17 jobs found

Job Description Job Description Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. The Infrastructure & Cloud Engineer is a hands-on engineering role for an experienced IT professional ready to progress from systems administration and technical support into increasing ownership of cloud and enterprise infrastructure. The position administers and improves AnaVation's Azure, Microsoft 365, identity, Windows/Linux, networking, endpoint, and related infrastructure environments. Infrastructure and cloud engineering are the primary focus, with embedded responsibilities for automation, system documentation, and technical security-control implementation. Key Responsibilities Engineer, administer, troubleshoot, and improve Azure Government/GCC High infrastructure and services. Administer Microsoft 365 services, including Entra ID, Intune, SharePoint, Teams, OneDrive, and Exchange Online. Administer and troubleshoot Windows/Linux systems and corporate network infrastructure, including firewalls, switches, DNS, DHCP, VPN, and related services. Administer identity and access management, including security groups, MFA, Conditional Access, and role-based access. Administer SharePoint Online, including site architecture, permissions, migrations, and platform configuration. Develop PowerShell and other automation for provisioning, administration, reporting, and configuration validation. Maintain accurate system documentation, including diagrams, inventories, configurations, data flows, build procedures, change records, and operating procedures. Implement and document technical security controls, system hardening, patching, vulnerability remediation, logging, and monitoring. Assist the IT Manager/ISSM with technical documentation and evidence supporting CMMC, NIST SP 800-171, ISO, and DCSA requirements. Serve as an escalation point for technical issues and provide knowledge transfer across the corporate IT team. Work with technology partners while maintaining AnaVation's internal technical knowledge and ownership. Required Qualifications: 5+ years of IT, systems administration, infrastructure, networking, cybersecurity, or related experience. Experience administering Windows systems, Entra ID identity, and Intune-managed endpoints. Working knowledge of Microsoft Azure and Microsoft 365 technologies. Working knowledge of enterprise networking, including TCP/IP, DNS, DHCP, VPNs, VLANs, and firewalls. Experience with system patching, hardening, vulnerability remediation, configuration management, and technical documentation. Strong troubleshooting, analytical, and problem-solving skills. Ability to independently learn new technologies and progress from guided implementation to technical ownership. Ability to meet applicable U.S. Government and customer security requirements. Desired Qualifications: Azure Government/GCC High experience. Experience with PowerShell cloud administration. Familiarity with CMMC, NIST, RMF, STIGs, ISO, DCSA, or similar regulated-environment requirements. Interest in developing toward a Deputy ISSM / system security support role. Microsoft Azure/M365, Security+, or comparable technical certifications. Experience supporting DoD, federal, or other regulated environments. Active U.S. Government security clearance. Growth and Development The engineer is expected to develop increasing ownership of AnaVation's cloud and infrastructure environment. The role also provides a development path toward Deputy ISSM responsibilities, including system security documentation, weekly system reviews, continuous monitoring, technical control validation, policy and procedure maintenance, assessment support, and other recurring system-security activities under the direction of the IT Manager/ISSM. Please note: The listed salary range reflects our market-based compensation structure. Final compensation will depend on business needs, local market conditions, internal equity, and the selected candidate's skills, education, and experience. Benefits Generous cost sharing for medical insurance for the employee and dependents 100% company paid dental insurance for employees and dependents 100% company paid long-term and short-term disability insurance 100% company paid vision insurance for employees and dependents 401k plan with generous match and 100% immediate vesting Competitive Pay Generous paid leave and holiday package Tuition and training reimbursement Life and AD&D Insurance About AnaVation AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team. If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you! AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

Job Description Job Description Job Title: On-Site AI Systems Engineer Purpose: The engineer is EdgeRunner AI's single point of contact on site at USAWHC. The role has three parts: 1. Install and administer EdgeRunner AI's local AI software: WarClaw, an agent platform, and the EdgeRunner AI Runtime with its language models. 2. Lead security and authorization coordination for each network the software runs on: NIPR first, then SIPR and JWICS if the command extends the work. 3. Work with JOC staff to find the data work worth automating, then build and refine the agents and simple web views that do it. EdgeRunner AI trains the engineer before the start date and provides engineering reach-back throughout. How the software is installed: EdgeRunner AI software runs as a signed container, which EdgeRunner AI recommends, or as a native install directly on a server or workstation operating system. The site survey informs the choice. The command's information system security manager (ISSM) and information management officer (IMO) decide which form is approved, and on which host. The engineer installs and maintains whichever form they approve, and adapts if the command changes its decision for a later network. Duties: Install and administer Install, configure and maintain the software on the host the command provides: a server or select workstations with a GPU. Hold privileged (administrator) access on that host, and keep it patched, hardened to the applicable STIGs, and running. Manage accounts, backups, logs and software updates under the command's change rules. Security and authorization: the single point of contact In the first two weeks, lead a site survey of NIPR, SIPR and JWICS with the command's security and network staff. Map candidate hosts, container platforms, data paths and approval steps, and help EdgeRunner AI write the installation plan the ISSO reviews. Coordinate with the security staff who govern each installation, as the command directs: the ISSM and information system security officers, for the Risk Management Framework package and the interim authority to test (IATT); the IMO and the Fort Bragg Network Enterprise Center, for network connection and hosting approvals the G-2 security manager, for SIPR access and classified handling; the Special Security Officer, for SCI access, SCIF access and JWICS installation. Run vulnerability and compliance scans, such as ACAS and SCAP, apply fixes, and supply evidence for the authorization package. Support package entry in eMASS where the command uses it. Track the authorization status of each network and report blockers early to EdgeRunner AI's program manager. Follow the command's rules for privileged users, removable media and data transfer between networks. Work with users Work directly with JOC staff, including the command's project points of contact, to learn their workflows, the data they need, and where routine data work slows them down. Turn what users ask for into written use cases and simple mock-ups of the agents and web views, and confirm them with users before building. Use WarClaw to build, test and deploy agents and pipelines from approved data sources. Prepare datasets, map layers and views that staff load into the COP in Maven. Gather user feedback and refine what was built. Train and hand off Train operators and administrators. Keep the runbook current, and help prepare the handoff package so USAWHC can run the system after the pilot. Report Report progress, issues and pilot measures, such as staff hours saved and views delivered, to EdgeRunner AI's program manager. Classified networks (if the command extends the work) Install and support the software on SIPR and JWICS once each network authorizes it and the required clearances, access approvals and DD Form 254 are in place. Other Duties: The above job description is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow any other instructions, and perform any other related duties, as assigned by their supervisor. Duties, responsibilities and activities may change at any time with or without notice. Qualifications: Required: Active TS/SCI clearance, and eligibility for the SCI access and indoctrination the command requires. DoD 8140 qualification for privileged access in a system administrator work role, at the proficiency level the command's ISSM sets. At minimum, CompTIA Security+ CE or an