20 jobs found

Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. As the Senior Manager of Identity Protection products, you will be responsible for the Privileged Access, Secrets Management, Digital Certificates & Encryption platforms, teams, and processes. This includes the human and non-human identities that are leveraged by American users and systems. Additional information about the skills needed for this position is listed in the Skills, Licenses & Certifications section below. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Privileged Access Management: Oversee the tools and processes that control, monitor, and secures access to critical systems and sensitive data by users, accounts, and processes with elevated privileges. Secrets Management: Oversee the non-human identity vaulting and lifecycle management platforms. Public Key Infrastructure & Certificate Management: Responsible for management of the public and private PKIs while ensuring certificates are managed throughout their lifecycle. Encryption Services: Responsible for designing, implementing, operating, and governing cryptographic technologies while ensuring compliance, key management, scalability, and enterprise-wide consistency. Access Control & Governance: Develop, implement, oversee, and lead strategic access control policies and procedures to ensure privileged access to systems and data is least-privilege and properly managed. Strategic Planning and Governance: Lead the development and implementation of enterprise-wide strategies for digital certificates, encryption, and PAM, ensuring alignment with organizational goals and regulatory requirements. Product and Portfolio Management: Direct the planning, execution, and delivery of critical projects related to identity & access products, ensuring they meet strategic objectives, are completed on time, and within budget. Stakeholder Communication and Reporting: Communicate key risks, strategies, and statuses related to identity & access products to executive leadership and prepare detailed performance reports with strategic insights and KPIs. Leadership and Development: Provide visionary leadership and mentorship to a team of cybersecurity professionals specializing in identity & access products, fostering a culture of excellence and continuous development through targeted training opportunities. Audit and Compliance: Lead and ensure the execution of regular audits of access controls and directory services to ensure compliance with internal policies and external regulations. Address any identified issues or gaps. Risk Assessment and Management: Oversee risk assessments related to digital certificates, encryption, and PAM, develop strategic risk mitigation plans, and ensure continuous improvement of security measures. Incident Response and Troubleshooting: Oversee and provide strategic direction for the response to and resolution of access-related security incidents and service requests. Guide the troubleshooting and resolution of issues related to user access and directory services. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. Prior job experience in cybersecurity management or a related field is required. 7+ years of IT career experience in a closely related field 5+ years in a people leadership role Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Security, Computer Science, or a related field; advanced degree preferred 7+ years of IT career experience in a closely related field Proven track record of developing and implementing successful cybersecurity programs Experience managing security audits and assessments Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001) Skills, Licenses & Certifications Relevant certifications including but not limited to CISSP, CISM, CISA, CompTIA Security+, Certified Identity and Access Manager (CIAM), and Microsoft Certified: Identity and Access Administrator Associate In-depth knowledge of IAM principles, technologies, and best practices. Understanding of Privileged Access, Secret, and Vaulting tools and technologies. Understanding of Public Key Infrastructures, Digital Certificates, and Encryption management, and related secure lifecycle platforms. Knowledge of regulatory compliance requirements related to access management (e.g., GDPR, HIPAA, SOX) Strong problem-solving and analytical skills to identify and address access management issues Strong verbal and written communication skills to effectively interact with technical and non-technical stakeholders Capability to manage IAM projects and initiatives, with experience working with various stakeholders, including technology teams, business teams, and end users. Ability to develop, update, and enforce comprehensive IAM strategies and policies. Proficiency in ensuring compliance with IAM standards and conducting risk assessments. Strong problem-solving and analytical skills to identify and address IAM-related security threats. Strong agile management skills to oversee the implementation and maintenance of IAM solutions. What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.

POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI62cec5-

Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. In the Identity Services domain, you will be responsible for the architecture, design, standards, and patterns for delivering strong identity and access programs. You will be expected to balance technical oversight, and business alignment to secure organization's digital assets while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively. Additional information about the skills needed for this position is listed in the Skills, Licenses & Certifications section below. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity and Access Management (IAM) Architecture: Design and oversee the architecture and deployment of IAM solutions to manage user identities, roles, and access privileges across the organization's systems and applications. User Provisioning and De-provisioning Framework: Architect and optimize the processes for automating the creation, modification, and removal of user accounts and access rights based on organizational policies and user roles. Security and Governance: Establishing policies for user access, role-based access control (RBAC), and ensuring audit compliance. Designing Secure Architectures: Develop and design secure IT architectures that protect the organization's data, applications, and infrastructure from cyber threats. Collaboration with Stakeholders: Work closely with other IT teams, business units, and external partners to ensure security requirements are understood and implemented effectively. Security Standards and Best Practices: Establish and enforce security standards, guidelines, and best practices across the organization. Leadership: Provide technical guidance and oversight to the engineering team, system owners and customers. Incident Response Planning: Develop and maintain comprehensive incident response plans and procedures to ensure swift and effective handling of security incidents. Monitoring and Auditing Systems: Design and direct the continuous monitoring of IAM systems for suspicious activities, perform regular audits to ensure compliance with security policies, and generate comprehensive reports on access controls and user activities. Communication: Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Operational Management and Monitoring: Design monitoring strategies to ensure the continuous availability, performance, and reliability of identity services. Compliance and Risk Management Framework: Design frameworks to ensure compliance with data protection laws and standards (e.g., GDPR, CCPA). Conduct risk assessments and audits to identify and address vulnerabilities. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. Extensive job experience in cybersecurity architecture or a related field is required, with a proven track record of designing and implementing secure IT architecture and frameworks. Demonstrated expertise in leading architectural design and strategic oversight in cybersecurity initiatives. 12+ years experience in Cybersecurity Architecture Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 5+ years' experience in cybersecurity architecture or related roles. Experience designing and implementing comprehensive security architectures and frameworks. Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features. Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); Certified in Risk and Information Systems Control (CRISC); Certified Information Privacy Professional (CIPP); Certified Information Systems Security Professional - Architecture (CISSP-ISSAP) Proficiency in identity and access management (IAM) tools and technologies Expertise in developing and implementing cybersecurity IAM policies and procedures Knowledge of IAM principles and methodologies Understanding of regulatory requirements and standards related to IAM (e.g., GDPR, HIPAA, SOX) Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001) Ability to conduct assessments and audits of IAM practices to identify vulnerabilities and gaps Strong problem-solving skills to address IAM management challenges Ability to collaborate effectively with cross-functional teams Experience in managing IAM projects, including planning, execution, and monitoring Proficiency in identity and access management (IAM) solutions (e.g., Saviynt, Okta, Ping Identity, Microsoft Azure AD) Knowledge of authentication protocols (e.g., SAML, OAuth, OpenID Connect, Kerberos) Familiarity with cloud security and cloud IAM (e.g., AWS IAM, Azure AD) Ability to analyze complex security requirements and design effective access management solutions Strong problem-solving skills to address security challenges and incidents Excellent written and verbal communication skills to articulate security concepts and solutions to technical and non-technical stakeholders What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.

