13 jobs found

Job Description Job Description Who is Credible? Credible is a leading U.S. consumer finance marketplace, transforming the way consumers access and compare financial products. We operate at a consumer and enterprise level. On the consumer side, we help millions of people make smarter financial decisions by comparing personalized, pre-qualified offers across student loans, personal loans, mortgages, credit cards, and insurance - all without impacting their credit score. On the enterprise side, we power financial product comparison and distribution through deep integrations and partnerships with lenders, insurance carriers, and financial institutions, as well as providing marketplace technology and capabilities to third-party partners and distribution channels. About the role Credible's Marketing Automation Team (MAT) owns, operates, and scales Credible's marketing automation ecosystem. We're looking for a temporary Marketing Automation Solutions Architect to cover for a full-time team member on leave for approximately 3-6 months. Engagement type, start date, and end date: TBD. This is a senior, hands-on technical role. You'll step in as the technical point of contact for MAT's platforms, data flows, and integrations, keeping complex, revenue-critical and compliance-critical email programs running smoothly while our architect is out. You'll work across our marketing automation platform, SQL-based audience and data architecture, and the surrounding data ecosystem (Snowflake, dbt, AWS), and partner with Lifecycle Marketing, Business Intelligence, Engineering, Information Security, and Legal/Compliance. The focus is continuity: operating and maintaining what's in place, handling the team's toughest technical questions, and protecting the quality and compliance of everything that ships. We're looking for someone who can ramp quickly, work independently, and leave things well documented. Responsibilities Serve as the day-to-day technical authority for Credible's marketing automation platform: configuration, data flows, integrations, and sync logic with other internal systems Maintain and troubleshoot existing multi-touch email journeys, including entry criteria, branching logic, throttling, and exit rules, and build or modify journeys as needed for in-flight business needs Maintain and extend personalization logic in languages like AMPscript, Liquid, Handlebars, or SSJS Write and review SQL for audience segmentation, data design, and test/control cohort frameworks Partner with the Marketing Automation Team Manager to validate audiences and monitor data flowing into and out of the marketing automation platform Safeguard compliance-sensitive features, including consent and global unsubscribe sync, suppression logic, adverse action notice delivery, and PII handling, ensuring they meet legal, security, and data-privacy requirements (CAN-SPAM, CCPA, GDPR, CASL) Maintain security-sensitive integration patterns, including key/secret rotation and environment handling Participate in MAT's peer/technical review process, holding work to documented coding, naming, and version-control standards Act as the escalation point for difficult technical problems, supporting the Lifecycle Marketing Team with debugging and best practices Translate business and marketing requirements from Lifecycle Marketing into technical designs, working within MAT's Jira/sprint process (work-type tagging, MAT Review gate, sprint planning and review) Work with BI/Data Engineering, Engineering, Information Security, and Legal/Compliance to keep releases secure, compliant, and production-ready Document your work and update architecture notes and technical processes so the handoff back to the full-time architect is seamless Use AI tools (coding assistants, research agents) to speed up research, code review, documentation, and QA Education and experience BA/BS in Marketing, Business, Computer Science, or equivalent experience preferred 5+ years of experience with an enterprise email/marketing automation platform; deep, hands-on experience with Salesforce Marketing Cloud, Braze, Iterable, HubSpot, or similar is required Advanced proficiency in email scripting (AMPscript, Liquid, Handlebars, etc.), including reusable, shared logic (content blocks, config/core patterns) Advanced SQL skills for audience segmentation and complex query logic (joins, window functions, CASE logic, CTEs, etc.) Advanced HTML/CSS for responsive, cross-client email development Experience with API integrations (SOAP/REST), JWT or token-based authentication flows, and secure link/redirect handling Working knowledge of modern data stacks (e.g., Snowflake, dbt) and comfort with Git-based PR workflows Strong understanding of the data privacy and compliance landscape (CAN-SPAM, CCPA, GDPR, CASL) and rigorous handling of PII Experience with Agile/Scrum delivery and Jira-based workflows, including technical/peer review Excellent communication skills, able to translate between marketers, compliance/legal, and engineering stakeholders Ability to ramp quickly and work independently with minimal onboarding Hands-on experience using AI tools (e.g., Cursor, GitHub Copilot, Claude Code) to write, debug, or review SQL and scripting code Tools You'll Use Salesforce Marketing Cloud Braze VS Code / Sublime Text - code editors for HTML, SQL, AMPscript, and SSJS development SQL and Snowflake - querying Credible's data warehouse for segmentation, reporting, and insights Jira - sprint planning, ticket workflow, and MAT's peer review process Confluence - team documentation and operating manual Postman - testing API integrations Email on Acid (or similar) - cross-client email rendering and QA Preferred qualifications Salesforce Marketing Cloud Developer, Consultant, and/or Architect certification, or Braze Certified Technical Marketing Expert/Developer certification Experience in financial services or another highly regulated industry Prior contract or consulting experience, with a track record of getting up to speed quickly in a new environment Why work at Credible? We combine the intelligence, expertise, and confidence of a financial advisor with the approachability and honesty of a friend. In other words, we're the friend you always wish you had in finance. We are optimistic, challengers, trustworthy, clever, and smart. We are open and transparent. We strive to act as advisors by being friendly, objective, and open in our communication. We use language that is intelligent yet approachable. When appropriate, we'll drop in a bit of wit to position ourselves as a fresh, reliable voice in the financial world. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, gender identity, disability, protected veteran status, or any other characteristic protected by law. We will consider for employment qualified applicants with criminal histories consistent with applicable law.