equivalent certification. The engineer must also be able to sign the Army privileged access agreement and complete required training before 1 December 2026. Any operating system or computing environment certification the command requires for administrators of the host platform. For example, Red Hat Certified System Administrator or the Microsoft equivalent. At least five years in systems engineering or administration, including: Linux and Windows server administration; both container and native software installs; NVIDIA GPU drivers and CUDA. Experience supporting software through Risk Management Framework authorization on DoD networks: STIG compliance, ACAS or SCAP scanning, and authorization evidence. Experience gathering requirements from operational users and turning them into working tools. Ability to work directly with military staff and explain technical work in plain terms. Preferred CISSP, CompTIA CASP+ or an equivalent advanced certification. Experience with installations on SIPR or JWICS, including work with a Special Security Officer. Experience with Palantir Foundry, Maven Smart System or Army Vantage. Experience building with large language models, AI agents or automation tools. Basic web front-end skills for simple dashboards and forms. Experience in an Army or joint operations center, or with COP and mission-command systems. Familiarity with Kubernetes and graph databases, such as Neo4j. Prior Army service or Army staff support. Working Relationships: Reports to: ATL, for employment. Takes day-to-day direction from: EdgeRunner AI's program manager, under the subcontract. Works with: USAWHC JOC staff and the command's security, network and information management staff. Gets support from: EdgeRunner AI's engineers, remotely. They build the heavier software features, so the engineer can concentrate on installation, security and users. Work Authorization/Security Clearance: Must be able to obtain and maintain TS/SCI Clearance eligibility. Supervisory Responsibility: None Work Environment: This job operates in a professional classroom and office environment. This role routinely uses standard office equipment. Physical Demands: Stand, bend, and stoop for long periods of time while delivering training. Be able to maneuver in and out of strategic and tactical equipment, and capable of lifting and moving electronic equipment in excess of 40lbs in and out of classrooms and labs. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Position Type and Expected Hours of Work: This is a full-time position. Days and hours of work are Monday through Friday, 8:00 a.m. to 4:00 p.m. Workdays do not include working or conducting business on Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed closings. In the event range training is required for early/late/weekend instruction or range operations, the anticipated hours shall be shifted from the weekday work. Travel: No travel is expected for this position. AAP/EEO Statement: ATL provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Veterans with expertise in these areas are highly encouraged to apply. Benefits: Health benefits to include medical and dental Paid Personal and Vacation Paid Holidays 401(k) Retirement Plan Apply online at and click on Careers.

Job Description Job Description Dark Wolf Solutions is looking for an Information System Security Manager (ISSM) who is interested in working in a fast-paced environment to establish a robust security posture for a government information system. The successful candidate will provide oversight and enforcement of DoD and Air Force Cyber Security policies and procedures in order to maintain a holistic security approach for the lifecycle of the system. The ISSM will act as the primary security advisor to the PM, AO, and ISO. In addition, the role may have oversight of an ISSO Team and ensure their compliance with established information security AF requirements. This position is supported out of a Dark Wolf Office location with up to 10% travel. Required Qualifications: 3 year's experience as an ISSM or 5 year's experience as a Sr. ISSO Hands-on experience enforcing information protection policies in an unclassified environment Excellent written and verbal communication skills At least one (1) of the following cyber security certifications: CASP+ CE / Security X or CISSP Strong experience with DoD and Air Force Risk Management Framework (RMF) Proficient with a major cloud services platform, i.e. GCP, Azure, AWS, etc. Bachelor's Degree in Computer Science, Business, related field. Proficient with Microsoft Office software suite U.S. Citizenship with an active Secret security clearance. Desired Qualifications: Experience with task management, metrics collection, and status reporting to management Proficient with Google Cloud Platform (GCP) technology Demonstrated knowledge/experience in the areas of resource allocation, workload management, and contract management One (1) or more of the following cyber security certifications: SEC+, SSCP, CASP, GSEC, GICSP, CEH, CDNA, CSSLP Any additional certifications relevant to system and cyber security not previously listed Experience with Common security tools such as Nessus, WASSP, SECSCN, and/or MBSA The salary range for this position is $140,000.00 - $160,000.00 commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description Position: Information Systems Security Manager (ISSM) Location: Crane, Indiana / NSWC Crane Area Position Overview Iron Will Ventures is seeking an experienced Information Systems Security Manager (ISSM) to support our growing operations in the Crane, Indiana area. This position will serve as a key information systems security resource responsible for establishing, implementing, maintaining, and continuously improving security practices for classified information systems supporting Iron Will programs and customer requirements. The ISSM will work closely with company leadership, program managers, technical personnel, the Facility Security Officer (FSO), Information System Security Officers (ISSOs), customers, and Government security representatives to ensure classified information systems are appropriately authorized, configured, operated, maintained, monitored, and protected. We are looking for an experienced security professional who understands the classified defense environment, can operate independently, and is equally comfortable developing security documentation, advising technical teams, supporting authorization activities, and working directly with Government and industry stakeholders. What You'll Do Serve as a principal technical and administrative authority for classified information systems operating under the National Industrial Security Program (NISP). Ensure classified systems are designed, configured, operated, maintained, and decommissioned in accordance with contractual requirements, the NISPOM, DCSA guidance, Risk Management Framework (RMF) requirements, and applicable company security policies. Develop, implement, and maintain System Security Plans (SSPs), security authorization packages, Plans of Action and Milestones (POA&Ms), continuous-monitoring artifacts, configuration-management records, incident-response documentation, and related system-security documentation. Coordinate security authorization activities with the FSO, ISSOs, system owners, program managers, technical personnel, customers, and DCSA representatives. Lead or support security-control assessments, risk assessments, vulnerability assessments, configuration reviews, remediation activities, and continuous monitoring. Track identified findings through closure, validate corrective actions, and communicate material security risks and compliance gaps to appropriate stakeholders. Monitor cybersecurity threats, vulnerabilities, advisories, and security-relevant events and coordinate required patches, mitigations, configuration changes, and compensating controls. Lead or support cybersecurity incident investigation, containment, recovery, documentation, and reporting activities. Advise leadership, engineers, system administrators, program managers, and users regarding security architecture, system design, technical risk, compliance obligations, and secure operating practices. Establish and maintain procedures covering account management, privileged access, media protection, audit logging, configuration management, vulnerability management, backup and recovery, remote access, hardware/software inventories, system maintenance, and controlled system disposal. Ensure users receive appropriate security awareness, role-based, and system-specific training prior to receiving system access. Support proposals and contract execution by reviewing security requirements and recommending appropriate staffing, compliance approaches, security architecture, technical solutions, and security-related deliverables. Represent Iron Will during customer security reviews, assessments, inspections, and engagements with Government security personnel. Develop