Job Description Job Description Senior Consultant AI & Automation Advisory Data Protection Services (DPS) Team: Solutions AI & Automation Advisory Reports To: Lead Consultant or Senior Manager, AI & Automation Advisory Role OverviewThe Senior Consultant AI & Automation Advisory is a skilled individual contributor who owns defined delivery tasks and workstream components within WWT's AI & Automation Advisory practice, supporting engagements such as the Client's Data Protection Services (DPS) AI Efficiency Assessment. Positioned below the Lead Consultant, the Senior Consultant brings hands-on depth across AI opportunity assessment, process and workflow analysis, and data protection domain knowledge, executes high-quality client deliverables with growing independence, and begins developing trusted client relationships at the working level. The Senior Consultant is the engine of AI advisory delivery leading current-state discovery across data protection pillars and functions, identifying and cataloguing AI-enabled use cases, supporting feasibility and target-state operating model design, and producing the analytical outputs that underpin client recommendations. They work under the direction of a Lead Consultant, Principal, or Senior Manager, and are expected to grow steadily toward owning full workstreams and contributing to pre-sales activities. What is Expected Engagement Delivery Execute assigned delivery tasks and workstream components within AI efficiency assessment engagements with accountability for quality, accuracy, and on-time completion Lead technical components of the assessment: conduct current-state discovery across Data Protection Fleet pillars (Cryptography and Secrets, Data Leakage Prevention, Data Asset Protection) and horizontal functions (Policy and Architecture, Fleet Enablement, Development, Engineering), document findings, and identify opportunity themes with guidance from the engagement lead Perform hands-on AI opportunity work: use-case identification, process and workflow mapping, agent design input (guided, pillar-specific, and cross-pillar orchestration agents), feasibility scoring, and prioritization support Produce client-ready deliverables current-state assessment packs, AI opportunity inventories, use-case catalogues, target-state operating model inputs, roadmap inputs, and executive summaries that meet WWT's professional services quality standards Facilitate discovery sessions, stakeholder interviews, and working-level workshops with DPS pillar and function stakeholders; synthesize findings into structured outputs for Lead Consultant review Maintain the DPS AI Initiatives Tracker workbook as the engagement's system of record, including entries in the Innovation Backlog, AI Initiatives Register, AI Risk and Controls, and AI Benefits Tracking sheets, and support classification of implementation status and validation of Jira AI labeling Client Engagement Build working-level relationships with DPS pillar and function stakeholders, technology teams, and project sponsors; establish credibility as a reliable, knowledgeable AI advisory resource throughout the engagement Communicate findings clearly and accurately to client counterparts; begin developing the ability to present findings to project sponsors and working-group leadership Contribute to client status reporting, meeting facilitation, and action item tracking under the direction of the engagement lead Pursuit & Practice Support Support pre-sales and pursuit activities: contribute to SOW scoping, effort estimation, and proposal content for AI and automation advisory engagements under the direction of the Lead Consultant or Senior Manager Contribute to practice development through reusable delivery assets, AI opportunity assessment templates, use-case catalogues, and technical write-ups Begin developing commercial awareness: understand engagement economics, utilization expectations, and how delivery quality connects to client satisfaction and account growth Growth & Development Actively build depth across AI/automation domains, agentic architectures, and data protection frameworks through project work, certifications, and self-directed learning Seek and apply feedback from Lead Consultants and Senior Managers; demonstrate consistent growth in delivery independence, communication quality, and domain breadth Begin supporting and coaching more junior colleagues on technical tasks and WWT delivery standards QualificationsRequired 4 8 years of experience in AI/automation strategy, technology consulting, or process engineering with a clear focus on AI-enabled efficiency, agentic solutions, or workflow automation; experience in cybersecurity, data protection, or regulated enterprise environments strongly preferred Hands-on experience across AI advisory domains and platforms, including one or more of: AI Opportunity Assessment current-state process/workflow discovery, use-case identification, feasibility and control-readiness assessment, prioritization frameworks, and business case development Agent & Automation Design enterprise agent and productivity platforms (M365 Copilot, Copilot Studio, Agent Builder, Power Automate AI, Power Citizen), developer coding