RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: No CLEARANCE TYPE: Interim Top Secret TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Job Description Join Northrop Grumman on our mission to push the boundaries of possible across land, sea, air, space, and cyberspace. As part of our Tactical Space organization, you will contribute to ground software that plans, executes, and analyzes space missions supporting critical national and civil objectives. We are seeking a Staff level Ground Software Engineer (T5) with Mission Planning & Astrodynamics experience to lead the design and development of mission planning and satellite operations software within our ground segment. This position is based in McLean, VA and requires onsite work in a secure environment. This role is ideal for engineers who enjoy working at the intersection of software engineering and orbital mechanics-building robust, operational tools using COTS astrodynamics platforms and custom software. Job Responsibilities In this role, you will: Ground Software Responsibilities Design, develop, and maintain ground software services and tools with a focus on mission planning, orbit analysis, and satellite operations. Perform full lifecycle software development: Requirements analysis and decomposition Architecture and design within the mission planning domain Implementation, unit testing, and integration Deployment and sustainment in operational environments Collaborate with systems engineering, mission operations, and other ground software teams to integrate mission planning capabilities with the broader ground segment. Implement and maintain automation, pipelines, and tools (e.g., Python based workflows, CI/CD jobs) to support mission analysis and operations. Contribute to technical documentation, design artifacts, and customer briefings for mission planning solutions. Mission Planning & Astrodynamics Responsibilities Lead and/or support the design and implementation of software capabilities for: Orbit determination and ephemeris propagation Maneuver planning and station keeping strategy Conjunction assessment and collision avoidance Contact/passes planning and satellite mission analysis Launch and early orbit operations (LEOP), station keeping, on orbit support, and anomaly response Work closely with astrodynamics, flight dynamics, and operations teams to turn mission concepts and operational needs into robust, repeatable software solutions. Integrate and operationalize COTS astrodynamics tools, including: FreeFlyer STK Scripts and interfaces that connect these tools to other ground systems and data sources Support Rendezvous and Proximity Operations (RPO) analysis and planning, as applicable to mission needs. Help shape the technical roadmap for mission planning tools and services, including performance, automation, and operational usability improvements. Basic Qualifications Bachelor's degree in a Science, Technology, Engineering or Mathematics (STEM) discipline and 12+ years of relevant software/mission experience; OR Master's degree in STEM and 10+ years of relevant experience; OR PhD in STEM and 8+ years of relevant experience. Strong background in software development for complex systems, with emphasis on: Python (preferred primary language for this role) Experience with at least one additional language (e.g., C/C++, Java) is a plus. Familiarity with all phases of the software development life cycle and Agile software development practices. Experience with: Linux development environments and scripting (e.g., Bash) Containerization (e.g., Docker, Podman) and CI/CD tools (e.g., Jenkins, GitLab, Bitbucket/Jira, Git, etc.) Configuration management using industry standard tools and processes Demonstrated experience supporting at least one of the following: Astrodynamics / orbital mechanics / flight dynamics Mission planning and satellite operations Hands on experience performing some combination of: Orbit determination Maneuver planning and station keeping Conjunction assessment / collision avoidance Ephemeris propagation and trajectory analysis Contact/passes planning and satellite mission analysis Ability to work onsite full time in McLean, VA in a secure environment. Clearance: Active DoD Top Secret clearance is preferred at time of application; candidates with the ability to obtain and maintain a TS and any required special program access will also be considered. Preferred Qualifications Active TS/SCI clearance with current or recent program access. Degree in Aerospace Engineering or Physics with significant coursework or experience in astrodynamics and space mission operations. Direct experience using FreeFlyer and/or STK for mission analysis, mission planning, and/or on orbit operations, including integration or automation. Experience supporting: Launch and early orbit operations (LEOP) Station keeping and collision avoidance Rendezvous and proximity operations (RPO) Long term mission planning and on orbit anomaly resolution Experience with: Model based systems engineering tools (e.g., Rhapsody, Cameo) Atlassian tools (Jira, Bitbucket, Confluence, Crucible, Bamboo) Virtualization technologies (e.g., VirtualBox, QEMU, KVM, VMware) Operating in a DevOps / CI/CD environment and contributing to automation and pipelines. Prior experience on a Northrop Grumman space or ground program, especially in mission planning, astrodynamics, or satellite operations. Primary Level Salary Range: $177,000.00 - $265,600.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
11/10/2026
Full time
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: No CLEARANCE TYPE: Interim Top Secret TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Job Description Join Northrop Grumman on our mission to push the boundaries of possible across land, sea, air, space, and cyberspace. As part of our Tactical Space organization, you will contribute to ground software that plans, executes, and analyzes space missions supporting critical national and civil objectives. We are seeking a Staff level Ground Software Engineer (T5) with Mission Planning & Astrodynamics experience to lead the design and development of mission planning and satellite operations software within our ground segment. This position is based in McLean, VA and requires onsite work in a secure environment. This role is ideal for engineers who enjoy working at the intersection of software engineering and orbital mechanics-building robust, operational tools using COTS astrodynamics platforms and custom software. Job Responsibilities In this role, you will: Ground Software Responsibilities Design, develop, and maintain ground software services and tools with a focus on mission planning, orbit analysis, and satellite operations. Perform full lifecycle software development: Requirements analysis and decomposition Architecture and design within the mission planning domain Implementation, unit testing, and integration Deployment and sustainment in operational environments Collaborate with systems engineering, mission operations, and other ground software teams to integrate mission planning capabilities with the broader ground segment. Implement and maintain automation, pipelines, and tools (e.g., Python based workflows, CI/CD jobs) to support mission analysis and operations. Contribute to technical documentation, design artifacts, and customer briefings for mission planning solutions. Mission Planning & Astrodynamics Responsibilities Lead and/or support the design and implementation of software capabilities for: Orbit determination and ephemeris propagation Maneuver planning and station keeping strategy Conjunction assessment and collision avoidance Contact/passes planning and satellite mission analysis Launch and early orbit operations (LEOP), station keeping, on orbit support, and anomaly response Work closely with astrodynamics, flight dynamics, and operations teams to turn mission concepts and operational needs into robust, repeatable software solutions. Integrate and operationalize COTS astrodynamics tools, including: FreeFlyer STK Scripts and interfaces that connect these tools to other ground systems and data sources Support Rendezvous and Proximity Operations (RPO) analysis and planning, as applicable to mission needs. Help shape the technical roadmap for mission planning tools and services, including performance, automation, and operational usability improvements. Basic Qualifications Bachelor's degree in a Science, Technology, Engineering or Mathematics (STEM) discipline and 12+ years of relevant software/mission experience; OR Master's degree in STEM and 10+ years of relevant experience; OR PhD in STEM and 8+ years of relevant experience. Strong background in software development for complex systems, with emphasis on: Python (preferred primary language for this role) Experience with at least one additional language (e.g., C/C++, Java) is a plus. Familiarity with all phases of the software development life cycle and Agile software development practices. Experience with: Linux development environments and scripting (e.g., Bash) Containerization (e.g., Docker, Podman) and CI/CD tools (e.g., Jenkins, GitLab, Bitbucket/Jira, Git, etc.) Configuration management using industry standard tools and processes Demonstrated experience supporting at least one of the following: Astrodynamics / orbital mechanics / flight dynamics Mission planning and satellite operations Hands on experience performing some combination of: Orbit determination Maneuver planning and station keeping Conjunction assessment / collision avoidance Ephemeris propagation and trajectory analysis Contact/passes planning and satellite mission analysis Ability to work onsite full time in McLean, VA in a secure environment. Clearance: Active DoD Top Secret clearance is preferred at time of application; candidates with the ability to obtain and maintain a TS and any required special program access will also be considered. Preferred Qualifications Active TS/SCI clearance with current or recent program access. Degree in Aerospace Engineering or Physics with significant coursework or experience in astrodynamics and space mission operations. Direct experience using FreeFlyer and/or STK for mission analysis, mission planning, and/or on orbit operations, including integration or automation. Experience supporting: Launch and early orbit operations (LEOP) Station keeping and collision avoidance Rendezvous and proximity operations (RPO) Long term mission planning and on orbit anomaly resolution Experience with: Model based systems engineering tools (e.g., Rhapsody, Cameo) Atlassian tools (Jira, Bitbucket, Confluence, Crucible, Bamboo) Virtualization technologies (e.g., VirtualBox, QEMU, KVM, VMware) Operating in a DevOps / CI/CD environment and contributing to automation and pipelines. Prior experience on a Northrop Grumman space or ground program, especially in mission planning, astrodynamics, or satellite operations. Primary Level Salary Range: $177,000.00 - $265,600.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Top Secret TRAVEL: Yes, 50% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, but they're also making history. The Mission and Payload Programs organization within the Northrop Grumman Space Systems pushes the boundaries of innovation, redefines engineering capabilities, and drives advances in various sciences. Our team is chartered with providing the skills, innovative technologies to develop, design, produce and sustain optimized product lines across the sector while providing a decisive advantage to the warfighter. Come be a part of our mission! This position is part of our Space Sector Eastern Region SEIT Engineering Organization located at Rolling Meadows, IL. Your roles and responsibilities will include (but are not limited to) the following: Leading on-orbit checkout and operations activities Developing and validating command sequences and automation scripts Lead rapid integration of complex ground software to prepare for delivery to Spacecraft Operations end user Perform rapid development of procedures and scripts to use the ground software, data inputs, simulators, and hardware in the loop Train ground operators Lead development and SIL checkout of activation procedures Requires excellent interpersonal skills, experience with end user engagement, and comfort briefing technical results to customers. Travel up to 50%, no more than 2 weeks at a time. Basic Qualifications: Staff Engineer Systems: BS + 12 years of experience; MS + 10 years of experience; PhD + 7 years of experience BS and/or MS degree in Electrical Engineering, Aerospace Engineering, Mechanical Engineering, Physics or related technical degree. Experience with on-orbit checkout testing, subsystem calibration and payload checkouts Educational background or experience with signal processing and algorithm development Proficiency in analytical data tools and programming languages like Python, MATLAB Must have an active U.S. Government DoD Top Secret security clearance at time of application, current and within scope, with the ability to obtain and maintain SCI approval/access. Preferred Qualifications: Demonstrated history of strong organization and coordination skills (working with cross-functional teams). Experience with on-orbit checkout testing, subsystem calibration and payload checkouts Knowledge of the space domain (e.g. orbital mechanics, remote sensing, etc.) Extensive experience performing system verification and validation of space systems Mission Ops product development/expertise desired Experience in leading integration of ground software to spacecraft operations end users Integration and test experience; familiarity with signal generators, spectrum analyzers, and oscilloscopes Knowledge of Programmatic and technical dependencies for mission execution Agile development experience a plus Strong RF domain background (link budget, waveform modulation schemes, transceiver technologies, antennas) Previous experience as a SEIT Lead, IPT Lead, Chief Engineer or deputy to the following roles. Active TS/SCI with adjudicated polygraph is preferred Primary Level Salary Range: $169,000.00 - $253,600.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
11/10/2026
Full time
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Top Secret TRAVEL: Yes, 50% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, but they're also making history. The Mission and Payload Programs organization within the Northrop Grumman Space Systems pushes the boundaries of innovation, redefines engineering capabilities, and drives advances in various sciences. Our team is chartered with providing the skills, innovative technologies to develop, design, produce and sustain optimized product lines across the sector while providing a decisive advantage to the warfighter. Come be a part of our mission! This position is part of our Space Sector Eastern Region SEIT Engineering Organization located at Rolling Meadows, IL. Your roles and responsibilities will include (but are not limited to) the following: Leading on-orbit checkout and operations activities Developing and validating command sequences and automation scripts Lead rapid integration of complex ground software to prepare for delivery to Spacecraft Operations end user Perform rapid development of procedures and scripts to use the ground software, data inputs, simulators, and hardware in the loop Train ground operators Lead development and SIL checkout of activation procedures Requires excellent interpersonal skills, experience with end user engagement, and comfort briefing technical results to customers. Travel up to 50%, no more than 2 weeks at a time. Basic Qualifications: Staff Engineer Systems: BS + 12 years of experience; MS + 10 years of experience; PhD + 7 years of experience BS and/or MS degree in Electrical Engineering, Aerospace Engineering, Mechanical Engineering, Physics or related technical degree. Experience with on-orbit checkout testing, subsystem calibration and payload checkouts Educational background or experience with signal processing and algorithm development Proficiency in analytical data tools and programming languages like Python, MATLAB Must have an active U.S. Government DoD Top Secret security clearance at time of application, current and within scope, with the ability to obtain and maintain SCI approval/access. Preferred Qualifications: Demonstrated history of strong organization and coordination skills (working with cross-functional teams). Experience with on-orbit checkout testing, subsystem calibration and payload checkouts Knowledge of the space domain (e.g. orbital mechanics, remote sensing, etc.) Extensive experience performing system verification and validation of space systems Mission Ops product development/expertise desired Experience in leading integration of ground software to spacecraft operations end users Integration and test experience; familiarity with signal generators, spectrum analyzers, and oscilloscopes Knowledge of Programmatic and technical dependencies for mission execution Agile development experience a plus Strong RF domain background (link budget, waveform modulation schemes, transceiver technologies, antennas) Previous experience as a SEIT Lead, IPT Lead, Chief Engineer or deputy to the following roles. Active TS/SCI with adjudicated polygraph is preferred Primary Level Salary Range: $169,000.00 - $253,600.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
Job Description Job Description ABOUT ROCKET LAB Rocket Lab is the end-to-end space company building rockets, spacecraft, and critical subsystems that keep the world connected, protected, expand humanity's reach to the Moon, Mars, and beyond. We move fast, build real hardware for meaningful missions, and make the impossible routine. Come shape the future with us. SPACE SYSTEMS Rocket Lab's Space Systems division builds complete spacecraft, precision payloads to the components and subsystems that allow them to thrive in space including solar panels, flight software, star trackers, optical systems, separation systems, and radios. The Space Systems division has enabled more than 1,700 missions, ranging from interplanetary exploration, in-space manufacturing to national security and defense initiatives. We have built spacecraft, payloads, and components for missions to the Moon and Mars, working with partners including NASA, the Space Development Agency, and the U.S. Space Force. Whether it's a single high-performance spacecraft, constellation, or the vertically integrated components that help get to space - our Space Systems division is empowering the boldest and most ambitious space missions. PRINCIPAL PROGRAM MANAGER Rocket Lab Optical Systems solves mission-critical space domain and Intelligence, Surveillance, and Reconnaissance challenges for Department of Defense and Intelligence Community customers. Our vision is to revolutionize the space-based payload market with innovative and novel designs for space, terrestrial, and airborne environments. Building on more than 20 years of electro-optical and infrared systems innovation from Geost, Rocket Lab Optical Systems delivers solutions to the warfighter for responsive, scalable sensing solutions across all orbital domains. As a Principal Program Manager for Rocket Lab Optical Systems in Tucson, AZ, you will lead EO/IR space missions and ground-based sensor networks, and the research. You must possess experience in managing programs including electronics, software, and EO/IR sensors on space or ground systems. WHAT YOU'LL GET TO DO: Manage multiple contracts, ensuring cost, risk, schedule, staffing resources, and technical performance of company programs or subsystems of major programs, addressing any issues or risks that arise Identify and mitigate potential risks to programs, develop contingency plans, develop and execute recovery plans, ensure timely resolution of issues, and track financial impacts Work on unusually complex technical problems and provide innovative solutions Lead team(s) of engineers in planning and executing test events and resolving issues encountered, both operational and technical Work proactively to complete tasks and meet assigned deadlines with little direction Build and deliver effective presentations to communicate program status and plans with little direction Communicate effectively with team members across disciplines, with project management, and particularly with customers Maintain clear and consistent communication and foster strong relationships with a wide range of internal stakeholders, particularly with functional teams and executive leadership Build and maintain trusted relationships with key customers, partners, and stakeholders Lead program and customer meetings and reviews Lead technical interchange meetings with the team members and other project personnel and represent the organization in matters pertaining to project development Lead and mentor junior technical staff and program support resources, providing guidance and support as needed Develop and closely track Integrated Master Schedule (IMS) for projects and manage Earned Value Management (EVM) metrics (as required) Support, and influence/lead where required, proposal and ECP efforts Support travel or off-site work as needed Perform other duties as assigned QUALIFICATIONS YOU'LL BRING AS PRINCIPAL PROGRAM MANAGER: Bachelor's degree in business, technology, or technical discipline 12+ years of experience in managing technical projects for the US Government Proven ability to lead a team to the completion of programs and project milestones Hands-on expertise with active optical systems Experience with space EO payloads, test plan development, astronomy, physics, electronics, software, and/or remote sensing Active Secret clearance with TS/SCI eligibility U.S citizenship is required, due to program requirements THESE QUALIFICATIONS WOULD BE NICE TO HAVE: Current SSBI clearance Excellent communication and presentation skills Self-motivated and capable of performing tasks with minimal oversight Superior oral and written communication skills and sound problem-solving skills Continuous improvement mindset and high attention to detail and accuracy Experience performing and working in a dynamic and high-visibility role Excellent management skills, including the ability to prioritize tasks, manage resources, and deliver results within given constraints Internship or research experience supporting aerospace, defense, or optics-related projects Exposure to MBSE concepts and tools such as Cameo Systems Modeler Familiarity with environmental testing flight hardware Experience with configuration management practices and systems engineering documentation Proficiency with Microsoft Excel, including use of formulas and data analysis tools Knowledge of astronomy, physics, imaging systems, or remote sensing This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production areas. WHAT TO EXPECT We're on a mission to unlock the potential of space to improve life on Earth, but that's not an easy task. It takes hard work, determination, relentless innovation, teamwork, grit, and an unwavering commitment to achieving what others often deem impossible. Our people out-think, out-work, and out-pace. We pride ourselves on having each other's backs, checking our egos at the door, and rolling up our sleeves on all tasks big and small. We thrive under pressure, work to tight deadlines, and our focus is always on how we can deliver, rather than dwelling on the challenges that stand in the way. Important information: FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY: To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Learn more about ITAR here. Rocket Lab provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Rocket Lab, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Applicants requiring a reasonable accommodation for the application/interview process for a job in the United States should contact Giulia Johnson at dedicated resource is intended solely to assist job seekers with disabilities whose disability prevents them from being able to apply/interview. Only messages left for this purpose will be considered. A response to your request may take up to two business days. FOR CANDIDATES SEEKING TO WORK IN NEW ZEALAND OFFICES ONLY: For security reasons, background checks will be undertaken prior to any employment offers being made to an applicant. These checks will include nationality checks as it is a requirement of this position that you be eligible to access equipment and data regulated by the United States' International Traffic in Arms Regulations. Under these Regulations, you may be ineligible for this role if you do not hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union, or a country that is part of NATO, or if you hold ineligible dual citizenship or nationality. For more information on these Regulations, click here ITAR Regulations.