Job Description Job Description Indent ID: SF_OP_209794-1 Sell Rate: 65/hr. Remote / WFO / Hybrid: The selected candidate will reside within a reasonable commuting distance to one of the Client location Candidates living within 120 miles of Kansas City, Denver, Oklahoma City or Omaha will be required to be on-site with 5 days per month remote work flexibility. Location(s): Boston, MA- New York, NY- Philadelphia, PA- Cleveland, OH- Richmond, VA- Atlanta, GA- Chicago, IL- St. Louis, MO- Minneapolis, MN- Kansas City, MO- Dallas, TX- San Francisco, CA or any branch office location. Hire Type (FTE/Contract): Contract Only VI Project Duration: 1 year Expected Start Date: 1 Nov 2027 Day 1 Billing Confirmation: Yes We are seeking a Senior SaaS IGA Engineer specializing in Access Certifications to help build and operate our MyAccess identity-governance capability on Saviynt Enterprise Identity Cloud. This role will be responsible for the technical design and execution of access-certification campaigns, entitlement and reviewer governance, remediation, reconciliation, reporting, and certification controls across a complex enterprise environment. The successful candidate will combine deep IAM/IGA experience with hands-on Saviynt expertise and an understanding that certification success is more than campaign completion. The objective is to ensure access decisions are meaningful, accountable, executed in downstream systems, reconciled, and auditable. Key Activities Access Certification Design & Engineering • Design and configure Saviynt access-certification campaigns for users, accounts, entitlements, roles, applications, privileged access, and other in-scope access populations. • Configure campaign scope, reviewer assignment, certification rules, review periods, reminders, escalations, delegation, reassignment, expiration, and completion criteria. • Develop recurring and event-driven certification models appropriate to application risk and control requirements. • Configure and validate manager, application-owner, entitlement-owner, role-owner, and other reviewer models. • Establish certification logic for high-risk, privileged, sensitive, orphaned, dormant, temporary, and exception-based access. • Support certification requirements across connected and, where necessary, disconnected applications. • Design campaign segmentation so reviews are understandable and manageable rather than overwhelming reviewers with unnecessarily large certifications. • Configure certification actions and downstream remediation, including revoke, retain, reassign, exception, and remediation workflows. • Ensure certification decisions flow through provisioning/deprovisioning and are reconciled against actual target-system outcomes. Certification Governance & Control Effectiveness • Establish traceability from certification requirement to campaign, reviewer, decision, remediation, target-system validation, and evidence. • Confirm entitlement and application ownership is accurate before campaigns launch and route ownership gaps for remediation. • Ensure retained access has accountable reviewer decisions and appropriate justification. • Verify revoked access is actually removed downstream; identify and escalate failed revocations and reconciliation discrepancies. • Support risk-based certification frequency based on application, entitlement, privilege, regulatory, and business criticality. • Support segregation-of-duties and high-risk-access reviews where applicable. • Maintain certification evidence suitable for audit, risk, compliance, and control testing. Saviynt EIC Administration & Configuration • Saviynt EIC / IGA administrative configuration and production support. • Access Certifications and Campaigns. • Access Request System, Enterprise Roles, Entitlements, Workflows, Rules, and Policies. • User, account, entitlement, and role metadata; dynamic attributes and ownership models. • Saviynt jobs, job monitoring, analytics, reporting, REST APIs, and connector troubleshooting. • Provisioning policies, reconciliation, application onboarding, and downstream remediation. Data Quality & Reconciliation • Analyze identity, account, entitlement, role, and ownership data before campaign launch. • Identify duplicate, orphaned, dormant, stale, excessive, and unowned access. • Validate identity-account correlation and application / entitlement ownership. • Establish pre-campaign data-quality checks and post-campaign reconciliation. • Validate successful downstream revocation and develop analytics for recurring certification or remediation failures. Reviewer Experience & Business Enablement • Partner with Product, Governance, UX/OCM, and business stakeholders so reviewers can quickly understand: • Who has the access and what the access provides. • Why the access exists and how it was originally obtained. • Whether the access is privileged, sensitive, temporary, or high risk. • When it was last reviewed, when it expires, and what happens if it is revoked. • Certification design should reduce rubber-stamp behavior rather than merely increase campaign throughput. Production • Monitor scheduled certification jobs and campaign execution. • Troubleshoot reviewer, data, application, campaign-generation, and remediation issues. • Monitor certification aging, failed remediation, and recurring operational exceptions. • Support incident/problem management, root-cause analysis, runbooks, and support documentation. • Support release regression testing and assess Saviynt product releases for certification impacts. • Support audit evidence requests and identifies opportunities for automation and operational simplification. Qualifications • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Computer Engineering, Management Information Systems, or a closely related discipline; or equivalent combination of education and substantial relevant IAM/IGA experience. • Master's degree in Cybersecurity, Information Systems, Technology Management, Computer Science, or related field preferred. • Formal training in identity security, access governance, security controls, or risk management preferred. • 7-10 years of IAM / Identity Security experience. • 4 years working with IGA platforms such as Saviynt, SailPoint, Oracle Identity Governance, One Identity, or comparable enterprise IGA technologies. • 2-3 years of direct Saviynt EIC experience strongly preferred. • 3 years designing or operating access certifications / access reviews / attestation programs. • Demonstrated experience implementing certification campaigns in a large, complex enterprise. • Experience with entitlement governance, application ownership, role ownership, remediation workflows, and access-control evidence. • Experience supporting production IAM/IGA systems and working in regulated or highly controlled environments strongly preferred. • Experience integrating IGA with Active Directory, Entra ID, REST APIs, databases, SaaS applications, and enterprise systems. • Experience with application onboarding, provisioning, deprovisioning, and reconciliation. Technical Skills • Saviynt: EIC administration; Access Certifications; Access Request System; Enterprise Roles; Entitlements; workflows; analytics; jobs; rules/policies; REST APIs; connectors; provisioning; reconciliation. • IGA / IAM: Identity lifecycle; access governance; RBAC/ABAC; least privilege; access reviews; entitlement governance; SoD; privileged-access governance; orphan/stale access; exceptions; audit evidence. • Other: REST / JSON / APIs; SQL; Active Directory; Entra ID; authentication / authorization concepts; scripting or automation; data analysis; log analysis; ITSM integration.

