams to prioritize and validate remediation. Assess the security impact of software releases, infrastructure changes, new integrations, and changes to the authorization boundary. Support continuous monitoring by maintaining current security evidence, reviewing control effectiveness, and reporting changes in system risk. Work with cloud and DevSecOps engineers to incorporate security requirements and evidence collection into development and deployment workflows. Review access controls, privileged access, audit logging, configuration baselines, and protection of sensitive data. Support security incident reporting, investigation, corrective actions, and updates to relevant documentation and procedures. Apply appropriate security overlays and support supply chain risk management activities. Prepare security status reports and brief Government stakeholders on authorization progress, findings, and remediation priorities. Requirements Bachelor's degree in a technical or managerial field and 5+ years of cybersecurity, engineering, T&E, or A&A experience; or a high school diploma/equivalent and more than 7 years of relevant experience. Active TS/SCI clearance with CI Polygraph. Prior Intelligence Community support experience. ISSO or comparable experience supporting RMF activities and system authorization packages. Proficiency with eMASS and ACAS. Experience documenting security controls, collecting assessment evidence, reviewing vulnerability and configuration findings, and tracking remediation. Knowledge of applicable Department of War and Intelligence Community security requirements and assessment processes. Understanding of system boundaries, data flows, access controls, audit logging, configuration management, and continuous monitoring. Ability to assess system-change risks and communicate them to technical and nontechnical stakeholders. Strong technical writing, organizational, and communication skills. Ability to meet applicable cybersecurity workforce requirements, including Full Security Control Assessor qualification if required. Desired Qualifications DoD 8140/8570 IAM Level II or III qualifications and relevant certifications, such as CISSP, CISM, or CAP/CGRC. IC authorization experience under ICD 503 and agency guidance. AWS/AWS GovCloud security assessment experience, including DoD Impact Level 5 environments. Familiarity with Kubernetes/OpenShift security, including workload isolation, access controls, image security, and logging. Experience using DevSecOps security testing and deployment evidence for assessments and continuous monitoring. Experience applying STIGs, validating configurations, and supporting security control assessments. Familiarity with ICAM, PKI, certificate management, encryption, and secrets management. Experience assessing Zero Trust controls across identities, devices, networks, applications, and data. Benefits At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees. RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package. Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.

Job Description Job Description The Role Spear AI is hiring a Senior Infrastructure Engineer to own deployment and authorization on our developer cloud for the undersea enterprise. It's an accredited platform for building, deploying, and operating mission software across unclassified and classified environments. You'll take commercial and partner software from first onboarding through hardened deployment and Authority to Operate, working directly with government security staff to compress timelines without cutting corners. Authorization speed is what we're measured on. This is a builder's role. You decide when to build, when to reuse, and when a problem doesn't need solving, and you leave behind tooling that makes the next deployment faster than the last. The result is real capability in mission users' hands in months, not years. About Spear AI Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation's security. As we expand, we're building a culture where innovation meets mission-critical work. We operate with a flat organizational structure that empowers every team member to make an impact, collaborate directly with leadership, and contribute to projects that matter. Whether you're joining our Hardware, Software, or Services division, you'll work alongside talented professionals who are committed to excellence and advancing the capabilities that keep our nation safe and secure. Spear AI builds sonobuoy sensors that are deployed into the water and collect edge data. You'll have an opportunity to work on real-world projects that directly impact warfighter capabilities and mission success. The Services Team. You'll sit with Spear AI's infrastructure engineers inside Services, our applied engineering and technical advisory arm. We embed with government customers to design, build, and operate platforms, pipelines, and software that take emerging capability from concept to fielded mission impact. What You'll Do • Design, build, and operate platform and tenant infrastructure across AWS GovCloud and classified cloud environments, defined entirely as code and treated as software: versioned, reviewed, and tested. • Onboard commercial and third-party software: containerize or package it, integrate it with platform identity (CAC/PIV, OIDC, SAML), logging, vulnerability scanning, and artifact services, and get it production-ready. • Drive each capability through the Risk Management Framework to ATO: define the authorization boundary, map inherited and system-specific controls, own the SSP and