11/09/2026
Full time
Job Description Job Description ABOUT ROCKET LAB Rocket Lab is the end-to-end space company building rockets, spacecraft, and critical subsystems that keep the world connected, protected, expand humanity's reach to the Moon, Mars, and beyond. We move fast, build real hardware for meaningful missions, and make the impossible routine. Come shape the future with us. SPACE SYSTEMS Rocket Lab's Space Systems division builds complete spacecraft, precision payloads to the components and subsystems that allow them to thrive in space including solar panels, flight software, star trackers, optical systems, separation systems, and radios. The Space Systems division has enabled more than 1,700 missions, ranging from interplanetary exploration, in-space manufacturing to national security and defense initiatives. We have built spacecraft, payloads, and components for missions to the Moon and Mars, working with partners including NASA, the Space Development Agency, and the U.S. Space Force. Whether it's a single high-performance spacecraft, constellation, or the vertically integrated components that help get to space - our Space Systems division is empowering the boldest and most ambitious space missions. PRINCIPAL PROGRAM MANAGER Rocket Lab Optical Systems solves mission-critical space domain and Intelligence, Surveillance, and Reconnaissance challenges for Department of Defense and Intelligence Community customers. Our vision is to revolutionize the space-based payload market with innovative and novel designs for space, terrestrial, and airborne environments. Building on more than 20 years of electro-optical and infrared systems innovation from Geost, Rocket Lab Optical Systems delivers solutions to the warfighter for responsive, scalable sensing solutions across all orbital domains. As a Principal Program Manager for Rocket Lab Optical Systems in Tucson, AZ, you will lead EO/IR space missions and ground-based sensor networks, and the research. You must possess experience in managing programs including electronics, software, and EO/IR sensors on space or ground systems. WHAT YOU'LL GET TO DO: Manage multiple contracts, ensuring cost, risk, schedule, staffing resources, and technical performance of company programs or subsystems of major programs, addressing any issues or risks that arise Identify and mitigate potential risks to programs, develop contingency plans, develop and execute recovery plans, ensure timely resolution of issues, and track financial impacts Work on unusually complex technical problems and provide innovative solutions Lead team(s) of engineers in planning and executing test events and resolving issues encountered, both operational and technical Work proactively to complete tasks and meet assigned deadlines with little direction Build and deliver effective presentations to communicate program status and plans with little direction Communicate effectively with team members across disciplines, with project management, and particularly with customers Maintain clear and consistent communication and foster strong relationships with a wide range of internal stakeholders, particularly with functional teams and executive leadership Build and maintain trusted relationships with key customers, partners, and stakeholders Lead program and customer meetings and reviews Lead technical interchange meetings with the team members and other project personnel and represent the organization in matters pertaining to project development Lead and mentor junior technical staff and program support resources, providing guidance and support as needed Develop and closely track Integrated Master Schedule (IMS) for projects and manage Earned Value Management (EVM) metrics (as required) Support, and influence/lead where required, proposal and ECP efforts Support travel or off-site work as needed Perform other duties as assigned QUALIFICATIONS YOU'LL BRING AS PRINCIPAL PROGRAM MANAGER: Bachelor's degree in business, technology, or technical discipline 12+ years of experience in managing technical projects for the US Government Proven ability to lead a team to the completion of programs and project milestones Hands-on expertise with active optical systems Experience with space EO payloads, test plan development, astronomy, physics, electronics, software, and/or remote sensing Active Secret clearance with TS/SCI eligibility U.S citizenship is required, due to program requirements THESE QUALIFICATIONS WOULD BE NICE TO HAVE: Current SSBI clearance Excellent communication and presentation skills Self-motivated and capable of performing tasks with minimal oversight Superior oral and written communication skills and sound problem-solving skills Continuous improvement mindset and high attention to detail and accuracy Experience performing and working in a dynamic and high-visibility role Excellent management skills, including the ability to prioritize tasks, manage resources, and deliver results within given constraints Internship or research experience supporting aerospace, defense, or optics-related projects Exposure to MBSE concepts and tools such as Cameo Systems Modeler Familiarity with environmental testing flight hardware Experience with configuration management practices and systems engineering documentation Proficiency with Microsoft Excel, including use of formulas and data analysis tools Knowledge of astronomy, physics, imaging systems, or remote sensing This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production areas. WHAT TO EXPECT We're on a mission to unlock the potential of space to improve life on Earth, but that's not an easy task. It takes hard work, determination, relentless innovation, teamwork, grit, and an unwavering commitment to achieving what others often deem impossible. Our people out-think, out-work, and out-pace. We pride ourselves on having each other's backs, checking our egos at the door, and rolling up our sleeves on all tasks big and small. We thrive under pressure, work to tight deadlines, and our focus is always on how we can deliver, rather than dwelling on the challenges that stand in the way. Important information: FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY: To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Learn more about ITAR here. Rocket Lab provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Rocket Lab, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Applicants requiring a reasonable accommodation for the application/interview process for a job in the United States should contact Giulia Johnson at dedicated resource is intended solely to assist job seekers with disabilities whose disability prevents them from being able to apply/interview. Only messages left for this purpose will be considered. A response to your request may take up to two business days. FOR CANDIDATES SEEKING TO WORK IN NEW ZEALAND OFFICES ONLY: For security reasons, background checks will be undertaken prior to any employment offers being made to an applicant. These checks will include nationality checks as it is a requirement of this position that you be eligible to access equipment and data regulated by the United States' International Traffic in Arms Regulations. Under these Regulations, you may be ineligible for this role if you do not hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union, or a country that is part of NATO, or if you hold ineligible dual citizenship or nationality. For more information on these Regulations, click here ITAR Regulations.
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: SCI TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Do you want to work at an international company with endless opportunities for growth and advancement? Are you eager to join a trust-based, globally connected team, where your contributions will define what's possible? We are looking for team members who want to solve interesting, complex problems, which protect our nation. Your talents and passion are most important to us. If you don't know a language, program, or platform, we will teach you! Become a part of our enthusiastic teams where we have fun working together and take pride in our contributions to the nation's safety. A Cyber Systems Security Engineering position requires demonstrated technical accomplishments in securing complex systems that can be applied to Space Systems. Space Systems are comprised of multiple segments and this position has responsibilities across Ground Segments, Communications Segments, and Space Segments. This position supports National Security Space missions that require the most trustworthy personnel and a new hire start date is contingent on TS clearance transfer. Due to the nature of this work, this position will be on-site only. Responsibilities: Work as part of an integrated product team (IPT) to architect, implement, and satisfy Risk Management Framework (RMF) CyberSecurity, CyberResilience, and/or CyberSurvivability requirements of satellite systems, communications links, and ground command & control (C2) systems. You will engage with multiple engineering disciplines and contribute to the secure design of complex systems System Security Engineering Requirements management in support of program protection (PP) requirements, work with systems engineers to decompose system-level security controls into technical performance requirements across the segments and down to specific components, across disciplines Anti-Tamper, TEMPEST, Cybersecurity (RMF), and cryptographic component integration/development. You will ensure that Cyber requirements are included in the formal requirements tracking process and is Cyber/SSE contributor for a segment or subsystem Perform Attack Surface Analysis (ASA) and prepare Systems Security Plan (SSP) documentation for complex space systems, including Risk Assessment Reports (RAR), Security Control Traceability Matrices (SCTM), Security Assessment Procedures, and POA&Ms Implement and maintain COTS security products (firewalls, anti-virus, two-factor authentication, SIEM tools, etc. within terrestrial systems For space segments, you will support design and implementation of space vehicle hardening, for embedded processors and flight software. Experience with real-time operating systems, secure coding best practices, or other mission critical operational systems is required Prepare and Execute assessment procedures to verify conformance with Commercial, Federal Civilian agency, Department of Defense (DoD), Intelligence Community, and/or Special Access Program, Cyber/SSE security controls, and or survivability requirements, as required based on the specified customer/system requirements Work in an Agile engineering environment, where the Cyber/SSE may assist in triage of Static Code Analysis (SCA) tool findings (e.g. Fortify) and assist in prioritizing the findings as technical debt in the SwDLC backlog Work in small teams to complete systems engineering, assembly, integration, and test activities for security-critical components, such as Cross Domain Solutions, cryptographic devices, and controlled interfaces Securely deploy Mission Unique Software (MUS) in computing clouds and/or highly virtualized environments. Prepare Certification To Field (CTF) assessment procedures. Execute CTF test cases for observation by customer cybersecurity representatives Interface with customer representatives to accomplish Cyber Test & Evaluation of systems to meet critical program milestones Perform system vulnerability scanning, remediation, and patch management activities on Windows and Red Hat operating systems and various COTS/GOTS applications including those within virtualized and/or cloud environments Document (or update) Standard Operating Procedures (SOPs) and when needed, perform software patch installation, other flaw remediation, antivirus updates, and continuous monitoring (ConMon) activities Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the system security authorization package To be successful you should have: Experience designing systems/networks to use, or hands-on experience operating, DISA Host Based Security System (HBSS) or Endpoint Security Suite (ESS) solutions Experience designing systems/networks to use, or hands-on experience with industry platform hardening practices, such as DISA Security Technical Implementation Guide (STIG) implementation, as well as documentation of deviations and mitigations Experience designing systems/networks to use, or scanning, remediating, mitigating, and reporting cybersecurity vulnerabilities discovered through use of audit reduction tools and/or the DISA Automated Security Compliance Assessment Solution (ACAS) tool or Tenable NESSUS Experience implementing the RMF process from system categorization through continuous monitoring Excellent technical document preparation skills with a demonstrated ability to communicate with a variety of stakeholders ranging from technical staffers up to senior program managers This position can be filled at either the Cyber Systems Engineer level 3 or level 4 Basic Qualifications Cyber Systems Engineer Level 3 Education Requirement: BS degree in engineering, with Electrical Engineering or Software Engineering preferred with 5 years of experience or 3 years of experience with a Masters. Experience can be considered in lieu of degree (additional 4 years) Cyber Systems Engineer Level 4 Education Requirement BS degree in engineering, with Electrical Engineering or Software Engineering preferred with 8 years of experience or 6 years of experience with a Masters. Experience can be considered in lieu of degree (additional 4 years) Additional Basic Qualifications: Minimum 2 years of Cyber/SSE experience, preferably within the defense aerospace industry Must have Active Top Secret security clearance with SCI at time of application US Citizenship is required Experience designing systems/networks to use, or hands-on experience with industry platform hardening practices, such as DISA Security Technical Implementation Guide (STIG) implementation, as well as documentation of deviations and mitigations. Experience designing systems/networks to use, or scanning, remediating, mitigating, and reporting cybersecurity vulnerabilities discovered through use of audit reduction tools and/or the DISA Automated Security Compliance Assessment Solution (ACAS) tool or Tenable NESSUS. Experience implementing the RMF process from system categorization through continuous monitoring. Preferred Qualifications BS in Electrical Engineering or Software Engineering MS degree in Electrical, Systems, or Aerospace Engineering Current CISSP-ISSEP or CISSP-ISSAP 7 years of IA/cybersecurity experience, with are least 3 of those within the SAP community in the defense aerospace industry Experience hardening Docker containers Primary Level Salary Range: $125,300.00 - $187,900.00 Secondary Level Salary Range: $156,400.00 - $234,600.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However . click apply for full job details
11/07/2026
Full time
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: SCI TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Do you want to work at an international company with endless opportunities for growth and advancement? Are you eager to join a trust-based, globally connected team, where your contributions will define what's possible? We are looking for team members who want to solve interesting, complex problems, which protect our nation. Your talents and passion are most important to us. If you don't know a language, program, or platform, we will teach you! Become a part of our enthusiastic teams where we have fun working together and take pride in our contributions to the nation's safety. A Cyber Systems Security Engineering position requires demonstrated technical accomplishments in securing complex systems that can be applied to Space Systems. Space Systems are comprised of multiple segments and this position has responsibilities across Ground Segments, Communications Segments, and Space Segments. This position supports National Security Space missions that require the most trustworthy personnel and a new hire start date is contingent on TS clearance transfer. Due to the nature of this work, this position will be on-site only. Responsibilities: Work as part of an integrated product team (IPT) to architect, implement, and satisfy Risk Management Framework (RMF) CyberSecurity, CyberResilience, and/or CyberSurvivability requirements of satellite systems, communications links, and ground command & control (C2) systems. You will engage with multiple engineering disciplines and contribute to the secure design of complex systems System Security Engineering Requirements management in support of program protection (PP) requirements, work with systems engineers to decompose system-level security controls into technical performance requirements across the segments and down to specific components, across disciplines Anti-Tamper, TEMPEST, Cybersecurity (RMF), and cryptographic component integration/development. You will ensure that Cyber requirements are included in the formal requirements tracking process and is Cyber/SSE contributor for a segment or subsystem Perform Attack Surface Analysis (ASA) and prepare Systems Security Plan (SSP) documentation for complex space systems, including Risk Assessment Reports (RAR), Security Control Traceability Matrices (SCTM), Security Assessment Procedures, and POA&Ms Implement and maintain COTS security products (firewalls, anti-virus, two-factor authentication, SIEM tools, etc. within terrestrial systems For space segments, you will support design and implementation of space vehicle hardening, for embedded processors and flight software. Experience with real-time operating systems, secure coding best practices, or other mission critical operational systems is required Prepare and Execute assessment procedures to verify conformance with Commercial, Federal Civilian agency, Department of Defense (DoD), Intelligence Community, and/or Special Access Program, Cyber/SSE security controls, and or survivability requirements, as required based on the specified customer/system requirements Work in an Agile engineering environment, where the Cyber/SSE may assist in triage of Static Code Analysis (SCA) tool findings (e.g. Fortify) and assist in prioritizing the findings as technical debt in the SwDLC backlog Work in small teams to complete systems engineering, assembly, integration, and test activities for security-critical components, such as Cross Domain Solutions, cryptographic devices, and controlled interfaces Securely deploy Mission Unique Software (MUS) in computing clouds and/or highly virtualized environments. Prepare Certification To Field (CTF) assessment procedures. Execute CTF test cases for observation by customer cybersecurity representatives Interface with customer representatives to accomplish Cyber Test & Evaluation of systems to meet critical program milestones Perform system vulnerability scanning, remediation, and patch management activities on Windows and Red Hat operating systems and various COTS/GOTS applications including those within virtualized and/or cloud environments Document (or update) Standard Operating Procedures (SOPs) and when needed, perform software patch installation, other flaw remediation, antivirus updates, and continuous monitoring (ConMon) activities Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the system security authorization package To be successful you should have: Experience designing systems/networks to use, or hands-on experience operating, DISA Host Based Security System (HBSS) or Endpoint Security Suite (ESS) solutions Experience designing systems/networks to use, or hands-on experience with industry platform hardening practices, such as DISA Security Technical Implementation Guide (STIG) implementation, as well as documentation of deviations and mitigations Experience designing systems/networks to use, or scanning, remediating, mitigating, and reporting cybersecurity vulnerabilities discovered through use of audit reduction tools and/or the DISA Automated Security Compliance Assessment Solution (ACAS) tool or Tenable NESSUS Experience implementing the RMF process from system categorization through continuous monitoring Excellent technical document preparation skills with a demonstrated ability to communicate with a variety of stakeholders ranging from technical staffers up to senior program managers This position can be filled at either the Cyber Systems Engineer level 3 or level 4 Basic Qualifications Cyber Systems Engineer Level 3 Education Requirement: BS degree in engineering, with Electrical Engineering or Software Engineering preferred with 5 years of experience or 3 years of experience with a Masters. Experience can be considered in lieu of degree (additional 4 years) Cyber Systems Engineer Level 4 Education Requirement BS degree in engineering, with Electrical Engineering or Software Engineering preferred with 8 years of experience or 6 years of experience with a Masters. Experience can be considered in lieu of degree (additional 4 years) Additional Basic Qualifications: Minimum 2 years of Cyber/SSE experience, preferably within the defense aerospace industry Must have Active Top Secret security clearance with SCI at time of application US Citizenship is required Experience designing systems/networks to use, or hands-on experience with industry platform hardening practices, such as DISA Security Technical Implementation Guide (STIG) implementation, as well as documentation of deviations and mitigations. Experience designing systems/networks to use, or scanning, remediating, mitigating, and reporting cybersecurity vulnerabilities discovered through use of audit reduction tools and/or the DISA Automated Security Compliance Assessment Solution (ACAS) tool or Tenable NESSUS. Experience implementing the RMF process from system categorization through continuous monitoring. Preferred Qualifications BS in Electrical Engineering or Software Engineering MS degree in Electrical, Systems, or Aerospace Engineering Current CISSP-ISSEP or CISSP-ISSAP 7 years of IA/cybersecurity experience, with are least 3 of those within the SAP community in the defense aerospace industry Experience hardening Docker containers Primary Level Salary Range: $125,300.00 - $187,900.00 Secondary Level Salary Range: $156,400.00 - $234,600.