Job Description Job Description Omitron is seeking a Senior Systems Engineer to join the SPARTAN team in Colorado Springs, CO, supporting the U.S. Space Force. SPARTAN is a secure, distributed network that connects Space Force bases, mission partners, and cloud environments across CONUS and OCONUS locations. The network is operational today and is growing quickly. This is a senior position and the first dedicated systems engineering role on the program. You will establish the systems engineering foundation for SPARTAN. Your first major task is to lead the design and build of the SPARTAN out-of-band (OOB) management network. You will work directly with the Chief Systems Architect, the network engineering team, and the cybersecurity team. The OOB network gives a future Network Operations and Security Center (NOSC) independent access to monitor, manage, and recover every node, including when the primary network is degraded. This role is hands-on. You will help define the stack, build it in the lab, and field it at operational sites. Responsibilities: Out-of-Band Network Design and Build: Lead the systems engineering of the SPARTAN OOB management network through fielding. Define the OOB architecture with the network engineers. This includes management switching and routing, console access, segmentation, and a transport path that remains independent of the mission data plane. Design and build the management services hosted on the OOB network. These include authentication, authorization, and accounting (AAA), directory and certificate services, time synchronization, DNS, logging, and monitoring. Select and integrate the compute, virtualization, and storage platforms that host OOB services at core and edge locations. Create a repeatable node baseline so every new site receives the same OOB configuration, documentation, and test procedures. Develop automation for configuration, backup, compliance checks, and deployment using tools such as Ansible and Python. Work with future NOSC personnel to define monitoring, alerting, and remote recovery procedures that support 24/7/365 operations. Program Systems Engineering: Establish the systems engineering processes the program will use as it grows. This includes requirements management, configuration management, technical baselines, and design reviews. Develop and maintain system requirements, architecture views, and interface control documents (ICDs) for the network, its services, and its mission partner connections. Perform trade studies and technical risk assessments to support hardware, software, and architecture decisions. Define a design approach that scales to a growing number of nodes, mission partners, and cloud connections. Support the technical evaluation of new mission partner connection requests. Integration, Test, and Deployment: Plan and execute integration and test events in the lab and at operational sites. Write verification and validation procedures and document the results. Support site surveys, installation, and acceptance testing at new node locations. Investigate system-level issues with the network and operations teams. Identify root causes and drive corrective actions to closure. Cybersecurity and Authorization: Work with the Information System Security Manager (ISSM) and Information System Security Engineer (ISSE) to build security into the design from the start. Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and hardening baselines to OOB systems. Produce the design artifacts required for Risk Management Framework (RMF) authorization and continuous monitoring. Documentation and Communication: Develop and maintain architecture diagrams, ICDs, design documents, test reports, and operating procedures. Brief technical designs, status, and recommendations to program leadership and government customers. Travel: Travel to CONUS and OCONUS sites may be required, estimated at up to 20 percent. Minimum Requirements: US Citizenship required Security Clearance: Active TS/SCI security clearance required. Education: Bachelor's degree in Systems Engineering, Computer Engineering, Electrical Engineering, Computer Science, or a related technical discipline. Four additional years of relevant experience may be substituted for a degree, subject to contract requirements. Experience: Eight (8) or more years of experience in systems engineering, network engineering, or infrastructure engineering. At least three (3) of those years must be in a hands-on design and build role. Experience designing and deploying management infrastructure for enterprise or mission networks, such as OOB networks, network management systems, or data center infrastructure. Working knowledge of routing, switching, VLANs, IP addressing, and network segmentation. Experience administering Linux systems and virtualization platforms such as VMware vSphere or KVM. Experience deploying core infrastructure services, including AAA (TACACS+ or RADIUS), DNS, NTP, syslog, and SNMP or streaming telemetry. Experience with scripting and automation using Python, Bash, Ansible, or similar tools. Experience developing requirements, architecture documentation, and test procedures. Experience working in DoD or other government environments under RMF security requirements. Ability to work independently, set technical direction on a new effort, and coordinate across engineering disciplines. Strong written and verbal communication skills. Certifications: Active CompTIA Security+ certification required. Preferred Qualifications: Education: Master's degree in Systems Engineering, Computer Engineering, Electrical Engineering, Computer Science, or a related technical discipline. Experience: Experience as the lead or first systems engineer on a new or growing program. Experience building OOB management networks for geographically distributed sites. Experience with console servers, OOB access appliances, and lights-out server management interfaces. Experience with network monitoring and observability tools such as SolarWinds, Zabbix, LibreNMS, Grafana, or Splunk. Experience with infrastructure as code, Git, and a network source of truth such as NetBox. Experience with Public Key Infrastructure (PKI), identity management, and privileged access management. Familiarity with network encryption devices and COMSEC management. Experience with DISA STIGs, Security Content Automation Protocol (SCAP) tools, and Assured Compliance Assessment Solution (ACAS) scanning. Experience supporting secure DoD networks or a network operations center. Familiarity with AWS or Microsoft Azure in government cloud environments. Familiarity with Model-Based Systems Engineering (MBSE), SysML, or requirements management tools such as DOORS or Jama. Familiarity with U.S. Space Force or Space Domain Awareness (SDA) missions. Certifications: INCOSE ASEP/CSEP, professional-level networking certifications, CISSP, or Linux and virtualization certifications such as RHCSA or VCP. Compensation and Benefits: The salary range for this role is $160,000 to $200,000. Actual compensation will be determined based on factors including, but not limited to, relevant experience, education, technical expertise, certifications, security clearance, geographic location, internal equity, market conditions, contract requirements, and other factors. Benefits include: Health, Dental and Vision Insurance HSA or FSA accounts Company paid ST/LT Disability and AD&D insurance Paid Federal Holidays Paid Vacation Leave and Sick Leave Parental Leave 401k