supporting artifacts, remediate findings, and manage POA&Ms. • Make and defend build, reuse, or buy decisions, with a bias toward the simplest thing that meets the security requirement. • Harden systems to DISA STIGs and DoD/IC baselines and run and respond to vulnerability scans and continuous monitoring. • Build CI/CD and DevSecOps pipelines that work inside air-gapped and restricted networks, including internal registries, mirrored package repositories, and controlled egress. • Serve as the technical point of contact for government ISSMs, ISSOs, assessors, and Authorizing Official staff. • Build the templates, tooling, and golden paths that make every new capability deploy and authorize faster than the last, and mentor less experienced engineers on secure deployment. What We're Looking For A builder, not a console operator. You've designed and run production platforms that other engineers depend on, and you can explain why you built what you built and what you chose not to build. That conversation matters more to us than a list of AWS services on a resume. Infrastructure-as-code repos, internal tooling, and deployment systems you created are what make a candidate stand out. Years are a guide, not a gate. If you've spent four to six years doing serious platform work at a defense tech company or fast-moving startup, we want to talk to you. Accreditation experience is a strong plus but not required. We'll pair you with Spear's accreditation support. Required Skills • Active TS/SCI required, with the ability to obtain a CI Polygraph. Active IC CI Poly is a plus. • DoD 8140 baseline certification (Security+ or higher) is required for privileged access; if you don't have it yet, you'll need to earn it shortly after starting. • 5+ years of hands-on platform, DevOps, or infrastructure engineering on production systems • Real code in Python, Go, or TypeScript, with version control and tests • Infrastructure as Code with the same discipline (Terraform, Pulumi, or similar) • CI/CD pipeline design • Deep working knowledge of containers and Kubernetes, including running them securely in restricted environments • Designing and operating AWS infrastructure: networking, IAM, and encryption boundaries (GovCloud is a plus) • Linux and networking fundamentals (DNS, TLS/PKI, load balancing, routing) and the ability to debug across all of them • Working knowledge of RMF, NIST SP 800-53, DISA STIGs, and vulnerability management • Translating security requirements into technical implementation and explaining it clearly to government security staff • Picking up new AI platforms and integrations quickly, including agentic AI tooling Preferred • Taking a system through RMF to ATO, IATT, or IATC in a DoD or IC environment, including eMASS or Xacta • Deploying commercial software into government-controlled cloud accounts (BYOC, multi-tenant, SCCA-compliant or broker-provisioned structures) • Air-gapped or cross-domain environments: mirrored repositories, controlled egress, cross domain solution integrations • Identity federation (Keycloak, Authentik, or similar) with CAC/PIV, OIDC, and SAML • DevSecOps tooling: SAST/DAST, container image scanning, SBOM generation, policy-as-code • Supporting AI/LLM workloads in government cloud, such as model serving in GovCloud or GPU-backed inference • Military or Intelligence Community experience Nice to haves • IaC & config: Terraform, Pulumi, CloudFormation, Ansible • Identity: Keycloak, Authentik, AWS IAM Identity Center • Security & compliance: eMASS, Xacta, ACAS/Nessus, SCAP/OpenSCAP, Trivy, Grype, SonarQube • DevSecOps & artifacts: GitLab CI/CD, GitHub Enterprise, Artifactory, Nexus, Harbor • Mission platforms as tenants: Palantir (Foundry, AIP), Anduril Lattice • AI serving & Agentic: Amazon Bedrock, vLLM, MCP servers, LangGraph, LiteLLM What we offer Unlimited PTO - Take the time you need to recharge and maintain work-life balance. Dedicated Sick Time - Your health and well-being come first. Comprehensive Health & Benefits - Medical, dental, and vision coverage to keep you and your family protected. 11 Paid Holidays - Enjoy time off throughout the year to celebrate and spend time with loved ones. Professional Development - Educational opportunities and resources to help you grow your skills and advance your career. Collaborative Environment - Work directly with leadership in our flat organizational structure, where your ideas and contributions matter. Mission-Driven Work - Contribute to projects that directly support national security and make a real-world impact. Growth Opportunities - Join us during an exciting expansion phase where you can help shape our future. Additional benefit opportunities when you choose Spear AI 401(k) with company match. Onsite / Remote / Flexible work arrangements or hybrid options (position dependent). Relocation assistance (position dependent). Referral bonuses. Performance bonuses. Life insurance and disability coverage. Technology home office setup stipend. Professional certification reimbursement (position dependent). Compensation We offer competitive compensation tailored to your experience, location, and the impact you'll make. We're committed to equitable pay and will share a range aligned to your level and geography during the hiring process. In accordance with state law, candidates in jurisdictions such as CA, CO, WA, NY, and others, where applicable, will be provided a good-faith salary range upon request and throughout the hiring process. This is a full-time, exempt position under the Fair Labor Standards Act (FLSA) and is not eligible