This job is with Invesco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About Invesco As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. What's in it for you? Our people are at the ver y core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including: Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution Health & wellbeing benefits Parental Leave benefits Employee stock purchase plan Job Description Your Role Work with a global team to administer, support, and help improve Enterprise Workplace and Collaboration solutions across Microsoft 365. Assist with the delivery of new capabilities while helping ensure existing platforms remain secure, stable, and operationally effective. This role focuses on Microsoft 365 administration with a working specialization in Microsoft Purview and Microsoft Data Loss Prevention (DLP), including information protection, sensitivity labeling, compliance policy configuration, data governance, monitoring, and incident response across Exchange Online, SharePoint Online, OneDrive, Teams, and endpoint controls. Additional focus areas include Entra ID connectivity, migration of services to M365, and MDM/MAM. You will be responsibles for: Contribute to the execution of the Microsoft 365 service strategy, helping ensure platform capabilities, security controls, and compliance requirements align with business needs and enterprise technology design principles Administer and support core Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Entra ID, and related collaboration and productivity capabilities Configure, implement, and maintain Microsoft Purview Data Loss Prevention policies across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios to help reduce the risk of sensitive data exposure Build and maintain working knowledge of Microsoft Purview capabilities including DLP, sensitivity labels, data classification, retention, audit, compliance reporting, and related information protection controls Collaborate with peers on the engineering team to share knowledge on Microsoft 365 administration, operational support, troubleshooting, and data protection practices Work with security, legal, risk, records management, and business stakeholders to help translate regulatory and policy requirements into Microsoft Purview and Microsoft 365 controls Monitor policy matches, alerts, incidents, dashboards, and reporting within Microsoft Purview and related Microsoft 365 admin tools; investigate trends, help reduce false positives, and suggest improvements Follow and help maintain operational procedures, service health checks, start-of-day checks, recovery processes, and control routines to keep Microsoft 365 and Purview services resilient and supportable Support the delivery of business resilience, data protection, and governance obligations for assigned Microsoft 365 and compliance services Assist with troubleshooting and resolution of Microsoft 365, Purview, and DLP issues, including policy behavior, classification outcomes, mail flow impacts, sharing restrictions, and endpoint enforcement scenarios; escalate complex issues as appropriate Maintain documentation, standards, and user guidance for Microsoft 365 and Purview capabilities, and deliver quality service to business partners through clear communication and support The Experience you Brings: 2-4 years in a Microsoft 365 engineering or administration role, including hands-on experience supporting Microsoft 365 security, compliance, and/or collaboration services Previous experience in Financial Services or another regulated environment is preferred Working technical knowledge of Microsoft 365 architecture and administration, with exposure to Microsoft Purview, Data Loss Prevention, information protection, and compliance disciplines Experience diagnosing and resolving policy, configuration, and service issues while maintaining professionalism and clear stakeholder communication Hands-on experience creating, tuning, testing, or supporting DLP policies using sensitive information types, policy tips, alerts, incident management, and reporting is desirable Familiarity with Microsoft Purview features such as sensitivity labels, retention, audit, compliance reporting, and role-based administration is a plus Interpersonal skills necessary to communicate effectively at varying technical levels Demonstrated commitment to quality client service Strong communication skills with the ability to understand and converse in English, verbally and in writing Ability to adhere to Invesco technical and operational procedures and policies Ability to interact and communicate throughout the IT organization with individuals of varying technical abilities Self-motivated, enthusiastic, approachable, and people-oriented Technical Skills Microsoft Purview Data Loss Prevention (DLP), including policy creation, tuning, testing, reporting, and incident management Microsoft Purview Information Protection, including sensitivity labels, label publishing, and data classification Microsoft 365 DLP coverage across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios Exchange Online administration, mail flow awareness, and integration of compliance and protection controls Microsoft Entra ID / Azure AD, including identity, access, and conditional access fundamentals Compliance operations including audit, retention, role-based access control, and reporting within Microsoft Purview MDM/MAM and endpoint management exposure, including Microsoft Intune and support for endpoint data protection controls Awareness of Microsoft Copilot Studio and the broader Power Platform ecosystem (Power Apps, Power Automate, Dataverse) and governance considerations for low-code and agent-based solutions Bachelor's degree preferred - in MIS, CIS, Computer Science, or related field Relevant Microsoft certifications (e.g., MS-500, SC-400, MS-102) preferred or in progress Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) Yes Workplace Model Pursuant to Invesco's Workplace Policy, employees are expected to comply with the firm's most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other's growth and development. The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.