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However . click apply for full job details
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Title: Mobility Analysts, Mobility Engineers, VTC Analysts & Senior VTC Engineers (CBP) Clearance: Active CBP Background Investigation (CBP BI) and EOD strongly preferred. We can begin processing for candidates who do not hold one. Citizenship: U.S. Citizenship required Location: Ashburn, VA Salary Range: Pending Travel: As needed The Work U.S. Customs and Border Protection runs continuous operations across more than 300 land, air, and sea ports of entry, plus Border Patrol stations and the Air and Marine Operations Center. Most of the people doing that work are nowhere near a help desk. They are at a checkpoint, in a vehicle, at a remote station, or on a call connecting sites hours apart. When a device will not enroll or a room system will not join, nobody walks down the hall to get it fixed, and the work waits. We are hiring on two tracks. Mobility covers the devices people carry and the platform that manages them. VTC and unified communications covers room systems, conferencing platforms, and the calls that hold a distributed organization together. You will work alongside network engineers, cloud engineers, security staff, and field deployment teams, because most of what breaks here breaks at a seam between them. One thing is worth knowing before you apply. These roles sit close to the people who use the equipment, and the balance between hands-on support and engineering varies by role and by week. Whichever side you lean toward, this work gets judged on whether somebody in the field can do their job, not on how the design looks on paper. What Success Looks Like Objective 1: Keep devices and rooms working for people who cannot walk to a help desk Issues get resolved without the user explaining the same problem to three people. Problems at remote sites get solved remotely, or the site visit is planned rather than reactive. Somebody reporting a problem in non-technical terms gets an answer they can act on. Recurring failures get traced to a cause and closed, rather than reset and re-reported the following month. Objective 2: Cut the number of problems that reach a user at all Enrollment, provisioning, and updates happen without somebody touching each device. Configuration standards exist for endpoints and room systems, and what is deployed matches them. Capacity, licensing, and lifecycle get handled before somebody is blocked by one of them. Objective 3: Make the supported tools good enough that people stop working around them Users pick the supported device and the supported conferencing path because it works, not because policy tells them to. Requests for exceptions and one-off configurations fall, because the standard build covers the need. Where a workaround exists, you can say why, and either remove the cause or record it as a known limit. Where You'd Fit Two tracks, each with its own levels. The tracks are not a hierarchy: a VTC analyst is not a step above or below a mobility analyst. Pick the track that matches what you have done, tell us where you think you land, and we will talk about it. Mobility track Mobility Analyst. You work device, enrollment, and access issues inside established standards. You decide what you can resolve and what needs engineering, and you escalate before one user's problem becomes a site's problem. Mobility Engineer. You own the mobile estate's configuration, its management platform, and how changes reach devices. You make routine policy calls yourself and bring the ones that change what users experience to a review. VTC and unified communications track VTC Analyst. You work conferencing and room system issues, including supporting events where a failure is visible to everyone on the call. You decide what you can fix in the moment and what needs a design change. Senior VTC Engineer. You own how conferencing works across sites, including the parts that depend on the network and the cloud. You set the standards others deploy against and take the faults nobody has diagnosed yet. What You Bring Preferred Experience You have supported an endpoint or conferencing estate where the users could not come to you. You have run a device management platform at scale, including enrollment, policy, and update rollout. You have made conferencing work over constrained or unreliable network paths, and can describe what you changed to get there. You have supported events where a failure would have been visible to leadership, and can say what you do differently to prepare for one. You hold an active CBP BI, a fitness determination at another DHS component, or an active DoD clearance. Any of these shortens your start date. You have worked where device configuration is governed by security policy rather than by what would be convenient for users. You work across more than one vendor's platform and are not dependent on a single management console. A note on timing We are staffing this program now. If you already hold an active CBP BI and EOD, your start date is short and a $10,000 signing bonus comes with the role, payable after 90 days under standard terms. We would like to talk this week. If you do not, we can begin processing a CBP BI for you. That takes months rather than weeks, so applying now means joining a pipeline rather than starting immediately. We would rather tell you that up front than have you find out after you apply. Employee Benefits Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
11/06/2026
Full time
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Title: Mobility Analysts, Mobility Engineers, VTC Analysts & Senior VTC Engineers (CBP) Clearance: Active CBP Background Investigation (CBP BI) and EOD strongly preferred. We can begin processing for candidates who do not hold one. Citizenship: U.S. Citizenship required Location: Ashburn, VA Salary Range: Pending Travel: As needed The Work U.S. Customs and Border Protection runs continuous operations across more than 300 land, air, and sea ports of entry, plus Border Patrol stations and the Air and Marine Operations Center. Most of the people doing that work are nowhere near a help desk. They are at a checkpoint, in a vehicle, at a remote station, or on a call connecting sites hours apart. When a device will not enroll or a room system will not join, nobody walks down the hall to get it fixed, and the work waits. We are hiring on two tracks. Mobility covers the devices people carry and the platform that manages them. VTC and unified communications covers room systems, conferencing platforms, and the calls that hold a distributed organization together. You will work alongside network engineers, cloud engineers, security staff, and field deployment teams, because most of what breaks here breaks at a seam between them. One thing is worth knowing before you apply. These roles sit close to the people who use the equipment, and the balance between hands-on support and engineering varies by role and by week. Whichever side you lean toward, this work gets judged on whether somebody in the field can do their job, not on how the design looks on paper. What Success Looks Like Objective 1: Keep devices and rooms working for people who cannot walk to a help desk Issues get resolved without the user explaining the same problem to three people. Problems at remote sites get solved remotely, or the site visit is planned rather than reactive. Somebody reporting a problem in non-technical terms gets an answer they can act on. Recurring failures get traced to a cause and closed, rather than reset and re-reported the following month. Objective 2: Cut the number of problems that reach a user at all Enrollment, provisioning, and updates happen without somebody touching each device. Configuration standards exist for endpoints and room systems, and what is deployed matches them. Capacity, licensing, and lifecycle get handled before somebody is blocked by one of them. Objective 3: Make the supported tools good enough that people stop working around them Users pick the supported device and the supported conferencing path because it works, not because policy tells them to. Requests for exceptions and one-off configurations fall, because the standard build covers the need. Where a workaround exists, you can say why, and either remove the cause or record it as a known limit. Where You'd Fit Two tracks, each with its own levels. The tracks are not a hierarchy: a VTC analyst is not a step above or below a mobility analyst. Pick the track that matches what you have done, tell us where you think you land, and we will talk about it. Mobility track Mobility Analyst. You work device, enrollment, and access issues inside established standards. You decide what you can resolve and what needs engineering, and you escalate before one user's problem becomes a site's problem. Mobility Engineer. You own the mobile estate's configuration, its management platform, and how changes reach devices. You make routine policy calls yourself and bring the ones that change what users experience to a review. VTC and unified communications track VTC Analyst. You work conferencing and room system issues, including supporting events where a failure is visible to everyone on the call. You decide what you can fix in the moment and what needs a design change. Senior VTC Engineer. You own how conferencing works across sites, including the parts that depend on the network and the cloud. You set the standards others deploy against and take the faults nobody has diagnosed yet. What You Bring Preferred Experience You have supported an endpoint or conferencing estate where the users could not come to you. You have run a device management platform at scale, including enrollment, policy, and update rollout. You have made conferencing work over constrained or unreliable network paths, and can describe what you changed to get there. You have supported events where a failure would have been visible to leadership, and can say what you do differently to prepare for one. You hold an active CBP BI, a fitness determination at another DHS component, or an active DoD clearance. Any of these shortens your start date. You have worked where device configuration is governed by security policy rather than by what would be convenient for users. You work across more than one vendor's platform and are not dependent on a single management console. A note on timing We are staffing this program now. If you already hold an active CBP BI and EOD, your start date is short and a $10,000 signing bonus comes with the role, payable after 90 days under standard terms. We would like to talk this week. If you do not, we can begin processing a CBP BI for you. That takes months rather than weeks, so applying now means joining a pipeline rather than starting immediately. We would rather tell you that up front than have you find out after you apply. Employee Benefits Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training
11/06/2026
Full time
Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Title : Insider Threat Monitoring Lead (CBP) Clearance : Active Top Secret with SCI Eligibility, and ability to obtain CBP Background Investigation (CBP BI) and EOD, active BI strongly preferred. We can begin processing for candidates who do not hold one. Citizenship : U.S. Citizenship required Location : Reston, VA - Hybrid, 3-5 days onsite Salary Range : $160,000-$185,000 Signing Bonus : $10,000 for candidates with an active CBP BI. Payable after 90 days; standard terms apply. Travel : Rare, as needed Required Certification(s) : Active CISSP The Role U.S. Customs and Border Protection runs continuous operations across more than 300 land, air, and sea ports of entry, plus Border Patrol stations and the Air and Marine Operations Center. The systems behind that mission hold sensitive law enforcement and personal data, and the people with legitimate access to it are, by definition, trusted. Most of the damage an insider threat program exists to catch does not come from a sophisticated outside attacker. It comes from someone who already has the access, and the work is telling the difference between normal use and misuse without treating every employee as a suspect. You lead that function. You will build and run the monitoring, analysis, and escalation process that catches insider risk early, working closely with the Security Operations Center Manager, human resources and security partners, and the incident response and digital forensics leads when a case moves from monitoring to action. One thing is worth knowing before you apply. This work carries real privacy and proportionality weight. Getting it wrong in either direction, missing real risk or treating ordinary behavior as suspicious, costs the program trust it needs to keep doing the job. What Success Looks Like Objective 1: Catch real insider risk without drowning in noise Cases that escalate to investigation are the ones that warrant it, not everything that triggered an alert. Patterns that matter, unusual access, data movement, or behavior change, get identified before they become an incident rather than after. Analysts working under you can explain why a case escalated in terms someone outside the program would find reasonable. Objective 2: Run the program in a way people can trust is fair Monitoring stays proportional to actual risk indicators rather than expanding because it is easy to collect more data. Cases get handled consistently regardless of who the subject is. When a case does not substantiate, it closes cleanly rather than leaving a lingering question mark on someone's record. Objective 3: Hand off cleanly when a case becomes something else Cases that move to investigation or incident response arrive with a record that the next team can act on immediately, not one they have to reconstruct. You know where insider threat monitoring's job ends and where forensics or HR involvement begins, and you do not sit on a case past that line. Findings that reveal a systemic gap, not just an individual case, reach the people who can fix the gap. Objective 4: Improve what the program watches for over time Detection logic gets tuned based on what real cases actually looked like, not left static after initial setup. Near misses and lessons learned change what the program monitors going forward. You can explain the program's current blind spots honestly, rather than presenting coverage as complete. What You Bring Minimum Required Experience Minimum of five (5) years of professional experience leading the cyber component of an insider threat program An in-depth understanding of the principles, methodologies, and best practices for establishing, operating, and maturing an insider threat program. Active Certified Information Systems Security Professional (CISSP) Bachelor's degree in computer science, Engineering, STEM, Information Technology, or Cybersecurity Preferred Experience You have run or been a senior analyst in an insider threat program, ideally in a federal or cleared environment where NITTF-aligned or equivalent standards applied. You have handled a case that involved coordination with HR, legal, or security partners, and can describe how you kept it proportional. You have tuned detection logic based on real case outcomes rather than left it as originally configured. You can explain a sensitive finding to people outside the program in terms they can act on without oversharing what they should not see. You hold an active CBP BI, a fitness determination at another DHS component, or an active DoD clearance. Any of these shortens your start date. You are comfortable working closely with human behavior data and understand the privacy and legal boundaries around it, not only the technical monitoring tools. Counter-intelligence experience Digital Forensics and related certifications User Activity Monitoring (UAM) User Behavior Analytics (UBA) A note on timing We are staffing this program now. If you already hold an active CBP BI and EOD, your start date is short and a $10,000 signing bonus comes with the role, payable after 90 days under standard terms. We would like to talk this week. If you do not, we can begin processing a CBP BI for you. That takes months rather than weeks, so applying now means joining a pipeline rather than starting immediately. We would rather tell you that up front than have you find out after you apply. Employee Benefits Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
11/06/2026
Full time