for overtime pay. Compensation for this position is provided on a salaried basis and is not subject to reduction based on hours worked. At Spear AI, you'll find more than just a job; you'll join a mission-driven team where your work directly contributes to national security. Our flat organizational structure means your voice matters, your ideas reach leadership, and your impact is visible. As we grow, we're committed to building robust processes and infrastructure that support both our mission and our people. We value collaboration, continuous improvement, and the expertise each team member brings to the table. If you're looking for a place to grow professionally while working on projects that truly matter, we'd love to hear from you. Equal Opportunity Spear AI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. • Health insurance benefits • Equity grant for every new employee • Unlimited PTO and a supportive, low-ego environment . click apply for full job details

Job Description Job Description Benefits: 401(k) Paid time off Dental insurance Health insurance Vision insurance Information Systems Security Manager The Information Systems Security Manager will lead and support the systems, networks, hardware, software, user accounts, devices, security controls, and technology processes that enable BNS employees and field teams to perform their work effectively. The Information Systems Security Manager will serve as BNS's technical lead for establishing, securing, documenting, and maintaining the information systems used to process, store, or transmit Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The position will lead implementation and continuous operation of the technical safeguards necessary for BNS to achieve and maintain its required CMMC status and comply with NIST SP 800-171 and applicable DFARS cybersecurity requirements. This position will also play an important role in supporting the company's cybersecurity and compliance efforts, including leading the planning, implementation, documentation, assessment readiness, remediation, and continuous monitoring activities necessary for BNS to achieve and maintain its required CMMC Level 2 status. The successful candidate will be comfortable moving between strategic thinking and hands-on problem solving-whether that means troubleshooting a user's computer, managing Microsoft 365, addressing a network issue, coordinating with an outside vendor, improving cybersecurity controls, or helping prepare the organization for an audit. Key Responsibilities IT Operations & Infrastructure Oversee day-to-day IT operations across BNS offices, field personnel, and remote employees. Manage and maintain company networks, servers, workstations, laptops, mobile devices, printers, peripherals, and other technology assets. Support Microsoft 365, cloud applications, user accounts, email, collaboration tools, and other business-critical applications. Manage user onboarding, offboarding, access changes, equipment deployment, and technology provisioning. Monitor system performance, availability, backups, security alerts, and other key IT functions. Troubleshoot hardware, software, networking, connectivity, and access issues. Maintain accurate IT asset inventories and technology documentation. Coordinate technology deployments, upgrades, migrations, and lifecycle replacements. Establish and maintain appropriate backup, recovery, and business continuity practices. Cybersecurity & Compliance Help develop, implement, and maintain BNS cybersecurity policies, procedures, and technical controls. Support the organization's cybersecurity risk management program. Define, document, and maintain the CMMC assessment scope, including CUI data flows, system boundaries, network diagrams, asset inventories, external service providers, security-protection assets, and specialized assets. Establish and administer a secure CUI environment or enclave, including approved methods for receiving, processing, storing, transmitting, sharing, printing, and destroying CUI. Develop and maintain the System Security Plan, supporting policies and procedures, control implementation evidence, configuration baselines, and Plans of Action and Milestones. Conduct or coordinate NIST SP 800-171 self-assessments, gap assessments, control testing, remediation, and assessment preparation. Maintain evidence sufficient to demonstrate that each applicable security requirement is implemented and operating effectively-not merely documented. Coordinate with BNS leadership, legal/contracts personnel, managed service providers, cloud providers, Registered Practitioners, assessors, and C3PAOs. Manage security configuration, multifactor authentication, privileged access, endpoint protection, encryption, vulnerability scanning, patching, logging, audit-log retention, backups, incident response, and security awareness training. Evaluate IT and cloud vendors for CMMC, DFARS, data-residency, incident-reporting, and flow-down implications before introducing them into the CUI environment. Establish continuous-monitoring metrics and report compliance status, deficiencies, risks, and corrective actions to executive management. Support SPRS assessment submissions and annual affirmations while recognizing that formal affirmation is a senior-official responsibility.Support access control, authentication, endpoint security, encryption, patching, vulnerability management, logging, and incident response processes. Monitor and respond to security incidents and escalate significant issues appropriately. Assist with security