with company match Supplemental Insurance options like AFLAC Professional Development Reimbursement Voluntary Life Insurance Company Overview: Omitron is an Aerospace Engineering and Information Technology small business firm headquartered in Beltsville, Maryland with a field office located in Colorado Springs, Colorado. Since 1984, Omitron has provided excellence in engineering services and product development to government and industry customers for both civilian and military aerospace programs. Omitron recognizes that outstanding people are the key to our success. Our goal is to select highly qualified and motivated individuals and provide them with an environment necessary to stimulate and nurture engineering and business objectives. Omitron offers its employees competitive salaries, a full benefits package, and excellent career growth opportunities. We welcome talented professionals who wish to take advantage of the opportunities we offer. At Omitron, we believe that a workplace that fosters innovation and collaboration will be a successful one. We are committed to attracting, developing, and retaining top talent from a broad range of backgrounds, perspectives, and experiences. Per Title VII, our hiring decisions are made based on qualifications, skills, and experience, in accordance with our commitment to equal opportunity employment and nondiscrimination policies. We welcome all individuals who share our passion for excellence and encourage applicants from diverse backgrounds to apply click apply for full job details

Job Description Job Description Company Overview : One Park Financial (OPF) is a leading Financial Technology company dedicated to empowering small businesses by connecting them with a wide variety of flexible financing and funding options. Our mission is to provide entrepreneurs with the working capital they need to elevate their businesses to new heights. At OPF, we believe in working with high-performing individuals who are ready to play an integral part in our company's expansion. We know that our success hinges on our people, and we strive to enable them to do what they do best. Why Join Us? At OPF, we foster a dynamic and inclusive company culture that emphasizes collaboration, innovation, and personal growth. Our team is composed of passionate, driven individuals who are committed to making a difference. Here's what you can expect when you join our team: Innovative Environment : Work with cutting-edge technology and be part of a team that is constantly pushing the boundaries of fintech. Professional Growth : We invest in our employees' growth with continuous learning opportunities, training programs, and career advancement paths. Supportive Culture : Enjoy a supportive and inclusive work environment where your ideas are valued, and your contributions make a real impact. Community Focus : Be part of a company that understands the importance of small and mid-sized businesses to their communities and the nation's financial health. High-Performing Team : Join a team of badasses who are committed to excellence and are integral to our company's expansion and success. About the Role We are looking for a seasoned Senior Data Scientist to join our Analytics team to enable core business transformation. This role is about building and pressure-testing the models and proposals that drive how we price, approve, and grow, and doing it with the statistical and analytical rigor to prove they work before they ship. You will own a production system end to end, helping operate and evolve our proprietary risk-based pricing engine, the application that powers our real-time offer decisioning. You will work closely with business stakeholders to understand problems and propose & implement AI/ML solutions, and you will partner with DevOps, Product, and Engineering to take models from notebook to production. You will lead the charge in A/B testing within the organization and design experiments to prove success. You will perform EDA, identify modeling opportunities, feature engineer & ETL data, implement models and their monitoring, and highlight opportunities for change. We are an AI-forward company, and we expect our data scientists to work that way. We want someone who leans on modern AI and LLM tooling to make their own analysis, modeling, and experimentation faster and sharper, not someone who does things the slow, manual way. We want to work with high-performing badasses who will play an integral part in our transformation of the company. We understand one thing: it all comes down to working with creative & committed people and enabling them to do what they do best. Responsibilities Utilize advanced statistical and machine learning techniques to analyze large datasets and build new AI/ML models. Develop and pressure-test pricing and credit proposals end to end, with the statistical and analytical rigor to prove they will work before they ship. These won't always be models; sometimes the answer is a well-tested policy change. Conduct exploratory data analysis, feature engineering, and data preprocessing to solve business problems. Own, operate, and enhance our proprietary risk-based pricing engine (a production Python application), including its models, business logic, deployment, and monitoring. Facilitate the deployment and monitoring of models for real-time and batch processing. Own strong model governance: clear documentation and versioning, ongoing monitoring for drift and degradation, regular validation, and a defensible audit trail across the model lifecycle. Partner with DevOps, Product, and Engineering teams to ship models and features to production, owning the rollout from staging to production, including CI/CD, monitoring, and rollback. Perform model evaluation and validation on a regular basis to ensure robust performance. Engineer A/B tests with scientific rigor. Gather test data and validate results to present to business stakeholders. Use modern AI and LLM tooling to speed up your own work, from EDA and feature engineering to model prototyping, documentation, and testing. Champion creative uses of existing data to solve business problems with intellectual curiosity. Produce statistical and data analysis visuals (charts, infographics) to communicate findings clearly and effectively to a non-technical audience. Collaborate with team members, product managers, and business stakeholders to identify opportunities for new and innovative AI/ML solutions. Analysis areas could include Onboarding Credit, Ongoing Credit, Marketing segmentation, Voice-based analysis, Text mining, Sentiment analysis, Risk quantification, and Risk-based pricing. Requirements 4-7 years of experience in Data Science and the Financial Industry, preferably in Credit or Lending. Master's degree in mathematics, statistics, computer science, or data science. Experience in transforming existing processes with AI/ML-based approaches. Proficiency in data manipulation. Excellent SQL and Python skills for data wrangling and ETL. Hands-on AWS / cloud experience deploying and operating production ML services (compute, storage, IAM, containerized deployment). Experience building or maintaining production applications and services, not just models in notebooks. You should be comfortable owning software in production. Experience with dashboard tools such as PowerBI or other visualization tools. Experience building credit or risk models for Financial Services, Lending, or Insurance. Experience in validating models to identify ongoing improvements. Rock Solid data science skillset: Exploratory Data Analysis, Feature Engineering, Fitting, Tuning, and Comparing models, and managing the model Lifecycle. Experience with statistical modeling and data analysis using programming languages such as Python. Experience in ML engineering, cloud-based deployment, and machine learning model lifecycle management. Knowledge of best practices for financial and lending models (model risk management, model governance, and fair-lending considerations) is a big plus. Comfort using modern AI and LLM tools to make your own analysis and modeling more efficient (a plus). Experience with dbt (major plus). Benefits Competitive salary Local & National Health Insurance Dental and Vision insurance Group Medical Bridge 401k with Match ID Protection: 100% covered by the company Life Insurance: 100% covered by the company Generous PTO and holidays Growth and development opportunities Dynamic and collaborative work environment Company events and team-building activities