and maintain company policies, procedures, standards, and training materials supporting classified information systems. SCIF Support As required by Iron Will programs and customer needs, the ISSM may also support information systems located within or supporting Sensitive Compartmented Information Facilities (SCIFs). Responsibilities may include: Coordinating with the FSO, SCIF Manager, program management, customer security representatives, and applicable Cognizant Security Authorities. Supporting authorization, configuration, operation, monitoring, maintenance, and decommissioning of information systems supporting Sensitive Compartmented Information (SCI). Providing information systems security input for SCIF planning, construction, renovation, relocation, connectivity, and other operational changes. Ensuring proposed system and infrastructure changes are evaluated through appropriate security, configuration-management, and authorization processes. Supporting inspections, assessments, customer reviews, and Government engagements involving SCIF-supported information systems. Maintaining required security documentation, configuration records, assessment evidence, continuous-monitoring results, and corrective-action plans. Ideal Candidate Has demonstrated experience managing or supporting classified information systems within the Department of Defense or Intelligence Community environment. Possesses strong working knowledge of the NISPOM, DCSA requirements and processes, and the Risk Management Framework. Has experience developing and maintaining SSPs, POA&Ms, authorization packages, continuous-monitoring documentation, and related cybersecurity artifacts. Understands security controls, vulnerability management, configuration management, incident response, access control, audit requirements, and classified system operations. Can work effectively with security personnel, engineers, IT professionals, program managers, Government customers, and company leadership. Is comfortable working directly with Government security representatives and supporting formal assessments and inspections. Can translate regulatory and contractual security requirements into practical technical and operational solutions. Has the judgment and maturity to operate independently and represent Iron Will effectively with customers, partners, and Government stakeholders. Is willing to be hands-on and directly support security documentation, system authorization, compliance, and remediation activities rather than functioning solely as a manager. Required qualifications 5+ years of cybersecurity experience 3+ years of experience with classified systems 2+ years of ISSM or ISSO experience Bachelor's degree, or equivalent experience Security+ CE or higher, plus any DoD 8140 qualifications when contractually required DCSA experience NISP eMASS experience RMF, SSP, and POA&M experience Active Secret clearance Preferred qualifications CISSP or CISM certification NBIS and/or DISS experience SCI and SCIF experience Top Secret clearance About Iron Will Iron Will Ventures supports complex defense missions by bringing together experienced technical professionals, responsive leadership, and a mission-focused approach to solving customer challenges. As our presence in the Crane community continues to grow, this ISSM will play an important role in establishing the secure infrastructure, processes, and culture necessary to support that growth. Why Iron Will Ventures Iron Will brings together experienced test professionals, engineers, analysts, and program leaders who have spent their careers executing complex national-security programs. Our role is not simply to observe the process. We help our customers plan the test, integrate the mission, identify the problems, drive them to resolution, execute successfully, and learn from the results. Out Test; Out Analyze; Out Build. Iron Will Ventures Inc. is an equal opportunity employer. We value diversity and do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status.

Job Description Job Description This position is contingent on contract award and position availability Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America. RMC is seeking an Information Systems Security Officer (ISSO) to support the authorization and ongoing security of mission applications, cloud infrastructure, and enterprise core services. The ISSO will work with Government security personnel, software developers, and infrastructure engineers to maintain security documentation, assess risk, and ensure systems meet applicable Department of Defense and Intelligence Community requirements. This role requires someone who can connect security requirements to how systems are built and operated. Candidates should be comfortable reviewing technical evidence, investigating compliance gaps, and working with engineers to resolve findings as software, infrastructure, and system configurations change. What You'll Do: Support Risk Management Framework (RMF) activities to obtain and maintain Authority to Operate (ATO) for systems across applicable classification levels. Develop and maintain authorization documentation, including System Security Plans (SSPs), security control implementation statements, system boundary descriptions, and supporting evidence. Coordinate with system owners, Information System Security Managers (ISSMs), assessors, and engineering teams to prepare authorization packages and resolve assessment findings. Maintain Plans of Action and Milestones (POA&Ms), track remediation progress, and communicate unresolved risks and dependencies. Use the DISA Enterprise Mission Assurance Support Service (eMASS) to maintain authorization records, security control documentation, assessment evidence, and remediation status, as applicable. Review Assured Compliance Assessment Solution (ACAS) scan results, security configuration assessments, and application security testing reports; work with technical teams to prioritize and validate remediation. Assess the security impact of software releases, infrastructure changes, new integrations, and changes to the authorization boundary. Support continuous monitoring by maintaining current security evidence, reviewing control effectiveness, and reporting changes in system risk. Work with cloud and DevSecOps engineers to incorporate security requirements and evidence collection into development and deployment workflows. Review access controls, privileged access, audit logging, configuration baselines, and protection of sensitive data. Support security incident reporting, investigation, corrective actions, and updates to relevant documentation and procedures. Apply appropriate security overlays and support supply chain risk management activities. Prepare security status reports and brief Government stakeholders on authorization progress, findings, and remediation priorities. Requirements Bachelor's degree in a technical or managerial field and 5+ years of cybersecurity, engineering, T&E, or A&A experience; or a high school diploma/equivalent and more than 7 years of relevant experience. Active TS/SCI clearance with CI Polygraph. Prior Intelligence Community support experience. ISSO or comparable experience supporting RMF activities and system authorization packages. Proficiency with eMASS and ACAS. Experience documenting security controls, collecting assessment evidence, reviewing vulnerability and configuration findings, and tracking remediation. Knowledge of applicable Department of War and Intelligence Community security requirements and assessment processes. Understanding of system boundaries, data flows, access controls, audit logging, configuration management, and continuous monitoring. Ability to assess system-change risks and communicate them to technical and nontechnical stakeholders. Strong technical writing, organizational, and communication skills. Ability to meet applicable cybersecurity workforce requirements, including Full Security Control Assessor qualification if required. Desired Qualifications DoD 8140/8570 IAM Level II or III qualifications and relevant certifications, such as CISSP, CISM, or CAP/CGRC. IC authorization experience under ICD 503 and agency guidance. AWS/AWS GovCloud security assessment experience, including DoD Impact Level 5 environments. Familiarity with Kubernetes/OpenShift security, including workload isolation, access controls, image security, and logging. Experience using DevSecOps security testing and deployment evidence for assessments and continuous monitoring. Experience applying STIGs, validating configurations, and supporting security control assessments. Familiarity with ICAM, PKI, certificate management, encryption, and secrets management. Experience assessing Zero Trust controls across identities, devices, networks, applications, and data. Benefits At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees. RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package. Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.

