Job Description Job Description Security Operations (SecOps) Engineer Active Secret Clearance Required Location: Hybrid - Must reside near a primary DISA DHMC site Possible Locations: Oklahoma City, OK Montgomery, AL Ogden, UT Mechanicsburg, PA Travel: Yes - Weekly travel to DISA locations (you will work out of your local DISA site when not traveling) Salary Range: $110,000 - $145,000 Position Summary: We are seeking a Security Operations (SecOps) Engineer to support federal cybersecurity initiatives across enterprise and cloud environments. This role combines hands-on security engineering, operational monitoring, and compliance support to ensure systems remain secure, observable, and audit-ready throughout their lifecycle. The ideal candidate will have strong experience with Elastic / ELK Stack technologies , security monitoring, and federal compliance frameworks. This role partners closely with DevOps, SRE, and compliance teams to integrate detection, response, and automation into production systems. Key Responsibilities: Security Operations & Monitoring Monitor, investigate, and respond to security alerts and incidents using Elastic Security (SIEM/XDR) Design, deploy, and maintain the Elastic Stack (Elasticsearch, Logstash, Beats, Kibana) Develop and tune detection rules, dashboards, and alerting workflows Conduct threat hunting and advanced log analysis Vulnerability & Patch Management Perform vulnerability scanning and analysis using tools such as ACAS / Tenable Track and remediate vulnerabilities in accordance with federal timelines Coordinate patching and mitigation efforts with infrastructure and application teams Compliance & Continuous Monitoring Implement and maintain controls aligned with NIST 800-53, FISMA, and FedRAMP Support ATO (Authority to Operate) activities including documentation and evidence collection Produce compliance and CDM reporting using Elastic dashboards and data feeds Secure Engineering & Automation Integrate security monitoring and logging into CI/CD pipelines and Infrastructure-as-Code Automate ingestion, enrichment, and response workflows using Python, Bash, or PowerShell Enforce secure configuration baselines (STIGs, CIS benchmarks) Collaboration & Risk Management Partner with DevOps and SRE teams to embed security observability into system design Advise stakeholders on risk posture, detections, and mitigation strategies Communicate technical findings to both technical and non-technical audiences Requirements Hands-on production experience with the Elastic Stack (ELK) Direct experience using Elastic Security as a SIEM/XDR platform Log pipeline design, parsing, enrichment, and lifecycle management Security event monitoring, alert triage, and incident response Linux and Windows security administration Scripting or automation experience ( Python, Bash, or PowerShell ) Experience in cloud or hybrid environments (AWS, Azure, GCP, or GovCloud) Security & Compliance Knowledge Strong familiarity with: NIST 800-53, 800-61, 800-137 FISMA federal cybersecurity requirements FedRAMP control implementation and monitoring Experience supporting audits, assessments, or ATO packages Active Secret Clearance Preferred Qualifications: Experience deploying Elastic in DoD or federal environments Integration with cloud-native logging tools (CloudTrail, Azure Monitor, GCP Logs) Familiarity with DevSecOps and Site Reliability Engineering (SRE) practices Container and Kubernetes security experience Certifications (Preferred) Elastic Certified Engineer or Analyst Security+ CySA+ CISSP Benefits Our comprehensive benefits package for full-time salaried employees is effective immediately upon the start date. Benefits include comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option, a vision plan, and dental insurance with the base dental plan option paid for by PGTEK. Life Insurance, Short and Long-Term disability, and Critical Illness insurance have premiums covered. Additionally, PGTEK offers a matching 401(k) plan and a discount on pet insurance through ASPCA Pet Insurance. An Employee Assistance Program is available at no cost to all employees. PGTEK offers a generous amount of PTO and Holidays, and an Education Assistance Program is available after 12 months of employment. ABOUT PGTEK: PGTEK is a true consulting organization dedicated to helping clients achieve their business and technology objectives utilizing our decades of experience and business relationships. PGTEK invests in the educational advancements of our staff by providing the necessary resources to complete Professional and Business Certifications. Our company is our people, and we treat them like family. EOE, including disability/veterans
11/14/2026
Full time