Job Description Job Description Job Title: Technical Product Manager Location: Washington, DC (On-site) Employment Type: Contract (W2 through ZipStaff - No C2C or 1099) About the Opportunity ZipStaff is seeking a Technical Product Manager for enterprise network and infrastructure platforms at a major passenger-rail organization in Washington, DC. You will drive a Platform as a Product model across connectivity, secure/compliant access, reliability, and continuous operations - mentoring Product Owners on an ART and turning portfolio vision into multi-year roadmaps. Generic software PMs without infrastructure/networking depth will not be a fit. What You'll Do: Build and execute multi-year product strategy aligned to enterprise and technology roadmaps. Prioritize features and stories across technical product teams (value, risk, feasibility, feedback). Mentor Product Owners on the Agile Release Train and translate portfolio goals into backlogs. Partner with executives, Engineering, Architecture, Agility Enablement, and operations. Champion SAFe : cadence, PI Planning, and agile maturity. Define and report KPIs and operational success metrics. Bridge business outcomes with networking/infrastructure topics. Advocate ITSM and enterprise change-management practices. Required Qualifications: 12+ years technical product management / product leadership. Deep background in IT infrastructure, enterprise networking, and distributed architecture. Working knowledge of firewalls, cloud connectivity, VLANs, network segmentation, access security, and operational availability. Strong ITSM , operational readiness, and formal change management. Hands-on SAFe (POPM strongly preferred). Jira, Jira Align, Confluence , FigJam, AgilityHealth. Executive communication, workshop facilitation, and data-driven decisions. Bachelor's in CS, IT, Engineering, or equivalent senior experience. Ability to work on-site in Washington, DC. Must be legally authorized to work in the United States without sponsorship now or in the future. Preferred Qualifications: Active SAFe POPM. ITIL. Passenger rail, transportation, or other operationally critical infrastructure environments. About ZipStaff ZipStaff partners with leading organizations to connect skilled product leaders with high-impact contract opportunities. We focus on quality matches and long-term success. To apply , please submit your resume highlighting technical product ownership of network/infrastructure platforms, SAFe delivery, and ITSM.

Job Description Job Description Job Title: Senior Product Manager Location: Seattle, WA 98101 - Hybrid (4 days onsite, 1 day remote) Duration: 04-month contract (with possible extension) Work Schedule: 40 hours per week, Monday-Friday, 8:00 AM-5:00 PM Start Date: Targeting Nov 2026 Pay Rate: $77.46/hr - $80.98/hr on W2 Benefits: Medical, Dental, Vision. Job Description: Nordstrom is seeking a Senior Product Manager to lead its Communications Platform (CSP) product during a temporary staff coverage assignment. This role will focus on continuing a multi-phase migration to Adobe Journey Optimizer (AJO), managing vendor relationships, and partnering with Platform Engineering and business stakeholders to enhance customer communication preferences, channel selection, send frequency, and personalization. The ideal candidate will have strong product management experience, hands-on familiarity with email service provider (ESP) platforms, and experience collaborating with engineering teams on data feeds, reporting integrations, and platform capabilities. Key Responsibilities Own the remaining phases of the Adobe Journey Optimizer (AJO) migration, including lifecycle journeys and communication preference enhancements, while ensuring delivery against committed milestones. Serve as the primary product point of contact for Adobe, including Adobe Consulting Services and Adobe Ultimate Success, managing scope discussions, escalations, and delivery alignment. Partner with CSP Platform Engineering to improve communication preferences and capabilities, including trigger logic, collision control, and audience/data integrations across email, push notifications, and text messaging. Collaborate with CRM Strategy, CRM Enablement, Loyalty, Credit, and Marketing teams to translate business needs into clear product requirements. Drive strategy discussions on communication channels and send frequency, balancing customer trust, deliverability, and revenue impact. Partner with engineering teams on technical scoping, platform architecture, data integrations, and workflow development. Track and report migration milestones, dependencies, and risks to the CSP Core Team and leadership. Maintain momentum and stakeholder alignment across an active, multi-phase platform migration. Required Qualifications 5+ years of product management experience in a technology-driven environment. Experience with marketing technology, CRM, communications, or email service provider (ESP) platforms. Hands-on familiarity with Adobe Journey Optimizer (AJO), Adobe Experience Manager (AEM), or comparable platforms such as Salesforce Marketing Cloud, Braze, or Bluecore. Experience with customer and product data feeds, reporting integrations, and data pipelines. Familiarity with BigQuery, Looker, and GA4 across CDP, loyalty, and lifecycle platforms. Ability to translate business requirements into clear, prioritized technical specifications for trigger logic, data integrations, and workflow builds. Experience partnering directly with engineering teams on technical scoping and platform architecture. Experience managing vendor relationships, scope negotiations, escalations, and delivery alignment. Strong communication, stakeholder management, and problem-solving skills. Demonstrated ability to develop communication strategies involving channel selection, send frequency, collision control, and personalization. Preferred Qualifications Experience with customer data platforms (CDPs), audience segmentation, and activation. Experience with SMS/text messaging platforms. Background in retail, e-commerce, loyalty, or lifecycle marketing programs. Bachelor's degree in Marketing, Business, Computer Science, Information Technology, or a related field, or equivalent experience. An advanced degree is a plus. Interview Process The first-round interview will be conducted by the current full-time employee (FTE) whom the selected candidate will cover during the assignment.

Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-

Job Description Job Description EUC / VDI Solutions Architect Engagement Overview Scope: Design, build, and configure a production-ready Omnissa Horizon (formerly VMware Horizon) virtual desktop environment on AWS, including provisioning of approximately 30 custom Windows images. Key Deliverables: Fully operational Horizon infrastructure on AWS (Connection Servers, UAGs, vCenter integration) 30 custom Windows golden images (optimized, hardened, application-layered) Operational runbooks and image lifecycle documentation Summary Senior-level architect responsible for the end-to-end design and deployment of the Omnissa Horizon environment on AWS, including infrastructure architecture, connectivity, identity integration, and image management strategy. Required Skills & Experience Category Requirement Omnissa / VMware Horizon 5 years hands-on experience deploying and managing Horizon environments (Connection Servers, UAGs, Blast/PCoIP protocols, instant clones, linked clones) AWS Infrastructure Strong working knowledge of VPC design, EC2, EBS, FSx, Direct Connect/VPN, IAM, and Security Groups in context of VDI workloads VMC on AWS / EC2 Horizon Experience deploying Horizon infrastructure on AWS (either VMC on AWS or native EC2-based Horizon deployments) Active Directory & Identity Integration of Horizon with AD/LDAP, conditional access, MFA (e.g., RADIUS, SAML/SSO) Networking VLAN/subnet segmentation for VDI, firewall rules, load balancing (UAG/ALB), DNS/DHCP for desktop pools Image Management Experience with Omnissa App Volumes, Dynamic Environment Manager (DEM), or equivalent layering/profile management tools Windows OS Deep familiarity with Windows 10/11 Enterprise multi-session and Server OS image optimization for VDI Security & Compliance STIG/CIS hardening of VDI images, endpoint security integration, GPO management for virtual desktops Responsibilities Lead architectural design of the Horizon environment on AWS (sizing, HA, DR considerations) Configure Connection Servers, Unified Access Gateways, and vCenter integration Design the golden image strategy (base images, application layers, personas) Define and implement desktop pools (instant clone / full clone) with entitlement policies Integrate with customer identity provider (AD, MFA, SSO) Establish monitoring and logging (vROps, CloudWatch, or equivalent) Produce HLD/LLD documentation and operational runbooks Preferred / Nice-to-Have Omnissa Certified Professional (VCP-DTM or equivalent) AWS Solutions Architect certification Experience with Omnissa Horizon Cloud on AWS Familiarity with AWS WorkSpaces (for hybrid/comparison context) Terraform or CloudFormation for infrastructure-as-code deployments Experience in FedRAMP / IL4-IL5 or StateRAMP environments

Job Description Job Description Primary Skill Required for the Role Systems Architect Level Required for Primary Skill Expert (10 years experience) Additional Skills Requested for Role (No Value) The Lead Product Engineer / Architect will serve as the senior technical authority for the offering, working as a peer to the Lead Product Manager. This role will shape the technical vision, architecture, engineering standards, and delivery roadmap across cyber, software, hardware, AI, space, ground, and user segments. The ideal candidate can translate complex mission and security requirements into scalable, commercially viable solutions that can be deployed repeatably across clients. REQUIRED QUALIFICATIONS " Bachelor s degree required " Must be U.S. Citizen " 10 years of experience as a product engineer, solution architect, systems architect, technical product leader, or similar role delivering complex cyber, aerospace, space, embedded, or mission-critical systems. " Proven leadership delivering complex, multidisciplinary cyber and/or space systems to production and operations. " Deep experience designing secure architectures across cloud, on-premises, hybrid, and space/embedded constraints, with strong systems-thinking and an integration background (interfaces, constraints, failure modes). " Demonstrated authorship of reference architectures, patterns, or platforms adopted by multiple teams, ideally productized offerings deployed across more than one client or environment. " Sufficient cross-domain depth (embedded/space, AI/ML, ground segment, cloud/DevOps) to serve as the senior technical sounding board for the specialist workstream leads, pressure-testing the tradeoffs each otherwise makes in isolation. " Strong grasp of security architecture: identity, key management, secure boot and update, segmentation, data protection, logging and telemetry, and supply chain. " Experience operating under compliance constraints (NIST, ATO, STIGs, CMMC, as applicable) and translating them into executable delivery controls and compliance-ready designs. " Calm, decisive leadership under uncertainty, with strong incident- and risk-management discipline. " Proven ability to influence without direct authority, with excellent written and verbal communication across technical and executive audiences. PREFERRED QUALIFICATIONS " Experience taking a product or platform to market commercially pilots, co-development, or first-of-kind deployments with external clients. " Experience with satellite mission operations or aerospace delivery environments. " Background in embedded and real-time systems integration. " Familiarity with AI/ML model deployment pipelines in constrained environments. " Background in SPARTA (Space Attack Research and Tactic Analysis) threat frameworks. " Active security clearance (Secret or higher) for government-adjacent commercial work. " Working fluency across the platform tech stack, enough to guide design decisions in each domain: embedded/space (C, POSIX, real-time OS); AI/ML (Python, PyTorch); ground segment (Docker, Grafana, MQTT, Node.js); CI/CD and DevOps (GitHub Actions, automated security scanning, containerized deployments). EEO: Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.