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Title : Insider Threat Monitoring Lead (CBP) Clearance : Active Top Secret with SCI Eligibility, and ability to obtain CBP Background Investigation (CBP BI) and EOD, active BI strongly preferred. We can begin processing for candidates who do not hold one. Citizenship : U.S. Citizenship required Location : Reston, VA - Hybrid, 3-5 days onsite Salary Range : $160,000-$185,000 Signing Bonus : $10,000 for candidates with an active CBP BI. Payable after 90 days; standard terms apply. Travel : Rare, as needed Required Certification(s) : Active CISSP The Role U.S. Customs and Border Protection runs continuous operations across more than 300 land, air, and sea ports of entry, plus Border Patrol stations and the Air and Marine Operations Center. The systems behind that mission hold sensitive law enforcement and personal data, and the people with legitimate access to it are, by definition, trusted. Most of the damage an insider threat program exists to catch does not come from a sophisticated outside attacker. It comes from someone who already has the access, and the work is telling the difference between normal use and misuse without treating every employee as a suspect. You lead that function. You will build and run the monitoring, analysis, and escalation process that catches insider risk early, working closely with the Security Operations Center Manager, human resources and security partners, and the incident response and digital forensics leads when a case moves from monitoring to action. One thing is worth knowing before you apply. This work carries real privacy and proportionality weight. Getting it wrong in either direction, missing real risk or treating ordinary behavior as suspicious, costs the program trust it needs to keep doing the job. What Success Looks Like Objective 1: Catch real insider risk without drowning in noise Cases that escalate to investigation are the ones that warrant it, not everything that triggered an alert. Patterns that matter, unusual access, data movement, or behavior change, get identified before they become an incident rather than after. Analysts working under you can explain why a case escalated in terms someone outside the program would find reasonable. Objective 2: Run the program in a way people can trust is fair Monitoring stays proportional to actual risk indicators rather than expanding because it is easy to collect more data. Cases get handled consistently regardless of who the subject is. When a case does not substantiate, it closes cleanly rather than leaving a lingering question mark on someone's record. Objective 3: Hand off cleanly when a case becomes something else Cases that move to investigation or incident response arrive with a record that the next team can act on immediately, not one they have to reconstruct. You know where insider threat monitoring's job ends and where forensics or HR involvement begins, and you do not sit on a case past that line. Findings that reveal a systemic gap, not just an individual case, reach the people who can fix the gap. Objective 4: Improve what the program watches for over time Detection logic gets tuned based on what real cases actually looked like, not left static after initial setup. Near misses and lessons learned change what the program monitors going forward. You can explain the program's current blind spots honestly, rather than presenting coverage as complete. What You Bring Minimum Required Experience Minimum of five (5) years of professional experience leading the cyber component of an insider threat program An in-depth understanding of the principles, methodologies, and best practices for establishing, operating, and maturing an insider threat program. Active Certified Information Systems Security Professional (CISSP) Bachelor's degree in computer science, Engineering, STEM, Information Technology, or Cybersecurity Preferred Experience You have run or been a senior analyst in an insider threat program, ideally in a federal or cleared environment where NITTF-aligned or equivalent standards applied. You have handled a case that involved coordination with HR, legal, or security partners, and can describe how you kept it proportional. You have tuned detection logic based on real case outcomes rather than left it as originally configured. You can explain a sensitive finding to people outside the program in terms they can act on without oversharing what they should not see. You hold an active CBP BI, a fitness determination at another DHS component, or an active DoD clearance. Any of these shortens your start date. You are comfortable working closely with human behavior data and understand the privacy and legal boundaries around it, not only the technical monitoring tools. Counter-intelligence experience Digital Forensics and related certifications User Activity Monitoring (UAM) User Behavior Analytics (UBA) A note on timing We are staffing this program now. If you already hold an active CBP BI and EOD, your start date is short and a $10,000 signing bonus comes with the role, payable after 90 days under standard terms. We would like to talk this week. If you do not, we can begin processing a CBP BI for you. That takes months rather than weeks, so applying now means joining a pipeline rather than starting immediately. We would rather tell you that up front than have you find out after you apply. Employee Benefits Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Title: Vulnerability Assessment (VA) Team Lead (CBP) Clearance: Active Top Secret Clearance with SCI eligibility, ability to obtain and maintain a CBP Background Investigation (CBP BI) and EOD, active BI strongly preferred. We can begin processing for candidates who do not hold one. Citizenship: U.S. Citizenship required Location: Reston, VA - Hybrid 3-5 days Salary Range: $155,000-175,000 Required Certification(s): One of the following: Active Certified Information Security Manager or Active Certified Information Security System Professional. The Role U.S. Customs and Border Protection runs continuous operations across more than 300 land, air, and sea ports of entry, plus Border Patrol stations and the Air and Marine Operations Center. Every system supporting that mission has weaknesses somewhere, and the job is not to pretend otherwise. It is to find them before someone else does, and to make sure the ones that matter actually get fixed instead of sitting on a list nobody prioritizes. You lead vulnerability assessment for this program. You will run the scanning, assessment, and prioritization work that finds weaknesses across the environment, and you own getting real remediation out of that work rather than a report that lands and goes nowhere. You will coordinate closely with the network, cloud, and security engineering teams who fix what you find, and hand confirmed exploitable findings to the threat hunt and incident response leads when they need that context. One thing is worth knowing before you apply. A vulnerability scan is the easy part. What makes this role hard is getting busy engineering teams to prioritize a fix for something that has not caused a problem yet, and doing that without becoming the person everyone tunes out. What Success Looks Like Objective 1: Find what actually matters, not just what a scanner flags Findings get prioritized by real exploitability and impact to this environment, not just a generic severity score. You can tell the difference between a finding that is theoretical and one that is genuinely reachable, and you communicate that difference. Assessment coverage reaches the systems that matter most, not just the ones that are easiest to scan. Objective 2: Get real remediation, not just a report Findings that get flagged as critical get fixed, and you can show the trend closing over time. Engineering teams bring you into the fix, not just the finding, when the remediation is not obvious. Recurring finding types get traced to a build standard or process gap and closed at the source. Objective 3: Keep the risk picture current and honest What is reported as open, in progress, or accepted matches reality at any given time. Accepted risk decisions are documented with a real justification, not left as findings that quietly stopped getting tracked. Leadership gets an accurate picture of the environment's exposure, including what has not been assessed yet. Objective 4: Build assessment practice that keeps pace with a changing environment New systems and changes get assessed before they go live, not discovered later in a routine scan. Assessment methodology improves based on what real findings turned out to matter, rather than staying static. You can name where assessment coverage is thin and what it would take to close that gap. What You Bring Minimum reuired experience One of the following certifications: CISM or CISSP Minimum of five (5) years' experience performing vulnerability assessments for an enterprise network, this includes endpoints, network devices, IOT devices, web applications, databases or wireless access points. Analyzing vulnerabilities and providing assessments and remediation instructions; knowledgeable to maintain a repository of VA application issues and report application issues to USG Government customers. Experience with applying Information Systems Security principles and methods. Experience with Application Security implementation; understanding of Firewall Management and Advanced Threat Protection; familiarity with Access Control, Authorization, Intrusion Prevention and Intrusion Detection. Familiar with FISMA compliance and Risk Management Framework.B Bachelor's Degree computer science, engineering, cybersecurity or STEM. Preferred Experience You have led vulnerability assessment or penetration testing work that produced findings engineering teams actually acted on. You have prioritized findings by real exploitability rather than by scanner severity score alone, and can describe how. You have worked in a federal or highly regulated environment and know what that adds to remediation timelines and risk acceptance processes. You have gotten a team to fix something that had not caused a visible problem yet, and can describe how you made the case. You hold an active CBP BI, a fitness determination at another DHS component, or an active DoD clearance. Any of these shortens your start date. Certifications such as OSCP, GPEN, or equivalent are useful, but they are not a substitute for having driven real remediation. Any of the foloowing certifications for VAT Analysts: GPEN, GWAPT, GSNA, GAWN, GWEB, GXPN, CEH, OSCP, OSEE, OSCE, OSWP. Leadership experience of a technical team. A note on timing We are staffing this program now. If you already hold an active CBP BI and EOD, your start date is short and a $10,000 signing bonus comes with the role, payable after 90 days under standard terms. We would like to talk this week. If you do not, we can begin processing a CBP BI for you. That takes months rather than weeks, so applying now means joining a pipeline rather than starting immediately. We would rather tell you that up front than have you find out after you apply. Employee Benefits Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
11/06/2026
Full time
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Title: Vulnerability Assessment (VA) Team Lead (CBP) Clearance: Active Top Secret Clearance with SCI eligibility, ability to obtain and maintain a CBP Background Investigation (CBP BI) and EOD, active BI strongly preferred. We can begin processing for candidates who do not hold one. Citizenship: U.S. Citizenship required Location: Reston, VA - Hybrid 3-5 days Salary Range: $155,000-175,000 Required Certification(s): One of the following: Active Certified Information Security Manager or Active Certified Information Security System Professional. The Role U.S. Customs and Border Protection runs continuous operations across more than 300 land, air, and sea ports of entry, plus Border Patrol stations and the Air and Marine Operations Center. Every system supporting that mission has weaknesses somewhere, and the job is not to pretend otherwise. It is to find them before someone else does, and to make sure the ones that matter actually get fixed instead of sitting on a list nobody prioritizes. You lead vulnerability assessment for this program. You will run the scanning, assessment, and prioritization work that finds weaknesses across the environment, and you own getting real remediation out of that work rather than a report that lands and goes nowhere. You will coordinate closely with the network, cloud, and security engineering teams who fix what you find, and hand confirmed exploitable findings to the threat hunt and incident response leads when they need that context. One thing is worth knowing before you apply. A vulnerability scan is the easy part. What makes this role hard is getting busy engineering teams to prioritize a fix for something that has not caused a problem yet, and doing that without becoming the person everyone tunes out. What Success Looks Like Objective 1: Find what actually matters, not just what a scanner flags Findings get prioritized by real exploitability and impact to this environment, not just a generic severity score. You can tell the difference between a finding that is theoretical and one that is genuinely reachable, and you communicate that difference. Assessment coverage reaches the systems that matter most, not just the ones that are easiest to scan. Objective 2: Get real remediation, not just a report Findings that get flagged as critical get fixed, and you can show the trend closing over time. Engineering teams bring you into the fix, not just the finding, when the remediation is not obvious. Recurring finding types get traced to a build standard or process gap and closed at the source. Objective 3: Keep the risk picture current and honest What is reported as open, in progress, or accepted matches reality at any given time. Accepted risk decisions are documented with a real justification, not left as findings that quietly stopped getting tracked. Leadership gets an accurate picture of the environment's exposure, including what has not been assessed yet. Objective 4: Build assessment practice that keeps pace with a changing environment New systems and changes get assessed before they go live, not discovered later in a routine scan. Assessment methodology improves based on what real findings turned out to matter, rather than staying static. You can name where assessment coverage is thin and what it would take to close that gap. What You Bring Minimum reuired experience One of the following certifications: CISM or CISSP Minimum of five (5) years' experience performing vulnerability assessments for an enterprise network, this includes endpoints, network devices, IOT devices, web applications, databases or wireless access points. Analyzing vulnerabilities and providing assessments and remediation instructions; knowledgeable to maintain a repository of VA application issues and report application issues to USG Government customers. Experience with applying Information Systems Security principles and methods. Experience with Application Security implementation; understanding of Firewall Management and Advanced Threat Protection; familiarity with Access Control, Authorization, Intrusion Prevention and Intrusion Detection. Familiar with FISMA compliance and Risk Management Framework.B Bachelor's Degree computer science, engineering, cybersecurity or STEM. Preferred Experience You have led vulnerability assessment or penetration testing work that produced findings engineering teams actually acted on. You have prioritized findings by real exploitability rather than by scanner severity score alone, and can describe how. You have worked in a federal or highly regulated environment and know what that adds to remediation timelines and risk acceptance processes. You have gotten a team to fix something that had not caused a visible problem yet, and can describe how you made the case. You hold an active CBP BI, a fitness determination at another DHS component, or an active DoD clearance. Any of these shortens your start date. Certifications such as OSCP, GPEN, or equivalent are useful, but they are not a substitute for having driven real remediation. Any of the foloowing certifications for VAT Analysts: GPEN, GWAPT, GSNA, GAWN, GWEB, GXPN, CEH, OSCP, OSEE, OSCE, OSWP. Leadership experience of a technical team. A note on timing We are staffing this program now. If you already hold an active CBP BI and EOD, your start date is short and a $10,000 signing bonus comes with the role, payable after 90 days under standard terms. We would like to talk this week. If you do not, we can begin processing a CBP BI for you. That takes months rather than weeks, so applying now means joining a pipeline rather than starting immediately. We would rather tell you that up front than have you find out after you apply. Employee Benefits Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Requisition #: 1853 Job Title: Network Security Engineer Location: Suitland, MD Clearance Level: Public Trust Job Description Agile Defense is seeking a Senior Network Security Engineer to support the agency as it moves away from its legacy ForeScout CounterACT NAC/NAM system and adopts Cisco Identity Services Engine (ISE) as the new access control platform. The engineer will help configure and manage Cisco ISE across the environment, handling AAA services, wired and wireless 802.1X authentication, device administration, and posture checks for users and devices. This role also supports the agency's modernization work by improving authentication processes, updating ISE policies, and strengthening identity-based access controls. The engineer will troubleshoot access issues, refine policy designs, and help ensure users and devices can connect securely and reliably as the organization completes its transition from ForeScout to Cisco ISE. Troubleshoot and resolve Cisco ISE issues across RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication. Deploy, configure, and maintain Cisco ISE running on two clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement. Support the agency's migration from ForeScout CounterACT to Cisco ISE, including reviewing legacy ForeScout policies, device groups, and access rules and mapping them into ISE policy sets. Provide general wireless support, including basic troubleshooting, wireless access workflows, and coordination with wireless infrastructure teams. Configure and support Cisco ISE integrations with Cisco 9800 WLCs, including guest/registration portals, wireless onboarding, and policy driven access control. Integrate and maintain Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based authorization, and directory based authentication workflows. Deploy, configure, and maintain Cisco ISE components, including: o Policy Sets, Authorization Profiles, and Authentication Rules o TACACS+ device administration o 802.1X for wired and wireless networks o Profiling, posture, and compliance policies o Certificate based authentication and PKI integrations Monitor security events using ISE logs, syslog, and performing root cause analysis for authentication and access issues. Manage identity integrations, enforce security policies, and tune configurations to support Zero Trust and improve user experience. Perform routine health checks, upgrades, migrations, and document changes through SOPs, engineering designs, and implementation procedures. Work closely with engineering, operations, and compliance teams while mentoring junior staff and contributing to knowledge sharing efforts. Education and Background Bachelor's degree in Information Technology, Cybersecurity, or a related field. Years of Experience Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE. Four (4) years of experience supporting identity centric or Zero Trust architectures with strong knowledge of segmentation, certificate management, and endpoint posture controls. Required Skills Senior Network Security Engineer responsible for designing, configuring, monitoring, and troubleshooting Cisco ISE as a NAC/NAM platform, including TACACS+/RADIUS services, device administration policies, and wired/wireless 802.1X authentication. Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE with expertise in: o Authentication and authorization policies (RADIUS/TACACS+) o 802.1X/EAP methods for wireless and wired access o Device profiling, posture checks, and endpoint compliance o Certificate based authentication (EAP TLS) and PKI integration o AAA integrations for switches, appliances, firewalls, and wireless controllers Experience working with Cisco ISE deployed on Cisco SNS 3715 appliances, preferably in a two node clustered, high availability setup. Understanding of ForeScout CounterACT, including legacy NAC/NAM policies, device classification, and access workflows, to support the migration to Cisco ISE Experience providing general wireless network support, including basic troubleshooting, controller interactions, and wireless access workflows. Hands on experience integrating Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based policy decisions, and directory based authentication. Experience supporting Cisco ISE integrations with Cisco 9800 Wireless LAN Controllers, including guest/registration page redirection and wireless onboarding. Experience migrating legacy NAC, RADIUS, or device authentication systems into Cisco ISE while aligning with Zero Trust principles. Solid understanding of telecommunications, network security, and Zero Trust best practices. Strong communication skills with the ability to explain Cisco ISE, NAC/NAM, and AAA concepts to both technical and non technical audiences. Preferred Skills Preferred certifications: Cisco CCNP Security, Cisco ISE Specialist, or similar identity/security certifications. Working Conditions On-site 5 days a week in Suitland, Maryland In addition, Agile Defense invests in its employees beyond just compensation. Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
