16 jobs found

Job Description Job Description Solutions Through Innovative Technologies, Inc. (STI-TEC) specializes in the delivery of professional business and information management services. STI-TEC offers government and commercial clients a comprehensive portfolio of services that identify, manage, distribute and improve business processes related to entities' most valued resource, information. As a fast-growing solutions provider, established in 2000, total customer satisfaction has remained the cornerstone of our business. Our business model focuses on integrity, loyalty, and trust. Position Overview Space Systems Command (SSC), is the United States Space Force field command responsible for acquiring, developing, and delivering resilient capabilities to outpace emerging threats and protect our Nation's strategic advantage in, from, and to space. SSC plays a critical role in advancing the United States space capabilities, delivering cutting-edge solutions to protect and enhance national security. Join us and be part of the mission to shape the future of space and protect the assets that keep our nation secure. Essential Job Function Provide space acquisitions, engineering, operations, and technical advice and assistance for various project and program stages to support the acquisition life cycle. Support program acquisition efforts in advanced technology, future concept development, and integration activities. Advise and assist on cost, schedule, and performance issues. Revise or draft Joint Capabilities Integrated Development System (JCIDS) and acquisition documentation for government program managers. Support presentations of products to internal and external customers. Documentation includes Initial Capability Documents, Interface Control Documents, Capability Development/Production/Requirements Documents, Milestone documentation, Acquisition Strategies, Analysis of Alternatives, Concept of Operations, Memorandums of Agreement/Understanding, Technical/Systems Requirement Documents, Defense Acquisition Board documentation, Technical Evaluations, System Specifications, enabling concepts, training material, briefings, white papers, reports, and analysis results. Provide draft SME-level technical and/or programmatic status reports as requested. Identify improvement areas in acquisition processes and recommend actionable changes. Assist in building and maintaining a government risk program. Maintain current awareness of program schedules, monitor acquisition implementation, report requirement shortfalls, and provide program assessments based on identified risks. Provide advice on technical engagements such as technical interchange meetings, design reviews, and program conferences. Provide technical and operational insights for mission protection and operations. Recommend solutions for technical anomalies and evaluate impact analysis, audits, studies, compliance inspections, and readiness reviews. Provide cybersecurity support in accordance with DoDI 8500.01. Recommend actions on cyber activities and provide cybersecurity issue briefings as requested. Facilitate and support cybersecurity working groups and meetings. Maintain awareness and manage program Authority to Operate, Authority to Test, Authority to Connect, and associated Interim Authorities. Support cyber testing and assessment activities and document findings and corrective actions in accordance with the Federal Information Security Management Act. Minimum Qualifications MA/MS with more than 10 years of experience Subject Matter Expertise in computer networks, network protocols, and network architecture Integrating and engineering cybersecurity into mission systems Developing cyber tools for use by cyber operators Experience rapidly maturing and applying technology in operationally relevant environments Experience working with mission partners (specifics at higher classification) to develop solutions Experience working in intelligence and with its community (specifics at higher classification) Experience working with intelligence mission systems Experience with modern C5ISRT systems in DoD Experience with DoD and US military policies (specifics at higher classification) Experience working within a classified environment to meet warfighter needs Note: Specific certifications can be made available at a higher classification level STI-TEC offers a competitive benefits package including: Medical, dental, and vision coverage Life insurance Short term/long term disability coverage Retirement savings - 401(k) Paid time off (PTO) Holiday leave Alternate work schedules (depending on work site) Flexible spending account options Whether you're an experienced professional, a veteran, a former military or civilian federal employee, or a recent graduate, STI-TEC has a career opportunity for you. Applicants selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. STI-TEC is an equal opportunity employer and values diversity. Employment is decided on the basis of qualifications, merit, and business need. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected Veteran status, gender identity and sexual orientation. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation and training. If you need assistance or an accommodation due to a disability, you may contact us at or you may call us at .583.9900. This job posting is to identify potential candidates for positions in order to respond to a request for proposal. This job posting, including but not limited to, qualifications, duties, compensation and benefits, is subject to change based on the terms and conditions of the awarded contract and is contingent on STI-TEC being awarded the contract.