Job Description Job Description Come join our team! At Unlimited Technology, we are committed to our company's core values of Passion, Collaboration, Innovation and Adaptability. With offices throughout the United States, we are a premier cyber and physical security specialty contractor, and we are growing at a rapid pace. We have a wide range of talented and experienced individuals that deliver cutting edge technology solutions to meet our customers' ever-changing needs. We secure the facilities and networks of the world's leading brands and critical infrastructure and are recognized leaders in the physical and IT security, cyber, and managed services industries. UT offers a rewarding career, great benefits, and the chance to learn and work with ground-breaking technology and premier clients. The Systems Engineer III is a senior technical resource responsible for the design, configuration, programming, integration, testing, and commissioning of security technology systems for Unlimited Technology's Government/Federal business, including enterprise, multi-site, and mission-critical environments. This is the Architect, Lead and Escalate level. The position releases the Bill of Materials on complex projects, resolves disputed scope, leads complex integrations and system architecture, and serves as the technical escalation point for Systems Engineer I and II personnel. The Systems Engineer III also reviews the deliverables of other engineers and develops and recommends engineering standards and best practices. ORGANIZATIONAL RELATIONSHIPS This position reports to the Systems Engineering Manager and has no direct reports. This position supports the Government/Federal business, and assignments may require clearance eligibility, badging, and government site access. Work is assigned through the Systems Engineering Ticket Request Queue. The Systems Engineer III escalates to the Systems Engineering Manager and works closely with Project Management, Installation, Service, the CAD and Design group, and Solution Engineering. Engineering levels are cumulative. This position performs the full scope of Systems Engineer work across all levels of project complexity; this includes scope and Bill of Materials review, port chart preparation, programming, integration, testing, commissioning, and support of field personnel. The responsibilities below reflect the highest level of independent work expected of this position. EXPECTED LEVEL OF INDEPENDENCE Works as a senior individual contributor and technical authority, providing technical leadership, peer review, mentoring, and escalation support without direct personnel management responsibility. Independently owns enterprise, multi-site, and mission-critical work, and serves as the assigned escalation point for Systems Engineer I and II personnel. KEY RESPONSIBILITIES Scope, BOM & Technical Authority Review and release the as-sold Bill of Materials developed by Solutions Engineering to Project Management on all assigned projects, including complex, enterprise, and multi-site work, and resolve disputed or ambiguous scope prior to ordering, providing a technical verification in addition to the Project Manager's review. Verify Bill of Materials compliance with Section 889 restricted-manufacturer rules and GSA Approved Products List (APL) requirements on federal and government projects as part of final technical verification. Validate sold designs against field conditions and contractual scope, and lead resolution of variance identified after award. Create port charts and system architecture documentation, including for complex and multi-site environments, and validate storage sizing and retention calculations on enterprise and multi-site systems. Review the deliverables of other engineers for accuracy, completeness, and constructability. Programming, Integration & Commissioning Program and integrate complex, enterprise, and mission-critical systems, including multi-platform and third-party integrations. Design and configure system architecture, including high availability, redundancy, failover, and disaster recovery considerations, and lead backup and recovery configuration at commissioning. Design and manage Active Directory and LDAP integration and certificate management, including federated, multi-site, and mobile credential deployments. Own PKI integration design for PIV/CAC-enabled PACS deployments, including certificate chain validation, CRL and OCSP revocation checking, and OSDP Secure Channel key management architecture, accounting for legacy reader and hardware limitations that cannot support FICAM-compliant modes. Lead technical remediation strategy for complex or systemic ATO and vulnerability assessment findings, sequencing fixes to avoid downtime on active government facilities and validating resolution under retest. Work directly with ISSO, ISSM, and Authorizing Official stakeholders to scope NIST 800-53 control implementation, support continuous monitoring evidence collection, and defend risk-acceptance or compensating-control decisions when findings cannot be fully closed before an ATO deadline. Lead testing, commissioning, customer acceptance, and project closeout, including on complex and enterprise projects. Deliver client handover training to enterprise and multi-site customers. Lead application of cybersecurity, system hardening, and secure configuration requirements, including DISA STIG controls on government projects, across delivered systems. Communication & Coordination Communicate design intent, configuration decisions, and technical requirements clearly to Project Management, Installation, subcontractors, and customer stakeholders. Provide timely status on assigned engineering work, and communicate proactively when a deliverable will be late, is blocked, or depends on information not yet received. Identify and request the information needed to complete assigned work, and follow up until it is received rather than proceeding on unstated assumptions. Communicate the technical impact of field conditions, scope changes, and design deviations to Project Management so schedule and cost implications can be addressed. Keep Project Management, Service, Solutions Engineering, and the CAD and Design group informed of engineering status, dependencies, and open items affecting delivery. Escalate promptly and with context when work exceeds available capacity, authority, or technical scope, providing documented findings so the receiving party can act without repeating work already performed. Communicate findings from redline, commissioning, and pre-order review back to Solutions Engineering so recurring issues are addressed in future designs. Technical Leadership & Improvement Serve as the technical escalation point for Systems Engineer I and II personnel and provide coaching across the team. Develop and recommend engineering standards, design methodologies, documentation practices, templates, and technical procedures. Evaluate emerging technologies and recommend improvements to design, equipment selection, and engineering workflows. Maintain advanced manufacturer certifications across supported platforms, including recertification as platforms release new versions. Assume work from other engineers within the team during absence, deadline pressure, or capacity constraints as assigned. Participate in the on-call rotation and extended-hours coverage. Lead redline of project drawings on complex systems so as-built production by CAD and Design reflects installed and commissioned conditions. Ensure configurations, credentials, remote access, and system documentation are complete and accurate for turnover. Follow site-specific safety programs, participate in job hazard analyses, and stop work and escalate when conditions are unsafe. Maintain professional conduct in occupied, escorted, and secure customer environments, and protect the confidentiality of customer security information, credentials, and system documentation. Other duties as assigned. EXPERIENCE & REQUIREMENTS Bachelor's degree in Engineering, Computer Science, Information Technology, or a related technical field, or equivalent experience. 