11/14/2026
Full time
This job is with Invesco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About Invesco As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. What's in it for you? Our people are at the ver y core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including: Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution Health & wellbeing benefits Parental Leave benefits Employee stock purchase plan Job Description Your Role Work with a global team to administer, support, and help improve Enterprise Workplace and Collaboration solutions across Microsoft 365. Assist with the delivery of new capabilities while helping ensure existing platforms remain secure, stable, and operationally effective. This role focuses on Microsoft 365 administration with a working specialization in Microsoft Purview and Microsoft Data Loss Prevention (DLP), including information protection, sensitivity labeling, compliance policy configuration, data governance, monitoring, and incident response across Exchange Online, SharePoint Online, OneDrive, Teams, and endpoint controls. Additional focus areas include Entra ID connectivity, migration of services to M365, and MDM/MAM. You will be responsibles for: Contribute to the execution of the Microsoft 365 service strategy, helping ensure platform capabilities, security controls, and compliance requirements align with business needs and enterprise technology design principles Administer and support core Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Entra ID, and related collaboration and productivity capabilities Configure, implement, and maintain Microsoft Purview Data Loss Prevention policies across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios to help reduce the risk of sensitive data exposure Build and maintain working knowledge of Microsoft Purview capabilities including DLP, sensitivity labels, data classification, retention, audit, compliance reporting, and related information protection controls Collaborate with peers on the engineering team to share knowledge on Microsoft 365 administration, operational support, troubleshooting, and data protection practices Work with security, legal, risk, records management, and business stakeholders to help translate regulatory and policy requirements into Microsoft Purview and Microsoft 365 controls Monitor policy matches, alerts, incidents, dashboards, and reporting within Microsoft Purview and related Microsoft 365 admin tools; investigate trends, help reduce false positives, and suggest improvements Follow and help maintain operational procedures, service health checks, start-of-day checks, recovery processes, and control routines to keep Microsoft 365 and Purview services resilient and supportable Support the delivery of business resilience, data protection, and governance obligations for assigned Microsoft 365 and compliance services Assist with troubleshooting and resolution of Microsoft 365, Purview, and DLP issues, including policy behavior, classification outcomes, mail flow impacts, sharing restrictions, and endpoint enforcement scenarios; escalate complex issues as appropriate Maintain documentation, standards, and user guidance for Microsoft 365 and Purview capabilities, and deliver quality service to business partners through clear communication and support The Experience you Brings: 2-4 years in a Microsoft 365 engineering or administration role, including hands-on experience supporting Microsoft 365 security, compliance, and/or collaboration services Previous experience in Financial Services or another regulated environment is preferred Working technical knowledge of Microsoft 365 architecture and administration, with exposure to Microsoft Purview, Data Loss Prevention, information protection, and compliance disciplines Experience diagnosing and resolving policy, configuration, and service issues while maintaining professionalism and clear stakeholder communication Hands-on experience creating, tuning, testing, or supporting DLP policies using sensitive information types, policy tips, alerts, incident management, and reporting is desirable Familiarity with Microsoft Purview features such as sensitivity labels, retention, audit, compliance reporting, and role-based administration is a plus Interpersonal skills necessary to communicate effectively at varying technical levels Demonstrated commitment to quality client service Strong communication skills with the ability to understand and converse in English, verbally and in writing Ability to adhere to Invesco technical and operational procedures and policies Ability to interact and communicate throughout the IT organization with individuals of varying technical abilities Self-motivated, enthusiastic, approachable, and people-oriented Technical Skills Microsoft Purview Data Loss Prevention (DLP), including policy creation, tuning, testing, reporting, and incident management Microsoft Purview Information Protection, including sensitivity labels, label publishing, and data classification Microsoft 365 DLP coverage across Exchange Online, SharePoint Online, OneDrive, Teams, and supported endpoint scenarios Exchange Online administration, mail flow awareness, and integration of compliance and protection controls Microsoft Entra ID / Azure AD, including identity, access, and conditional access fundamentals Compliance operations including audit, retention, role-based access control, and reporting within Microsoft Purview MDM/MAM and endpoint management exposure, including Microsoft Intune and support for endpoint data protection controls Awareness of Microsoft Copilot Studio and the broader Power Platform ecosystem (Power Apps, Power Automate, Dataverse) and governance considerations for low-code and agent-based solutions Bachelor's degree preferred - in MIS, CIS, Computer Science, or related field Relevant Microsoft certifications (e.g., MS-500, SC-400, MS-102) preferred or in progress Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) Yes Workplace Model Pursuant to Invesco's Workplace Policy, employees are expected to comply with the firm's most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other's growth and development. The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.
This job is with Invesco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About Invesco As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. What's in it for you? Our people are at the ver y core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including: Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution Health & wellbeing benefits Parental Leave benefits Employee stock purchase plan Job Description Key Responsibilities / Duties: Define and execute enterprise security architecture strategies, standards, reference architectures, design patterns, and guidelines aligned with business objectives and technology modernization efforts. undefined Partners with business leaders, enterprise architects, engineering teams, and security stakeholders to embed security requirements into technology roadmaps, cloud adoption, and transformation initiatives. undefined Define security functional and non-functional requirements that support business objectives and strengthen solution design. undefined Assess the effectiveness of security controls across data protection, identity and access management, security monitoring, detective controls, infrastructure/network security, and incident response; recommend controls, processes, and remediation actions to address gaps and reduce risk. undefined Research, evaluate, and advocate for emerging technologies, architectures, and security products that advance the security maturity roadmap. undefined Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards. undefined Mentor security architects and technical teams, promoting architectural excellence, knowledge sharing, and clear communication of complex security concepts to technical and business audiences. undefined Other duties as assigned. Work Experience / Knowledge: 15+ years of progressive IT experience, including 10+ years focused on cybersecurity, security architecture, and enterprise architecture in large, complex organizations. undefined 5+ years of experience with cloud delivery platforms, including IaaS, PaaS, and SaaS, and providers such as Amazon Web Services (AWS) and Microsoft Azure. undefined Strong background across cloud security, Zero Trust, networking, identity and access management, data protection, AI platforms, and risk management. undefined Experience leading enterprise-wide security initiatives, including architecture, implementation, and adoption of security solutions and processes. undefined Ability to engage senior leaders, define requirements, and clearly communicate security risks, decisions, and recommendations. undefined Expertise in two or more technology domains, such as infrastructure, application security, network security, IAM, data protection, endpoint security or AI security. undefined Knowledge of industry security control frameworks such as NIST, CSA CCM, and CIS Critical Security Controls. undefined Proficiency with architecture modeling using industry-standard notation languages, such as ArchiMate. Willingness to travel both domestically and internationally. Frequency and duration to be determined by manager. Skills / Other Personal Attributes Required: Strong ability to influence across technical, business, and executive stakeholders to drive adoption of enterprise architecture standards and security recommendations. undefined Collaborative team player with strong communication, organization, and facilitation skills. High-energy, confident professional with an ability to remain calm and take control in a crisis. Ability to see the big picture and think and act strategically. undefined Self-motivated and able to work independently with minimal direction. undefined Open-minded, flexible, and receptive to diverse perspectives; able to adapt to changing demands and conditions. undefined Committed to continuous learning, capability development, and mentoring others. Formal Education: Bachelor's degree in computer science, information systems, or a related field, or equivalent demonstrated experience. License / Registration / Certification: Certified Information Systems Security Professional ( CISSP) or equivalent certification. undefined Certification in enterprise architecture methodology or framework, such as The Open Group Architecture Framework (TOGAF) or Sherwood Applied Business Security Architecture (SABSA), preferred. undefined Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), or relevant vendor certifications from AWS or Microsoft Azure preferred. The salary range for this position in Charlottetown is $120,000-130,000 CAD per year. The total compensation offered for this position includes salary and incentive pay and will vary based on skills, experience and location. Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) Yes Workplace Model Pursuant to Invesco's Workplace Policy, employees are expected to comply with the firm's most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other's growth and development. The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.
