Job Description Senior Network Engineer - Cloud & Infrastructure Overview Yoh is seeking a Senior Network Engineer to support a mission-critical enterprise and development infrastructure environment. This role will design, deploy, maintain, and secure network systems across data centers, on-premises locations, remote offices, and public cloud environments. The ideal candidate will have strong experience with routing, switching, firewalls, hybrid cloud connectivity, network automation, and enterprise security infrastructure. Location: San Mateo or surrounding San Francisco Bay Area Job Type: Contract Work Arrangement: Hybrid/onsite, as required Estimated Compensation: $80-$95/hour, depending on experience Responsibilities Network Engineering Design, architect, deploy, and maintain routing, switching, WLAN, and firewall infrastructure across data centers, corporate offices, remote sites, and cloud environments. Support public cloud networking in AWS and Azure, including secure connectivity solutions such as ExpressRoute, Transit Gateway, Cloud WAN, and Azure Virtual WAN. Deploy and manage WAN and VPN connectivity to ensure secure and reliable access for enterprise and mission-critical environments. Develop and apply network automation to streamline provisioning, monitoring, configuration management, and operational processes. Partner with cloud, platform, security, and infrastructure teams to develop standardized network architectures. Recommend and implement scalable, automated approaches to network operations and vulnerability remediation. Participate in Agile delivery cycles while managing assigned network projects and deliverables. Conduct network capacity planning and provide recommendations for growth, resiliency, and optimization. Operations and Support Plan and execute network and firewall changes in accordance with change-management and security-governance procedures. Monitor, analyze, and improve network performance, availability, resiliency, and security. Provide advanced troubleshooting for network hardware, software, connectivity, and application-related issues. Configure and maintain secure connectivity services, including VPN, ZTNA, HTTPS, and SFTP. Create and maintain accurate operational, configuration, and network documentation. Mentor operational teams on network processes, procedures, and troubleshooting practices. Engage vendors and strategic partners for escalated troubleshooting, lifecycle planning, and technology evaluations. Participate in an on-call rotation and scheduled maintenance activities. Maintenance and Security Lead or support network upgrades, patching, and maintenance activities within defined maintenance windows. Maintain network device software, hardware, and license compliance. Identify and remediate network security vulnerabilities in coordination with IT security teams. Support network segmentation, access control, firewall policy enforcement, and secure connectivity initiatives. Required Qualifications Six or more years of experience supporting and administering complex network systems in production environments. Strong expertise in network routing, switching, and security architecture. Experience with at least one network operating system, such as NX-OS, JunOS, or Arista EOS. Experience with at least one network security operating system, such as PAN-OS or FortiOS. Experience with network automation and infrastructure-as-code practices using tools such as Terraform, Ansible, or Python. Strong understanding of firewall management, network segmentation, VPN technologies, and secure remote access. Experience building and managing scalable hybrid infrastructure connectivity between on-premises systems and cloud networks. Excellent analytical, organizational, communication, and troubleshooting skills. Ability to communicate effectively with both technical and non-technical stakeholders. Proven ability to work independently and deliver results in a structured, process-driven environment. Bachelor's degree in a technical discipline, or six or more years of relevant experience combined with a professional certification such as CCNP, JNCIS, VCP-NV, or equivalent. Preferred Qualifications Experience with Juniper and Palo Alto networking solutions. Familiarity with centralized firewall-management platforms, including Panorama. Experience with WLAN technologies and wireless authentication, including 802.1X and RADIUS. Experience with network-access control solutions and network-access policy enforcement. Experience with ZTNA or SASE solutions, such as Prisma Access, Zscaler, or Cato. Working knowledge of virtualization or operating-system administration, including VMware, Windows, or Linux. Demonstrated project-management and technical leadership experience. Ability to coach peers and present technical information to non-technical stakeholders. Collaborative, solution-oriented approach in a fast-paced, change-controlled environment. Additional Requirements Must be able to work in the San Francisco Bay Area and report onsite as required. Must be comfortable participating in scheduled maintenance activities and an on-call rotation. Must comply with all applicable workplace, security, confidentiality, and access requirements. Employment is contingent upon successful completion of a background check conducted after a conditional offer, in accordance with applicable federal, state, and local law. Estimated Min Rate : $66.50 Estimated Max Rate : $95.00 What's In It for You? We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh's network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh's extensive talent community that will provide you with access to Yoh's vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include: Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week) Health Savings Account (HSA) (for employees working 20+ hours per week) Life & Disability Insurance (for employees working 20+ hours per week) MetLife Voluntary Benefits Employee Assistance Program (EAP) 401K Retirement Savings Plan Direct Deposit & weekly epayroll Referral Bonus Programs Certification and training opportunities Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply. Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Visit -with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process. For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh's hiring clients' preferences. To learn more about Yoh's privacy practices, please see our Candidate Privacy Notice: -notice Stay Safe During Your Job Search Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.