8+ years of experience in electronic security, systems integration, or technical project delivery, including enterprise, multi-site, or mission-critical environments, with advanced experience programming, integrating, testing, and commissioning integrated security systems, including access control, video management, intrusion detection, intercom, command and control/PSIM, structured cabling, and supporting network and server infrastructure. Experience with multiple enterprise platforms, which may include Genetec, Software House (CCURE), Hirsch, Gallagher, Lenel, AMAG, Milestone, Exacq, DMP, Radionix, BVMS, Mercury platforms, Hanwha, Axis, Verkada, Avigilon, Brivo, and Salient CompleteView. Advanced knowledge of networking, servers, databases, and virtualization, including TCP/IP, VLANs, routing, switching, DNS, DHCP, Windows Server, firewall concepts, and security-system network requirements, with the ability to coordinate complex network configurations with customer IT resources. Strong knowledge of system architecture, high availability, redundancy, disaster recovery, and technology lifecycle management; familiarity with AWS or Azure beneficial. Working knowledge of cybersecurity, system hardening, and secure configuration practices for integrated systems. . click apply for full job details

Job Description Job Description Omitron is seeking a Senior Systems Engineer to join the SPARTAN team in Colorado Springs, CO, supporting the U.S. Space Force. SPARTAN is a secure, distributed network that connects Space Force bases, mission partners, and cloud environments across CONUS and OCONUS locations. The network is operational today and is growing quickly. This is a senior position and the first dedicated systems engineering role on the program. You will establish the systems engineering foundation for SPARTAN. Your first major task is to lead the design and build of the SPARTAN out-of-band (OOB) management network. You will work directly with the Chief Systems Architect, the network engineering team, and the cybersecurity team. The OOB network gives a future Network Operations and Security Center (NOSC) independent access to monitor, manage, and recover every node, including when the primary network is degraded. This role is hands-on. You will help define the stack, build it in the lab, and field it at operational sites. Responsibilities: Out-of-Band Network Design and Build: Lead the systems engineering of the SPARTAN OOB management network through fielding. Define the OOB architecture with the network engineers. This includes management switching and routing, console access, segmentation, and a transport path that remains independent of the mission data plane. Design and build the management services hosted on the OOB network. These include authentication, authorization, and accounting (AAA), directory and certificate services, time synchronization, DNS, logging, and monitoring. Select and integrate the compute, virtualization, and storage platforms that host OOB services at core and edge locations. Create a repeatable node baseline so every new site receives the same OOB configuration, documentation, and test procedures. Develop automation for configuration, backup, compliance checks, and deployment using tools such as Ansible and Python. Work with future NOSC personnel to define monitoring, alerting, and remote recovery procedures that support 24/7/365 operations. Program Systems Engineering: Establish the systems engineering processes the program will use as it grows. This includes requirements management, configuration management, technical baselines, and design reviews. Develop and maintain system requirements, architecture views, and interface control documents (ICDs) for the network, its services, and its mission partner connections. Perform trade studies and technical risk assessments to support hardware, software, and architecture decisions. Define a design approach that scales to a growing number of nodes, mission partners, and cloud connections. Support the technical evaluation of new mission partner connection requests. Integration, Test, and Deployment: Plan and execute integration and test events in the lab and at operational sites. Write verification and validation procedures and document the results. Support site surveys, installation, and acceptance testing at new node locations. Investigate system-level issues with the network and operations teams. Identify root causes and drive corrective actions to closure. Cybersecurity and Authorization: Work with the Information System Security Manager (ISSM) and Information System Security Engineer (ISSE) to build security into the design from the start. Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and hardening baselines to OOB systems. Produce the design artifacts required for Risk Management Framework (RMF) authorization and continuous monitoring. Documentation and Communication: Develop and maintain architecture diagrams, ICDs, design documents, test reports, and operating procedures. Brief technical designs, status, and recommendations to program leadership and government customers. Travel: Travel to CONUS and OCONUS sites may be required, estimated at up to 20 percent. Minimum Requirements: US Citizenship required Security Clearance: Active TS/SCI security clearance required. Education: Bachelor's degree in Systems Engineering, Computer Engineering, Electrical Engineering, Computer Science, or a related technical discipline. Four additional years of relevant experience may be substituted for a degree, subject to contract requirements. Experience: Eight (8) or more years of experience in systems engineering, network engineering, or infrastructure engineering. At least three (3) of those years must be in a hands-on design and build role. Experience designing and deploying management infrastructure for enterprise or mission networks, such as OOB networks, network management systems, or data center infrastructure. Working knowledge of routing, switching, VLANs, IP addressing, and network segmentation. Experience administering Linux systems and virtualization platforms such as VMware vSphere or KVM. Experience deploying core infrastructure services, including AAA (TACACS+ or RADIUS), DNS, NTP, syslog, and SNMP or streaming telemetry. Experience with scripting and automation using Python, Bash, Ansible, or similar tools. Experience developing requirements, architecture documentation, and test procedures. Experience working in DoD or other government environments under RMF security requirements. Ability to work independently, set technical direction on a new effort, and coordinate across engineering disciplines. Strong written and verbal communication skills. Certifications: Active CompTIA Security+ certification required. Preferred Qualifications: Education: Master's degree in Systems Engineering, Computer Engineering, Electrical Engineering, Computer Science, or a related technical discipline. Experience: Experience as the lead or first systems engineer on a new or growing program. Experience building OOB management networks for geographically distributed sites. Experience with console servers, OOB access appliances, and lights-out server management interfaces. Experience with network monitoring and observability tools such as SolarWinds, Zabbix, LibreNMS, Grafana, or Splunk. Experience with infrastructure as code, Git, and a network source of truth such as NetBox. Experience with Public Key Infrastructure (PKI), identity management, and privileged access management. Familiarity with network encryption devices and COMSEC management. Experience with DISA STIGs, Security Content Automation Protocol (SCAP) tools, and Assured Compliance Assessment Solution (ACAS) scanning. Experience supporting secure DoD networks or a network operations center. Familiarity with AWS or Microsoft Azure in government cloud environments. Familiarity with Model-Based Systems Engineering (MBSE), SysML, or requirements management tools such as DOORS or Jama. Familiarity with U.S. Space Force or Space Domain Awareness (SDA) missions. Certifications: INCOSE ASEP/CSEP, professional-level networking certifications, CISSP, or Linux and virtualization certifications such as RHCSA or VCP. Compensation and Benefits: The