11/13/2026
Full time
This job is with Invesco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About Invesco As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. What's in it for you? Our people are at the ver y core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including: Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution Health & wellbeing benefits Parental Leave benefits Employee stock purchase plan Job Description Key Responsibilities / Duties: Define and execute enterprise security architecture strategies, standards, reference architectures, design patterns, and guidelines aligned with business objectives and technology modernization efforts. undefined Partners with business leaders, enterprise architects, engineering teams, and security stakeholders to embed security requirements into technology roadmaps, cloud adoption, and transformation initiatives. undefined Define security functional and non-functional requirements that support business objectives and strengthen solution design. undefined Assess the effectiveness of security controls across data protection, identity and access management, security monitoring, detective controls, infrastructure/network security, and incident response; recommend controls, processes, and remediation actions to address gaps and reduce risk. undefined Research, evaluate, and advocate for emerging technologies, architectures, and security products that advance the security maturity roadmap. undefined Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards. undefined Mentor security architects and technical teams, promoting architectural excellence, knowledge sharing, and clear communication of complex security concepts to technical and business audiences. undefined Other duties as assigned. Work Experience / Knowledge: 15+ years of progressive IT experience, including 10+ years focused on cybersecurity, security architecture, and enterprise architecture in large, complex organizations. undefined 5+ years of experience with cloud delivery platforms, including IaaS, PaaS, and SaaS, and providers such as Amazon Web Services (AWS) and Microsoft Azure. undefined Strong background across cloud security, Zero Trust, networking, identity and access management, data protection, AI platforms, and risk management. undefined Experience leading enterprise-wide security initiatives, including architecture, implementation, and adoption of security solutions and processes. undefined Ability to engage senior leaders, define requirements, and clearly communicate security risks, decisions, and recommendations. undefined Expertise in two or more technology domains, such as infrastructure, application security, network security, IAM, data protection, endpoint security or AI security. undefined Knowledge of industry security control frameworks such as NIST, CSA CCM, and CIS Critical Security Controls. undefined Proficiency with architecture modeling using industry-standard notation languages, such as ArchiMate. Willingness to travel both domestically and internationally. Frequency and duration to be determined by manager. Skills / Other Personal Attributes Required: Strong ability to influence across technical, business, and executive stakeholders to drive adoption of enterprise architecture standards and security recommendations. undefined Collaborative team player with strong communication, organization, and facilitation skills. High-energy, confident professional with an ability to remain calm and take control in a crisis. Ability to see the big picture and think and act strategically. undefined Self-motivated and able to work independently with minimal direction. undefined Open-minded, flexible, and receptive to diverse perspectives; able to adapt to changing demands and conditions. undefined Committed to continuous learning, capability development, and mentoring others. Formal Education: Bachelor's degree in computer science, information systems, or a related field, or equivalent demonstrated experience. License / Registration / Certification: Certified Information Systems Security Professional ( CISSP) or equivalent certification. undefined Certification in enterprise architecture methodology or framework, such as The Open Group Architecture Framework (TOGAF) or Sherwood Applied Business Security Architecture (SABSA), preferred. undefined Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), or relevant vendor certifications from AWS or Microsoft Azure preferred. The salary range for this position in Charlottetown is $120,000-130,000 CAD per year. The total compensation offered for this position includes salary and incentive pay and will vary based on skills, experience and location. Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) Yes Workplace Model Pursuant to Invesco's Workplace Policy, employees are expected to comply with the firm's most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other's growth and development. The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.
Vaco is partnering with a national retail organization to hire a Manager of Cybersecurity Operations to lead and mature core security operations programs across the enterprise. This is a hands-on leadership role overseeing SOC operations, vulnerability management, endpoint security, DLP, incident response, and security automation. This role is ideal for a cybersecurity leader who can operate at both the program and technical execution level. The team needs someone who can manage internal security talent, hold external MSSP partners accountable, improve alert handling and escalation processes, and build repeatable capabilities around detection, response, reporting, and automation. The environment is collaborative, fast-moving, and highly cross-functional, requiring someone who can communicate clearly across IT, GRC, engineering, and business teams. This position is based in Tempe, Arizona and requires onsite presence Monday through Thursday, with Fridays optional remote. What You'll Be Doing Manage and mature day-to-day SOC operations, including monitoring, alert triage, escalation, and incident response workflows Partner closely with an external MSSP to drive SLA accountability, improve alert quality, and ensure critical issues are escalated quickly Lead vulnerability management efforts across tools such as Rapid7, Defender, and related platforms, including prioritization, remediation tracking, and executive reporting Oversee endpoint security and management initiatives across Intune, Jamf, Defender, and related endpoint controls Drive improvements to SIEM and SOAR capabilities, including automation opportunities for level 1 response, alert enrichment, and repeatable playbooks Build and refine incident response processes, including playbooks, simulations, post-incident reviews, and lessons learned Partner with IT, GRC, engineering, and business stakeholders to improve security posture across the organization Support DLP strategy and monitoring to protect sensitive data across SaaS, cloud, and endpoint environments Use security metrics, scorecards, and framework alignment to communicate program maturity and areas for improvement Evaluate how AI can be used responsibly in security