Job Description Job Description Security Operations (SecOps) Engineer Active Secret Clearance Required Location: Hybrid - Must reside near a primary DISA DHMC site Possible Locations: Oklahoma City, OK Montgomery, AL Ogden, UT Mechanicsburg, PA Travel: Yes - Weekly travel to DISA locations (you will work out of your local DISA site when not traveling) Salary Range: $110,000 - $145,000 Position Summary: We are seeking a Security Operations (SecOps) Engineer to support federal cybersecurity initiatives across enterprise and cloud environments. This role combines hands-on security engineering, operational monitoring, and compliance support to ensure systems remain secure, observable, and audit-ready throughout their lifecycle. The ideal candidate will have strong experience with Elastic / ELK Stack technologies , security monitoring, and federal compliance frameworks. This role partners closely with DevOps, SRE, and compliance teams to integrate detection, response, and automation into production systems. Key Responsibilities: Security Operations & Monitoring Monitor, investigate, and respond to security alerts and incidents using Elastic Security (SIEM/XDR) Design, deploy, and maintain the Elastic Stack (Elasticsearch, Logstash, Beats, Kibana) Develop and tune detection rules, dashboards, and alerting workflows Conduct threat hunting and advanced log analysis Vulnerability & Patch Management Perform vulnerability scanning and analysis using tools such as ACAS / Tenable Track and remediate vulnerabilities in accordance with federal timelines Coordinate patching and mitigation efforts with infrastructure and application teams Compliance & Continuous Monitoring Implement and maintain controls aligned with NIST 800-53, FISMA, and FedRAMP Support ATO (Authority to Operate) activities including documentation and evidence collection Produce compliance and CDM reporting using Elastic dashboards and data feeds Secure Engineering & Automation Integrate security monitoring and logging into CI/CD pipelines and Infrastructure-as-Code Automate ingestion, enrichment, and response workflows using Python, Bash, or PowerShell Enforce secure configuration baselines (STIGs, CIS benchmarks) Collaboration & Risk Management Partner with DevOps and SRE teams to embed security observability into system design Advise stakeholders on risk posture, detections, and mitigation strategies Communicate technical findings to both technical and non-technical audiences Requirements Hands-on production experience with the Elastic Stack (ELK) Direct experience using Elastic Security as a SIEM/XDR platform Log pipeline design, parsing, enrichment, and lifecycle management Security event monitoring, alert triage, and incident response Linux and Windows security administration Scripting or automation experience ( Python, Bash, or PowerShell ) Experience in cloud or hybrid environments (AWS, Azure, GCP, or GovCloud) Security & Compliance Knowledge Strong familiarity with: NIST 800-53, 800-61, 800-137 FISMA federal cybersecurity requirements FedRAMP control implementation and monitoring Experience supporting audits, assessments, or ATO packages Active Secret Clearance Preferred Qualifications: Experience deploying Elastic in DoD or federal environments Integration with cloud-native logging tools (CloudTrail, Azure Monitor, GCP Logs) Familiarity with DevSecOps and Site Reliability Engineering (SRE) practices Container and Kubernetes security experience Certifications (Preferred) Elastic Certified Engineer or Analyst Security+ CySA+ CISSP Benefits Our comprehensive benefits package for full-time salaried employees is effective immediately upon the start date. Benefits include comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option, a vision plan, and dental insurance with the base dental plan option paid for by PGTEK. Life Insurance, Short and Long-Term disability, and Critical Illness insurance have premiums covered. Additionally, PGTEK offers a matching 401(k) plan and a discount on pet insurance through ASPCA Pet Insurance. An Employee Assistance Program is available at no cost to all employees. PGTEK offers a generous amount of PTO and Holidays, and an Education Assistance Program is available after 12 months of employment. ABOUT PGTEK: PGTEK is a true consulting organization dedicated to helping clients achieve their business and technology objectives utilizing our decades of experience and business relationships. PGTEK invests in the educational advancements of our staff by providing the necessary resources to complete Professional and Business Certifications. Our company is our people, and we treat them like family. EOE, including disability/veterans
Job Description Job Description Staff / Principal Platform Engineer Location: New York City Hybrid Department: AI Platform & Infrastructure Team Reports to: Vangie Shue - Principal Engineering Manager About AppGate AppGate secures and protects an organization's most valuable assets with its high performance Zero Trust Network Access (ZTNA) solution and Cyber Advisory Services. AppGate ZTNA is the only direct-routed Zero Trust solution built for peak performance, superior protection and seamless interoperability. AppGate Cyber Advisory Services harden your security posture and ensure business continuity. AppGate safeguards Fortune 500 enterprises and government agencies worldwide. Learn more at About the Role As we expand our platform, we are standing up a new AI Platform & Infrastructure team: the engine room of AppGate's AI strategy. This team owns the infrastructure layer that every next-generation security capability is built on, from network observability to AI-driven threat detection and the secure operation of emerging Agentic AI systems. We're looking for a