salary range for this role is $160,000 to $200,000. Actual compensation will be determined based on factors including, but not limited to, relevant experience, education, technical expertise, certifications, security clearance, geographic location, internal equity, market conditions, contract requirements, and other factors. Benefits include: Health, Dental and Vision Insurance HSA or FSA accounts Company paid ST/LT Disability and AD&D insurance Paid Federal Holidays Paid Vacation Leave and Sick Leave Parental Leave 401k with company match Supplemental Insurance options like AFLAC Professional Development Reimbursement Voluntary Life Insurance Company Overview: Omitron is an Aerospace Engineering and Information Technology small business firm headquartered in Beltsville, Maryland with a field office located in Colorado Springs, Colorado. Since 1984, Omitron has provided excellence in engineering services and product development to government and industry customers for both civilian and military aerospace programs. Omitron recognizes that outstanding people are the key to our success. Our goal is to select highly qualified and motivated individuals and provide them with an environment necessary to stimulate and nurture engineering and business objectives. Omitron offers its employees competitive salaries, a full benefits package, and excellent career growth opportunities. We welcome talented professionals who wish to take advantage of the opportunities we offer. At Omitron, we believe that a workplace that fosters innovation and collaboration will be a successful one. We are committed to attracting, developing, and retaining top talent from a broad range of backgrounds, perspectives, and experiences. Per Title VII, our hiring decisions are made based on qualifications, skills, and experience, in accordance with our commitment to equal opportunity employment and nondiscrimination policies. We welcome all individuals who share our passion for excellence and encourage applicants from diverse backgrounds to apply click apply for full job details

Job Description Job Description ASI Government provides government leaders with the expertise they need to navigate acquisition and organizational challenges so they can make an impact and achieve their goals. For over 30 years, ASI has transformed the way government does business, impacting over 70 government agencies across the civilian, defense, and intelligence communities. Do you thrive on creating unique and impactful value for Federal clients? Are you passionate about partnering with clients and collaborating to create solutions? Do you enjoy the opportunity to drive change that impacts our nation? We are looking for smart, curious, driven individuals to join us in partnering with our client to help them solve some of the nation's most challenging problems. ASI Government serves as a trusted adviser to government leaders seeking improved performance, enhanced organization effectiveness, and strategic change. ASI Government's AI Practice is seeking a Deployment Lead / Information System Security Officer (ISSO) to own everything between a finished build and a live, authorized system at Naval Supply Systems Command (NAVSUP). This is a full-time, 100% NAVSUP-dedicated role and ASI's anchor presence on the account. You will lead every AI Practice deployment into the NAVSUP environment and serve as ISSO for those systems, carrying them through the Department of War (DoW) Risk Management Framework (RMF) to an Authority to Operate (ATO) and keeping them authorized through continuous monitoring. You will partner with ASI's NAVSUP account lead and off-site development team, work closely with NAVSUP IT, cybersecurity and badging staff, and operate under the direction of the government Information System Security Manager (ISSM). Key Responsibilities: Deployment Leadership Lead every AI Practice deployment at NAVSUP, from intake through go-live, following the PAIRD Deployment Guide. Run the development kickoff for each new use case with NAVSUP IT, cybersecurity and badging staff, defining screening and ATO requirements before work begins. Receive builds from ASI's off-site development team and own their integration, testing in the NAVSUP environment, and production release. Serve as the day-to-day technical point of contact for NAVSUP stakeholders and the ASI account lead. Coordinate site access and badging for ASI staff assigned to NAVSUP, and maintain a current record of badged and in-process personnel. Report deployment status, risks and blockers to ASI leadership. Information System Security Officer (ISSO) Carry ASI's systems at NAVSUP through the DoW Risk Management Framework (DoDI 8510.01), applying NIST SP 800-37 and the NIST SP 800-53 security controls. Prepare and maintain authorization packages, including system security plans, control implementation statements, assessment evidence and supporting documentation. Develop and track Plans of Action and Milestones (POA&Ms) for known vulnerabilities through closure. Run continuous monitoring after authorization, including vulnerability scans, configuration compliance checks, patch status and periodic control reviews. Work under the direction of the government ISSM and provide accurate, timely security status to support the Authorizing Official's decisions. Review planned changes to deployed systems for security impact before release. Lead ASI's response to security incidents on NAVSUP systems and report them through NAVSUP's established channels. Required: 5+ years of cybersecurity experience, including 3+ years as an ISSO or in a comparable security role on DoW systems under the Risk Management Framework, with hands-on experience building authorization packages and managing POA&Ms. Demonstrated experience leading software deployments into a government environment, from test through production release. Qualified, or able to qualify, under DoD Manual 8140.03 for the cyber work role assigned to this position: foundational qualification through certification, education, or DoW training and experience; on-the-job resident qualification at the site; and 20 hours of continuing professional development annually. Eligible to obtain and maintain a NAVSUP badge and the security clearance level required by the account. U.S. citizenship required. Clear written and verbal communication with government security staff, engineers and program leadership. Preferred: A security certification commonly accepted for DoW security management roles, such as CISSP, CISM or CompTIA SecurityX (formerly CASP+). An active NAVSUP badge or prior NAVSUP site access. Hands-on experience with eMASS, ACAS/Tenable, and DISA STIG and SCAP compliance tools. Experience deploying cloud-hosted applications, data pipelines or AI/ML models, and applying security controls to them. Familiarity with Navy supply chain, acquisition or contracting systems. Experience working on a team where developers and deployers are on different sites or accounts. Bachelor's degree in cybersecurity, information technology, computer science or a related field. Why Join ASI Government? Work on high-impact, high-visibility projects that improve government services. Collaborate with experienced consultants in strategy, analytics, and organizational development. Opportunity for career growth in a dynamic and mission-driven environment. Competitive compensation and comprehensive benefits package (viewable on our careers site). BENEFITS : ASI Government offers a comprehensive benefit package to our employees. Benefits can be viewed on our careers site. EQUAL OPPORTUNITY EMPLOYER: ASI Government is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. To view the EEO Is the Law Poster, click here. PAY TRANSPARENCY NONDISCRIMINATION PROVISION: We will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. E-VERIFY: ASI Government participates in E-Verify, a service of DHS and SSA. See the E-Verify Notice and Learn About your Right to Work here and here. REASONABLE ACCOMMODATIONS: ASI is committed to working with and providing reasonable accommodations to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, please send an email at or call and let us know the nature of your request.