operations, including automation of response workflows and protection of AI-enabled systems Mentor and develop security team members while remaining hands-on with technical operations when needed Help define and operationalize security programs that reduce risk while supporting business velocity Required Experience 6 or more years of experience in cybersecurity, information security operations, incident response, infrastructure, or related technical security roles Proven experience managing or leading SOC operations, either in a corporate environment or MSSP setting Strong understanding of the end-to-end incident response lifecycle, from alert intake through containment, remediation, and post-incident review Hands-on experience with cybersecurity technologies such as MDR, EDR, SIEM, SOAR, vulnerability management, and endpoint security tools Experience maturing vulnerability management programs, including risk prioritization, remediation coordination, and reporting Experience partnering with or managing MSSP relationships and holding vendors accountable to performance expectations Strong understanding of security frameworks and compliance considerations such as NIST, CIS Controls, PCI, SOX, and CCPA Ability to lead without authority and collaborate effectively across IT, engineering, GRC, and business teams Experience managing high-pressure incidents and making informed decisions under time-sensitive conditions Understanding of AI concepts and their impact on cybersecurity operations, including AI-enabled threats and secure use of AI tools Bachelor's degree in a related field, or equivalent additional experience Nice to Have CISM, CISSP, or similar security certification Experience with Rapid7, Microsoft Defender, Intune, Jamf, Workato, or comparable security and automation tools Experience building SOAR workflows or security automation playbooks Familiarity with cloud security controls across AWS, Azure, or GCP Experience in SaaS-heavy environments Experience with DLP program ownership or data protection initiatives Background supporting retail, consumer-facing, or high-growth business environments Compensation & Benefits Salary range: $150,000 to $160,000 base, depending on experience Bonus potential and other financial incentives Comprehensive benefits package available If you are a hands-on cybersecurity operations leader who can mature SOC processes, improve vulnerability and endpoint programs, and build practical automation across a growing security environment, we would welcome the opportunity to connect. Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets . click apply for full job details
10/07/2026
Full time
Vaco is partnering with a national retail organization to hire a Manager of Cybersecurity Operations to lead and mature core security operations programs across the enterprise. This is a hands-on leadership role overseeing SOC operations, vulnerability management, endpoint security, DLP, incident response, and security automation. This role is ideal for a cybersecurity leader who can operate at both the program and technical execution level. The team needs someone who can manage internal security talent, hold external MSSP partners accountable, improve alert handling and escalation processes, and build repeatable capabilities around detection, response, reporting, and automation. The environment is collaborative, fast-moving, and highly cross-functional, requiring someone who can communicate clearly across IT, GRC, engineering, and business teams. This position is based in Tempe, Arizona and requires onsite presence Monday through Thursday, with Fridays optional remote. What You'll Be Doing Manage and mature day-to-day SOC operations, including monitoring, alert triage, escalation, and incident response workflows Partner closely with an external MSSP to drive SLA accountability, improve alert quality, and ensure critical issues are escalated quickly Lead vulnerability management efforts across tools such as Rapid7, Defender, and related platforms, including prioritization, remediation tracking, and executive reporting Oversee endpoint security and management initiatives across Intune, Jamf, Defender, and related endpoint controls Drive improvements to SIEM and SOAR capabilities, including automation opportunities for level 1 response, alert enrichment, and repeatable playbooks Build and refine incident response processes, including playbooks, simulations, post-incident reviews, and lessons learned Partner with IT, GRC, engineering, and business stakeholders to improve security posture across the organization Support DLP strategy and monitoring to protect sensitive data across SaaS, cloud, and endpoint environments Use security metrics, scorecards, and framework alignment to communicate program maturity and areas for improvement Evaluate how AI can be used responsibly in security operations, including automation of response workflows and protection of AI-enabled systems Mentor and develop security team members while remaining hands-on with technical operations when needed Help define and operationalize security programs that reduce risk while supporting business velocity Required Experience 6 or more years of experience in cybersecurity, information security operations, incident response, infrastructure, or related technical security roles Proven experience managing or leading SOC operations, either in a corporate environment or MSSP setting Strong understanding of the end-to-end incident response lifecycle, from alert intake through containment, remediation, and post-incident review Hands-on experience with cybersecurity technologies such as MDR, EDR, SIEM, SOAR, vulnerability management, and endpoint security tools Experience maturing vulnerability management programs, including risk prioritization, remediation coordination, and reporting Experience partnering with or managing MSSP relationships and holding vendors accountable to performance expectations Strong understanding of security frameworks and compliance considerations such as NIST, CIS Controls, PCI, SOX, and CCPA Ability to lead without authority and collaborate effectively across IT, engineering, GRC, and business teams Experience managing high-pressure incidents and making informed decisions under time-sensitive conditions Understanding of AI concepts and their impact on cybersecurity operations, including AI-enabled threats and secure use of AI tools Bachelor's degree in a related field, or equivalent additional experience Nice to Have CISM, CISSP, or similar security certification Experience with Rapid7, Microsoft Defender, Intune, Jamf, Workato, or comparable security and automation tools Experience building SOAR workflows or security automation playbooks Familiarity with cloud security controls across AWS, Azure, or GCP Experience in SaaS-heavy environments Experience with DLP program ownership or data protection initiatives Background supporting retail, consumer-facing, or high-growth business environments Compensation & Benefits Salary range: $150,000 to $160,000 base, depending on experience Bonus potential and other financial incentives Comprehensive benefits package available If you are a hands-on cybersecurity operations leader who can mature SOC processes, improve vulnerability and endpoint programs, and build practical automation across a growing security environment, we would welcome the opportunity to connect. Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets . click apply for full job details