assessments, audits, documentation, evidence collection, and remediation activities. Partner with leadership to identify technology and cybersecurity risks and recommend appropriate solutions. Help ensure technology practices align with company policies, contractual requirements, and applicable regulatory or customer requirements. IT Leadership & Team Supervision Supervise and provide direction to IT personnel and/or IT support resources. Establish priorities, assign work, and monitor completion of IT tasks and projects. Develop consistent IT support processes and service expectations. Coach and develop team members while maintaining accountability for performance. Serve as the escalation point for complex technical and user issues. Establish and maintain standards for troubleshooting, documentation, security, and customer service. Vendor & Technology Management Manage relationships with IT vendors, service providers, software providers, telecommunications providers, and technology partners. Evaluate technology solutions and make recommendations based on business requirements, security, scalability, and cost. Assist with IT budgeting, purchasing, licensing, renewals, and technology forecasting. Review vendor performance and ensure services meet BNS requirements. Help negotiate technology-related services and support agreements as appropriate. Business & Project Support Partner with BNS leadership and department managers to understand technology needs and business priorities. Support technology requirements associated with data center, network, field service, and critical infrastructure operations. Assist project teams with technology planning and deployment when IT support is required. Support remote and traveling employees with secure and reliable access to company systems. Help establish technology standards that can scale with BNS's continued growth. Participate in company-wide technology initiatives and process improvement efforts. Required Qualifications 5+ years of progressive IT experience, with demonstrated responsibility for IT infrastructure, systems, networking, or cybersecurity. Previous experience supervising an IT team, IT support function, or technical resources. Strong working knowledge of: Microsoft 365 Windows environments Active Directory / Entra ID Networking fundamentals, including TCP/IP, DNS, DHCP, VPN, and firewalls Endpoint management and security User and access management Hardware and software deployment Backup and recovery Cloud-based applications and services Strong troubleshooting and problem-solving skills. Ability to communicate technical concepts clearly to both technical and non-technical employees. Ability to prioritize multiple competing IT needs in a fast-paced environment. Experience managing vendors and outside technology providers. Strong documentation and organizational skills. Ability to maintain confidentiality and exercise sound judgment when handling sensitive information. Preferred Qualifications & Experience Experience establishing or administering an FCI/CUI environment. Working knowledge of the NIST Cybersecurity Framework and demonstrated experience implementing the security requirements of NIST SP 800-171 Revision 2. Experience developing and maintaining an SSP, POA&M, assessment scope, asset inventory, network diagrams, and objective evidence. Experience preparing for or participating in a NIST SP 800-171 or CMMC assessment. Working knowledge of DFARS , -7019, -7020, and -7021. Experience with Microsoft 365 GCC/GCC High or another appropriately configured government-contracting cloud environment, if relevant to BNS's intended architecture. Demonstrated administration of MFA, least privilege, privileged accounts, EDR, SIEM/logging, vulnerability management, encryption, mobile-device management, and secure remote access. Experience supporting government contractors, defense contractors, or other regulated environments. Experience with endpoint detection and response (EDR), SIEM, vulnerability management, or security monitoring tools. Experience with Microsoft Intune, Defender, Entra ID, or related Microsoft security technologies. Experience with network security, firewalls, VLANs, VPNs, and wireless infrastructure . click apply for full job details

Job Description Job Description RiVidium Inc. is seeking a Security Control Assessor who conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls (as defined in NIST 800-37). TASKS: Manage and approve Accreditation Packages (e.g., ISO/IEC 15026-2). Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks. Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network. Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations. Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers). Establish acceptable limits for the software application, network, or system. Manage Accreditation Packages (e.g., ISO/IEC 15026-2). Perform security reviews, identify gaps in security architecture, and develop a security risk management plan. Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy. Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change. Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials). Verify and update security documentation reflecting the application/system security design features. Participate in Risk Governance process to provide security risks, mitigations, and input on other technical risk. Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc. Assure successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedures that are consistent with the organization's mission and goals. Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment. Ensure that security design and cybersecurity development activities are properly documented (providing a functional description of security implementation) and updated as necessary. Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs). Ensure that all acquisitions, procurements, and outsourcing efforts address information security requirements consistent with organization goals. Assess the effectiveness of security controls. Assess all the configuration management (change configuration/release management) processes. ABILITIES: Ability to identify systemic security issues based on the analysis of vulnerability and configuration data. Ability to answer questions in a clear and concise manner. Ability to ask clarifying questions. Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means. Ability to communicate effectively when writing.A0015: Ability to conduct vulnerability scans and recognize vulnerabilities in security systems.A0016: Ability to facilitate small group discussions.A0018: Ability to prepare and present briefings. Ability to produce technical documentation. Ability to design valid and reliable assessments. Ability to analyze test data. Ability to collect, verify, and validate test data. Ability to dissect a problem and examine the interrelationships between data that may appear unrelated. Ability to identify basic common coding flaws at a high level. Ability to translate data and test results into evaluative conclusions. Ability to ensure security practices are followed throughout the acquisition process. Ability to apply collaborative skills and strategies. Ability to apply critical reading/thinking skills. Ability to effectively collaborate via virtual teams. Ability to evaluate information for reliability, validity, and relevance. Ability to evaluate, analyze, and synthesize large quantities of data (which may be fragmented and contradictory) into high quality, fused targeting/intelligence products. Requirements: Bachelor degree or higher from an accredited college or university. Prefer an accredited Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field. OR IAT/IAM level 2 certification

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 5+ years of relevant Cyber experience 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description ProSync is seeking passionate Information System Security Specialist II to help provide mid level cybersecurity support for Navy information systems, networks, and mission environments. This role assists in implementing, maintaining, and monitoring security controls in accordance with DoD and federal cybersecurity policies. ProSync Technology Group, LLC (ProSync) is an award-winning, SDVOSB Defense Contracting company with a strong military heritage and a record of excellence in supporting the Department of Defense and the Intelligence Community. If you have prior military service or government contracting experience, are proud to serve and support our nation, and want to help support ProSync's mission to "Define and Redefine the State of Possible," please apply today! RESPONSIBILITIES The Information System Security Specialist is responsible for supporting all aspects of a Program Information Assurance (IA) processes tailored to include minimum qualification standards, fundamental awareness and familiarity to demonstrated competency with specific experience in Cyber Security, Engineering, Test & Evaluation, (T&E) and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process. The specialist should demonstrate a working knowledge of the Risk Management Framework (RMF) process and/or include prior experience with the Defense Information Assurance & Certification Accreditation Process (DIACAP). Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents purposed for compliance with Authority to Operate (ATO) requirements. The specialist is expected to evaluate security solutions to ensure they meet security requirements for processing up to classified information, and supervise and/or maintain the operational security posture for an information system or program. Support the development, documentation, and maintenance of system security plans, procedures, and authorization artifacts. Assist in implementing security controls and ensuring compliance with applicable cybersecurity frameworks (e.g., RMF, NIST, DoD directives). Conduct routine security assessments, vulnerability scans, and configuration checks to identify and report security risks. Support incident response activities, including evidence collection, initial triage, and coordination with senior cybersecurity personnel. Maintain awareness of system configurations, user access requirements, and security posture changes. Assist in preparing documentation for system authorization, continuous monitoring, and audit readiness. Provide user support on security procedures, access requirements, and proper handling of sensitive information. Requirements A minimum of 2 years of practical experience in a Cybersecurity, Engineering, T&E or A&A (formerly C&A) related field. Must have experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS) A minimum Top Secret security clearance or higher with the ability to obtain a Top Secret w/ SCI is required to be considered for this position. EDUCATIONAL REQUIREMENTS A High school diploma or HS equivalency certificate is acceptable. CERTIFICATION REQUIREMENTS May be required to hold an Interim Security Control Assessor qualification. Benefits Join PROSYNC and enjoy our great benefits! Compensation We