Staff or Principal Platform Engineer to build and operate the foundational platform behind AppGate's AI products. You combine deep DevOps and cloud infrastructure expertise with hands-on experience operationalizing AI/ML systems, and you treat observability as a first-class engineering discipline. This is a rare opportunity to join a small, private, high-impact company where your work directly shapes the architecture, reliability and core platform that defines the future of security. You'll own the platform spanning APIs, cloud and self-managed solutions and AI/ML infrastructure, and you'll make it fast, reliable and observable at scale. This is a high-leverage, hands-on role for a senior engineer who sets technical direction and still ships. Key Responsibilities Build the Platform: design, build and operate the cloud infrastructure, services and pipelines that AppGate's AI and cloud products run on. Strong experience with self-managed technologies (kafka, elasticsearch) and Kubernetes are a must. Infrastructure as Code & Deployment Orchestration: Terraform and Helm for cloud provisioning, service deployment and configuration management. Implement Observability: instrument APIs, cloud services and AI/ML infrastructure with metrics, logging, tracing and alerting, and define SLOs and operational health metrics that teams trust. Data Platform: real-time and batch data ingestion pipelines, feature stores and data quality. Integrations: third-party connectors, APIs and platform integrations. Operationalize AI/ML: build model serving and inference pipelines, experiment tracking and the MLOps tooling for deployment, versioning, drift monitoring and lifecycle management. Engineer for reliability & automation: apply SRE practices to reduce toil, improve resilience and keep latency and uptime within target across the platform. Automate everything - deliver infrastructure-as-code, CI/CD and self-service tooling so product teams ship safely and quickly. Set technical direction: define platform standards, architecture and best practices, and raise the engineering bar through design reviews and mentorship. Collaborate cross-functionally: partner with data scientists, product teams and leadership to align platform investment with AppGate's strategic vision. Required Qualifications Experience: extensive platform, infrastructure or SRE engineering experience, with a track record of operating production systems at scale. Staff-level candidates typically bring 8+ years and Principal-level candidates 12+ years, though we hire on demonstrated impact. DevOps depth: strong command of infrastructure-as-code (Terraform or equivalent), CI/CD, containers and orchestration (Docker, Kubernetes), and cloud platforms (AWS). Observability expertise: hands-on experience implementing observability across APIs, cloud services and distributed systems using tools such as Prometheus, Grafana, OpenTelemetry, the ELK stack or comparable, including SLO and error-budget practice. Data platform skills: familiarity with real-time and batch ingestion pipelines, feature stores and data quality at production scale. Engineering craft: fluency in a primary backend language (Python, Go or similar) and a strong bias toward automation, testing and reliable, maintainable systems. Leadership: a record of setting technical direction, leading complex initiatives across teams, mentoring senior engineers, while still being very hands-on. Mindset: pragmatic, rigorous and ownership-driven. You thrive in a small, fast-moving environment and enjoy building foundations others depend on. Preferred Qualifications AI/ML infrastructure: experience building or operating model serving, inference pipelines and MLOps tooling such as MLflow, Kubeflow, SageMaker or equivalent, including model deployment, versioning and drift monitoring. Networking & Zero Trust fundamentals: working knowledge of the network and routing layer beneath modern access solutions - TCP/IP, TLS, tunneling/overlay networks, packet routing and filtering, DNS and firewalling - and familiarity with Zero Trust Network Access (ZTNA) or adjacent domains (VPN, SDP, SASE, software-defined networking). You can reason about traffic paths, latency and throughput end-to-end, and instrument the network as a first-class observability signal. Compensation Staff: 185k-225k base Principal: 215k-270k base We offer performance bonuses and considerable equity. AppGate is An Equal Opportunity/Affirmative Action Employer and a federal contractor subject to the Rehabilitation Act of 1973 and the Vietnam Era Veterans Readjustment Assistance Act of 1974 as amended, and their corresponding regulations. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. Further, AppGate is an affirmative action employer committed to taking positive steps to employ, advance in employment and otherwise afford equal employment opportunity to protected veterans and individuals with disabilities. In furtherance of AppGate's policy regarding affirmative action and equal employment opportunity, AppGate has developed a written affirmative action program. This program is available for review upon request by any applicant or employee during normal business hours by contacting the company's EEO Coordinator.