Job Description Job Description About this position: Information System Security Manager in Colorado Springs, CO The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position. Applicants will be notified via email or phone within ten business days regarding application status. This position is contingent upon award of contract. Essential Duties & Responsibilities Serve as the Information System Security Manager (ISSM) responsible for overseeing cybersecurity, information assurance, and Risk Management Framework (RMF) compliance for assigned information systems and programs. Develop, implement, and manage the organization's cybersecurity program to ensure compliance with DoD, Intelligence Community (IC), Federal, and organizational requirements. Lead RMF activities throughout the system lifecycle, including system categorization, control implementation, assessment, authorization, continuous monitoring, and risk management. Oversee the preparation, maintenance, and submission of cybersecurity authorization packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTMs), and Plan of Action and Milestones (POA&Ms). Advise Program Managers, Authorizing Officials (AOs), Information System Owners (ISOs), and senior leadership regarding cybersecurity risks and compliance requirements. Manage vulnerability assessment, remediation, continuous monitoring, and cybersecurity risk mitigation efforts. Ensure compliance with NIST, DoD, CNSSI, ICD, and organizational cybersecurity policies and directives. Supervise and provide technical guidance to Information System Security Officers (ISSOs), Information System Security Engineers (ISSEs), System Administrators, and cybersecurity personnel. Coordinate security testing, vulnerability scanning, penetration testing, audits, and inspections. Review and approve system security configurations, architecture changes, software implementations, and security control modifications. Oversee implementation of cybersecurity controls across classified and unclassified information systems. Support incident response activities, cybersecurity investigations, root cause analysis, and corrective action planning. Develop cybersecurity policies, procedures, standards, and training programs. Provide cybersecurity metrics, compliance reporting, and risk briefings to leadership and government customers. Participate in Configuration Control Boards (CCBs), technical reviews, engineering working groups, and program management reviews. Ensure all personnel operating information systems comply with security policies, training requirements, and acceptable use standards. Required (Minimum Necessary) Qualifications Education Requirements: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, Mathematics, or a related technical field. Additional years of qualifying experience may be substituted for education requirements. Minimum of 7 years of experience in cybersecurity, information assurance, information security, systems administration, systems engineering, or related technical disciplines. Minimum of 3 years of experience serving in an ISSM, ISSO, cybersecurity lead, or comparable cybersecurity management role. Experience implementing and managing the Risk Management Framework (RMF) for DoD or Federal information systems. Experience developing and maintaining Authorization to Operate (ATO) packages and related cybersecurity documentation. Experience overseeing vulnerability management, compliance assessments, and security control implementation. Experience managing cybersecurity compliance requirements for classified and unclassified systems. Experience leading teams and coordinating cybersecurity activities across multiple organizations. Strong analytical, leadership, organizational, and communication skills. Experience briefing cybersecurity risks to senior leadership and government stakeholders. Must possess or be eligible to obtain and maintain a Top Secret security clearance. Knowledge, Skills, Abilities, and Other Characteristics Thorough knowledge of Risk Management Framework (RMF) processes and NIST cybersecurity standards. In-depth understanding of NIST SP 800-53, NIST SP 800-37, DoD Cybersecurity Policies, CNSSI requirements, and Intelligence Community directives. Knowledge of system security architecture, network security, cloud security, virtualization, and enterprise cybersecurity operations. Familiarity with vulnerability management, security assessments, auditing, and continuous monitoring programs. Understanding of security engineering principles and lifecycle cybersecurity integration. Knowledge of incident response, configuration management, and security operations processes. Ability to analyze complex technical risks and communicate recommendations to leadership. Strong documentation, policy development, and technical writing skills. Ability to manage multiple projects, systems, and cybersecurity initiatives simultaneously. Proficiency with Microsoft Office Suite, cybersecurity tools, compliance platforms, and security management systems. Knowledge of organizational procedures and workflows - understanding how work moves through a company. Basic knowledge of relevant technologies or tools - e.g., Microsoft 365, communication platforms, or industry standard software. Knowledge of customer service practices - principles of providing quality service and managing inquiries professionally. Knowledge of data privacy and confidentiality principles - awareness of proper handling of sensitive information. Communication skills (written and verbal) - ability to convey information clearly and professionally. Time management and prioritization - balancing multiple tasks and meeting deadlines. Problem solving and critical thinking - analyzing issues and selecting appropriate solutions. Interpersonal and teamwork skills - building rapport and collaborating effectively with others. Attention to detail - producing accurate, error free work. Preferred Active Top Secret clearance with SCI eligibility or current TS/SCI clearance. DoD 8570/8140 IAT Level III or IAM Level III certification requirements satisfied. CISSP, CISM, CAP, CASP+, GSLC, SecurityX, or equivalent advanced cybersecurity certification. Experience supporting Air Force, Space Force, Army, Navy, SOCOM, Intelligence Community, or other Federal Government environments. Experience supporting classified information systems, SCI environments, and Special Access Programs (SAPs). Experience managing cybersecurity programs supporting cloud environments such as Azure Government, AWS GovCloud, or hybrid architectures. Knowledge of Zero Trust Architecture implementation and cybersecurity modernization initiatives. Experience with ACAS, HBSS/ESS, Splunk, Microsoft Defender, eMASS, Xacta, or comparable cybersecurity platforms. Experience supporting DevSecOps and secure software development initiatives. Prior experience serving as an ISSM, Senior ISSO, Cybersecurity Manager, Cybersecurity Program Manager, or Security Architect. Necessary Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Must be able to sit and work at a computer workstation for extended periods (frequently). Must be able to review, analyze, and approve technical cybersecurity documentation (frequently). Must be able to communicate effectively during meetings, audits, inspections, and executive briefings (frequently). Must be capable of conducting facility visits, cybersecurity inspections, and system reviews in secure environments (occasionally). Must be able to lift up to 20 pounds of equipment, documentation, or related materials (occasionally). Must be able to travel in support of cybersecurity assessments, inspections, and customer requirements (occasionally). Work Environment The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the Physical Setting: Primarily performed in government facilities, secure operations centers, SCIFs, engineering environments, and office settings. . click apply for full job details

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Must have a minimum of a current DoD Secret Clearance with the ability to obtain a DoD Top Secret clearance with SCI eligibility. A current DoD Top Secret clearance with SCI eligibility strongly preferred. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description SECURITY CLEARANCE REQUIREMENT: TS, WITH SCI ELIGIBILITY POSITION REQUIRES US CITIZENSHIP Position Title: Security Control Assessor (SCA) II Location: Peterson SFB, CO Position Description: The SCA is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities. Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility. We are seeking an Security Control Assessor (SCA) II to carry out the following duties and responsibilities: Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG) Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR Evaluate security assessment documentation and provide written recommendations for security authorization to the Government Discuss recommendation for authorization and submit the security authorization package to the AO/DAO Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate. Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policy Assist the Government compliance inspections Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC) Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries Evaluate the effectiveness and implementation of Continuous Monitoring Plans Represent the customer on inspection teams Qualifications: Required: 7 - 9 years related experience Bachelor's degree in a related discipline or equivalent experience (4 years) Minimum of four (4) years' experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties Prior performance in the role of ISSO, ISSM, SCA Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Manager Level II Must be able to regularly lift 50lbs Security Clearance: TS, with SCI eligibility Eligibility for access to Special Access Program Information Willingness to submit to a Counterintelligence polygraph Employee Benefits: Competitive salary for well qualified applicants 401(k) plan Annual performance bonus Certification and advanced degree attainment bonuses Student Loan / Tuition reimbursement Health Care Insurance (medical, dental, vision) Up to four weeks of paid vacation 11 Federal Holidays, and 3 Floating Holidays Team bonding events RedTrace Technologies is an EOE employer Powered by JazzHR 9XbYYqgKb5