Senior / Lead .NET Software Engineer / SRE DETAILS Location: Arlington, TX 76014 (hybrid onsite 2-days per week) Openings: 2 (1 Senior .NET / 1 Lead .NET) Position Type: 6M C2H Hourly / Salary: to $160K+ (based on experience level) JOB SUMMARY Vaco is currently seeking a Senior .NET Software Engineer / SRE for a 6M C2H opportunity that is located in Arlington, TX 76014 (hybrid onsite 2-days per week). About the Project: This is an ongoing multi-year digital transformation initiative (now roughly 2+ years in) focused on modernizing financial services platforms, making them more scalable, reliable, automated, and cloud-native. The .NET Engineer / SRE will be building and extending tools / frameworks for SRE practices, including automation scripts, custom monitoring, CI/CD enhancements, reliability tooling, etc. The .NET Engineer / SRE will help bridge the gap between development teams (writing .NET) and SREs (ensuring reliability at scale), especially within this strategic / tool building-focused SRE practice. This is not a traditional .NET Developer (no owning user-facing APIs or business logic for financial services), but rather applying .NET skills to SRE tasks, including building custom tools for automation, reliability, and release engineering, creating GITHub Copilot context files to embed SRE practices (security / performance checks) early in development cycles, debugging / refactoring code in production environments, performing root-cause analysis, and iterating post-deployment. Additionally, there's no traditional on-call production monitoring / support, whereas the focus will be on design, architecture, automation, and enabling scalable DevOps / SRE practices for development teams, rather than day-to-day firefighting. Ideal Senior Candidate:The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Senior Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). Ideal LEAD Candidate (leading teams of 5+): The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Lead Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). JOB REQUIREMETS .NET Core Development (hands-on core expertise) - C# / .NET Core Development Building / Maintaining Production-Grade Applications / APIs / Services Cloud Modernization - Migrating Legacy .NET Applications to Cloud-Native Azure Architectures Azure-Native Application Development - Designing / Deploying / Supporting .NET Applications Directly in Azure with Real Production Workloads (Beyond Portal-Based "Click-Ops") AKS / Containerization - Containerizing .NET Applications (Docker Multi-Stage Builds) Deploying / Managing within AKS (Deployments / Services / ConfigMaps / Secrets / Helm / Node Pools / Autoscaling / Ingress / Cluster-Level Troubleshooting) CI/CD / Azure DevOps - Building / Maintaining YAML-Based CI/CD Pipelines (Automated Builds / Testing / Security Scans / Docker Image Creation / Deployments to AKS / App Services) Azure Platform Services Integration - Integrating Core Azure Services into .NET Applications (App Services / Azure Functions / Service Bus / Event Grid / Azure Monitor / Application Insights With Custom Telemetry / Distributed Tracing / Metrics) IaC / Terraform - Developing / Managing Terraform-Based Infrastructure (AKS / VNETs / Private Endpoints / Service Bus / SQL Database / Storage) Aligned with Application Development Identity / Security (Azure) - Implementing Secure Patterns (Managed Identities / Entra ID / RBAC / Secure Connectivity / Polly Retry Policies / Private Endpoints / VNET Integration) within .NET Services Observability / SRE Practices - Applying SRE Principles within Development (Application Insights / Log Analytics / Alerting / Performance Monitoring / Production Troubleshooting) Database Design / Optimization - Oracle / MS SQL Server / NoSQL (CosmosDB) SQL Scripting (hands-on) Designing / Evolving Database Schemas Performing Query Performance Analysis Indexing to Deliver Scalable / Performant Services Problem Solving / Collaboration - Driving Root Cause Analysis / Debugging for .NET Applications in Azure Collaborating within SRE / Cross-Functional Teams PREFERRED (not required) Azure Governance / Best Practices - Azure Policy / GitHub Copilot Context / Embedding SRE Practices Early in Development Lifecycle Architecture Frameworks (Familiarity) - Azure Well-Architected Framework (Reliability / Operational Excellence) Advanced AKS / Hybrid - Exposure to Advanced AKS Topics (Cluster Autoscaling / Service Mesh / Cost Optimization) / Hybrid Scenarios (Azure Arc) AI / Automation Enablement - Driving Adoption of AI-Powered Tools (GitHub Copilot) to Improve Developer Productivity / Code Quality By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.
10/07/2026
Full time
Senior / Lead .NET Software Engineer / SRE DETAILS Location: Arlington, TX 76014 (hybrid onsite 2-days per week) Openings: 2 (1 Senior .NET / 1 Lead .NET) Position Type: 6M C2H Hourly / Salary: to $160K+ (based on experience level) JOB SUMMARY Vaco is currently seeking a Senior .NET Software Engineer / SRE for a 6M C2H opportunity that is located in Arlington, TX 76014 (hybrid onsite 2-days per week). About the Project: This is an ongoing multi-year digital transformation initiative (now roughly 2+ years in) focused on modernizing financial services platforms, making them more scalable, reliable, automated, and cloud-native. The .NET Engineer / SRE will be building and extending tools / frameworks for SRE practices, including automation scripts, custom monitoring, CI/CD enhancements, reliability tooling, etc. The .NET Engineer / SRE will help bridge the gap between development teams (writing .NET) and SREs (ensuring reliability at scale), especially within this strategic / tool building-focused SRE practice. This is not a traditional .NET Developer (no owning user-facing APIs or business logic for financial services), but rather applying .NET skills to SRE tasks, including building custom tools for automation, reliability, and release engineering, creating GITHub Copilot context files to embed SRE practices (security / performance checks) early in development cycles, debugging / refactoring code in production environments, performing root-cause analysis, and iterating post-deployment. Additionally, there's no traditional on-call production monitoring / support, whereas the focus will be on design, architecture, automation, and enabling scalable DevOps / SRE practices for development teams, rather than day-to-day firefighting. Ideal Senior Candidate:The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Senior Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). Ideal LEAD Candidate (leading teams of 5+): The ideal candidate will come with a Developer-First Mindset for full SDLC, Architecture Ownership, and Problem Solving (build the tool if it does not exist approach). Having .NET fluency enables strategic SRE in their .NET / Azure ecosystem, bridging gaps between development and operations