11/14/2026
Full time
Job Description Senior Network Engineer - Cloud & Infrastructure Overview Yoh is seeking a Senior Network Engineer to support a mission-critical enterprise and development infrastructure environment. This role will design, deploy, maintain, and secure network systems across data centers, on-premises locations, remote offices, and public cloud environments. The ideal candidate will have strong experience with routing, switching, firewalls, hybrid cloud connectivity, network automation, and enterprise security infrastructure. Location: San Mateo or surrounding San Francisco Bay Area Job Type: Contract Work Arrangement: Hybrid/onsite, as required Estimated Compensation: $80-$95/hour, depending on experience Responsibilities Network Engineering Design, architect, deploy, and maintain routing, switching, WLAN, and firewall infrastructure across data centers, corporate offices, remote sites, and cloud environments. Support public cloud networking in AWS and Azure, including secure connectivity solutions such as ExpressRoute, Transit Gateway, Cloud WAN, and Azure Virtual WAN. Deploy and manage WAN and VPN connectivity to ensure secure and reliable access for enterprise and mission-critical environments. Develop and apply network automation to streamline provisioning, monitoring, configuration management, and operational processes. Partner with cloud, platform, security, and infrastructure teams to develop standardized network architectures. Recommend and implement scalable, automated approaches to network operations and vulnerability remediation. Participate in Agile delivery cycles while managing assigned network projects and deliverables. Conduct network capacity planning and provide recommendations for growth, resiliency, and optimization. Operations and Support Plan and execute network and firewall changes in accordance with change-management and security-governance procedures. Monitor, analyze, and improve network performance, availability, resiliency, and security. Provide advanced troubleshooting for network hardware, software, connectivity, and application-related issues. Configure and maintain secure connectivity services, including VPN, ZTNA, HTTPS, and SFTP. Create and maintain accurate operational, configuration, and network documentation. Mentor operational teams on network processes, procedures, and troubleshooting practices. Engage vendors and strategic partners for escalated troubleshooting, lifecycle planning, and technology evaluations. Participate in an on-call rotation and scheduled maintenance activities. Maintenance and Security Lead or support network upgrades, patching, and maintenance activities within defined maintenance windows. Maintain network device software, hardware, and license compliance. Identify and remediate network security vulnerabilities in coordination with IT security teams. Support network segmentation, access control, firewall policy enforcement, and secure connectivity initiatives. Required Qualifications Six or more years of experience supporting and administering complex network systems in production environments. Strong expertise in network routing, switching, and security architecture. Experience with at least one network operating system, such as NX-OS, JunOS, or Arista EOS. Experience with at least one network security operating system, such as PAN-OS or FortiOS. Experience with network automation and infrastructure-as-code practices using tools such as Terraform, Ansible, or Python. Strong understanding of firewall management, network segmentation, VPN technologies, and secure remote access. Experience building and managing scalable hybrid infrastructure connectivity between on-premises systems and cloud networks. Excellent analytical, organizational, communication, and troubleshooting skills. Ability to communicate effectively with both technical and non-technical stakeholders. Proven ability to work independently and deliver results in a structured, process-driven environment. Bachelor's degree in a technical discipline, or six or more years of relevant experience combined with a professional certification such as CCNP, JNCIS, VCP-NV, or equivalent. Preferred Qualifications Experience with Juniper and Palo Alto networking solutions. Familiarity with centralized firewall-management platforms, including Panorama. Experience with WLAN technologies and wireless authentication, including 802.1X and RADIUS. Experience with network-access control solutions and network-access policy enforcement. Experience with ZTNA or SASE solutions, such as Prisma Access, Zscaler, or Cato. Working knowledge of virtualization or operating-system administration, including VMware, Windows, or Linux. Demonstrated project-management and technical leadership experience. Ability to coach peers and present technical information to non-technical stakeholders. Collaborative, solution-oriented approach in a fast-paced, change-controlled environment. Additional Requirements Must be able to work in the San Francisco Bay Area and report onsite as required. Must be comfortable participating in scheduled maintenance activities and an on-call rotation. Must comply with all applicable workplace, security, confidentiality, and access requirements. Employment is contingent upon successful completion of a background check conducted after a conditional offer, in accordance with applicable federal, state, and local law. Estimated Min Rate : $66.50 Estimated Max Rate : $95.00 What's In It for You? We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh's network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh's extensive talent community that will provide you with access to Yoh's vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include: Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week) Health Savings Account (HSA) (for employees working 20+ hours per week) Life & Disability Insurance (for employees working 20+ hours per week) MetLife Voluntary Benefits Employee Assistance Program (EAP) 401K Retirement Savings Plan Direct Deposit & weekly epayroll Referral Bonus Programs Certification and training opportunities Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply. Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Visit -with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process. For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh's hiring clients' preferences. To learn more about Yoh's privacy practices, please see our Candidate Privacy Notice: -notice Stay Safe During Your Job Search Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
10/02/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.