assistants (GitHub Copilot, Claude Code, Amp), and orchestration/human -in-the-loop design AI Governance & Controls responsible AI principles, model and agent lifecycle controls, risk and controls tracking, data sensitivity classification, and approval/audit alignment Data Protection & Cybersecurity Domain exposure to cryptography and secrets management, data leakage prevention (DLP), data asset protection/DSAR workflows, or security policy and architecture, particularly within regulated or financial services environments Initiative Tracking & Reporting Platforms experience with workbook- or Jira-based initiative tracking, KPI/benefits tracking, and executive dashboard reporting Working knowledge of AI and data protection frameworks: responsible/trustworthy AI principles, NIST AI RMF, enterprise SDLC and engineering standards, and data protection concepts spanning cryptography, secrets management, DLP, and data asset protection Understanding of core AI advisory concepts: AI category taxonomies (Automate, Assist, Augment, Generate, Analyze), lifecycle stages (Idea/Concept through Deployed/Scaled), human-in-the-loop design, feasibility vs. desirability vs. viability, and control readiness in regulated environments Demonstrated consulting delivery competencies, including: Structured discovery: ability to conduct current-state discovery interviews, gather documentation and workbook/Jira evidence, manage information collection across pillars and functions, and synthesize findings into clear, structured outputs Opportunity and gap analysis: experience assessing operating-model maturity against AI adoption criteria, documenting opportunity and control gaps, and prioritizing findings by business impact and feasibility Technical communication: ability to translate AI opportunity and data protection findings into clear written deliverables and verbal summaries for technical and working-level client audiences Workshop facilitation: participate in and contribute to discovery sessions, opportunity-identification workshops, and validation sessions; begin developing the ability to facilitate independently Deliverable quality: consistent track record of producing accurate, well-structured client deliverables assessment packs, use-case catalogues, workbook updates, and roadmap inputs on time and to standard Engagement collaboration: work effectively within project teams; communicate status, risks, and issues proactively to the engagement lead; adapt to shifting priorities and client needs Preferred Bachelor's degree in Computer Science, Information Security, Data Science, Business, or a related field Certifications demonstrating AI, automation, or security knowledge: Microsoft Certified: Copilot or related AI credentials, CISSP, CISM, CISA, PMP, or equivalent Experience in enterprise environments across financial services, healthcare, or other regulated sectors particularly where AI adoption intersects with cybersecurity, data protection, or regulatory scrutiny Prior consulting experience at a professional services firm, systems integrator, or equivalent client-facing advisory role Familiarity with pre-sales processes: SOW development, effort estimation, or proposal support for AI/automation advisory engagements Key Competencies AI/automation domain depth and hands-on opportunity assessment execution Delivery quality and individual accountability Clear technical communication written and verbal Collaborative team contributor with a growth orientation Success in this role means executing AI efficiency assessment deliverables with high quality and growing independence, building credibility with client teams through consistent performance, expanding domain depth across AI advisory and data protection, and contributing to a practice that clients trust and return to while building toward the skills and experience required to step into a Lead Consultant role.

Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-

Description: You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? Requirements: The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details

Job Description Job Description Hello, "Join GD Resources for dynamic opportunities in business management and IT, where innovation meets excellence." About the Company: GD Resources is a Veteran Women-Owned Business Management and Information Technology company committed to excellence. GD Resources provides dynamic opportunities for veterans and professionals alike to contribute to innovative projects and drive success in a collaborative and supportive environment. Join us to make a difference, advance your career, and grow with a company that values integrity, diversity, and continuous improvement. Experience8-12 YearsClientNew York City - DoITTDuration6 MonthsPrimary SkillsIOS, Android, JIRA, azure, Product Manager, Trello, DevOpLocation Brooklyn, NY, 11201 Job Start Date2026-05-04Remote JobNoRequired Hours/Week35Job TypeContract Public Job TitleMid Level - Mobile App Developer (iOS & Android)Public Job DescriptionNYC Office of Technology and Innovation Job Title: Mid Level - Mobile App Developer (iOS & Android) Duration: 6+ Months with possible extension Location: 15 Metrotech Center, Brooklyn, NY 