Job Description Job Description Solutions Through Innovative Technologies, Inc. (STI-TEC) specializes in the delivery of professional business and information management services. STI-TEC offers government and commercial clients a comprehensive portfolio of services that identify, manage, distribute and improve business processes related to entities' most valued resource, information. As a fast-growing solutions provider, established in 2000, total customer satisfaction has remained the cornerstone of our business. Our business model focuses on integrity, loyalty, and trust. Position Overview Space Systems Command (SSC), is the United States Space Force field command responsible for acquiring, developing, and delivering resilient capabilities to outpace emerging threats and protect our Nation's strategic advantage in, from, and to space. SSC plays a critical role in advancing the United States space capabilities, delivering cutting-edge solutions to protect and enhance national security. Join us and be part of the mission to shape the future of space and protect the assets that keep our nation secure. Essential Job Function Provide space acquisitions, engineering, operations, and technical advice and assistance for various project and program stages to support the acquisition life cycle. Support program acquisition efforts in advanced technology, future concept development, and integration activities. Advise and assist on cost, schedule, and performance issues. Revise or draft Joint Capabilities Integrated Development System (JCIDS) and acquisition documentation for government program managers. Support presentations of products to internal and external customers. Documentation includes Initial Capability Documents, Interface Control Documents, Capability Development/Production/Requirements Documents, Milestone documentation, Acquisition Strategies, Analysis of Alternatives, Concept of Operations, Memorandums of Agreement/Understanding, Technical/Systems Requirement Documents, Defense Acquisition Board documentation, Technical Evaluations, System Specifications, enabling concepts, training material, briefings, white papers, reports, and analysis results. Provide draft SME-level technical and/or programmatic status reports as requested. Identify improvement areas in acquisition processes and recommend actionable changes. Assist in building and maintaining a government risk program. Maintain current awareness of program schedules, monitor acquisition implementation, report requirement shortfalls, and provide program assessments based on identified risks. Provide advice on technical engagements such as technical interchange meetings, design reviews, and program conferences. Provide technical and operational insights for mission protection and operations. Recommend solutions for technical anomalies and evaluate impact analysis, audits, studies, compliance inspections, and readiness reviews. Provide cybersecurity support in accordance with DoDI 8500.01. Recommend actions on cyber activities and provide cybersecurity issue briefings as requested. Facilitate and support cybersecurity working groups and meetings. Maintain awareness and manage program Authority to Operate, Authority to Test, Authority to Connect, and associated Interim Authorities. Support cyber testing and assessment activities and document findings and corrective actions in accordance with the Federal Information Security Management Act. Minimum Qualifications Knowledgeable in managing technical developmental projects with an emphasis placed on cyber development projects, integrating cyber efforts, systems engineering, requirements development, software engineering, and algorithm Knowledgeable in systems engineering, technology development, government acquisitions, and space and intelligence systems Knowledgeable in interfacing with the cyber and DoD intelligence community MA/MS Over 10 years of relative experience. Experience with the MS Office Suite of Tools. Active TS/SCI eligibility STI-TEC offers a competitive benefits package including: Medical, dental, and vision coverage Life insurance Short term/long term disability coverage Retirement savings - 401(k) Paid time off (PTO) Holiday leave Alternate work schedules (depending on work site) Flexible spending account options Whether you're an experienced professional, a veteran, a former military or civilian federal employee, or a recent graduate, STI-TEC has a career opportunity for you. Applicants selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. STI-TEC is an equal opportunity employer and values diversity. Employment is decided on the basis of qualifications, merit, and business need. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected Veteran status, gender identity and sexual orientation. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation and training. If you need assistance or an accommodation due to a disability, you may contact us at or you may call us at .583.9900. This job posting is to identify potential candidates for positions in order to respond to a request for proposal. This job posting, including but not limited to, qualifications, duties, compensation and benefits, is subject to change based on the terms and conditions of the awarded contract and is contingent on STI-TEC being awarded the contract.

Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. In the Identity Services domain, you will be responsible for the architecture, design, standards, and patterns for delivering strong identity and access programs. You will be expected to balance technical oversight, and business alignment to secure organization's digital assets while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively. Additional information about the skills needed for this position is listed in the Skills, Licenses & Certifications section below. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity and Access Management (IAM) Architecture: Design and oversee the architecture and deployment of IAM solutions to manage user identities, roles, and access privileges across the organization's systems and applications. User Provisioning and De-provisioning Framework: Architect and optimize the processes for automating the creation, modification, and removal of user accounts and access rights based on organizational policies and user roles. Security and Governance: Establishing policies for user access, role-based access control (RBAC), and ensuring audit compliance. Designing Secure Architectures: Develop and design secure IT architectures that protect the organization's data, applications, and infrastructure from cyber threats. Collaboration with Stakeholders: Work closely with other IT teams, business units, and external partners to ensure security requirements are understood and implemented effectively. Security Standards and Best Practices: Establish and enforce security standards, guidelines, and best practices across the organization. Leadership: Provide technical guidance and oversight to the engineering team, system owners and customers. Incident Response Planning: Develop and maintain comprehensive incident response plans and procedures to ensure swift and effective handling of security incidents. Monitoring and Auditing Systems: Design and direct the continuous monitoring of IAM systems for suspicious activities, perform regular audits to ensure compliance with security policies, and generate comprehensive reports on access controls and user activities. Communication: Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Operational Management and Monitoring: Design monitoring strategies to ensure the continuous availability, performance, and reliability of identity services. Compliance and Risk Management Framework: Design frameworks to ensure compliance with data protection laws and standards (e.g., GDPR, CCPA). Conduct risk assessments and audits to identify and address vulnerabilities. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. Extensive job experience in cybersecurity architecture or a related field is required, with a proven track record of designing and implementing secure IT architecture and frameworks. Demonstrated expertise in leading architectural design and strategic oversight in cybersecurity initiatives. 12+ years experience in Cybersecurity Architecture Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 5+ years' experience in cybersecurity architecture or related roles. Experience designing and implementing comprehensive security architectures and frameworks. Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features. Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); Certified in Risk and Information Systems Control (CRISC); Certified Information Privacy Professional (CIPP); Certified Information Systems Security Professional - Architecture (CISSP-ISSAP) Proficiency in identity and access management (IAM) tools and technologies Expertise in developing and implementing cybersecurity IAM policies and procedures Knowledge of IAM principles and methodologies Understanding of regulatory requirements and standards related to IAM (e.g., GDPR, HIPAA, SOX) Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001) Ability to conduct assessments and audits of IAM practices to identify vulnerabilities and gaps Strong problem-solving skills to address IAM management challenges Ability to collaborate effectively with cross-functional teams Experience in managing IAM projects, including planning, execution, and monitoring Proficiency in identity and access management (IAM) solutions (e.g., Saviynt, Okta, Ping Identity, Microsoft Azure AD) Knowledge of authentication protocols (e.g., SAML, OAuth, OpenID Connect, Kerberos) Familiarity with cloud security and cloud IAM (e.g., AWS IAM, Azure AD) Ability to analyze complex security requirements and design effective access management solutions Strong problem-solving skills to address security challenges and incidents Excellent written and verbal communication skills to articulate security concepts and solutions to technical and non-technical stakeholders What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.

Description: You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? Requirements: The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details

Job Description Job Description Cloud Security Architect - IL4 / Enterprise Integration (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is the Washington, DC metropolitan area. Candidates may also be based near Buckley, Patrick, Peterson, or Schriever Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 AND FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. About the client Our client is a Super Intelligence-first mission technology company and Original Equipment Manufacturer (OEM) built to generate Decision Advantage for missions of consequence. Through their Team of Teams model, they integrate their people, OEMs, subcontractors, mission experts, commercial technology, and proprietary capabilities to make advanced products operationally ready for the Department of War, Intelligence Community, and broader U.S. Government.

Job Description Job Description Cloud Security Architect - IL4 / Enterprise Integration (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is the Washington, DC metropolitan area. Candidates may also be based near Buckley, Patrick, Peterson, or Schriever Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 AND FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. About the client Our client is a Super Intelligence-first mission technology company and Original Equipment Manufacturer (OEM) built to generate Decision Advantage for missions of consequence. Through their Team of Teams model, they integrate their people, OEMs, subcontractors, mission experts, commercial technology, and proprietary capabilities to make advanced products operationally ready for the Department of War, Intelligence Community, and broader U.S. Government.

Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.