09/30/2026
Full time
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.
Job Description Job Description 4. Scope of Servies The Florida Department of Transportation, Office of Information Technology (OIT) - Integration Services is in search of a Senior Network Engineer to play a key role in assisting the Office of Information Technology in the establishment of new integration methods and standards, along with implementing system integrations, according to those established methods and standards. Duties and Responsibilities will include but are not limited to: 1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Checkpoint and Global Protect VPNs. 2. Firewall deployments, rule migrations, firewall administration and converting existing rule based policies onto new platforms. 3. Works with critical core network infrastructure devices like Next Gen Firewall, VPNs, log collectors and monitors which play a crucial role in security for our IT environment. 4. Works with cloud network infrastructure to configure firewall, security policies and monitor network traffic. 5. Develop and maintain documentation following NIST guidelines. 6. Project Manager; 7. Data Administration; 5 Education Bachelor's Degree in Computer Science, Information Systems or other related field. Or equivalent work experience. Preferred Certifications (PCNSE, CISSP, CCNP, CCIE) 6. Experience 1. Typically have 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration 2. Three to five years of experience with information security tools based on NIST standards. 3. Requires knowledge of security issues, techniques, and implications across all existing computer platforms. Preference given for experience with NGFW Palo Alto or Checkpoint security products. 4. Experience using schematic diagramming tools to map infrastructure layouts. 7 Primary Job Duties/ Tasks Senior Network Engineer - Job Duties 1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and Web-based services. Designs and maintains secure network architectures, segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other security controls. 2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation. Ensures security practices align with organizational requirements, industry standards, and applicable regulatory requirements. 3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments. Prepares executive-level status reports, risk assessments, security metrics, and recommendations addressing vulnerabilities, emerging threats, security incidents, and operational risks. 4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations. Administers and monitors security profiles and access controls, reviews security alerts and violation reports, investigates security exceptions, and coordinates remediation activities. Maintains comprehensive documentation of security controls, configurations, incidents, and corrective actions. 5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency. Leads technical evaluations, proof-of-concept activities, product assessments, and implementation recommendations for enterprise networking and cybersecurity solutions. 6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues. Troubleshoots escalated network and security incidents, provides technical guidance to infrastructure teams, and educates IT and business personnel on security policies, secure configurations, access requirements, and risk mitigation practices. 7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support. Reviews project designs and proposed solutions to identify security risks and ensures appropriate security controls are incorporated into network, cloud, application, and infrastructure initiatives. 8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure. Develops network solutions that support high availability, resiliency, scalability, and security requirements. 9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions. Coordinates with vendors, technical teams, and organizational stakeholders during critical incidents and service disruptions. 10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries between users, applications, devices, and infrastructure. Evaluates east-west and north-south traffic flows to identify security risks and opportunities for improved network controls. 11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks. Develops dashboards, key performance indicators, and management reports to support data-driven infrastructure and security decisions. 12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements. Ensures documentation remains accurate and aligned with the current enterprise environment. 13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions. Serves as a senior technical resource and provides guidance on enterprise networking, security architecture, infrastructure design, and technology modernization. 14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities in enterprise networking, cybersecurity, cloud infrastructure, and emerging technologies. Senior-Level Requirements Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving the most complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership. The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls. 8 Job Specific Skills and Abilities (KSAs): Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff. 9 General Knowledge Skills and Abilities (KSAs): The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas: 1. Communication: Have the ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings (i.e.; project team meetings, management presentations, etc.). Must have the ability to effectively listen and process information provided by others. 2. Customer Service: Works well with clients and customers (i.e.; business office, public, or other agencies). Able to assess the needs of the customer, provide information or assistance to satisfy expectations or resolve a problem. 3. Decision Making: Makes sound, well-informed, and objective decisions. 4. Flexibility: Is open to change, new processes (or process improvement), and new information. Has the ability to adapt in response to new information, changing conditions . click apply for full job details
09/30/2026
Full time