without siloed roles. The Lead Engineer MUST be able to walk through their most recent projects, in depth, describing complex features, debugging, and development frameworks (why you'd choose one over the other for particular tasks, etc.). JOB REQUIREMETS .NET Core Development (hands-on core expertise) - C# / .NET Core Development Building / Maintaining Production-Grade Applications / APIs / Services Cloud Modernization - Migrating Legacy .NET Applications to Cloud-Native Azure Architectures Azure-Native Application Development - Designing / Deploying / Supporting .NET Applications Directly in Azure with Real Production Workloads (Beyond Portal-Based "Click-Ops") AKS / Containerization - Containerizing .NET Applications (Docker Multi-Stage Builds) Deploying / Managing within AKS (Deployments / Services / ConfigMaps / Secrets / Helm / Node Pools / Autoscaling / Ingress / Cluster-Level Troubleshooting) CI/CD / Azure DevOps - Building / Maintaining YAML-Based CI/CD Pipelines (Automated Builds / Testing / Security Scans / Docker Image Creation / Deployments to AKS / App Services) Azure Platform Services Integration - Integrating Core Azure Services into .NET Applications (App Services / Azure Functions / Service Bus / Event Grid / Azure Monitor / Application Insights With Custom Telemetry / Distributed Tracing / Metrics) IaC / Terraform - Developing / Managing Terraform-Based Infrastructure (AKS / VNETs / Private Endpoints / Service Bus / SQL Database / Storage) Aligned with Application Development Identity / Security (Azure) - Implementing Secure Patterns (Managed Identities / Entra ID / RBAC / Secure Connectivity / Polly Retry Policies / Private Endpoints / VNET Integration) within .NET Services Observability / SRE Practices - Applying SRE Principles within Development (Application Insights / Log Analytics / Alerting / Performance Monitoring / Production Troubleshooting) Database Design / Optimization - Oracle / MS SQL Server / NoSQL (CosmosDB) SQL Scripting (hands-on) Designing / Evolving Database Schemas Performing Query Performance Analysis Indexing to Deliver Scalable / Performant Services Problem Solving / Collaboration - Driving Root Cause Analysis / Debugging for .NET Applications in Azure Collaborating within SRE / Cross-Functional Teams PREFERRED (not required) Azure Governance / Best Practices - Azure Policy / GitHub Copilot Context / Embedding SRE Practices Early in Development Lifecycle Architecture Frameworks (Familiarity) - Azure Well-Architected Framework (Reliability / Operational Excellence) Advanced AKS / Hybrid - Exposure to Advanced AKS Topics (Cluster Autoscaling / Service Mesh / Cost Optimization) / Hybrid Scenarios (Azure Arc) AI / Automation Enablement - Driving Adoption of AI-Powered Tools (GitHub Copilot) to Improve Developer Productivity / Code Quality By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.
Network Engineer DETAILS Location: Chesapeake, VA 23322 (onsite 5-days per week) Position Type: 6M Contract Hourly / Salary: to $60W2 JOB SUMMARY Vaco is currently seeking a Network Engineer for a 6M Contract that is located in Chesapeake, VA (onsite 5-days per week). The Network Engineer will support and enrich the enterprise network infrastructure within a large production environment. The Network Engineer will maintain and troubleshoot Layer 2 and foundational Layer 3 networking technologies, supporting switching, VLAN segmentation, trunking, wireless connectivity, and network access services while ensuring reliable day-to-day operations. The Network Engineer will work closely with existing network teams to assist with network implementation, configuration, troubleshooting, and operational support across wired and wireless environments. The ideal Network Engineer will possess strong switching fundamentals, practical networking experience, and the ability to support enterprise connectivity, security, and infrastructure initiatives while contributing to the overall stability and performance of the network environment. Enterprise Network Operations - Supporting / Maintaining Critical Network Infrastructure via Configuration / Monitoring / Troubleshooting / Resolution of Connectivity Issues Across Switching / Routing / Wireless / Access Layer Technologies Layer 2 Network Administration - Managing VLAN Architecture / Trunking / Spanning Tree / Authentication Services / Switch Configurations Ensuring Secure / Reliable Network Communications Network Troubleshooting / Incident Response - Investigating / Resolving Performance / Availability / Connectivity Issues via Systematic Analysis of Switching / Routing / Wireless / Endpoint Communication Paths Wireless / Access Network Support - Supporting WiFi Connectivity / Access Layer Deployments / Network Access Services Delivering Consistent User / Device Connectivity Across Enterprise Locations Network Implementation / Change Management - Supporting Network Upgrades / Equipment Deployments / Configuration Changes / Infrastructure Enhancements Following Established Change Control Processes Cross-Technology Infrastructure Support - Collaborating with Network / Security / Infrastructure Teams to Support Integrated Solutions Across Routing / Firewalls / Wireless Networking / Network Access Control (NAC) Technologies JOB REQUIREMENTS Enterprise Network Engineering (5+ years hands-on) - Supporting Enterprise Network Infrastructure Across Campus / Branch / Data Center Environments Layer 2 Networking Expertise (strong experience) - VLAN Design / Trunking / Spanning Tree / Port Security / Authentication Services / Switch Provisioning / Enterprise Access Layer Operations Routing / Layer 3 Fundamentals (working knowledge) - Routing Protocols / Technologies (Static Routing / OSPF / Default Routing / Inter-VLAN Routing / Route Redistribution Fundamentals) Cisco Switching Infrastructure - Configuring / Managing / Troubleshooting Cisco Catalyst Switching Platforms in Large Enterprise Environments Wireless Networking Support - Supporting Enterprise Wireless Infrastructure (WLAN Deployments / SSIDs / Authentication Services / Client Connectivity Troubleshooting / RF Fundamentals) Network Troubleshooting / Incident Resolution (advanced) - Troubleshooting Switching / Routing / Wireless / Client Connectivity Issues via Structured Root Cause Analysis Methodologies Network Access Control (NAC) - Supporting NAC Technologies (Authentication / Authorization / Device Access Policies / Endpoint Connectivity Management) Network Security Fundamentals (understanding) - Enterprise Security Concepts (ACLs / Segmentation / Network Access Controls / Secure Connectivity Best Practices) Infrastructure Monitoring / Operations - Utilizing Network Monitoring / Alerting / Performance Management Tools to Maintain Operational Stability / Resolve Infrastructure Issues Proactively Change Management / Network Implementations - Supporting Network Deployments / Hardware Refreshes / Configuration Changes / Infrastructure Upgrades Following Established Change Control Processes Documentation / Operational Standards - Creating / Maintaining Network Documentation (Diagrams / Runbooks / Configuration Standards / Support Procedures) Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.