Job Description Job Description Cloud Security Architect - IL4 / Workday (U.S. Space Force) Job Level: Senior Employment Type: Full-Time Clearance: U.S. citizenship required Salary Range: $150,000-$200,000 annually Location: Primary site is Washington, DC metropolitan area. Candidates may also be based near Buckley, Los Angeles, Patrick, Peterson, Schriever, or Vandenberg Space Force Base. Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award. The Opportunity We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization. Primary Responsibilities Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring. Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls. Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP). Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings. Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record. Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities. Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs. Requirements Required Qualifications 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience. Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments. Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support. Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations. Experience designing secure APIs, enterprise integrations, and data exchange architectures. Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams. U.S. citizenship. Preferred Qualifications Experience integrating Workday or another enterprise human capital management platform. Experience supporting U.S. Space Force or Department of the Air Force modernization programs. Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs. Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise. Experience transitioning SBIR, prototype, or pilot capabilities into production government environments. Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding. DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire. Benefits Benefits Annual Base Salary: $150,000-$200,000, depending on experience, qualifications, and assigned responsibilities. Full-time employees are eligible for: Medical, dental, and vision coverage. Company-provided disability and life insurance. 401(k) retirement plan. Paid federal holidays. Paid time off (PTO). Benefits are subject to applicable plan terms and company policies. Our Client's Culture Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government. Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence. Its culture emphasizes: Mission-First Execution: Delivering measurable outcomes that support critical government missions. Integrity & Ownership: Demonstrating accountability, professionalism, and disciplined execution. Collaboration & Communication: Promoting candid communication and effective teamwork. Technical Excellence: Maintaining high standards through continuous improvement and innovation. Responsible AI: Advancing mission capabilities through secure and responsible technology adoption. Equal Employment Opportunity Our client is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. This position requires U.S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.

Vaco is partnering with a national retail organization to hire a Manager of Cybersecurity Operations to lead and mature core security operations programs across the enterprise. This is a hands-on leadership role overseeing SOC operations, vulnerability management, endpoint security, DLP, incident response, and security automation. This role is ideal for a cybersecurity leader who can operate at both the program and technical execution level. The team needs someone who can manage internal security talent, hold external MSSP partners accountable, improve alert handling and escalation processes, and build repeatable capabilities around detection, response, reporting, and automation. The environment is collaborative, fast-moving, and highly cross-functional, requiring someone who can communicate clearly across IT, GRC, engineering, and business teams. This position is based in Tempe, Arizona and requires onsite presence Monday through Thursday, with Fridays optional remote. What You'll Be Doing Manage and mature day-to-day SOC operations, including monitoring, alert triage, escalation, and incident response workflows Partner closely with an external MSSP to drive SLA accountability, improve alert quality, and ensure critical issues are escalated quickly Lead vulnerability management efforts across tools such as Rapid7, Defender, and related platforms, including prioritization, remediation tracking, and executive reporting Oversee endpoint security and management initiatives across Intune, Jamf, Defender, and related endpoint controls Drive improvements to SIEM and SOAR capabilities, including automation opportunities for level 1 response, alert enrichment, and repeatable playbooks Build and refine incident response processes, including playbooks, simulations, post-incident reviews, and lessons learned Partner with IT, GRC, engineering, and business stakeholders to improve security posture across the organization Support DLP strategy and monitoring to protect sensitive data across SaaS, cloud, and endpoint environments Use security metrics, scorecards, and framework alignment to communicate program maturity and areas for improvement Evaluate how AI can be used responsibly in security operations, including automation of response workflows and protection of AI-enabled systems Mentor and develop security team members while remaining hands-on with technical operations when needed Help define and operationalize security programs that reduce risk while supporting business velocity Required Experience 6 or more years of experience in cybersecurity, information security operations, incident response, infrastructure, or related technical security roles Proven experience managing or leading SOC operations, either in a corporate environment or MSSP setting Strong understanding of the end-to-end incident response lifecycle, from alert intake through containment, remediation, and post-incident review Hands-on experience with cybersecurity technologies such as MDR, EDR, SIEM, SOAR, vulnerability management, and endpoint security tools Experience maturing vulnerability management programs, including risk prioritization, remediation coordination, and reporting Experience partnering with or managing MSSP relationships and holding vendors accountable to performance expectations Strong understanding of security frameworks and compliance considerations such as NIST, CIS Controls, PCI, SOX, and CCPA Ability to lead without authority and collaborate effectively across IT, engineering, GRC, and business teams Experience managing high-pressure incidents and making informed decisions under time-sensitive conditions Understanding of AI concepts and their impact on cybersecurity operations, including AI-enabled threats and secure use of AI tools Bachelor's degree in a related field, or equivalent additional experience Nice to Have CISM, CISSP, or similar security certification Experience with Rapid7, Microsoft Defender, Intune, Jamf, Workato, or comparable security and automation tools Experience building SOAR workflows or security automation playbooks Familiarity with cloud security controls across AWS, Azure, or GCP Experience in SaaS-heavy environments Experience with DLP program ownership or data protection initiatives Background supporting retail, consumer-facing, or high-growth business environments Compensation & Benefits Salary range: $150,000 to $160,000 base, depending on experience Bonus potential and other financial incentives Comprehensive benefits package available If you are a hands-on cybersecurity operations leader who can mature SOC processes, improve vulnerability and endpoint programs, and build practical automation across a growing security environment, we would welcome the opportunity to connect. Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets . click apply for full job details