Job Description Job Description 4. Scope of Servies The Florida Department of Transportation, Office of Information Technology (OIT) - Integration Services is in search of a Senior Network Engineer to play a key role in assisting the Office of Information Technology in the establishment of new integration methods and standards, along with implementing system integrations, according to those established methods and standards. Duties and Responsibilities will include but are not limited to: 1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Checkpoint and Global Protect VPNs. 2. Firewall deployments, rule migrations, firewall administration and converting existing rule based policies onto new platforms. 3. Works with critical core network infrastructure devices like Next Gen Firewall, VPNs, log collectors and monitors which play a crucial role in security for our IT environment. 4. Works with cloud network infrastructure to configure firewall, security policies and monitor network traffic. 5. Develop and maintain documentation following NIST guidelines. 6. Project Manager; 7. Data Administration; 5 Education Bachelor's Degree in Computer Science, Information Systems or other related field. Or equivalent work experience. Preferred Certifications (PCNSE, CISSP, CCNP, CCIE) 6. Experience 1. Typically have 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration 2. Three to five years of experience with information security tools based on NIST standards. 3. Requires knowledge of security issues, techniques, and implications across all existing computer platforms. Preference given for experience with NGFW Palo Alto or Checkpoint security products. 4. Experience using schematic diagramming tools to map infrastructure layouts. 7 Primary Job Duties/ Tasks Senior Network Engineer - Job Duties 1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and Web-based services. Designs and maintains secure network architectures, segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other security controls. 2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation. Ensures security practices align with organizational requirements, industry standards, and applicable regulatory requirements. 3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments. Prepares executive-level status reports, risk assessments, security metrics, and recommendations addressing vulnerabilities, emerging threats, security incidents, and operational risks. 4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations. Administers and monitors security profiles and access controls, reviews security alerts and violation reports, investigates security exceptions, and coordinates remediation activities. Maintains comprehensive documentation of security controls, configurations, incidents, and corrective actions. 5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency. Leads technical evaluations, proof-of-concept activities, product assessments, and implementation recommendations for enterprise networking and cybersecurity solutions. 6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues. Troubleshoots escalated network and security incidents, provides technical guidance to infrastructure teams, and educates IT and business personnel on security policies, secure configurations, access requirements, and risk mitigation practices. 7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support. Reviews project designs and proposed solutions to identify security risks and ensures appropriate security controls are incorporated into network, cloud, application, and infrastructure initiatives. 8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure. Develops network solutions that support high availability, resiliency, scalability, and security requirements. 9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions. Coordinates with vendors, technical teams, and organizational stakeholders during critical incidents and service disruptions. 10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries between users, applications, devices, and infrastructure. Evaluates east-west and north-south traffic flows to identify security risks and opportunities for improved network controls. 11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks. Develops dashboards, key performance indicators, and management reports to support data-driven infrastructure and security decisions. 12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements. Ensures documentation remains accurate and aligned with the current enterprise environment. 13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions. Serves as a senior technical resource and provides guidance on enterprise networking, security architecture, infrastructure design, and technology modernization. 14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities in enterprise networking, cybersecurity, cloud infrastructure, and emerging technologies. Senior-Level Requirements Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving the most complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership. The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls. 8 Job Specific Skills and Abilities (KSAs): Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff. 9 General Knowledge Skills and Abilities (KSAs): The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas: 1. Communication: Have the ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings (i.e.; project team meetings, management presentations, etc.). Must have the ability to effectively listen and process information provided by others. 2. Customer Service: Works well with clients and customers (i.e.; business office, public, or other agencies). Able to assess the needs of the customer, provide information or assistance to satisfy expectations or resolve a problem. 3. Decision Making: Makes sound, well-informed, and objective decisions. 4. Flexibility: Is open to change, new processes (or process improvement), and new information. Has the ability to adapt in response to new information, changing conditions . click apply for full job details
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/28/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/28/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/28/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/26/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
09/26/2026
Full time
Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