11201 Position Type: Contract Interview Type: Webcam/In-person Note: Normal Business Hours, Monday through Friday (not including a mandatory unpaid meal break after 6 hours of work), 35 work hours per week. If the consultant works more than 35 hours per week, the consultant must request overtime in the Agency's timekeeping system, and the project manager must approve those hours worked above the weekly maximum. SCOPE OF SERVICES: The developer will be responsible for overseeing the end-to-end technical execution of the new features in the NYC Secure App on iOS and Android and development of other digital resources as needed. The developer will deliver a scalable, privacy-centric systems that integrates with existing NYC data services, workflows, and web platforms. Job Description: The NYC Office of Technology and Innovation has been tasked with re-designing the NYC Secure App and an associated campaign to provide New Yorkers with a comprehensive set of tools and resources to prevent scam phone calls and text messages, educate vulnerable New Yorkers on prevention, and support New Yorkers with the resources they need when they have been victimized. Each year New Yorkers lose an estimated $6.5B to online and phone based scams, yet the city provides no systematic approach to protecting residents - this project will develop the technology and strategy to address that gap across OTI's programs including Cybersecurity, 311, and Digital Equity. TASKS: Develop quality code that is well-documented, testable, and production-ready Be proactive and seek feedback to ensure best practice solutions that meet business needs Building web solutions that are scalable and secure and align with overall city digital architecture Write and conduct unit testing as agreed with the City Engineering leads. Communicate technical decisions, needs, and priorities to engineers, product managers, and designers as part of a user-centered agile product delivery team Design the core logic with the existing vendor for the mobile application on iOS and Android to provide scam and spam protection for calls and texts. Build a responsive, accessible frontends resource sites that ensures a consistent experience across all browser types and mobile devices and leverages the NYC Design System. Apply rigorous industry-standard privacy and security standards and protocols to ensure that all user data remains private and secure. Develop the technical bridges necessary to route digital reporting data into existing intake and reporting systems. If necessary, learn new programming languages or frameworks, with help from City Engineering leads, to complete software development and testing tasks. Attend, participate, and assist in architecture, approach, and technical strategies as appropriate and requested by City Engineering leads. Mandatory Skills: At least 4 years of experience as a software engineer or application developer Experience building responsive websites with full-stack expertise Experience collaborating with product designers on cross-functional teams to ensure the best user experience. Experience working with Git based workflows Experience working in story-based workflows (e.g., Azure DevOps, JIRA, Trello, or other story or kanban-style workflow) Experience leading technical design and writing implementation planning documents Strong verbal and written communication skills Regards, Srikanth (Sri) Senior Recruiter Phone: Email: Powered by JazzHR I8bEmzW0Mq

Job Description Job Description Cloud Security Architect - IL4 / Enterprise Integration (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is the Washington, DC metropolitan area. Candidates may also be based near Buckley, Patrick, Peterson, or Schriever Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 AND FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. About the client Our client is a Super Intelligence-first mission technology company and Original Equipment Manufacturer (OEM) built to generate Decision Advantage for missions of consequence. Through their Team of Teams model, they integrate their people, OEMs, subcontractors, mission experts, commercial technology, and proprietary capabilities to make advanced products operationally ready for the Department of War, Intelligence Community, and broader U.S. Government.

Job Description Job Description Cloud Security Architect - IL4 / Enterprise Integration (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is the Washington, DC metropolitan area. Candidates may also be based near Buckley, Patrick, Peterson, or Schriever Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 AND FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. About the client Our client is a Super Intelligence-first mission technology company and Original Equipment Manufacturer (OEM) built to generate Decision Advantage for missions of consequence. Through their Team of Teams model, they integrate their people, OEMs, subcontractors, mission experts, commercial technology, and proprietary capabilities to make advanced products operationally ready for the Department of War, Intelligence Community, and broader U.S. Government.

Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.

Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Must have a minimum of a current DoD Secret Clearance with the ability to obtain a DoD Top Secret clearance with SCI eligibility. A current DoD Top Secret clearance with SCI eligibility strongly preferred. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Vaco is partnering with a national retail organization to hire a Manager of Cybersecurity Operations to lead and mature core security operations programs across the enterprise. This is a hands-on leadership role overseeing SOC operations, vulnerability management, endpoint security, DLP, incident response, and security automation. This role is ideal for a cybersecurity leader who can operate at both the program and technical execution level. The team needs someone who can manage internal security talent, hold external MSSP partners accountable, improve alert handling and escalation processes, and build repeatable capabilities around detection, response, reporting, and automation. The environment is collaborative, fast-moving, and highly cross-functional, requiring someone who can communicate clearly across IT, GRC, engineering, and business teams. This position is based in Tempe, Arizona and requires onsite presence Monday through Thursday, with Fridays optional remote. What You'll Be Doing Manage and mature day-to-day SOC operations, including monitoring, alert triage, escalation, and incident response workflows Partner closely with an external MSSP to drive SLA accountability, improve alert quality, and ensure critical issues are escalated quickly Lead vulnerability management efforts across tools such as Rapid7, Defender, and related platforms, including prioritization, remediation tracking, and executive reporting Oversee endpoint security and management initiatives across Intune, Jamf, Defender, and related endpoint controls Drive improvements to SIEM and SOAR capabilities, including automation opportunities for level 1 response, alert enrichment, and repeatable playbooks Build and refine incident response processes, including playbooks, simulations, post-incident reviews, and lessons learned Partner with IT, GRC, engineering, and business stakeholders to improve security posture across the organization Support DLP strategy and monitoring to protect sensitive data across SaaS, cloud, and endpoint environments Use security metrics, scorecards, and framework alignment to communicate program maturity and areas for improvement Evaluate how AI can be used responsibly in security operations, including automation of response workflows and protection of AI-enabled systems Mentor and develop security team members while remaining hands-on with technical operations when needed Help define and operationalize security programs that reduce risk while supporting business velocity Required Experience 6 or more years of experience in cybersecurity, information security operations, incident response, infrastructure, or related technical security roles Proven experience managing or leading SOC operations, either in a corporate environment or MSSP setting Strong understanding of the end-to-end incident response lifecycle, from alert intake through containment, remediation, and post-incident review Hands-on experience with cybersecurity technologies such as MDR, EDR, SIEM, SOAR, vulnerability management, and endpoint security tools Experience maturing vulnerability management programs, including risk prioritization, remediation coordination, and reporting Experience partnering with or managing MSSP relationships and holding vendors accountable to performance expectations Strong understanding of security frameworks and compliance considerations such as NIST, CIS Controls, PCI, SOX, and CCPA Ability to lead without authority and collaborate effectively across IT, engineering, GRC, and business teams Experience managing high-pressure incidents and making informed decisions under time-sensitive conditions Understanding of AI concepts and their impact on cybersecurity operations, including AI-enabled threats and secure use of AI tools Bachelor's degree in a related field, or equivalent additional experience Nice to Have CISM, CISSP, or similar security certification Experience with Rapid7, Microsoft Defender, Intune, Jamf, Workato, or comparable security and automation tools Experience building SOAR workflows or security automation playbooks Familiarity with cloud security controls across AWS, Azure, or GCP Experience in SaaS-heavy environments Experience with DLP program ownership or data protection initiatives Background supporting retail, consumer-facing, or high-growth business environments Compensation & Benefits Salary range: $150,000 to $160,000 base, depending on experience Bonus potential and other financial incentives Comprehensive benefits package available If you are a hands-on cybersecurity operations leader who can mature SOC processes, improve vulnerability and endpoint programs, and build practical automation across a growing security environment, we would welcome the opportunity to connect. Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets . click apply for full job details

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Independently assess security control deficiencies and residual risks, evaluate alternative corrective actions, and recommend risk-based remediation priorities. Advise the Authorizing Official and Government cybersecurity stakeholders on the security risks and operational implications of system changes, exception requests, and authorization decisions. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Active DoD Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. Work Environment and Physical Demand: Must be able to sit at a desk throughout the day and be able to visit customers within their office on a daily basis. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Partner directly with cybersecurity engineering and DevSecOps prototyping teams to integrate security controls early in the development lifecycle. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 3-5+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $150,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Independently assess security control deficiencies and residual risks, evaluate alternative corrective actions, and recommend risk-based remediation priorities. Advise the Authorizing Official and Government cybersecurity stakeholders on the security risks and operational implications of system changes, exception requests, and authorization decisions. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Active DoD Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. Work Environment and Physical Demand: Must be able to sit at a desk throughout the day and be able to visit customers within their office on a daily basis. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description Type: Full Time Location: Philadelphia, PA Overtime Exempt: Exempt Reports To: ARMADA HQ Travel Required: Yes Security Clearance Required: Active Secret Security Clearance CONTINGENT UPON AWARD Duties & Responsibilities: Specialist, Information System Security III (SISS3) will conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, risks and protection needs; conduct systems security evaluation, audits, and reviews; determine the residual risk of a package based on package content and assessment results and documenting for the Security Controls Assessor's (SCA) and higher level review. Execute Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Specialist, Information System Security III (SISS3) will conduct systems security reviews, audits, or evaluations, as appropriate, to ensure accreditation documents are accurate and represent the current risk posture of the system. Perform analysis of logs, events, and reporting of various data collections tools including: vulnerability monitoring via Assured Compliance Assessment System (ACAS) and related tools, Host Based Security Systems (HBSS), web content filters, Security Information and event management (SIEM), firewall systems, network devices, server devices, workstations, and intrusion detection and prevention systems (ID/PS). Specialist, Information System Security III (SISS3) will assess impacts from observed risks and report via the Cybersecurity Program chain of command. Executing Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Perform the evaluation of system administrator, security engineer, and/or system owner proposed corrections to ensure compliance and best-fit solution. Specialist, Information System Security III (SISS3) will present and submit data to management, develop reports, and produce procedural documentation in a comprehensive and cohesive manner. Perform risk management and security engineering for Research, Development, Testing, and Evaluation (RDT&E) RMF Afloat systems include Information Assurance Vulnerability Management (IAVM) support, remediation, patching, scanning and associated boundary maintenance. Specialist, Information System Security III (SISS3) will document residual risks in a plan of actions and milestones formatted in compliance with the current package system, currently eMASS. Specialist, Information System Security III (SISS3) will maintain current vulnerability scan data and residual risk plan of actions and milestones in Vulnerability Remediation Asset Manager (VRAM). Manage, attend, and support configuration control board practices. Create and verify the accuracy of POA&Ms/RARs as identified by vulnerability actual test results. Specialist, Information System Security III (SISS3) shall write technical documentation such as user manuals, reports, documentation, policies, presentations, Plan of Action and Milestones (POA&Ms), risk assessments, proposals, outlines, and summaries in support of both ashore and afloat systems across multiple platforms. Support developing of technical documents across multiple platforms including configuration management, milestone, issue tracking, web site content management and RMF documentation. Specialist, Information System Security III (SISS3) may be required to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). The estimated number of trips is 14 per year (estimated 25%-30% travel). Other duties as assigned. Knowledge, Skills, and Abilities (KSAs): Ability to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). Proficient in Microsoft Windows Operating System Administration, including Windows 11, Windows 10, Windows 7, and Windows XP (at a minimum). Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance. Possess excellent organizational and file management skills and the ability to plan and execute administrative work with little supervision. Possess excellent oral and written communication skills. Required Certifications: Minimum of one (1) IAT Level II listed certificate required: CompTIA Security+ (CE) CompTIA CySA+ GIAC Security Essentials (GSEC) ISC SSCP (Systems Security Certified Practitioner) Minimum/General Experience: Five (5) years of experience in the following: Cybersecurity, Engineering, Test and Evaluation (T&E) or Authorization and Assessment (A&A) (formerly C&A) related field. Information Assurance tools such as Defense Information Systems Agency (DISA) Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS). Command line interface, PowerShell, and performing automated tasking through use of code. Minimum Education: College degree in any technical discipline from an accredited college or university. Disclaimer: The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA with hybrid/remote opportunities. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Bridge the gap between OffSec and development by applying software design best practices. Lead technical exchange meetings (TEMs), participate in Discovery & Framing workshops, and maintain effective communication with cross-functional teams and stakeholders. Act as the primary subject matter expert and lead developer for custom offensive tooling, integrating disparate capabilities into a cohesive, mission-ready platform. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 5-7+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Experience with GitLab CI/CD (pipeline design, runners, artifact management) and AWS Cloud services (EC2, VPC, IAM, S3). Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $160,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.