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Independently assess security control deficiencies and residual risks, evaluate alternative corrective actions, and recommend risk-based remediation priorities. Advise the Authorizing Official and Government cybersecurity stakeholders on the security risks and operational implications of system changes, exception requests, and authorization decisions. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Active DoD Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. Work Environment and Physical Demand: Must be able to sit at a desk throughout the day and be able to visit customers within their office on a daily basis. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle. The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review. Responsibilities Include: Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities. Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes. Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes. Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements. Identify applicable data classifications and conduct system-level cybersecurity risk assessments. Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages. Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO). Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements. Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements. Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution. Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting. Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems. Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes. Complete required assessor, vulnerability scanning, endpoint security, and RMF process training. Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements. Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates. Independently assess security control deficiencies and residual risks, evaluate alternative corrective actions, and recommend risk-based remediation priorities. Advise the Authorizing Official and Government cybersecurity stakeholders on the security risks and operational implications of system changes, exception requests, and authorization decisions. Required Skills, Qualifications and Experience: Education: Bachelor's degree required. A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred. Overall Experience: Minimum of eight (8) years of experience in a cybersecurity or network security position. A&A Experience: Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities. Security Clearance: Active DoD Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility. Certification: Current DoD 8570 IAM Level III certification. Skills: Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation. Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253. Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security controls, and industry/DoD cybersecurity best practices. Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS). Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and services, HBSS/Endpoint Security Solutions (ESS), databases, and applications. Strong customer service and stakeholder engagement skills, with the ability to effectively coordinate with Government customers, ISSMs, PMOs, technical teams, system owners, and cybersecurity leadership. Ability to analyze complex technical and cybersecurity information and clearly communicate security risks, vulnerabilities, assessment findings, residual risk, and recommended corrective actions through written documentation and technical briefings. Location and Schedule: This role may be based at one of the following customer locations, with onsite requirements varying by location: Chambersburg, PA: Fully onsite, 5 days per week. Arlington, VA or Fort Meade, MD: Hybrid schedule, 4 days onsite per week with 1 telework day. Travel Requirements: Must be willing and able to support occasional domestic (CONUS) and international (OCONUS) travel, approximately 10% of the time. Work Environment and Physical Demand: Must be able to sit at a desk throughout the day and be able to visit customers within their office on a daily basis. The projected salary range for this position is $100,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description Dark Wolf is hiring in Ogden, Utah for a Security Controls Assessor Representative (SCAR). This position works with fellow SCARs, Security Controls Assessors (SCAs), Information System Security Managers (ISSM), Program Managers (PM), and Authorizing Official (AO) representatives to obtain and maintain Authority toOperate (ATO) approvals for various AFNWC weapon subsystems and supporting IT systems by adhering to the Risk Management Framework (RMF). This position is responsible for reviewing, assessing, and providing advice/recommendations to the SCA/AO throughout the RMF process for assigned programs. This is an on-site position on Hill Air Force Base. Required Qualifications: 10+ years of relevant work experience, including experience as an ISSO, ISSM, SCA, SCAR, or similar roles. Mastery of the NIST Risk Management Framework (RMF), including all seven steps and in-depth knowledge of NIST SP 800-53 security controls and their application to complex government information systems. Comprehensive technical understanding and practical experience with Windows/Linux OS hardening (including STIGs), network protocols (TCP/IP), firewall configurations, IDS/IPS, cloud security (FedRAMP, AWS/Azure GovCloud), virtualization, and database security. Hands-on experience with vulnerability scanning (ACAS/Tenable.sc/Nessus), configuration assessment (SCAP/STIG tools), and log analysis/SIEM platforms (e.g., Splunk, Elastic Stack) to identify and evaluate security posture. Expert-level knowledge of DoD/Agency-specific security requirements (e.g., DoDI 8500.01, CNSSI 1253), IAVMs, and STIG implementation/verification. Proven ability to develop and review System Security Plans (SSPs), write comprehensive Security Assessment Reports (SARs), and manage Plans of Action and Milestones (POA&Ms). Strong capability in analyzing control effectiveness, identifying critical risks, and articulating residual risk to Authorizing Officials (AOs). A Bachelors degree in a relevant field or 3+ years of relevant experience in lieu of degree. US Citizenship and an active Top Secret security clearance with SCI eligibility. This location is located on Hill AFB in Ogden, Utah. On-site presence is expected 5 days per week. We are hiring for multiple levels, with base salary estimates ranging from $130,000.00 - $190,000.00, commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description SECURITY CLEARANCE REQUIREMENT: TS, WITH SCI ELIGIBILITY POSITION REQUIRES US CITIZENSHIP Position Title: Security Control Assessor (SCA) II Location: Peterson SFB, CO Position Description: The SCA is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities. Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility. We are seeking an Security Control Assessor (SCA) II to carry out the following duties and responsibilities: Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG) Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR Evaluate security assessment documentation and provide written recommendations for security authorization to the Government Discuss recommendation for authorization and submit the security authorization package to the AO/DAO Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate. Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policy Assist the Government compliance inspections Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC) Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries Evaluate the effectiveness and implementation of Continuous Monitoring Plans Represent the customer on inspection teams Qualifications: Required: 7 - 9 years related experience Bachelor's degree in a related discipline or equivalent experience (4 years) Minimum of four (4) years' experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties Prior performance in the role of ISSO, ISSM, SCA Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Manager Level II Must be able to regularly lift 50lbs Security Clearance: TS, with SCI eligibility Eligibility for access to Special Access Program Information Willingness to submit to a Counterintelligence polygraph Employee Benefits: Competitive salary for well qualified applicants 401(k) plan Annual performance bonus Certification and advanced degree attainment bonuses Student Loan / Tuition reimbursement Health Care Insurance (medical, dental, vision) Up to four weeks of paid vacation 11 Federal Holidays, and 3 Floating Holidays Team bonding events RedTrace Technologies is an EOE employer Powered by JazzHR 9XbYYqgKb5

Job Description Job Description Description: P-11 Security is seeking a SCA who is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities. Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility. Performance shall include: Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG) Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR Evaluate security assessment documentation and provide written recommendations for security authorization to the Government Discuss recommendation for authorization and submit the security authorization package to the AO/DAO Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate. Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policy Assist the Government compliance inspections Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC) Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries Evaluate the effectiveness and implementation of Continuous Monitoring Plans Represent the customer on inspection teams Requirements: Experience: 7 - 9 years related experience Minimum of four (4) years' experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties. Prior performance in the role of ISSO and ISSM or SCA Education : Bachelor's degree in a related discipline or equivalent experience (4 years) Certifications: Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level III or Information Assurance Manager Level II within 6 months of the date of hire Security Clearance: Current Top Secret Clearance with SCI Eligibility Eligibility for access to Special Access Program Information Willingness to submit to a Counterintelligence polygraph Other Requirements: Must be able to regularly lift 50lbs

Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training