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Partner directly with cybersecurity engineering and DevSecOps prototyping teams to integrate security controls early in the development lifecycle. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 3-5+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $150,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Job Description Job Description Solutions Through Innovative Technologies, Inc. (STI-TEC) specializes in the delivery of professional business and information management services. STI-TEC offers government and commercial clients a comprehensive portfolio of services that identify, manage, distribute and improve business processes related to entities' most valued resource, information. As a fast-growing solutions provider, established in 2000, total customer satisfaction has remained the cornerstone of our business. Our business model focuses on integrity, loyalty, and trust. Position Overview Space Systems Command (SSC), is the United States Space Force field command responsible for acquiring, developing, and delivering resilient capabilities to outpace emerging threats and protect our Nation's strategic advantage in, from, and to space. SSC plays a critical role in advancing the United States space capabilities, delivering cutting-edge solutions to protect and enhance national security. Join us and be part of the mission to shape the future of space and protect the assets that keep our nation secure. Essential Job Function Provide space acquisitions, engineering, operations, and technical advice and assistance for various project and program stages to support the acquisition life cycle. Support program acquisition efforts in advanced technology, future concept development, and integration activities. Advise and assist on cost, schedule, and performance issues. Revise or draft Joint Capabilities Integrated Development System (JCIDS) and acquisition documentation for government program managers. Support presentations of products to internal and external customers. Documentation includes Initial Capability Documents, Interface Control Documents, Capability Development/Production/Requirements Documents, Milestone documentation, Acquisition Strategies, Analysis of Alternatives, Concept of Operations, Memorandums of Agreement/Understanding, Technical/Systems Requirement Documents, Defense Acquisition Board documentation, Technical Evaluations, System Specifications, enabling concepts, training material, briefings, white papers, reports, and analysis results. Provide draft SME-level technical and/or programmatic status reports as requested. Identify improvement areas in acquisition processes and recommend actionable changes. Assist in building and maintaining a government risk program. Maintain current awareness of program schedules, monitor acquisition implementation, report requirement shortfalls, and provide program assessments based on identified risks. Provide advice on technical engagements such as technical interchange meetings, design reviews, and program conferences. Provide technical and operational insights for mission protection and operations. Recommend solutions for technical anomalies and evaluate impact analysis, audits, studies, compliance inspections, and readiness reviews. Provide cybersecurity support in accordance with DoDI 8500.01. Recommend actions on cyber activities and provide cybersecurity issue briefings as requested. Facilitate and support cybersecurity working groups and meetings. Maintain awareness and manage program Authority to Operate, Authority to Test, Authority to Connect, and associated Interim Authorities. Support cyber testing and assessment activities and document findings and corrective actions in accordance with the Federal Information Security Management Act. Minimum Qualifications Highly knowledgeable in space control space, ground, and C2 systems (concepts, development, build, and test) Highly knowledgeable in managing operations strategy Highly knowledgeable in coordinating and managing exercise and operations training Highly knowledgeable in space control mission planning and coops development BA/BS Over 10 years of relative experience Experience with the MS Office Suite of Tools Active TS/SCI eligibility COMPENSATION / SALARY RANGE: STI-TEC adheres to federal, state, and local regulations. This is a Full-Time, Salary, Exempt position. The following salary range is what we reasonably expect to pay but is contingent and subject to a variety of factors, including but not limited to years of experience, education, certification(s), training, specialized skills, responsibilities, etc. Salary Range $140,000.00 - $160,000.00 Annual Salary STI-TEC offers a competitive benefits package including: Medical, dental, and vision coverage Life insurance Short term/long term disability coverage Retirement savings - 401(k) Paid time off (PTO) Holiday leave Alternate work schedules (depending on work site) Flexible spending account options Whether you're an experienced professional, a veteran, a former military or civilian federal employee, or a recent graduate, STI-TEC has a career opportunity for you. Applicants selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. STI-TEC is an equal opportunity employer and values diversity. Employment is decided on the basis of qualifications, merit, and business need. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected Veteran status, gender identity and sexual orientation. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation and training. If you need assistance or an accommodation due to a disability, you may contact us at or you may call us at .583.9900. This job posting is to identify potential candidates for positions in order to respond to a request for proposal. This job posting, including but not limited to, qualifications, duties, compensation and benefits, is subject to change based on the terms and conditions of the awarded contract and is contingent on STI-TEC being awarded the contract.