10/07/2026
Full time
Network Engineer DETAILS Location: Chesapeake, VA 23322 (onsite 5-days per week) Position Type: 6M Contract Hourly / Salary: to $60W2 JOB SUMMARY Vaco is currently seeking a Network Engineer for a 6M Contract that is located in Chesapeake, VA (onsite 5-days per week). The Network Engineer will support and enrich the enterprise network infrastructure within a large production environment. The Network Engineer will maintain and troubleshoot Layer 2 and foundational Layer 3 networking technologies, supporting switching, VLAN segmentation, trunking, wireless connectivity, and network access services while ensuring reliable day-to-day operations. The Network Engineer will work closely with existing network teams to assist with network implementation, configuration, troubleshooting, and operational support across wired and wireless environments. The ideal Network Engineer will possess strong switching fundamentals, practical networking experience, and the ability to support enterprise connectivity, security, and infrastructure initiatives while contributing to the overall stability and performance of the network environment. Enterprise Network Operations - Supporting / Maintaining Critical Network Infrastructure via Configuration / Monitoring / Troubleshooting / Resolution of Connectivity Issues Across Switching / Routing / Wireless / Access Layer Technologies Layer 2 Network Administration - Managing VLAN Architecture / Trunking / Spanning Tree / Authentication Services / Switch Configurations Ensuring Secure / Reliable Network Communications Network Troubleshooting / Incident Response - Investigating / Resolving Performance / Availability / Connectivity Issues via Systematic Analysis of Switching / Routing / Wireless / Endpoint Communication Paths Wireless / Access Network Support - Supporting WiFi Connectivity / Access Layer Deployments / Network Access Services Delivering Consistent User / Device Connectivity Across Enterprise Locations Network Implementation / Change Management - Supporting Network Upgrades / Equipment Deployments / Configuration Changes / Infrastructure Enhancements Following Established Change Control Processes Cross-Technology Infrastructure Support - Collaborating with Network / Security / Infrastructure Teams to Support Integrated Solutions Across Routing / Firewalls / Wireless Networking / Network Access Control (NAC) Technologies JOB REQUIREMENTS Enterprise Network Engineering (5+ years hands-on) - Supporting Enterprise Network Infrastructure Across Campus / Branch / Data Center Environments Layer 2 Networking Expertise (strong experience) - VLAN Design / Trunking / Spanning Tree / Port Security / Authentication Services / Switch Provisioning / Enterprise Access Layer Operations Routing / Layer 3 Fundamentals (working knowledge) - Routing Protocols / Technologies (Static Routing / OSPF / Default Routing / Inter-VLAN Routing / Route Redistribution Fundamentals) Cisco Switching Infrastructure - Configuring / Managing / Troubleshooting Cisco Catalyst Switching Platforms in Large Enterprise Environments Wireless Networking Support - Supporting Enterprise Wireless Infrastructure (WLAN Deployments / SSIDs / Authentication Services / Client Connectivity Troubleshooting / RF Fundamentals) Network Troubleshooting / Incident Resolution (advanced) - Troubleshooting Switching / Routing / Wireless / Client Connectivity Issues via Structured Root Cause Analysis Methodologies Network Access Control (NAC) - Supporting NAC Technologies (Authentication / Authorization / Device Access Policies / Endpoint Connectivity Management) Network Security Fundamentals (understanding) - Enterprise Security Concepts (ACLs / Segmentation / Network Access Controls / Secure Connectivity Best Practices) Infrastructure Monitoring / Operations - Utilizing Network Monitoring / Alerting / Performance Management Tools to Maintain Operational Stability / Resolve Infrastructure Issues Proactively Change Management / Network Implementations - Supporting Network Deployments / Hardware Refreshes / Configuration Changes / Infrastructure Upgrades Following Established Change Control Processes Documentation / Operational Standards - Creating / Maintaining Network Documentation (Diagrams / Runbooks / Configuration Standards / Support Procedures) Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
09/28/2026
Full time
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description Endpoint & Information Systems Specialist POSITION SUMMARY: The Endpoint & Information Systems Specialist designs, implements, and supports the district's cloud, identity, and endpoint management systems across Microsoft 365, Azure, Google Workspace, and major device platforms. The role manages identity services, automation workflows, SIS integrations, and data accuracy while providing Level 3 technical support and ensuring compliance with state reporting requirements. This position requires strong technical expertise, problem solving skills, and the ability to support mission critical educational technology in a fast paced environment. DUTIES AND RESPONSIBILITIES: Design and implement modern endpoint management solutions and strategy for large scale environments. Design, implement and maintain Microsoft Azure, Microsoft 365 and Google Workspace solutions and maintain their roadmap. Design and deploy identity services that support Microsoft 365/Google Workspace for authentication and secure access. Define and maintain identity provisioning of services and role-based access controls; develop and maintain processes and systems to automate workflows for the provisioning, management and de-provisioning of directory objects and services. Develop, maintain, and enforce directory structure, security, policies, and naming standards. Develop and maintain scripts to automate systems deployment, operations, and management. Deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment. Provide technical support for state and national assessments such as IAR, ACCESS, DLM-AA, ACT, SAT, and NAEP. Assist schools with data submissions and reports for compliance and accountability. Provide technical support for educational applications such as Skyward, PowerSchool, Clever, SchoolDay, Hapara, Destiny, and Fitnessgram. Manage end-of-year SIS processes, including data rollover and cleanup. Maintain and troubleshoot Clever, SchoolDay, and Google Workspace integrations with SIS. Lead data cleanup and ETL (Extract, Transform, Load) processes between SIS and the district's data warehouse. Support schools with state reporting and ensure SIS compliance with state (ISBE) requirements. Proactively review and validate SIS data accuracy, identifying and resolving