09/28/2026
Full time
Job Description Job Description Staff / Principal Platform Engineer Location: New York City Hybrid Department: AI Platform & Infrastructure Team Reports to: Vangie Shue - Principal Engineering Manager About AppGate AppGate secures and protects an organization's most valuable assets with its high performance Zero Trust Network Access (ZTNA) solution and Cyber Advisory Services. AppGate ZTNA is the only direct-routed Zero Trust solution built for peak performance, superior protection and seamless interoperability. AppGate Cyber Advisory Services harden your security posture and ensure business continuity. AppGate safeguards Fortune 500 enterprises and government agencies worldwide. Learn more at About the Role As we expand our platform, we are standing up a new AI Platform & Infrastructure team: the engine room of AppGate's AI strategy. This team owns the infrastructure layer that every next-generation security capability is built on, from network observability to AI-driven threat detection and the secure operation of emerging Agentic AI systems. We're looking for a Staff or Principal Platform Engineer to build and operate the foundational platform behind AppGate's AI products. You combine deep DevOps and cloud infrastructure expertise with hands-on experience operationalizing AI/ML systems, and you treat observability as a first-class engineering discipline. This is a rare opportunity to join a small, private, high-impact company where your work directly shapes the architecture, reliability and core platform that defines the future of security. You'll own the platform spanning APIs, cloud and self-managed solutions and AI/ML infrastructure, and you'll make it fast, reliable and observable at scale. This is a high-leverage, hands-on role for a senior engineer who sets technical direction and still ships. Key Responsibilities Build the Platform: design, build and operate the cloud infrastructure, services and pipelines that AppGate's AI and cloud products run on. Strong experience with self-managed technologies (kafka, elasticsearch) and Kubernetes are a must. Infrastructure as Code & Deployment Orchestration: Terraform and Helm for cloud provisioning, service deployment and configuration management. Implement Observability: instrument APIs, cloud services and AI/ML infrastructure with metrics, logging, tracing and alerting, and define SLOs and operational health metrics that teams trust. Data Platform: real-time and batch data ingestion pipelines, feature stores and data quality. Integrations: third-party connectors, APIs and platform integrations. Operationalize AI/ML: build model serving and inference pipelines, experiment tracking and the MLOps tooling for deployment, versioning, drift monitoring and lifecycle management. Engineer for reliability & automation: apply SRE practices to reduce toil, improve resilience and keep latency and uptime within target across the platform. Automate everything - deliver infrastructure-as-code, CI/CD and self-service tooling so product teams ship safely and quickly. Set technical direction: define platform standards, architecture and best practices, and raise the engineering bar through design reviews and mentorship. Collaborate cross-functionally: partner with data scientists, product teams and leadership to align platform investment with AppGate's strategic vision. Required Qualifications Experience: extensive platform, infrastructure or SRE engineering experience, with a track record of operating production systems at scale. Staff-level candidates typically bring 8+ years and Principal-level candidates 12+ years, though we hire on demonstrated impact. DevOps depth: strong command of infrastructure-as-code (Terraform or equivalent), CI/CD, containers and orchestration (Docker, Kubernetes), and cloud platforms (AWS). Observability expertise: hands-on experience implementing observability across APIs, cloud services and distributed systems using tools such as Prometheus, Grafana, OpenTelemetry, the ELK stack or comparable, including SLO and error-budget practice. Data platform skills: familiarity with real-time and batch ingestion pipelines, feature stores and data quality at production scale. Engineering craft: fluency in a primary backend language (Python, Go or similar) and a strong bias toward automation, testing and reliable, maintainable systems. Leadership: a record of setting technical direction, leading complex initiatives across teams, mentoring senior engineers, while still being very hands-on. Mindset: pragmatic, rigorous and ownership-driven. You thrive in a small, fast-moving environment and enjoy building foundations others depend on. Preferred Qualifications AI/ML infrastructure: experience building or operating model serving, inference pipelines and MLOps tooling such as MLflow, Kubeflow, SageMaker or equivalent, including model deployment, versioning and drift monitoring. Networking & Zero Trust fundamentals: working knowledge of the network and routing layer beneath modern access solutions - TCP/IP, TLS, tunneling/overlay networks, packet routing and filtering, DNS and firewalling - and familiarity with Zero Trust Network Access (ZTNA) or adjacent domains (VPN, SDP, SASE, software-defined networking). You can reason about traffic paths, latency and throughput end-to-end, and instrument the network as a first-class observability signal. Compensation Staff: 185k-225k base Principal: 215k-270k base We offer performance bonuses and considerable equity. AppGate is An Equal Opportunity/Affirmative Action Employer and a federal contractor subject to the Rehabilitation Act of 1973 and the Vietnam Era Veterans Readjustment Assistance Act of 1974 as amended, and their corresponding regulations. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. Further, AppGate is an affirmative action employer committed to taking positive steps to employ, advance in employment and otherwise afford equal employment opportunity to protected veterans and individuals with disabilities. In furtherance of AppGate's policy regarding affirmative action and equal employment opportunity, AppGate has developed a written affirmative action program. This program is available for review upon request by any applicant or employee during normal business hours by contacting the company's EEO Coordinator.