Jobs at The Amatriot Group

Lead ISSO responsible for RMF/A&A and ATO support: create and maintain System Security Plans, validate security controls, perform vulnerability assessments, develop POA&Ms, coordinate with ISSEs/ISSMs and development teams, ensure continuous monitoring and STIG compliance in complex IC environments.

Maintains information system security for DoD collateral, SCI, and SAP environments. Supports ISSM activities, RMF authorization packages, security documentation, configuration management, vulnerability identification, auditing, incident handling, system monitoring, and compliance reviews. Coordinates security impact analyses and system changes, supports inspections and training, and ensures appropriate security controls, recovery procedures, and media sanitization processes are implemented.

Designs, develops, and enhances Java and Angular applications, microservices, REST and SOAP web services, and cloud-native systems. Builds responsive accessible user interfaces, automated tests, CI/CD pipelines, and high-throughput applications. Works with AWS, PostgreSQL, Kafka, and enterprise development tools while addressing code quality and security vulnerabilities. Collaborates with technical, QA, business, and project teams, supports architecture improvements, and mentors junior and mid-level developers. This is an on-site role in Woodlawn, Maryland, requiring the ability to obtain and maintain Public Trust clearance.

Architects, implements, manages, secures, and optimizes scalable AWS and Snowflake database solutions. Responsibilities include database administration, SQL development, EMR cluster management, data integration, automation, disaster recovery, high availability, security compliance, troubleshooting, query optimization, and developer support. The role also designs Snowflake data warehouses, builds data pipelines, integrates BI tools, and communicates technical solutions to management, customers, vendors, and cross-functional teams.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM, DoD, and SAP security policies; identifying vulnerabilities and risks; supporting Operations Security; conducting facility compliance reviews; delivering security briefings and education; overseeing corrective actions; and investigating potential loss or compromise of classified information. Requires an active TS/SCI clearance and willingness to obtain a CI polygraph.

Designs, maintains, optimizes, and troubleshoots enterprise LAN, WAN, voice, video, cloud, and data networks supporting USSOCOM. Performs Tier-4 support, reviews architectures, plans upgrades, configures VLANs and network infrastructure, evaluates architectural changes, maintains backup and malware-defense systems, and recommends enhancements and cost reductions. Collaborates across teams to modernize mission-critical network systems.

Lead development and customization of AFSIM-based simulations for EW and EMSO. Architect complex scenarios, implement custom models/plugins, integrate with tools (STK, NGTS), analyze outputs, produce reports/briefings, and lead small teams while supporting MBSE activities and DoD stakeholders in a classified environment.

Analyzes and reverse engineers Android and iOS malware using static and dynamic techniques. Identifies attack vectors, payloads, command-and-control infrastructure, persistence, vulnerabilities, and data exfiltration. Develops automation scripts, YARA rules, and detection signatures; produces technical reports mapped to MITRE ATT&CK for Mobile. Conducts mobile security research and collaborates with forensics, vulnerability research, and cyber operations teams supporting federal national security missions.

Provides Linux desktop and server support, manages AWS and Nutanix cloud infrastructure, deploys and troubleshoots hardware, supports local and cloud-based networks, and maintains infrastructure documentation. The role requires Linux systems administration, network troubleshooting, cloud services knowledge, DevOps practices, and an active TS/SCI clearance. Puppet, IPA, Kubernetes, Ansible, and scripting experience are preferred.

Oversee and improve the enterprise IT Change Management process, including change assessment, governance, CAB meetings, approvals, scheduling, implementation coordination, documentation, and post-implementation reviews. Collaborate with technical teams, Incident and Configuration Managers, and business stakeholders to reduce service disruption and maintain compliance. Drive process automation and improvements, create user stories, perform UAT, manage the change calendar, and support scalable ITIL-aligned practices in a global environment.

Maintains the security posture of DoD information systems supporting Collateral, SCI, and SAP environments. Responsibilities include developing RMF authorization packages, continuous monitoring, configuration management, vulnerability identification, incident handling, audit review, system recovery, compliance inspections, and security training. The ISSO coordinates with ISSMs, authorizing officials, and government and contractor organizations to support assessment and authorization activities.

Supports DoD cyber investigations and digital forensics by decrypting data, recovering deleted or fragmented information, extracting data from flash memory and damaged devices, and researching storage architectures and encryption. Produces detailed technical reports for federal court and intelligence use. Requires extensive cryptology, programming, digital forensics, file-system, and device-access expertise, along with an active TS/SCI clearance.

Designs, develops, and delivers IT training programs and materials (including distance learning and interactive content), conducts needs analysis, coordinates scheduling and LMS administration, maintains 508-compliant course standards, provides second-level support, and manages multiple training projects while ensuring accuracy and continuous improvement.

Provide systems engineering and technical analysis for EO/IR/laser sensor projects supporting NSWC Crane USV and maritime programs. Perform trade studies, requirements development, test support, documentation standardization, hardware installation/checkout, and engineering evaluations. Support algorithm validation (ATR/computer vision), modeling and simulation, and prepare reports, procedures, and technical inputs for test events.

Manage install, configure, secure, patch, and maintain enterprise Linux servers (RHEL, Rocky, Ubuntu) in virtual and physical environments. Troubleshoot system, network, storage, and application issues; perform monitoring, compliance remediation, disaster recovery, and identity integration. Develop automation (Bash, Python, Ansible), maintain documentation, coordinate changes/outages, and support DoD/IC deployment environments through December 2026.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Support RMF activities, security authorization, and system security posture for a large enterprise IT program. Perform RMF documentation, security control assessments, vulnerability identification, audits, and provide security guidance to engineering teams. Maintain compliance with federal regulations and assist in security authorization and accreditation processes.

Manage day-to-day security operations and maintain the operational security posture for DoD SAP, SCI, and Collateral systems. Develop and update RMF/A&A authorization packages, perform continuous monitoring, assess configuration changes, coordinate hardware/software modifications, review audit records, identify vulnerabilities and recommend countermeasures, and support security training, incident handling, and SAP activities. Work closely with ISSM/ISO and support internal/external customers. Requires active TS/SCI and CI polygraph eligibility.

Support DoD intelligence program by performing cybersecurity/RMF activities, vulnerability scanning and remediation using STIGs, ACAS, and DISA SCAP for Linux/Windows, creating and tracking POA&Ms, maintaining security authorization documentation, coordinating audits and threat communications, and guiding junior staff.