discrepancies. Provide Level 3 support for Service Desk tickets and incidents. Perform scheduled maintenance and support after hours. EXPERIENCE IN: Microsoft 365 MacOS and iOS Microsoft Intune Microsoft Defender for Endpoint Azure AD, identity security and compliance Azure Arc and hybrid cloud management Google Workspace Windows Server 2016/2019/2022 Microsoft Active Directory SSO-related software such as ADFS, OAuth, Okta or other SAML & OpenID Connect providers. PowerShell scripting and utility scripts REQUIREMENTS: Bachelor's Degree in Information Systems, Computer Science, or equivalent combination of education and experience. Minimum of 10 years' experience working in IT disciplines. Experience with Microsoft Access, SQL Server, and T-SQL. Experience with API integration and scripting (e.g., Google Apps Manager - GAM). Strong proficiency in Microsoft Excel. Experience working in K-12 Schools. PREFERRED CERTIFICATION(S) REQUIREMENTS: Microsoft 365 Certified: Modern Desktop Administrator Associate Microsoft 365 related certification Microsoft Azure related certification Google for Workspace related certification SKILLS AND ABILITIES: Strong troubleshooting and problem-solving skills with attention to details. Apple device management, for example JAMF/Mosyle Critical thinker with proven ability to deal with requirements yet see things holistically and strategically. Strong interpersonal skills with excellent verbal and written communication to technical and non-technical audiences. Ability to work with clients and technical teams to build requirements, technical artifacts and engineering documents including detailed designs and test plan. Ability to shift and pivot with changing responsibilities. Ability to learn new technology and business process as required. Maintain industry knowledge on latest trends and technology. Possess a personal sense of urgency and the ability to handle a fast-paced environment. Provide training, mentorship, and support professional development of fellow engineers. Represent the company professionally to all parties including customers, prospects, and vendors. Carry out other duties and responsibilities as assigned by supervisor.
09/26/2026
Full time
Job Description Job Description Endpoint & Information Systems Specialist POSITION SUMMARY: The Endpoint & Information Systems Specialist designs, implements, and supports the district's cloud, identity, and endpoint management systems across Microsoft 365, Azure, Google Workspace, and major device platforms. The role manages identity services, automation workflows, SIS integrations, and data accuracy while providing Level 3 technical support and ensuring compliance with state reporting requirements. This position requires strong technical expertise, problem solving skills, and the ability to support mission critical educational technology in a fast paced environment. DUTIES AND RESPONSIBILITIES: Design and implement modern endpoint management solutions and strategy for large scale environments. Design, implement and maintain Microsoft Azure, Microsoft 365 and Google Workspace solutions and maintain their roadmap. Design and deploy identity services that support Microsoft 365/Google Workspace for authentication and secure access. Define and maintain identity provisioning of services and role-based access controls; develop and maintain processes and systems to automate workflows for the provisioning, management and de-provisioning of directory objects and services. Develop, maintain, and enforce directory structure, security, policies, and naming standards. Develop and maintain scripts to automate systems deployment, operations, and management. Deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment. Provide technical support for state and national assessments such as IAR, ACCESS, DLM-AA, ACT, SAT, and NAEP. Assist schools with data submissions and reports for compliance and accountability. Provide technical support for educational applications such as Skyward, PowerSchool, Clever, SchoolDay, Hapara, Destiny, and Fitnessgram. Manage end-of-year SIS processes, including data rollover and cleanup. Maintain and troubleshoot Clever, SchoolDay, and Google Workspace integrations with SIS. Lead data cleanup and ETL (Extract, Transform, Load) processes between SIS and the district's data warehouse. Support schools with state reporting and ensure SIS compliance with state (ISBE) requirements. Proactively review and validate SIS data accuracy, identifying and resolving discrepancies. Provide Level 3 support for Service Desk tickets and incidents. Perform scheduled maintenance and support after hours. EXPERIENCE IN: Microsoft 365 MacOS and iOS Microsoft Intune Microsoft Defender for Endpoint Azure AD, identity security and compliance Azure Arc and hybrid cloud management Google Workspace Windows Server 2016/2019/2022 Microsoft Active Directory SSO-related software such as ADFS, OAuth, Okta or other SAML & OpenID Connect providers. PowerShell scripting and utility scripts REQUIREMENTS: Bachelor's Degree in Information Systems, Computer Science, or equivalent combination of education and experience. Minimum of 10 years' experience working in IT disciplines. Experience with Microsoft Access, SQL Server, and T-SQL. Experience with API integration and scripting (e.g., Google Apps Manager - GAM). Strong proficiency in Microsoft Excel. Experience working in K-12 Schools. PREFERRED CERTIFICATION(S) REQUIREMENTS: Microsoft 365 Certified: Modern Desktop Administrator Associate Microsoft 365 related certification Microsoft Azure related certification Google for Workspace related certification SKILLS AND ABILITIES: Strong troubleshooting and problem-solving skills with attention to details. Apple device management, for example JAMF/Mosyle Critical thinker with proven ability to deal with requirements yet see things holistically and strategically. Strong interpersonal skills with excellent verbal and written communication to technical and non-technical audiences. Ability to work with clients and technical teams to build requirements, technical artifacts and engineering documents including detailed designs and test plan. Ability to shift and pivot with changing responsibilities. Ability to learn new technology and business process as required. Maintain industry knowledge on latest trends and technology. Possess a personal sense of urgency and the ability to handle a fast-paced environment. Provide training, mentorship, and support professional development of fellow engineers. Represent the company professionally to all parties including customers, prospects, and vendors. Carry out other duties and responsibilities as assigned by supervisor.