Job Description Job Description Type: Full Time Location: Philadelphia, PA Overtime Exempt: Exempt Reports To: ARMADA HQ Travel Required: Yes Security Clearance Required: Active Secret Security Clearance CONTINGENT UPON AWARD Duties & Responsibilities: Specialist, Information System Security III (SISS3) will conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, risks and protection needs; conduct systems security evaluation, audits, and reviews; determine the residual risk of a package based on package content and assessment results and documenting for the Security Controls Assessor's (SCA) and higher level review. Execute Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Specialist, Information System Security III (SISS3) will conduct systems security reviews, audits, or evaluations, as appropriate, to ensure accreditation documents are accurate and represent the current risk posture of the system. Perform analysis of logs, events, and reporting of various data collections tools including: vulnerability monitoring via Assured Compliance Assessment System (ACAS) and related tools, Host Based Security Systems (HBSS), web content filters, Security Information and event management (SIEM), firewall systems, network devices, server devices, workstations, and intrusion detection and prevention systems (ID/PS). Specialist, Information System Security III (SISS3) will assess impacts from observed risks and report via the Cybersecurity Program chain of command. Executing Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Perform the evaluation of system administrator, security engineer, and/or system owner proposed corrections to ensure compliance and best-fit solution. Specialist, Information System Security III (SISS3) will present and submit data to management, develop reports, and produce procedural documentation in a comprehensive and cohesive manner. Perform risk management and security engineering for Research, Development, Testing, and Evaluation (RDT&E) RMF Afloat systems include Information Assurance Vulnerability Management (IAVM) support, remediation, patching, scanning and associated boundary maintenance. Specialist, Information System Security III (SISS3) will document residual risks in a plan of actions and milestones formatted in compliance with the current package system, currently eMASS. Specialist, Information System Security III (SISS3) will maintain current vulnerability scan data and residual risk plan of actions and milestones in Vulnerability Remediation Asset Manager (VRAM). Manage, attend, and support configuration control board practices. Create and verify the accuracy of POA&Ms/RARs as identified by vulnerability actual test results. Specialist, Information System Security III (SISS3) shall write technical documentation such as user manuals, reports, documentation, policies, presentations, Plan of Action and Milestones (POA&Ms), risk assessments, proposals, outlines, and summaries in support of both ashore and afloat systems across multiple platforms. Support developing of technical documents across multiple platforms including configuration management, milestone, issue tracking, web site content management and RMF documentation. Specialist, Information System Security III (SISS3) may be required to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). The estimated number of trips is 14 per year (estimated 25%-30% travel). Other duties as assigned. Knowledge, Skills, and Abilities (KSAs): Ability to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). Proficient in Microsoft Windows Operating System Administration, including Windows 11, Windows 10, Windows 7, and Windows XP (at a minimum). Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance. Possess excellent organizational and file management skills and the ability to plan and execute administrative work with little supervision. Possess excellent oral and written communication skills. Required Certifications: Minimum of one (1) IAT Level II listed certificate required: CompTIA Security+ (CE) CompTIA CySA+ GIAC Security Essentials (GSEC) ISC SSCP (Systems Security Certified Practitioner) Minimum/General Experience: Five (5) years of experience in the following: Cybersecurity, Engineering, Test and Evaluation (T&E) or Authorization and Assessment (A&A) (formerly C&A) related field. Information Assurance tools such as Defense Information Systems Agency (DISA) Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS). Command line interface, PowerShell, and performing automated tasking through use of code. Minimum Education: College degree in any technical discipline from an accredited college or university. Disclaimer: The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Job Description Job Description Solutions Through Innovative Technologies, Inc. (STI-TEC) specializes in the delivery of professional business and information management services. STI-TEC offers government and commercial clients a comprehensive portfolio of services that identify, manage, distribute and improve business processes related to entities' most valued resource, information. As a fast-growing solutions provider, established in 2000, total customer satisfaction has remained the cornerstone of our business. Our business model focuses on integrity, loyalty, and trust. Position Overview Space Systems Command (SSC), is the United States Space Force field command responsible for acquiring, developing, and