11/05/2026
Full time
Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Requisition #: 1853 Job Title: Network Security Engineer Location: Suitland, MD Clearance Level: Public Trust Job Description Agile Defense is seeking a Senior Network Security Engineer to support the agency as it moves away from its legacy ForeScout CounterACT NAC/NAM system and adopts Cisco Identity Services Engine (ISE) as the new access control platform. The engineer will help configure and manage Cisco ISE across the environment, handling AAA services, wired and wireless 802.1X authentication, device administration, and posture checks for users and devices. This role also supports the agency's modernization work by improving authentication processes, updating ISE policies, and strengthening identity-based access controls. The engineer will troubleshoot access issues, refine policy designs, and help ensure users and devices can connect securely and reliably as the organization completes its transition from ForeScout to Cisco ISE. Troubleshoot and resolve Cisco ISE issues across RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication. Deploy, configure, and maintain Cisco ISE running on two clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement. Support the agency's migration from ForeScout CounterACT to Cisco ISE, including reviewing legacy ForeScout policies, device groups, and access rules and mapping them into ISE policy sets. Provide general wireless support, including basic troubleshooting, wireless access workflows, and coordination with wireless infrastructure teams. Configure and support Cisco ISE integrations with Cisco 9800 WLCs, including guest/registration portals, wireless onboarding, and policy driven access control. Integrate and maintain Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based authorization, and directory based authentication workflows. Deploy, configure, and maintain Cisco ISE components, including: o Policy Sets, Authorization Profiles, and Authentication Rules o TACACS+ device administration o 802.1X for wired and wireless networks o Profiling, posture, and compliance policies o Certificate based authentication and PKI integrations Monitor security events using ISE logs, syslog, and performing root cause analysis for authentication and access issues. Manage identity integrations, enforce security policies, and tune configurations to support Zero Trust and improve user experience. Perform routine health checks, upgrades, migrations, and document changes through SOPs, engineering designs, and implementation procedures. Work closely with engineering, operations, and compliance teams while mentoring junior staff and contributing to knowledge sharing efforts. Education and Background Bachelor's degree in Information Technology, Cybersecurity, or a related field. Years of Experience Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE. Four (4) years of experience supporting identity centric or Zero Trust architectures with strong knowledge of segmentation, certificate management, and endpoint posture controls. Required Skills Senior Network Security Engineer responsible for designing, configuring, monitoring, and troubleshooting Cisco ISE as a NAC/NAM platform, including TACACS+/RADIUS services, device administration policies, and wired/wireless 802.1X authentication. Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE with expertise in: o Authentication and authorization policies (RADIUS/TACACS+) o 802.1X/EAP methods for wireless and wired access o Device profiling, posture checks, and endpoint compliance o Certificate based authentication (EAP TLS) and PKI integration o AAA integrations for switches, appliances, firewalls, and wireless controllers Experience working with Cisco ISE deployed on Cisco SNS 3715 appliances, preferably in a two node clustered, high availability setup. Understanding of ForeScout CounterACT, including legacy NAC/NAM policies, device classification, and access workflows, to support the migration to Cisco ISE Experience providing general wireless network support, including basic troubleshooting, controller interactions, and wireless access workflows. Hands on experience integrating Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based policy decisions, and directory based authentication. Experience supporting Cisco ISE integrations with Cisco 9800 Wireless LAN Controllers, including guest/registration page redirection and wireless onboarding. Experience migrating legacy NAC, RADIUS, or device authentication systems into Cisco ISE while aligning with Zero Trust principles. Solid understanding of telecommunications, network security, and Zero Trust best practices. Strong communication skills with the ability to explain Cisco ISE, NAC/NAM, and AAA concepts to both technical and non technical audiences. Preferred Skills Preferred certifications: Cisco CCNP Security, Cisco ISE Specialist, or similar identity/security certifications. Working Conditions On-site 5 days a week in Suitland, Maryland In addition, Agile Defense invests in its employees beyond just compensation. Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Description Job Description Impinj delivers the Physical Intelligence that connects the physical world to the AI-powered digital world, fueling automated workflows and improving consumer experiences. From retail merchandise and groceries to packages and shipping pallets, Impinj products and solutions identify and track tens of billions of everyday items, providing real-time operational insights about every item enterprises make, move and sell. We are, quite literally, the eyes and ears of smart enterprise systems. Come help us build technology and solutions that enable businesses to visualize everything, waste nothing and act instantly. Team Overview: This role is a key technical bridge between Impinj and our global partners and customers. In addition to customer support, you'll drive technical enablement; creating the tools, training, and reference materials that help partners successfully develop RAIN RFID inlay and tag solutions using Impinj's Endpoint ICs. Your engineering background means you'll engage at a deep technical level, lead complex issue resolution, and represent the voice of the customer back into Impinj. What You Will Do: Be a RAIN RFID product technical domain specialist for our global partners and field sales Deliver high-quality Hardware and RF technical support to customers with excellence in both content and responsiveness Engage with technical leadership at customers and partners on product features, capabilities, and applied standard methodologies for the manufacture and use of RAIN RFID inlays and tags Generate and maintain technical enablement tools for new and existing products: technical documents, application notes, training, videos, reference designs, demonstrations, and testing Identify and document applied knowledge of products and benchmark against competition Work with a cross functional group to build technology demonstrations or proof of concepts that showcase our RAIN RFID End Point IC's capabilities Lead a team-based effort to solve complex customer issues by collecting detailed customer information, capturing tag data using RF and other test equipment, analyzing results, and collaborating with senior technical leaders within Impinj For every customer case develop an integrated plan to root cause the issue, and communicate regularly with our customers and the internal team Willingness and ability to work outside of normal business hours (e.g. on-call or a flexible schedule); our customers are global and sometimes require help in different time zones. We'll work with you to find an approach that fits What You Will Bring: Bachelor's degree in electrical engineering or related field of study and 8+ years of experience in RF/silicon engineering or related role, or equivalent combination of education and experience A structured, analytical approach and strong technical problem-solving skills Effective communication skills are required. You should have experience having technical conversations with customers via email, phone, and live presentations. This helps represent Impinj and our platform to technical audiences inside and outside the company. Detail-oriented writing skills Curiosity to learn new skills and tackle difficult problems to find solutions Proficiency working with data analytic software and communicating complex data in an understandable fashion to internal and external audiences Proven experience working with customers to understand requirements and translate these into technical solutions A proactive mindset and the ability to respond to customer needs at the pace of business Compensation & Benefits: The benefits listed below may vary depending on the nature of your employment with Impinj and the country where you work. The typical base pay range for this role across the US is $131,200 - $196,800 . Individual base pay depends on various factors such as complexity and responsibility of role, job duties, requirements, and relevant experience and skills. Both market wage data and the mid-point of the pay range is reviewed and used as the starting point for all new hire offers. Offers are made within the base pay range applicable at the time. At Impinj certain roles are eligible for additional rewards, including merit increases, annual bonus and stock. These awards are allocated based on individual performance. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role. US based employees have access to healthcare benefits; a 401(k) plan and company match among others. For a more comprehensive list of US employment benefits, click here. US Export Controls: This position has access to technologies or data subject to U.S. export control regulations. Under these laws, the release or transfer of export-controlled items or information to individuals who are not classified as "U.S. persons" (as defined by Immigration & Nationality Act) may require prior authorization from the U.S. government. We may require additional documentation related to national identity to determine whether an export compliance license is required for any export-controlled items. This information is requested solely for the purpose of complying with U.S. export control laws and will not be used for other purposes. Learn more about export compliance here. Why work at Impinj: Know you're making a difference. Competitive benefits. Support for remote work or a desk with a view. Weekly Q&A sessions with our executive team. Impinj provides an environment that fosters openness and innovation and is developing technology that delivers a positive impact on the world. Collaboration and teamwork are highly valued, and accomplishments are duly celebrated. We have an open paid time-off policy paired with a respect for work/life balance. Our headquarters is located in Seattle with spectacular views of the Olympics, Lake Union, and Mt Baker, which can be enjoyed from our rooftop deck. Our Brazilian site is in Porto Alegre, Rio Grande do Sul state, at "Tecnopuc," a technology park that offers a very nice workplace for the development of groundbreaking technologies. Impinj is committed to creating a diverse and inclusive work environment and welcomes applicants from all backgrounds. We are an equal opportunity employer and do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
11/04/2026
Full time
Job Description Job Description Impinj delivers the Physical Intelligence that connects the physical world to the AI-powered digital world, fueling automated workflows and improving consumer experiences. From retail merchandise and groceries to packages and shipping pallets, Impinj products and solutions identify and track tens of billions of everyday items, providing real-time operational insights about every item enterprises make, move and sell. We are, quite literally, the eyes and ears of smart enterprise systems. Come help us build technology and solutions that enable businesses to visualize everything, waste nothing and act instantly. Team Overview: This role is a key technical bridge between Impinj and our global partners and customers. In addition to customer support, you'll drive technical enablement; creating the tools, training, and reference materials that help partners successfully develop RAIN RFID inlay and tag solutions using Impinj's Endpoint ICs. Your engineering background means you'll engage at a deep technical level, lead complex issue resolution, and represent the voice of the customer back into Impinj. What You Will Do: Be a RAIN RFID product technical domain specialist for our global partners and field sales Deliver high-quality Hardware and RF technical support to customers with excellence in both content and responsiveness Engage with technical leadership at customers and partners on product features, capabilities, and applied standard methodologies for the manufacture and use of RAIN RFID inlays and tags Generate and maintain technical enablement tools for new and existing products: technical documents, application notes, training, videos, reference designs, demonstrations, and testing Identify and document applied knowledge of products and benchmark against competition Work with a cross functional group to build technology demonstrations or proof of concepts that showcase our RAIN RFID End Point IC's capabilities Lead a team-based effort to solve complex customer issues by collecting detailed customer information, capturing tag data using RF and other test equipment, analyzing results, and collaborating with senior technical leaders within Impinj For every customer case develop an integrated plan to root cause the issue, and communicate regularly with our customers and the internal team Willingness and ability to work outside of normal business hours (e.g. on-call or a flexible schedule); our customers are global and sometimes require help in different time zones. We'll work with you to find an approach that fits What You Will Bring: Bachelor's degree in electrical engineering or related field of study and 8+ years of experience in RF/silicon engineering or related role, or equivalent combination of education and experience A structured, analytical approach and strong technical problem-solving skills Effective communication skills are required. You should have experience having technical conversations with customers via email, phone, and live presentations. This helps represent Impinj and our platform to technical audiences inside and outside the company. Detail-oriented writing skills Curiosity to learn new skills and tackle difficult problems to find solutions Proficiency working with data analytic software and communicating complex data in an understandable fashion to internal and external audiences Proven experience working with customers to understand requirements and translate these into technical solutions A proactive mindset and the ability to respond to customer needs at the pace of business Compensation & Benefits: The benefits listed below may vary depending on the nature of your employment with Impinj and the country where you work. The typical base pay range for this role across the US is $131,200 - $196,800 . Individual base pay depends on various factors such as complexity and responsibility of role, job duties, requirements, and relevant experience and skills. Both market wage data and the mid-point of the pay range is reviewed and used as the starting point for all new hire offers. Offers are made within the base pay range applicable at the time. At Impinj certain roles are eligible for additional rewards, including merit increases, annual bonus and stock. These awards are allocated based on individual performance. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role. US based employees have access to healthcare benefits; a 401(k) plan and company match among others. For a more comprehensive list of US employment benefits, click here. US Export Controls: This position has access to technologies or data subject to U.S. export control regulations. Under these laws, the release or transfer of export-controlled items or information to individuals who are not classified as "U.S. persons" (as defined by Immigration & Nationality Act) may require prior authorization from the U.S. government. We may require additional documentation related to national identity to determine whether an export compliance license is required for any export-controlled items. This information is requested solely for the purpose of complying with U.S. export control laws and will not be used for other purposes. Learn more about export compliance here. Why work at Impinj: Know you're making a difference. Competitive benefits. Support for remote work or a desk with a view. Weekly Q&A sessions with our executive team. Impinj provides an environment that fosters openness and innovation and is developing technology that delivers a positive impact on the world. Collaboration and teamwork are highly valued, and accomplishments are duly celebrated. We have an open paid time-off policy paired with a respect for work/life balance. Our headquarters is located in Seattle with spectacular views of the Olympics, Lake Union, and Mt Baker, which can be enjoyed from our rooftop deck. Our Brazilian site is in Porto Alegre, Rio Grande do Sul state, at "Tecnopuc," a technology park that offers a very nice workplace for the development of groundbreaking technologies. Impinj is committed to creating a diverse and inclusive work environment and welcomes applicants from all backgrounds. We are an equal opportunity employer and do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Job Description Job Description Description: Hybrid 2 on 3 off in Charlotte, NC Our client seeks a Unified Endpoint Engineer specializing in Microsoft Endpoint Configuration Manager (MECM/SCCM) to engineer, implement, maintain, and support enterprise Unified Endpoint Management services. The role covers Windows endpoint lifecycle management including provisioning and upgrades, application deployment, patching, configuration management, automation, security compliance, troubleshooting, and support for Microsoft Intune, co-management, modern provisioning, and mobile device management. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $40.00 to $50.00/hr. w2 Responsibilities: Administer, maintain, and enhance enterprise endpoint management solutions using Microsoft Endpoint Configuration Manager (MECM/SCCM) and related technologies. Engineer and support Windows 11 provisioning, operating system deployment, feature upgrades, configuration management, and device lifecycle processes across the enterprise. Package, test, deploy, maintain, and troubleshoot enterprise applications using MECM/SCCM, PowerShell, and other endpoint management technologies. Coordinate and execute monthly Windows security patching and endpoint remediation activities, including testing, deployment, troubleshooting, compliance monitoring, and resolution of deployment failures. Develop, maintain, test, and troubleshoot PowerShell scripts and other automation used for endpoint administration, software deployment, configuration management, reporting, and remediation. Configure, test, deploy, and maintain Group Policy Objects (GPOs), endpoint configuration policies, compliance policies, and related controls in accordance with enterprise standards and security requirements. Support Microsoft Intune and co-management capabilities, including device enrollment, configuration profiles, compliance policies, application deployment, and migration of endpoint management capabilities to modern management platforms. Monitor endpoint health, deployment status, patch compliance, configuration compliance, and other operational metrics; investigate issues and implement corrective actions as needed. Troubleshoot complex Windows endpoint issues involving operating systems, applications, registry settings, services, file systems, Active Directory, Group Policy, networking, security controls, and endpoint management technologies. Support endpoint security and vulnerability management activities by implementing approved security configurations, remediating vulnerabilities, and assisting with zero-trust, PCI, and other enterprise security requirements. Support management of mobile and Apple devices using technologies such as Microsoft Intune, Apple Business Manager, Mobile Device Management (MDM), and Mobile Application Management (MAM). Participate in testing and implementation of endpoint changes through established change management processes, including documenting changes, evaluating implementation impacts, coordinating deployments, and supporting rollback or remediation activities when necessary. Participate in endpoint technology projects and coordinate technical activities with Cybersecurity, Identity, Service Desk, Infrastructure, Networking, Application Teams, departmental IT liaisons, vendors, and other stakeholders. Create and maintain technical documentation, operational procedures, deployment documentation, troubleshooting guides, and knowledge articles supporting endpoint management services. Provide technical guidance and assistance to Service Desk personnel, departmental technology staff, other UEM team members, and internal customers regarding endpoint management technologies and issues. Evaluate endpoint management technologies and identify opportunities to improve automation, reliability, security, user experience, and operational efficiency. Use modern productivity and AI-assisted tools, where appropriate, to improve scripting, documentation, troubleshooting, knowledge sharing, and operational efficiency. Experience Requirements: Three (3) or more years of progressively responsible IT experience involving enterprise endpoint management, systems administration, desktop engineering, or related technologies. Hands-on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in an enterprise environment. Experience supporting Windows 10/11 endpoint lifecycle activities, including operating system deployment or provisioning, patch management, software deployment, and troubleshooting. Experience packaging, deploying, and troubleshooting enterprise Windows applications. Proficiency with PowerShell scripting for endpoint administration, automation, troubleshooting, and remediation. Experience administering or supporting Active Directory and Group Policy in an enterprise environment. Working knowledge of enterprise endpoint security, configuration management, and vulnerability remediation practices. Experience troubleshooting endpoint issues across Windows operating systems, applications, networking, identity, and endpoint management technologies. Preferred: Five (5) or more years of IT experience in a large enterprise supporting 5,000+ users. Preferred: Experience with Microsoft Intune, co-management, Windows Autopilot, Microsoft Entra ID, and Apple Business Manager. Preferred: Experience with Endpoint Analytics, proactive remediations, compliance reporting, and patch reporting. Preferred: Experience supporting enterprise Windows OS upgrades or large-scale endpoint transformation initiatives. Preferred: Experience implementing endpoint configurations supporting PCI or other industry security and compliance requirements. Preferred: Microsoft certifications related to Endpoint Administration, Intune, Microsoft 365, or Azure/Entra. Preferred: Experience using AI-assisted administrative tools to improve scripting, documentation, troubleshooting, or operational efficiency. Education Requirements: High School Graduate or Equivalent and five (5) years of related work experience; OR Two-Year College Degree and three (3) years of related work experience; OR Bachelor's Degree and one (1) year of related work experience; OR Master's Degree; OR An equivalent combination of education and relevant experience that enables successful performance of essential duties. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes . click apply for full job details
11/03/2026
Full time
Job Description Job Description Description: Hybrid 2 on 3 off in Charlotte, NC Our client seeks a Unified Endpoint Engineer specializing in Microsoft Endpoint Configuration Manager (MECM/SCCM) to engineer, implement, maintain, and support enterprise Unified Endpoint Management services. The role covers Windows endpoint lifecycle management including provisioning and upgrades, application deployment, patching, configuration management, automation, security compliance, troubleshooting, and support for Microsoft Intune, co-management, modern provisioning, and mobile device management. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $40.00 to $50.00/hr. w2 Responsibilities: Administer, maintain, and enhance enterprise endpoint management solutions using Microsoft Endpoint Configuration Manager (MECM/SCCM) and related technologies. Engineer and support Windows 11 provisioning, operating system deployment, feature upgrades, configuration management, and device lifecycle processes across the enterprise. Package, test, deploy, maintain, and troubleshoot enterprise applications using MECM/SCCM, PowerShell, and other endpoint management technologies. Coordinate and execute monthly Windows security patching and endpoint remediation activities, including testing, deployment, troubleshooting, compliance monitoring, and resolution of deployment failures. Develop, maintain, test, and troubleshoot PowerShell scripts and other automation used for endpoint administration, software deployment, configuration management, reporting, and remediation. Configure, test, deploy, and maintain Group Policy Objects (GPOs), endpoint configuration policies, compliance policies, and related controls in accordance with enterprise standards and security requirements. Support Microsoft Intune and co-management capabilities, including device enrollment, configuration profiles, compliance policies, application deployment, and migration of endpoint management capabilities to modern management platforms. Monitor endpoint health, deployment status, patch compliance, configuration compliance, and other operational metrics; investigate issues and implement corrective actions as needed. Troubleshoot complex Windows endpoint issues involving operating systems, applications, registry settings, services, file systems, Active Directory, Group Policy, networking, security controls, and endpoint management technologies. Support endpoint security and vulnerability management activities by implementing approved security configurations, remediating vulnerabilities, and assisting with zero-trust, PCI, and other enterprise security requirements. Support management of mobile and Apple devices using technologies such as Microsoft Intune, Apple Business Manager, Mobile Device Management (MDM), and Mobile Application Management (MAM). Participate in testing and implementation of endpoint changes through established change management processes, including documenting changes, evaluating implementation impacts, coordinating deployments, and supporting rollback or remediation activities when necessary. Participate in endpoint technology projects and coordinate technical activities with Cybersecurity, Identity, Service Desk, Infrastructure, Networking, Application Teams, departmental IT liaisons, vendors, and other stakeholders. Create and maintain technical documentation, operational procedures, deployment documentation, troubleshooting guides, and knowledge articles supporting endpoint management services. Provide technical guidance and assistance to Service Desk personnel, departmental technology staff, other UEM team members, and internal customers regarding endpoint management technologies and issues. Evaluate endpoint management technologies and identify opportunities to improve automation, reliability, security, user experience, and operational efficiency. Use modern productivity and AI-assisted tools, where appropriate, to improve scripting, documentation, troubleshooting, knowledge sharing, and operational efficiency. Experience Requirements: Three (3) or more years of progressively responsible IT experience involving enterprise endpoint management, systems administration, desktop engineering, or related technologies. Hands-on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in an enterprise environment. Experience supporting Windows 10/11 endpoint lifecycle activities, including operating system deployment or provisioning, patch management, software deployment, and troubleshooting. Experience packaging, deploying, and troubleshooting enterprise Windows applications. Proficiency with PowerShell scripting for endpoint administration, automation, troubleshooting, and remediation. Experience administering or supporting Active Directory and Group Policy in an enterprise environment. Working knowledge of enterprise endpoint security, configuration management, and vulnerability remediation practices. Experience troubleshooting endpoint issues across Windows operating systems, applications, networking, identity, and endpoint management technologies. Preferred: Five (5) or more years of IT experience in a large enterprise supporting 5,000+ users. Preferred: Experience with Microsoft Intune, co-management, Windows Autopilot, Microsoft Entra ID, and Apple Business Manager. Preferred: Experience with Endpoint Analytics, proactive remediations, compliance reporting, and patch reporting. Preferred: Experience supporting enterprise Windows OS upgrades or large-scale endpoint transformation initiatives. Preferred: Experience implementing endpoint configurations supporting PCI or other industry security and compliance requirements. Preferred: Microsoft certifications related to Endpoint Administration, Intune, Microsoft 365, or Azure/Entra. Preferred: Experience using AI-assisted administrative tools to improve scripting, documentation, troubleshooting, or operational efficiency. Education Requirements: High School Graduate or Equivalent and five (5) years of related work experience; OR Two-Year College Degree and three (3) years of related work experience; OR Bachelor's Degree and one (1) year of related work experience; OR Master's Degree; OR An equivalent combination of education and relevant experience that enables successful performance of essential duties. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes . click apply for full job details
Job Description Job Description About Mainspring Mainspring Energy manufactures and delivers fuel-flexible, low-emissions local power solutions that rapidly add new capacity and deliver reliable, affordable, and sustainable electric power. The company began commercial shipments of its Mainspring Linear Generators in 2020 and today has hundreds of megawatts in advanced development and field operations for leading Fortune 500 companies, data centers, and utilities. Mainspring also partners with global energy leaders including AEP, NextEra Energy Resources, Schneider Electric, and more. The core values that ground our work, guide our decisions, and connect us together: Pragmatic Optimism Excellence without Ego Proactive Collaboration Job Overview Mainspring Energy has fundamentally redefined onsite power generation. Our breakthrough product-the Mainspring Linear Generator (LGen)-is a completely new category of energy technology. Distinct from an engine, turbine, or fuel cell, the LGen directly converts straight-line motion into electricity using a low-temperature, non-combustion thermochemical reaction. With only two moving parts per core, a frictionless air-bearing system, and zero-flame chemical conversions, we deliver over 46% net AC electrical efficiency. More importantly, it is the world's only commercially available technology capable of real-time fuel-switching under load, seamlessly transitioning between natural gas, biogas/RNG, propane, hydrogen, and ammonia. Behind this mechanical simplicity lies an incredibly complex software abstraction layer. To achieve dynamic load-following, sub-millisecond grid synchronization, and real-time thermochemical adaptive fuel mixing, our proprietary controls manage thousands of high-frequency variables simultaneously. As a Senior Staff Software Test & Automation Engineer, you will architect the core validation and automation frameworks that ensure this distributed energy asset operates with 100% safety and utility-scale reliability. You will own the strategy for testing the intersection of real-time embedded software, predictive control loops, and multi-fuel dynamics. Responsibilities As a principal driver of our Software Test team, you will: Architect Automation & Test Infrastructure: Design, scale, and maintain custom hardware test beds alongside robust, reusable test automation frameworks, software tools, and continuous integration/continuous deployment (CI/CD) pipelines System Validation & Integration: Develop comprehensive test plans, test cases, technical test approaches, and traceability matrices to validate complex hardware/software integrations and resolve system-level bottlenecks Root Cause & Failure Analysis: Lead deep-dive failure analysis, debug and diagnose issues found during testing, and champion risk mitigation strategies to ensure test stability and environmental reliability Strategic Coverage: Drive risk-based testing strategies, performing risk analysis to ensure 100% comprehensive test coverage of all critical-path functionalities Cross-Functional Collaboration: Partner with development teams and support cross-functional engineering initiatives to diagnose system anomalies and vet new technologies Qualifications (Must Haves) Experience & Education: Bachelor's degree in Computer Science or a related field with 10+ years of professional experience, or a Master's degree with 9+ years in an SDET, Embedded Test, or Software Engineering role Strategic Automation Leadership: A proven track record of leading complex automation projects from design to implementation, combined with the foundational ability to perform deep-dive manual exploratory testing and technical test case design Technical Versatility: Strong hands-on software development experience in Python and C++, with the flexibility to navigate, debug, and contribute to diverse codebases (including Bash scripting) as the project requires AI Workflow Ownership: Demonstrated proficiency in leveraging AI coding assistants as a force multiplier for productivity, combined with the professional judgment to challenge, validate, and expand upon AI-generated solutions to ensure system integrity and long-term maintainability Domain Expertise: Professional experience testing and validating systems in at least three of the following areas: Cloud computing, embedded systems, networking, IoT with RTOS, controls, simulations (MIL/SIL/PIL), emulators, or complex algorithms Desirable Qualifications DevOps & Infrastructure: Experience working with containerization and orchestration tools such as Docker, Kubernetes, and configuration management via Ansible Industry Tooling: High proficiency with common industry test and development workflows like Jira, Xray, GitLab, or equivalent tools This is a hybrid position (onsite + remote) at our Menlo Park HQ . It will require you to be onsite as required to perform testing, troubleshooting, manufacturing support, etc. The salary will be adjusted to reflect local market conditions based on employee location as well as the experience of the employee. Along with base salary, Mainspring offers pre-IPO company equity through Restricted Stock Units (RSUs) + benefits. Does your experience not meet all of our posted requirements? Studies have shown that some people are less likely to apply to positions unless they meet every listed requirement. At Mainspring, we are committed to building a diverse, inclusive, flexible, and collaborative environment, so if you want to help us transition the world to clean and affordable electricity, and don't meet all posted requirements for a particular role, we'd still love to hear from you. Mainspring can sometimes be flexible enough to shift responsibilities for the right person, or otherwise identify open or upcoming roles that may better fit your professional background. In more traditional words, Mainspring Energy, Inc is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. This compensation and benefits information is based on Mainspring Energy's estimate as of the date of publication and may be modified in the future. We generally do not negotiate on salary once we have made an offer. The level of pay within the range will depend on a variety of job-related factors that may include location, relevant prior experience and/or education, or particular skills and expertise. New hires joining the company tend to be paid within the starting base pay range noted above, with opportunities to increase pay over time based on development of additional skills, competencies, and company-specific knowledge. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