offer sign on bonuses! We also offer bonuses that are awarded quarterly to our employees and our compensation rates are highly competitive. Health & Retirement We offer a comprehensive Health Benefits package and 401K retirement plan so you can take care of yourself and your family, now and in the future. Other health-related benefits include an employee assistance program for those difficult times or when you need to take care of your mental health. Education Individual growth is a priority at ProSync. Employees are encouraged to take advantage of our company-sponsored continuing education program so they can get their degree or that next certification they need to propel them to the next level. Work/Life Balance A healthy work/life balance is essential for building and executing your work effectively at ProSync, but it's also necessary to allow you the room to pursue everything else you want to develop in your personal life. We offer generous Paid Time Off and 11 paid holidays a year. ProSync also provides flexible work options that work with your schedule and lifestyle.

Job Description Job Description ProSync is seeking passionate Information System Security Specialist III to help provide mid level cybersecurity support for Navy information systems, networks, and mission environments. This role assists in implementing, maintaining, and monitoring security controls in accordance with DoD and federal cybersecurity policies. ProSync Technology Group, LLC (ProSync) is an award-winning, SDVOSB Defense Contracting company with a strong military heritage and a record of excellence in supporting the Department of Defense and the Intelligence Community. If you have prior military service or government contracting experience, are proud to serve and support our nation, and want to help support ProSync's mission to "Define and Redefine the State of Possible," please apply today! RESPONSIBILITIES The Information System Security Specialist is responsible for supporting all aspects of a Program Information Assurance (IA) processes tailored to include minimum qualification standards, fundamental awareness and familiarity to demonstrated competency with specific experience in Cyber Security, Engineering, Test & Evaluation, (T&E) and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process. The specialist should demonstrate a working knowledge of the Risk Management Framework (RMF) process and/or include prior experience with the Defense Information Assurance & Certification Accreditation Process (DIACAP). Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents purposed for compliance with Authority to Operate (ATO) requirements. The specialist is expected to evaluate security solutions to ensure they meet security requirements for processing up to classified information, and supervise and/or maintain the operational security posture for an information system or program. Support the development, documentation, and maintenance of system security plans, procedures, and authorization artifacts. Assist in implementing security controls and ensuring compliance with applicable cybersecurity frameworks (e.g., RMF, NIST, DoD directives). Conduct routine security assessments, vulnerability scans, and configuration checks to identify and report security risks. Support incident response activities, including evidence collection, initial triage, and coordination with senior cybersecurity personnel. Maintain awareness of system configurations, user access requirements, and security posture changes. Assist in preparing documentation for system authorization, continuous monitoring, and audit readiness. Provide user support on security procedures, access requirements, and proper handling of sensitive information. Requirements A minimum of 5 years of practical experience in a Cybersecurity, Engineering, T&E or A&A (formerly C&A) related field. Must have experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS) A minimum Top Secret security clearance or higher with the ability to obtain a Top Secret w/ SCI is required to be considered for this position. EDUCATIONAL REQUIREMENTS A college degree in a technical or managerial related discipline is preferred. Note: a high school diploma or high school equivalency certificate is acceptable with 2 additional years of practical experience. CERTIFICATION REQUIREMENTS May be required to hold an Interim Security Control Assessor qualification. Benefits Join PROSYNC and enjoy our great benefits! Compensation We offer sign on bonuses! We also offer bonuses that are awarded quarterly to our employees and our compensation rates are highly competitive. Health & Retirement We offer a comprehensive Health Benefits package and 401K retirement plan so you can take care of yourself and your family, now and in the future. Other health-related benefits include an employee assistance program for those difficult times or when you need to take care of your mental health. Education Individual growth is a priority at ProSync. Employees are encouraged to take advantage of our company-sponsored continuing education program so they can get their degree or that next certification they need to propel them to the next level. Work/Life Balance A healthy work/life balance is essential for building and executing your work effectively at ProSync, but it's also necessary to allow you the room to pursue everything else you want to develop in your personal life. We offer generous Paid Time Off and 11 paid holidays a year. ProSync also provides flexible work options that work with your schedule and lifestyle.