Job Description Job Description Senior Cloud Security Architect As a Senior Cloud Security Architect, you will lead the strategic vision for protecting our multi-cloud ecosystem. You are responsible for designing the security blueprints that govern our entire digital footprint-from identity perimeters to AI-driven threat detection. This role requires a "Security as Code" mindset, where you build automated guardrails that empower developers to move at speed without compromising the safety of our data or infrastructure. Key Responsibilities • Security Architecture Vision: Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, or GCP. • AI-Native Security Strategy: Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors. • Automated Guardrails (Policy as Code): Develop and enforce enterprise-wide security policies using Terraform, etc., ensuring that non-compliant infrastructure is automatically remediated or blocked from deployment. • Cloud Posture Management: Design and oversee the integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions. • Threat Modeling & Resilience: Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and "blast radius" scenarios to strengthen system resilience. • Security Consultancy: Act as the lead security advisor for the Cloud Architecture team, bridging the gap between DevOps agility and rigorous regulatory compliance (SOC2). Technical Qualifications Category Security Platforms Requirements Mastery of cloud-native security suites (e.g., AWS Security Hub, Azure Defender, GCP Security Command Center). Category Identity & Access Requirements Expert knowledge of Identity-First Security, including CIEM, Just-In-Time (JIT) access, and complex OIDC/SAML flows. Category Automation Requirements Proficiency in Python, Go, or Bash to build custom security automations and integrate with SOAR platforms. Category DevSecOps Requirements Deep experience embedding automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines. Category Cloud Networking Requirements Advanced understanding of secure connectivity, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA). Preferred Experience • Experience: 12 years in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale. • Certifications: Top-tier credentials. • Education: Advanced degree in Computer Science, Cybersecurity, or a related engineering field preferred. BS degree from an accredited College/University in the applicable field of services is required, or four additional years of relevant experience in lieu of a college degree. If the individual's degree is not in the applicable field then four additional years of related experience is required. • Soft Skills: Strong ability to bridge the gap between "Speed of DevOps" and "Rigors of Security" while communicating clearly with executive leadership • Leadership: Proven ability to influence technical roadmaps and present security risks clearly to C-suite stakeholders. Core Objectives • Zero Standing Privilege: Help Transition the organization to a "Zero Standing Privilege" model for all production environments. • Automated Compliance: Help Achieve automated auditing for core compliance frameworks (e.g., NIST, CIS Benchmarks). • Mean Time to Detect (MTTD): Utilize AI-driven monitoring to reduce the detection time of anomalous cloud activity to minimum Additional Provisions: • Pass a client mandated clearance process to include drug screening, criminal history check and credit check. • Once candidate's resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process. • If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance. • All candidates must be a US Citizen or permanent status Green Card holder. • Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.) • All overtime must be pre-approved in writing by the client manager or his/her designated representative. • Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time. • The enforced dress code is business casual, i.e., collared shirt with slacks for men, no skirts above the knee for women. Prime Contract Number - 1BITCS-25-B-0009 For this position, there will be only one bill rate regardless of hours worked in a day and/or workweek. The North American Industry Classification System (NAICS) code for this acquisition is 561320. The small business size standard is $34 millionComments for Suppliers:Work will be remote with candidates located in Morrisville, NC; Falls Church, VA; or Eagan, MN given preference.

Job Description Job Description 4. Scope of Servies The Florida Department of Transportation, Office of Information Technology (OIT) - Integration Services is in search of a Senior Network Engineer to play a key role in assisting the Office of Information Technology in the establishment of new integration methods and standards, along with implementing system integrations, according to those established methods and standards. Duties and Responsibilities will include but are not limited to: 1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Checkpoint and Global Protect VPNs. 2. Firewall deployments, rule migrations, firewall administration and converting existing rule based policies onto new platforms. 3. Works with critical core network infrastructure devices like Next Gen Firewall, VPNs, log collectors and monitors which play a crucial role in security for our IT environment. 4. Works with cloud network infrastructure to configure firewall, security policies and monitor network traffic. 5. Develop and maintain documentation following NIST guidelines. 6. Project Manager; 7. Data Administration; 5 Education Bachelor's Degree in Computer Science, Information Systems or other related field. Or equivalent work experience. Preferred Certifications (PCNSE, CISSP, CCNP, CCIE) 6. Experience 1. Typically have 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration 2. Three to five years of experience with information security tools based on NIST standards. 3. Requires knowledge of security issues, techniques, and implications across all existing computer platforms. Preference given for experience with NGFW Palo Alto or Checkpoint security products. 4. Experience using schematic diagramming tools to map infrastructure layouts. 7 Primary Job Duties/ Tasks Senior Network Engineer - Job Duties 1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and Web-based services. Designs and maintains secure network architectures, segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other security controls. 2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation. Ensures security practices align with organizational requirements, industry standards, and applicable regulatory requirements. 3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments. Prepares executive-level status reports, risk assessments, security metrics, and recommendations addressing vulnerabilities, emerging threats, security incidents, and operational risks. 4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations. Administers and monitors security profiles and access controls, reviews security alerts and violation reports, investigates security exceptions, and coordinates remediation activities. Maintains comprehensive documentation of security controls, configurations, incidents, and corrective actions. 5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency. Leads technical evaluations, proof-of-concept activities, product assessments, and implementation recommendations for enterprise networking and cybersecurity solutions. 6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues. Troubleshoots escalated network and security incidents, provides technical guidance to infrastructure teams, and educates IT and business personnel on security policies, secure configurations, access requirements, and risk mitigation practices. 7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support. Reviews project designs and proposed solutions to identify security risks and ensures appropriate security controls are incorporated into network, cloud, application, and infrastructure initiatives. 8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure. Develops network solutions that support high availability, resiliency, scalability, and security requirements. 9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions. Coordinates with vendors, technical teams, and organizational stakeholders during critical incidents and service disruptions. 10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries between users, applications, devices, and infrastructure. Evaluates east-west and north-south traffic flows to identify security risks and opportunities for improved network controls. 11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks. Develops dashboards, key performance indicators, and management reports to support data-driven infrastructure and security decisions. 12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements. Ensures documentation remains accurate and aligned with the current enterprise environment. 13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions. Serves as a senior technical resource and provides guidance on enterprise networking, security architecture, infrastructure design, and technology modernization. 14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities in enterprise networking, cybersecurity, cloud infrastructure, and emerging technologies. Senior-Level Requirements Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving the most complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership. The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls. 8 Job Specific Skills and Abilities (KSAs): Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff. 9 General Knowledge Skills and Abilities (KSAs): The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas: 1. Communication: Have the ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings (i.e.; project team meetings, management presentations, etc.). Must have the ability to effectively listen and process information provided by others. 2. Customer Service: Works well with clients and customers (i.e.; business office, public, or other agencies). Able to assess the needs of the customer, provide information or assistance to satisfy expectations or resolve a problem. 3. Decision Making: Makes sound, well-informed, and objective decisions. 4. Flexibility: Is open to change, new processes (or process improvement), and new information. Has the ability to adapt in response to new information, changing conditions . click apply for full job details