10/26/2026
Full time
Job Description Job Description About Mainspring Mainspring Energy manufactures and delivers fuel-flexible, low-emissions local power solutions that rapidly add new capacity and deliver reliable, affordable, and sustainable electric power. The company began commercial shipments of its Mainspring Linear Generators in 2020 and today has hundreds of megawatts in advanced development and field operations for leading Fortune 500 companies, data centers, and utilities. Mainspring also partners with global energy leaders including AEP, NextEra Energy Resources, Schneider Electric, and more. The core values that ground our work, guide our decisions, and connect us together: Pragmatic Optimism Excellence without Ego Proactive Collaboration Job Overview Mainspring Energy has fundamentally redefined onsite power generation. Our breakthrough product-the Mainspring Linear Generator (LGen)-is a completely new category of energy technology. Distinct from an engine, turbine, or fuel cell, the LGen directly converts straight-line motion into electricity using a low-temperature, non-combustion thermochemical reaction. With only two moving parts per core, a frictionless air-bearing system, and zero-flame chemical conversions, we deliver over 46% net AC electrical efficiency. More importantly, it is the world's only commercially available technology capable of real-time fuel-switching under load, seamlessly transitioning between natural gas, biogas/RNG, propane, hydrogen, and ammonia. Behind this mechanical simplicity lies an incredibly complex software abstraction layer. To achieve dynamic load-following, sub-millisecond grid synchronization, and real-time thermochemical adaptive fuel mixing, our proprietary controls manage thousands of high-frequency variables simultaneously. As a Senior Staff Software Test & Automation Engineer, you will architect the core validation and automation frameworks that ensure this distributed energy asset operates with 100% safety and utility-scale reliability. You will own the strategy for testing the intersection of real-time embedded software, predictive control loops, and multi-fuel dynamics. Responsibilities As a principal driver of our Software Test team, you will: Architect Automation & Test Infrastructure: Design, scale, and maintain custom hardware test beds alongside robust, reusable test automation frameworks, software tools, and continuous integration/continuous deployment (CI/CD) pipelines System Validation & Integration: Develop comprehensive test plans, test cases, technical test approaches, and traceability matrices to validate complex hardware/software integrations and resolve system-level bottlenecks Root Cause & Failure Analysis: Lead deep-dive failure analysis, debug and diagnose issues found during testing, and champion risk mitigation strategies to ensure test stability and environmental reliability Strategic Coverage: Drive risk-based testing strategies, performing risk analysis to ensure 100% comprehensive test coverage of all critical-path functionalities Cross-Functional Collaboration: Partner with development teams and support cross-functional engineering initiatives to diagnose system anomalies and vet new technologies Qualifications (Must Haves) Experience & Education: Bachelor's degree in Computer Science or a related field with 10+ years of professional experience, or a Master's degree with 9+ years in an SDET, Embedded Test, or Software Engineering role Strategic Automation Leadership: A proven track record of leading complex automation projects from design to implementation, combined with the foundational ability to perform deep-dive manual exploratory testing and technical test case design Technical Versatility: Strong hands-on software development experience in Python and C++, with the flexibility to navigate, debug, and contribute to diverse codebases (including Bash scripting) as the project requires AI Workflow Ownership: Demonstrated proficiency in leveraging AI coding assistants as a force multiplier for productivity, combined with the professional judgment to challenge, validate, and expand upon AI-generated solutions to ensure system integrity and long-term maintainability Domain Expertise: Professional experience testing and validating systems in at least three of the following areas: Cloud computing, embedded systems, networking, IoT with RTOS, controls, simulations (MIL/SIL/PIL), emulators, or complex algorithms Desirable Qualifications DevOps & Infrastructure: Experience working with containerization and orchestration tools such as Docker, Kubernetes, and configuration management via Ansible Industry Tooling: High proficiency with common industry test and development workflows like Jira, Xray, GitLab, or equivalent tools This is a hybrid position (onsite + remote) at our Menlo Park HQ . It will require you to be onsite as required to perform testing, troubleshooting, manufacturing support, etc. The salary will be adjusted to reflect local market conditions based on employee location as well as the experience of the employee. Along with base salary, Mainspring offers pre-IPO company equity through Restricted Stock Units (RSUs) + benefits. Does your experience not meet all of our posted requirements? Studies have shown that some people are less likely to apply to positions unless they meet every listed requirement. At Mainspring, we are committed to building a diverse, inclusive, flexible, and collaborative environment, so if you want to help us transition the world to clean and affordable electricity, and don't meet all posted requirements for a particular role, we'd still love to hear from you. Mainspring can sometimes be flexible enough to shift responsibilities for the right person, or otherwise identify open or upcoming roles that may better fit your professional background. In more traditional words, Mainspring Energy, Inc is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. This compensation and benefits information is based on Mainspring Energy's estimate as of the date of publication and may be modified in the future. We generally do not negotiate on salary once we have made an offer. The level of pay within the range will depend on a variety of job-related factors that may include location, relevant prior experience and/or education, or particular skills and expertise. New hires joining the company tend to be paid within the starting base pay range noted above, with opportunities to increase pay over time based on development of additional skills, competencies, and company-specific knowledge. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Family: Technology Consulting Travel Required: Up to 10% Clearance Required: Active Secret What You Will Do: Lead planning, execution, and delivery of technical projects across data, analytics, and system implementation workstreams. Coordi nate between client stakeholders, technical teams, and leadership. Define project scope, timelines, milestones, and resource requirements aligned to client objectives. Monitor day-to-day project activities, ensuring deliverables are completed on time and within budget. Facilitate Agile ceremonies or project status meetings, including sprint planning, stand-ups, and retrospectives. Identify , track, and mitigate risks, issues, and dependencies across multiple workstreams. Translate business requirements into actionable tasks and technical requirements for delivery teams. Drive stakeholder engagement, providing clear status updates, executive briefings, and performance reports. Ensure adherence to governance, compliance, and quality standards throughout the project lifecycle . Support change management efforts, including user adoption, training coordination, and transition planning. What You Will Need: An ACTIVE and MAINTAINED "SECRET" Federal or DoD security clearance Bachelor's degree FIVE (5) or more years of experience managing technical projects in a consulting, government, or enterprise environment Experience leading cross-functional teams including developers, data engineers, and business analysts Experience tracking budgets, managing resources, and forecasting project delivery timelines Ability to work onsite in a client environment as required What Would Be Nice To Have: PMP, Certified Scrum Master (CSM), PMI-ACP, or other relevant certification (preferred) Experience supporting Navy clients or familiarity with Navy operations, systems, or organizational structures (preferred) Strong understanding of project management methodologies (Agile, Scrum, Waterfall, or hybrid approaches) Proven ability to manage complex projects involving data platforms, system integrations, or analytics solutions Hands-on experience using Jira for project tracking, backlog management, and workflow coordination Demonstrated ability to manage multiple priorities and deadlines in a fast-paced environment Strong client-facing experience with the ability to communicate effectively with both technical and non-technical stakeholders What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.
10/05/2026
Full time
Job Family: Technology Consulting Travel Required: Up to 10% Clearance Required: Active Secret What You Will Do: Lead planning, execution, and delivery of technical projects across data, analytics, and system implementation workstreams. Coordi nate between client stakeholders, technical teams, and leadership. Define project scope, timelines, milestones, and resource requirements aligned to client objectives. Monitor day-to-day project activities, ensuring deliverables are completed on time and within budget. Facilitate Agile ceremonies or project status meetings, including sprint planning, stand-ups, and retrospectives. Identify , track, and mitigate risks, issues, and dependencies across multiple workstreams. Translate business requirements into actionable tasks and technical requirements for delivery teams. Drive stakeholder engagement, providing clear status updates, executive briefings, and performance reports. Ensure adherence to governance, compliance, and quality standards throughout the project lifecycle . Support change management efforts, including user adoption, training coordination, and transition planning. What You Will Need: An ACTIVE and MAINTAINED "SECRET" Federal or DoD security clearance Bachelor's degree FIVE (5) or more years of experience managing technical projects in a consulting, government, or enterprise environment Experience leading cross-functional teams including developers, data engineers, and business analysts Experience tracking budgets, managing resources, and forecasting project delivery timelines Ability to work onsite in a client environment as required What Would Be Nice To Have: PMP, Certified Scrum Master (CSM), PMI-ACP, or other relevant certification (preferred) Experience supporting Navy clients or familiarity with Navy operations, systems, or organizational structures (preferred) Strong understanding of project management methodologies (Agile, Scrum, Waterfall, or hybrid approaches) Proven ability to manage complex projects involving data platforms, system integrations, or analytics solutions Hands-on experience using Jira for project tracking, backlog management, and workflow coordination Demonstrated ability to manage multiple priorities and deadlines in a fast-paced environment Strong client-facing experience with the ability to communicate effectively with both technical and non-technical stakeholders What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.
Job Family: SAAS/PAAS/Cloud Consulting Travel Required: None Clearance Required: Active Top Secret (TS) What You Will Do: Design, develop, implement, and maintain applications using Microsoft Power Apps Develop automated workflows and process orchestrations using Power Automate. Create interactive dashboards, performance metrics, and reporting solutions using Power BI. Design and maintain SharePoint sites, communication portals, lists, libraries, and workflow-enabled business applications. Create and maintain databases, forms, reporting tools, and business applications utilizing SQL Server, Microsoft Access, Dataverse, and related technologies. Utilize Python and other scripting tools to automate data management and reporting activities. Lead integration efforts between multiple enterprise systems supporting facilities, construction, project management, and operational functions. Design and manage API-based integrations between Power Platform solutions and third-party applications. Collaborate with stakeholders and vendors to ensure seamless interoperability across business systems. Support software implementation, testing, validation, deployment, and user acceptance activities. Troubleshoot, diagnose, and resolve application, workflow, reporting, and integration issues. Ensure software solutions comply with organizational cybersecurity, governance, and data management requirements. Maintain technical documentation, system architecture diagrams, data dictionaries, and configuration records. Meet with facilities and construction stakeholders to gather business and technical requirements. Analyze existing business processes and identify opportunities for automation and digital transformation. Translate operational needs into scalable technical solutions. Recommend and implement enhancements to existing applications and business systems. Develop proof-of-concepts, prototypes, and pilot solutions to address emerging business needs. Develop standard and ad hoc reports supporting operational and executive decision-making. Build automated reporting solutions and business intelligence dashboards. Maintain performance metrics and data visualization tools. Support data quality, governance, and reporting integrity initiatives. What You Will Need: Active Top Secret Security Clearance. Demonstrated experience developing solutions using Microsoft Power Platform technologies. Selected candidate must be able to commute to client site up to 5x/week. Experience integrating enterprise applications and managing data across multiple business systems. Experience gathering requirements and translating business needs into technical solutions. Five (5) or more years of experience developing, implementing, integrating, or managing enterprise software solutions. Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Systems, Engineering, or related technical field. Or: Nine (9) years of relevant professional experience in lieu of a degree. What Would Be Nice To Have: Microsoft Certified: Power Platform Developer Associate Microsoft Certified: Power Platform Functional Consultant Associate Microsoft Certified: Power BI Data Analyst Associate PMP Certification Agile or Scrum certifications Experience with Python development Experience integrating enterprise software systems utilizing APIs Experience with IBM TRIRIGA, IWMS, CMMS, EAM, or records management platforms Experience supporting facilities, construction, engineering, real estate, or workplace operations organizations Knowledge of federal information security requirements and system governance What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.
10/05/2026
Full time
Job Family: SAAS/PAAS/Cloud Consulting Travel Required: None Clearance Required: Active Top Secret (TS) What You Will Do: Design, develop, implement, and maintain applications using Microsoft Power Apps Develop automated workflows and process orchestrations using Power Automate. Create interactive dashboards, performance metrics, and reporting solutions using Power BI. Design and maintain SharePoint sites, communication portals, lists, libraries, and workflow-enabled business applications. Create and maintain databases, forms, reporting tools, and business applications utilizing SQL Server, Microsoft Access, Dataverse, and related technologies. Utilize Python and other scripting tools to automate data management and reporting activities. Lead integration efforts between multiple enterprise systems supporting facilities, construction, project management, and operational functions. Design and manage API-based integrations between Power Platform solutions and third-party applications. Collaborate with stakeholders and vendors to ensure seamless interoperability across business systems. Support software implementation, testing, validation, deployment, and user acceptance activities. Troubleshoot, diagnose, and resolve application, workflow, reporting, and integration issues. Ensure software solutions comply with organizational cybersecurity, governance, and data management requirements. Maintain technical documentation, system architecture diagrams, data dictionaries, and configuration records. Meet with facilities and construction stakeholders to gather business and technical requirements. Analyze existing business processes and identify opportunities for automation and digital transformation. Translate operational needs into scalable technical solutions. Recommend and implement enhancements to existing applications and business systems. Develop proof-of-concepts, prototypes, and pilot solutions to address emerging business needs. Develop standard and ad hoc reports supporting operational and executive decision-making. Build automated reporting solutions and business intelligence dashboards. Maintain performance metrics and data visualization tools. Support data quality, governance, and reporting integrity initiatives. What You Will Need: Active Top Secret Security Clearance. Demonstrated experience developing solutions using Microsoft Power Platform technologies. Selected candidate must be able to commute to client site up to 5x/week. Experience integrating enterprise applications and managing data across multiple business systems. Experience gathering requirements and translating business needs into technical solutions. Five (5) or more years of experience developing, implementing, integrating, or managing enterprise software solutions. Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Systems, Engineering, or related technical field. Or: Nine (9) years of relevant professional experience in lieu of a degree. What Would Be Nice To Have: Microsoft Certified: Power Platform Developer Associate Microsoft Certified: Power Platform Functional Consultant Associate Microsoft Certified: Power BI Data Analyst Associate PMP Certification Agile or Scrum certifications Experience with Python development Experience integrating enterprise software systems utilizing APIs Experience with IBM TRIRIGA, IWMS, CMMS, EAM, or records management platforms Experience supporting facilities, construction, engineering, real estate, or workplace operations organizations Knowledge of federal information security requirements and system governance What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.
L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris is the Trusted Disruptor in defense tech. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security. Job Title: Lead Software Engineer - Maritime Sonar Systems Job Code: 42916 Job Location: Camden, NJ Job Schedule: 9/80 (Every Other Friday Off) Qualified candidates will receive a minimum sign-on bonus of $10,000. Qualified candidates with additional credentials may be eligible for higher sign-on bonuses. Based in the historic L3Harris Camden Waterfront Campus! Job Description: In a fast moving and increasingly complex world, L3Harris is anticipating and rapidly responding to challenges with agile technology - creating a safer and more secure future. Join our trailblazing team in the Philadelphia metro area, where you'll dive into the thrilling world of high-assurance encryption products. We are seeking a proven software engineering leader to drive adoption and disciplined execution of agile software engineering practices across teams. This role will help shape the software engineering approach within our encryption business, advise engineering leadership on best practices, and partner with programs to improve efficiency, consistency, and execution of software development. Build an engineering pipeline to facilitate efficient, traceable, low defect, high quality software development in our encryption business and beyond. Define, implement, and continuously improve software engineering processes, practices, standards, tools, and governance across multiple encryption programs and teams. Advise engineering and business leadership on software engineering strategy, process maturity, organizational capability, and execution improvement opportunities. Provide guidance and oversight to software teams throughout the software development lifecycle. Evaluate current software engineering performance across programs, identify systemic gaps and risks, and lead actions to improve effectiveness, quality, and predictability. Review and influence software development plans, technical approaches, cost and schedule estimates, proposals, and program startup activities to ensure alignment with software engineering best practices. Use data-driven analysis to assess software engineering health, monitor organizational performance, and recommend and implement continuous improvement actions. Mentor technical leaders and engineering teams. Foster a culture of accountability, technical excellence, collaboration, and continuous improvement across the software engineering discipline. Qualifications: Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, Electrical Engineering, or a related technical field and a minimum of 15 years of prior relevant experience, or a graduate degree and a minimum of 13 years of prior related experience. In lieu of a degree, a minimum of 19 years of prior related experience. Broad and progressive software engineering experience, including significant leadership responsibility across multiple teams, programs, or organizational units. Proven ability to influence senior engineering, program, and business leaders and drive change across functional and program boundaries. Strong knowledge of the full software development lifecycle, including requirements capture, software architecture, design, coding, integration, test, release, and sustainment. Strong verbal, written, interpersonal, and presentation skills, with the ability to communicate effectively with both technical and executive audiences. Experience operating in a regulated, mission-critical, or highly disciplined engineering environment. Active and existing US DOD Secret security clearance required to start. Preferred Additional Skills: Advanced degree in Computer Science, Software Engineering, Engineering Management, or a related technical discipline. Experience in defense, aerospace, secure communications, encryption, embedded systems, or other highly regulated environments. Experience leading software engineering process improvement initiatives across an organization, business area, or portfolio. Familiarity with software engineering governance, lifecycle compliance, peer review rigor, development metrics, and engineering performance measurement. Experience with Agile, DevSecOps, digital engineering, model-based development, automated test, and secure software development practices. Experience supporting proposal, capture, program startup, and execution planning activities with strong software engineering cost, schedule, and staffing inputs. Subject Matter Expert in several of the following technology areas: Cryptographic algorithms Memory safe programming languages such as Rust Software engineering pipelines RESTful API service design Real time embedded software development & embedded interfaces (I2C, RS232, CAN, Ethernet) VoIP systems, SIP-based call control, or real-time media applications NSA or similar software Certification Networking basics, such as HTTPS and websockets In compliance with pay transparency requirements, the salary range for this role in California, Massachusetts, New Jersey, Washington, and the Greater D.C. area, Denver, or NYC areas is $158,500-$275,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law. Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions. L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.
09/30/2026
Full time
L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris is the Trusted Disruptor in defense tech. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security. Job Title: Lead Software Engineer - Maritime Sonar Systems Job Code: 42916 Job Location: Camden, NJ Job Schedule: 9/80 (Every Other Friday Off) Qualified candidates will receive a minimum sign-on bonus of $10,000. Qualified candidates with additional credentials may be eligible for higher sign-on bonuses. Based in the historic L3Harris Camden Waterfront Campus! Job Description: In a fast moving and increasingly complex world, L3Harris is anticipating and rapidly responding to challenges with agile technology - creating a safer and more secure future. Join our trailblazing team in the Philadelphia metro area, where you'll dive into the thrilling world of high-assurance encryption products. We are seeking a proven software engineering leader to drive adoption and disciplined execution of agile software engineering practices across teams. This role will help shape the software engineering approach within our encryption business, advise engineering leadership on best practices, and partner with programs to improve efficiency, consistency, and execution of software development. Build an engineering pipeline to facilitate efficient, traceable, low defect, high quality software development in our encryption business and beyond. Define, implement, and continuously improve software engineering processes, practices, standards, tools, and governance across multiple encryption programs and teams. Advise engineering and business leadership on software engineering strategy, process maturity, organizational capability, and execution improvement opportunities. Provide guidance and oversight to software teams throughout the software development lifecycle. Evaluate current software engineering performance across programs, identify systemic gaps and risks, and lead actions to improve effectiveness, quality, and predictability. Review and influence software development plans, technical approaches, cost and schedule estimates, proposals, and program startup activities to ensure alignment with software engineering best practices. Use data-driven analysis to assess software engineering health, monitor organizational performance, and recommend and implement continuous improvement actions. Mentor technical leaders and engineering teams. Foster a culture of accountability, technical excellence, collaboration, and continuous improvement across the software engineering discipline. Qualifications: Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, Electrical Engineering, or a related technical field and a minimum of 15 years of prior relevant experience, or a graduate degree and a minimum of 13 years of prior related experience. In lieu of a degree, a minimum of 19 years of prior related experience. Broad and progressive software engineering experience, including significant leadership responsibility across multiple teams, programs, or organizational units. Proven ability to influence senior engineering, program, and business leaders and drive change across functional and program boundaries. Strong knowledge of the full software development lifecycle, including requirements capture, software architecture, design, coding, integration, test, release, and sustainment. Strong verbal, written, interpersonal, and presentation skills, with the ability to communicate effectively with both technical and executive audiences. Experience operating in a regulated, mission-critical, or highly disciplined engineering environment. Active and existing US DOD Secret security clearance required to start. Preferred Additional Skills: Advanced degree in Computer Science, Software Engineering, Engineering Management, or a related technical discipline. Experience in defense, aerospace, secure communications, encryption, embedded systems, or other highly regulated environments. Experience leading software engineering process improvement initiatives across an organization, business area, or portfolio. Familiarity with software engineering governance, lifecycle compliance, peer review rigor, development metrics, and engineering performance measurement. Experience with Agile, DevSecOps, digital engineering, model-based development, automated test, and secure software development practices. Experience supporting proposal, capture, program startup, and execution planning activities with strong software engineering cost, schedule, and staffing inputs. Subject Matter Expert in several of the following technology areas: Cryptographic algorithms Memory safe programming languages such as Rust Software engineering pipelines RESTful API service design Real time embedded software development & embedded interfaces (I2C, RS232, CAN, Ethernet) VoIP systems, SIP-based call control, or real-time media applications NSA or similar software Certification Networking basics, such as HTTPS and websockets In compliance with pay transparency requirements, the salary range for this role in California, Massachusetts, New Jersey, Washington, and the Greater D.C. area, Denver, or NYC areas is $158,500-$275,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law. Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions. L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.
Job Description Job Description SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively - anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon contract win. SkyePoint Decisions is seeking a Technical Guidance Lead to join our team supporting a federal customer. This position is contingent on contract win. The Technical Guidance Lead provides senior technical and management leadership for non-assessment cybersecurity support across customer programs, systems, and initiatives. The Lead serves as a senior cybersecurity advisor, translating NIST, OMB, and other applicable Federal cybersecurity requirements into practical technical guidance, implementation approaches, and recommendations for Government and contractor stakeholders. The position provides expert guidance on security requirements, architecture and engineering considerations, control implementation, continuous monitoring, vulnerability and risk response, cloud and emerging technologies, security documentation, and operational cybersecurity issues without performing independent assessment functions. The Lead coordinates complex cross-functional technical issues, establishes goals and plans for major guidance assignments, evaluates proposed solutions and implementation approaches, and recommends actions that improve security, consistency, compliance, and mission execution. The role interfaces with senior Government/client management, system owners, cybersecurity personnel, engineers, architects, operations teams, and other stakeholders and may direct or supervise supporting technical personnel. This is a remote position. Responsibilities: Serve as a senior technical authority for non-assessment cybersecurity matters; interpret applicable Department, NIST, OMB, and Federal requirements and translate them into actionable implementation guidance, technical recommendations, and decision support. Provide expert guidance on security requirements, control implementation, system/security architecture, engineering, cloud and emerging technologies, continuous monitoring, vulnerability/risk response, security documentation, and operational cybersecurity practices. Review proposed technical approaches, designs, changes, configurations, and security solutions for alignment with requirements and mission needs; identify technical risks, dependencies, and implementation considerations and recommend practical resolution paths. Plan and lead major technical-guidance assignments; establish objectives, methods, priorities, staffing needs, and deliverables and coordinate multidisciplinary cybersecurity, engineering, operations, and program stakeholders. Lead resolution of complex or cross-system cybersecurity issues by analyzing technical information, facilitating subject-matter-expert collaboration, evaluating alternatives, and presenting defensible recommendations to Government decision-makers. Promote consistent implementation of cybersecurity requirements developing or improving technical guidance, procedures, standards, templates, decision aids, and reusable practices and by communicating changes to affected stakeholders. Advise Government technical and program leadership on cybersecurity impacts, implementation options, risks, priorities, and tradeoffs; prepare and deliver technical briefings, recommendations, guidance, and decision-support materials. Coordinate with system owners, ISSOs/ISSMs, architects, engineers, operations, vulnerability management, security operations, cloud, governance, and other stakeholders to resolve requirements and implementation questions and maintain technical alignment. Monitor changes in Federal/customer cybersecurity requirements and technology practices; assess implications for customer environments and recommend updates to guidance, processes, technical approaches, and implementation priorities. Required Qualifications: Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related technical discipline. Over 10 years of experience in cybersecurity, information assurance/security, cybersecurity engineering, architecture, technical advisory support, or a directly related subject area. Senior industry professional certification such as Certified Information Systems Security Professional (CISSP) or equivalent. Demonstrated experience providing technical and management leadership on major cybersecurity or technology assignments and establishing goals and plans that meet project objectives. Expert cybersecurity domain and technical knowledge, including Federal security requirements, NIST controls/RMF concepts, security architecture/engineering, control implementation, continuous monitoring, vulnerability/risk management, and operational security. Experience directing client activities and coordinating methods, staffing, resources, and technical execution necessary to meet complex cybersecurity requirements. Experience interfacing and negotiating with clients and senior management and presenting high-impact technical recommendations, risks, alternatives, and implementation decisions. Demonstrated ability to make technical and management decisions requiring expert domain knowledge that can materially affect project implementation, cybersecurity posture, or mission outcomes. Experience leading multidisciplinary technical teams or workstreams and supervising personnel as assigned. Ability to obtain a 6c Public Trust. At least an active Secret clearance is highly preferred. U.S. Citizenship is required. Compensation: Salary Range: TBD The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate's combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts HSAs , Flex Spending Accounts FSAs , Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts HSAs , Flex Spending Accounts FSAs , Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U.S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here
09/29/2026
Full time
Job Description Job Description SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively - anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon contract win. SkyePoint Decisions is seeking a Technical Guidance Lead to join our team supporting a federal customer. This position is contingent on contract win. The Technical Guidance Lead provides senior technical and management leadership for non-assessment cybersecurity support across customer programs, systems, and initiatives. The Lead serves as a senior cybersecurity advisor, translating NIST, OMB, and other applicable Federal cybersecurity requirements into practical technical guidance, implementation approaches, and recommendations for Government and contractor stakeholders. The position provides expert guidance on security requirements, architecture and engineering considerations, control implementation, continuous monitoring, vulnerability and risk response, cloud and emerging technologies, security documentation, and operational cybersecurity issues without performing independent assessment functions. The Lead coordinates complex cross-functional technical issues, establishes goals and plans for major guidance assignments, evaluates proposed solutions and implementation approaches, and recommends actions that improve security, consistency, compliance, and mission execution. The role interfaces with senior Government/client management, system owners, cybersecurity personnel, engineers, architects, operations teams, and other stakeholders and may direct or supervise supporting technical personnel. This is a remote position. Responsibilities: Serve as a senior technical authority for non-assessment cybersecurity matters; interpret applicable Department, NIST, OMB, and Federal requirements and translate them into actionable implementation guidance, technical recommendations, and decision support. Provide expert guidance on security requirements, control implementation, system/security architecture, engineering, cloud and emerging technologies, continuous monitoring, vulnerability/risk response, security documentation, and operational cybersecurity practices. Review proposed technical approaches, designs, changes, configurations, and security solutions for alignment with requirements and mission needs; identify technical risks, dependencies, and implementation considerations and recommend practical resolution paths. Plan and lead major technical-guidance assignments; establish objectives, methods, priorities, staffing needs, and deliverables and coordinate multidisciplinary cybersecurity, engineering, operations, and program stakeholders. Lead resolution of complex or cross-system cybersecurity issues by analyzing technical information, facilitating subject-matter-expert collaboration, evaluating alternatives, and presenting defensible recommendations to Government decision-makers. Promote consistent implementation of cybersecurity requirements developing or improving technical guidance, procedures, standards, templates, decision aids, and reusable practices and by communicating changes to affected stakeholders. Advise Government technical and program leadership on cybersecurity impacts, implementation options, risks, priorities, and tradeoffs; prepare and deliver technical briefings, recommendations, guidance, and decision-support materials. Coordinate with system owners, ISSOs/ISSMs, architects, engineers, operations, vulnerability management, security operations, cloud, governance, and other stakeholders to resolve requirements and implementation questions and maintain technical alignment. Monitor changes in Federal/customer cybersecurity requirements and technology practices; assess implications for customer environments and recommend updates to guidance, processes, technical approaches, and implementation priorities. Required Qualifications: Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related technical discipline. Over 10 years of experience in cybersecurity, information assurance/security, cybersecurity engineering, architecture, technical advisory support, or a directly related subject area. Senior industry professional certification such as Certified Information Systems Security Professional (CISSP) or equivalent. Demonstrated experience providing technical and management leadership on major cybersecurity or technology assignments and establishing goals and plans that meet project objectives. Expert cybersecurity domain and technical knowledge, including Federal security requirements, NIST controls/RMF concepts, security architecture/engineering, control implementation, continuous monitoring, vulnerability/risk management, and operational security. Experience directing client activities and coordinating methods, staffing, resources, and technical execution necessary to meet complex cybersecurity requirements. Experience interfacing and negotiating with clients and senior management and presenting high-impact technical recommendations, risks, alternatives, and implementation decisions. Demonstrated ability to make technical and management decisions requiring expert domain knowledge that can materially affect project implementation, cybersecurity posture, or mission outcomes. Experience leading multidisciplinary technical teams or workstreams and supervising personnel as assigned. Ability to obtain a 6c Public Trust. At least an active Secret clearance is highly preferred. U.S. Citizenship is required. Compensation: Salary Range: TBD The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate's combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts HSAs , Flex Spending Accounts FSAs , Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts HSAs , Flex Spending Accounts FSAs , Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U.S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here