delivering resilient capabilities to outpace emerging threats and protect our Nation's strategic advantage in, from, and to space. SSC plays a critical role in advancing the United States space capabilities, delivering cutting-edge solutions to protect and enhance national security. Join us and be part of the mission to shape the future of space and protect the assets that keep our nation secure! Essential Job Function Provide space acquisitions, engineering, operations, and technical advice and assistance for various project and program stages to support the acquisition life cycle. Support program acquisition efforts in advanced technology, future concept development, and integration activities. Advise and assist on cost, schedule, and performance issues. Revise or draft Joint Capabilities Integrated Development System (JCIDS) and acquisition documentation for government program managers. Support presentations of products to internal and external customers. Documentation includes Initial Capability Documents, Interface Control Documents, Capability Development/Production/Requirements Documents, Milestone documentation, Acquisition Strategies, Analysis of Alternatives, Concept of Operations, Memorandums of Agreement/Understanding, Technical/Systems Requirement Documents, Defense Acquisition Board documentation, Technical Evaluations, System Specifications, enabling concepts, training material, briefings, white papers, reports, and analysis results. Provide draft SME-level technical and/or programmatic status reports as requested. Identify improvement areas in acquisition processes and recommend actionable changes. Assist in building and maintaining a government risk program. Maintain current awareness of program schedules, monitor acquisition implementation, report requirement shortfalls, and provide program assessments based on identified risks. Provide advice on technical engagements such as technical interchange meetings, design reviews, and program conferences. Provide technical and operational insights for mission protection and operations. Recommend solutions for technical anomalies and evaluate impact analysis, audits, studies, compliance inspections, and readiness reviews. Provide cybersecurity support in accordance with DoDI 8500.01. Recommend actions on cyber activities and provide cybersecurity issue briefings as requested. Facilitate and support cybersecurity working groups and meetings. Maintain awareness and manage program Authority to Operate, Authority to Test, Authority to Connect, and associated Interim Authorities. Support cyber testing and assessment activities and document findings and corrective actions in accordance with the Federal Information Security Management Act. Minimum Qualifications Highly knowledgeable in space control space, ground, and C2 systems (concepts, development, build, and test) Highly knowledgeable in managing operations strategy Highly knowledgeable in coordinating and managing exercise and operations training Highly knowledgeable in space control mission planning and coops development BA/BS Over 10 years of relative experience Experience with the MS Office Suite of Tools Active TS/SCI eligibility STI-TEC offers a competitive benefits package including: Medical, dental, and vision coverage Life insurance Short term/long term disability coverage Retirement savings - 401(k) Paid time off (PTO) Holiday leave Alternate work schedules (depending on work site) Flexible spending account options Whether you're an experienced professional, a veteran, a former military or civilian federal employee, or a recent graduate, STI-TEC has a career opportunity for you. Applicants selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. STI-TEC is an equal opportunity employer and values diversity. Employment is decided on the basis of qualifications, merit, and business need. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected Veteran status, gender identity and sexual orientation. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation and training. If you need assistance or an accommodation due to a disability, you may contact us at or you may call us at .583.9900. This job posting is to identify potential candidates for positions in order to respond to a request for proposal. This job posting, including but not limited to, qualifications, duties, compensation and benefits, is subject to change based on the terms and conditions of the awarded contract and is contingent on STI-TEC being awarded the contract.

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA with hybrid/remote opportunities. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Bridge the gap between OffSec and development by applying software design best practices. Lead technical exchange meetings (TEMs), participate in Discovery & Framing workshops, and maintain effective communication with cross-functional teams and stakeholders. Act as the primary subject matter expert and lead developer for custom offensive tooling, integrating disparate capabilities into a cohesive, mission-ready platform. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 5-7+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Experience with GitLab CI/CD (pipeline design, runners, artifact management) and AWS Cloud services (EC2, VPC, IAM, S3). Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $160,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.