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description Purpose Information technology is foundational to how Citadel Aviation operates at every site, from the systems that move work across the hangar floor and the shops to the platforms that support administrative staff. Secure, reliable network and identity infrastructure enable Citadel to operate without interruption, protect its work and its people, and meet its obligations to customers and partners. This role owns the design, operation, and security of Citadel's network and identity infrastructure across every Citadel site: reliable connectivity, a hardened identity platform, and a security posture that scales with the business. The role serves as Citadel's internal technical counterpart to the company's security SOC and managed detection and response (MDR) provider, partners with IT leadership and peers across IT and the business, owns assigned IT projects, and is accountable for the reliability of the network and the strength of the security posture across every site. Environment The technology stack includes Palo Alto next-generation firewalls, Cisco switching, Meraki wireless, Microsoft 365 with Entra ID for identity, Microsoft Defender for Endpoint and Intune for endpoint security and management, Tenable for vulnerability management, and KnowBe4 for security awareness. Security operations are delivered in partnership with an external SOC and MDR provider. Essential Job Functions Own the design, operation, and security of Citadel's network infrastructure across all sites. Maintain firewalls, switching, wireless, ISP connectivity, and backup connectivity. Design and implement upgrades to support growth, lead network design and turn-up for new Citadel facilities, and maintain secure connectivity between sites, between sites and the cloud, and for remote users. Own the design, operation, and security of Citadel's voice and unified communications infrastructure, including the company's calling system, VOIP infrastructure, and integration with Microsoft 365 communications. Maintain consistent network and security service quality across all Citadel sites. Travel between sites is heavier during the initial standardization phase across existing sites and during turn-up of new sites, and lighter once the environment reaches steady state. Perform in line with established KPIs and service-level targets, including network availability, security patch SLA, mean time to remediate vulnerabilities, mean time to respond to security incidents, and related measures. Track and report performance regularly to IT leadership. Serve as the internal technical counterpart to the company's security SOC and MDR provider, who operate detection, monitoring, and response. Partner closely on detection tuning, alert triage, investigation, and remediation. Own endpoint security policy across the Microsoft 365 platform, including Microsoft Defender for Endpoint configuration, conditional access, identity hardening, and Intune security baselines. Partner with the IT manager and the support team on day-to-day operation and enforcement. Own technical email security controls, including anti-phishing, anti-malware, secure transport, and tenant security configuration. Partner with the IT manager on user-facing reporting and response workflows. Run Citadel's vulnerability management process in partnership with the MDR provider. Operate scanning tooling, prioritize findings, and drive remediation across the IT organization. Own identity and access management hardening, including multi-factor authentication, conditional access policy, privileged access controls, and account lifecycle hygiene. Set program direction and content for Citadel's cybersecurity awareness program, including training plans, phishing simulation strategy, and ongoing user education topics. Partner with the IT manager, who runs the user-facing activities and reporting. Conduct third-party security review of new vendors, software platforms, and integrations before they enter the environment. Assess data handling, integration security, and ongoing risk; track approval and remediation. Coordinate Citadel's response to external security assessments, including penetration testing, cyber insurance reviews, customer security questionnaires, and regulatory inquiries. Scope engagements, work with vendors, maintain evidence, and track remediation. Deliver assigned IT projects within networking and security, and contribute to broader IT initiatives. Coordinate with IT leadership and peers, and engage external specialists and contractors as needed. Partner with IT leadership and peers in infrastructure, support, and software development on initiatives originating in those service lines. Contribute network and security expertise to keep delivery on track. Own vendor relationships within the network and security portfolio, including ISPs, network hardware, security tooling, and specialized contractors. Take on broader IT vendor relationships as assigned. Own the network and security operating budget, with broader budget scope as assigned. Track expenses, project upcoming needs, and provide input on annual IT budget planning. Own the on-call rotation for network and security incidents. Drive diagnosis, coordinate internal and external resources, and engage directly in resolution. Own incident communication for network and security events. Notify IT leadership and impacted business stakeholders, provide regular status updates throughout an incident, and deliver post-incident summaries with root cause and follow-up actions. Conduct periodic internal security audits across user access, identity hygiene, configuration baselines, vulnerability posture, and policy adherence. Remediate findings in partnership with the IT manager. Maintain and enforce IT network and security policies, procedures, runbooks, technical documentation, and asset inventory. Contribute to the creation and modification of policies as needed. Identify and propose improvements in network design, security posture, monitoring coverage, and tool consolidation. Deliver approved initiatives. Non-Essential Functions Running cables and installing hardware. Other duties as assigned. Minimum Qualifications or Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, or a related technical discipline. Equivalent professional experience considered in lieu of degree. 5+ years of progressive experience in enterprise network engineering and information security. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Experience operating in partnership with a managed detection and response (MDR) provider or security operations center (SOC). Experience with vulnerability management, including scanning tooling (Tenable Nessus or comparable), prioritization, and driving remediation across an organization. Experience operating in an environment with regular external security assessments (penetration testing, cyber insurance reviews, customer security audits) and remediating findings under deadline. Experience supporting multi-site operations or production environments where uptime, security, and consistency of service are operational requirements. Experience delivering IT projects from scope through completion, including scheduling, vendor coordination, and budget tracking. Demonstrated ability to communicate technical concepts clearly to non-technical business stakeholders and to senior leadership. Demonstrated experience adhering to and enforcing security best practices across network, endpoint, and identity domains. Preferred Qualifications or Experience Experience in aviation, aerospace, manufacturing, MRO, or other regulated operational environments. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Active IT industry certifications such as CompTIA Security+ or Network+, Cisco CCNA / CCNP, Palo Alto PCNSA / PCNSE, Microsoft Security or Identity certifications, CISSP, GIAC, or comparable. Experience designing and bringing up network infrastructure at new sites or facilities. Experience with SD-WAN, zero-trust architecture, network segmentation, or related modern network design patterns. Familiarity with security frameworks (NIST, CIS) and audit or compliance work. Experience with security awareness platforms (KnowBe4 or comparable). Experience administering identity and access controls in a hybrid or cloud-first environment. Experience with VOIP or unified communications infrastructure. Supervisory Responsibilities This position has no direct reports. Coordinates day-to-day with external network and security contractors, managed-service providers, and the company's SOC and MDR partner. Provides technical guidance and security expertise to IT team peers and to business stakeholders as needed. Knowledge, Skills, and Other Attributes Deep technical expertise across enterprise networking (firewalls, switching, wireless, routing) and information security (endpoint, identity, vulnerability management, security monitoring). . click apply for full job details