Job Description Job Description Cloud Security Architect - IL4 / Enterprise Integration (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is the Washington, DC metropolitan area. Candidates may also be based near Buckley, Patrick, Peterson, or Schriever Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 AND FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. About the client Our client is a Super Intelligence-first mission technology company and Original Equipment Manufacturer (OEM) built to generate Decision Advantage for missions of consequence. Through their Team of Teams model, they integrate their people, OEMs, subcontractors, mission experts, commercial technology, and proprietary capabilities to make advanced products operationally ready for the Department of War, Intelligence Community, and broader U.S. Government.

Job Description Job Description Cloud Security Architect - IL4 / Enterprise Integration (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is the Washington, DC metropolitan area. Candidates may also be based near Buckley, Patrick, Peterson, or Schriever Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 AND FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. About the client Our client is a Super Intelligence-first mission technology company and Original Equipment Manufacturer (OEM) built to generate Decision Advantage for missions of consequence. Through their Team of Teams model, they integrate their people, OEMs, subcontractors, mission experts, commercial technology, and proprietary capabilities to make advanced products operationally ready for the Department of War, Intelligence Community, and broader U.S. Government.

Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.

Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.

Job Description Job Description Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent. Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, and Bedford, IN, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team. Barbaricum is seeking an Information System Security Specialist to directly support the anticipated Naval Surface Warfare Center (NSWC) Crane Division, Model Based Engineering Assessment Division (Code MXM). Code MXM's mission is mission engineering analysis and assessment of complex Naval, DoD, and joint kill chains - with a specialized focus on Electromagnetic Spectrum Operations (EMSO) enabled analysis. As a Information System Security Specialist, you will support the information system security posture of Code MXM's environments - performing Assessment and Authorization (A&A, formerly C&A) activities and applying Information Assurance tools to keep systems compliant and authorized to operate in support of EMSO mission engineering and test. You will work in a collaborative Government/contractor environment across cybersecurity, engineering, and test & evaluation activities. KEY RESPONSIBILITIES Perform Assessment and Authorization (A&A, formerly C&A) activities in support of information system security for the program. Apply Information Assurance tools - including DISA Enterprise Mission Assurance Support Service (eMASS) and the Assured Compliance Assessment Solution (ACAS) - to support security control assessment, compliance scanning, and documentation. Support cybersecurity, engineering, and test & evaluation (T&E) activities as they relate to information system security. Support security control assessment activities, up to and including Full Security Control Assessor functions where qualified and required. REQUIRED QUALIFICATIONS Active DoD SECRET clearance (minimum); U.S. citizenship required. College degree in a technical or managerial related discipline (a high school diploma or HS equivalency certificate is acceptable under the additional-experience path defined below). With a college degree: greater than five (5) years of practical experience in a Cybersecurity, Engineering, T&E, or A&A (formerly C&A) related field. Without a college degree: greater than seven (7) years of practical experience in a Cybersecurity, Engineering, T&E, or A&A (formerly C&A) related field. Experience working with Information Assurance tools such as DISA eMASS and ACAS. DESIRED QUALIFICATIONS May be required to hold a Full Security Control Assessor qualification. EEO Commitment All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Must have a minimum of a current DoD Secret Clearance with the ability to obtain a DoD Top Secret clearance with SCI eligibility. A current DoD Top Secret clearance with SCI eligibility strongly preferred. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description SECURITY CLEARANCE REQUIREMENT: TS, WITH SCI ELIGIBILITY POSITION REQUIRES US CITIZENSHIP Position Title: Security Control Assessor (SCA) II Location: Peterson SFB, CO Position Description: The SCA is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities. Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility. We are seeking an Security Control Assessor (SCA) II to carry out the following duties and responsibilities: Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG) Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR Evaluate security assessment documentation and provide written recommendations for security authorization to the Government Discuss recommendation for authorization and submit the security authorization package to the AO/DAO Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate. Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policy Assist the Government compliance inspections Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC) Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries Evaluate the effectiveness and implementation of Continuous Monitoring Plans Represent the customer on inspection teams Qualifications: Required: 7 - 9 years related experience Bachelor's degree in a related discipline or equivalent experience (4 years) Minimum of four (4) years' experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties Prior performance in the role of ISSO, ISSM, SCA Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Manager Level II Must be able to regularly lift 50lbs Security Clearance: TS, with SCI eligibility Eligibility for access to Special Access Program Information Willingness to submit to a Counterintelligence polygraph Employee Benefits: Competitive salary for well qualified applicants 401(k) plan Annual performance bonus Certification and advanced degree attainment bonuses Student Loan / Tuition reimbursement Health Care Insurance (medical, dental, vision) Up to four weeks of paid vacation 11 Federal Holidays, and 3 Floating Holidays Team bonding events RedTrace Technologies is an EOE employer Powered by JazzHR 9XbYYqgKb5

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Independently assess security control deficiencies and residual risks, evaluate alternative corrective actions, and recommend risk-based remediation priorities. Advise the Authorizing Official and Government cybersecurity stakeholders on the security risks and operational implications of system changes, exception requests, and authorization decisions. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Active DoD Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. Work Environment and Physical Demand: Must be able to sit at a desk throughout the day and be able to visit customers within their office on a daily basis. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description Overview Security Control Assessor Franconia, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! Chenega Systems (CS) provides federal agencies empowered solutions in Cybersecurity and Data Visualization. Our Subject Matter Experts offer decades of experience working in the federal marketplace and the data visualization environment. The Security Control Assessor is responsible for supporting A&A or other IA/CND Compliance and Auditing processes and inspections for all enterprise systems and networks, ensuring validity and accuracy review of all associated documentation. Responsibilities Lead and perform compliance reviews of computer security plans, perform risk assessments, and validate and perform security test evaluations and audits. Analyze and define security requirements for information protection for enterprise systems and networks. Assist in the development of security policies. Analyze the sensitivity of the information and perform vulnerability and risk assessments based on defined sensitivity and information flow. Responsible for auditing the most complex new and existing information systems applications to ensure that appropriate controls exist, that processing is efficient and accurate, and that information systems procedures are compliant with corporate standards. Other duties as assigned Qualifications Bachelor's degree in computer science, Information Security, or a related field; A master's Degree in a related field is preferred. 10+ years of experience in protected information environments (i.e., SIPR, SAP, JWICS, etc.) Professionally certified as IAM III is required Active TS/SCI clearance Successfully pass background and drug screening Preferred Qualifications: ISC(2) CISSP Current knowledge of cross-domain solutions (CDS) Current knowledge of cloud-computing technologies and security as they relate to Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS) Knowledge, Skills and Abilities: Knowledge of and experience with ICD 503 and the government's assessment and authorization process Experience working within eMASS Thorough knowledge of information security principles, practices, and technologies Familiarity with security frameworks and regulations such as NIST, FISMA, and HIPAA. Excellent problem-solving and critical-thinking skills May be required to travel up to 25% of the time on an annual basis in support of Army SCI, CDS, A&A How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook -