Jobs at TIAG

Administers, engineers, troubleshoots, and optimizes Windows Server infrastructure across on-premises data centers and AWS environments. Supports Active Directory, DNS, VMware, storage, backups, disaster recovery, cloud migration, system integration, performance management, patching, vulnerability remediation, STIG compliance, RMF, and ATO activities. The role requires onsite collaboration with cloud, network, cybersecurity, and enterprise support teams in a DoD environment.

Designs and leads secure, scalable AWS architectures for ONR enterprise IT and research missions. Responsibilities include AWS infrastructure design, hybrid-cloud connectivity, migration and modernization planning, cybersecurity compliance, cloud governance, disaster recovery, cost optimization, Infrastructure as Code, DevSecOps, architecture documentation, stakeholder engagement, and technical mentorship. The role requires onsite collaboration in a secure federal environment and support for DoD authorization and continuous monitoring processes.

Supports USUHS’s transition to Google Workspace and Chrome Enterprise by configuring cloud browser management, enterprise extensions, device enrollment, Context-Aware Access, Zero Trust, threat protection, and DLP controls. Designs browser security policies aligned with federal and DoD requirements, validates phased deployments, minimizes mission impact, documents testing results, and develops SOPs and handoff materials for government IT and SOC teams.

Deploys, configures, troubleshoots, and secures enterprise endpoints across Windows, macOS, Chrome OS, and mobile platforms. Audits endpoint configurations, manages GPOs and CBCM agents, resolves access and device-posture issues, applies patches and DoD STIGs, and ensures federal security and accessibility compliance. The role also authors SOPs, develops transition roadmaps, and trains government IT and security personnel during a cybersecurity modernization effort.

Administer and secure enterprise IT and OT environments, including Windows, Linux, macOS, servers, workstations, virtualization platforms, and deployable assets. Conduct ACAS and Nessus vulnerability scans, apply DISA STIGs, manage patching and remediation, and support RMF and ATO documentation. Maintain system readiness, perform account and asset management, review logs, develop security architecture traceability, troubleshoot complex issues, and mentor junior staff in a DoD/Navy environment.

Drive technical discovery, gap analysis, and security architecture validation for Google Cloud, Google Workspace, and ServiceNow GCC-High ATO modernization. Evaluate environments against NIST SP 800-53 Revision 5, DoD IL-4, and FedRAMP requirements; identify control gaps and risks; validate inherited and shared responsibilities; collect technical evidence; and develop accurate RMF control narratives and reports. The role also performs human validation of AI-assisted technical content and supports cohesive authorization packages.

Designs, deploys, secures, operates, and optimizes AWS cloud infrastructure supporting ONR mission-critical systems. Develops Infrastructure as Code, CI/CD pipelines, automation scripts, monitoring, backup, and disaster recovery solutions. Troubleshoots complex infrastructure issues, supports cloud modernization and containerization, applies DoD security controls and compliance requirements, and collaborates with government, cybersecurity, network, architecture, and development teams.

Architects, develops, and modernizes full-stack containerized applications and microservices. Builds Kubernetes environments, CI/CD pipelines, Helm releases, and DevSecOps security automation. Optimizes relational databases, hardens systems to DISA STIG standards, and mentors engineering teams. Requires strong Linux, Docker, Kubernetes, software architecture, and deployment expertise, plus a Secret clearance or ability to obtain one.

Leads the design and implementation of Google Workspace solutions for USUHS, using Sheets, Forms, AppSheet, Looker Studio, and Apps Script to automate workflows, build dashboards, organize secure data, and support legacy-system migration. The role also develops documentation, trains users, validates migrated data, and creates a modernization roadmap for retiring legacy systems.

Monitors information systems for threats, vulnerabilities, and breaches; performs risk assessments, STIG compliance reviews, RMF A&A support, POA&M tracking, incident response, audits, and security documentation. The analyst helps develop security policies, verifies remediation, supports compliance reporting, and collaborates with IT teams to integrate security into system operations.

Lead SIEM modernization and cloud transition for 150+ enterprise assets at a DoD university enclave. Evaluate Splunk Cloud, Microsoft Sentinel, and Google Chronicle; establish logging standards, security baselines, telemetry architectures, and operational governance. Direct two ISSEs, oversee implementation and troubleshooting, develop SOPs and training, tune alerts, and certify operational readiness. Ensure alignment with DISA STIGs, RMF controls, Zero Trust principles, and federal cybersecurity requirements.

Supports a cybersecurity modernization project migrating approximately 3,000 Windows, macOS, and Linux endpoints from Trellix to Microsoft Defender for Endpoint. Responsibilities include deploying agents through MECM/SCCM and scripts, monitoring telemetry, removing legacy agents, transitioning disk encryption to BitLocker and FileVault, verifying recovery-key escrow in Entra ID, checking STIG compliance, and documenting endpoint issues for senior engineers.

Lead the migration of 3,000 Windows and macOS endpoints from legacy on-premise management to Microsoft Intune. Responsibilities include auditing and migrating GPO and SCCM configurations, implementing BitLocker and FileVault security policies, managing recovery keys in Entra ID, configuring Autopilot and automated macOS enrollment, maintaining Windows co-management, and participating in Agile modernization and architecture activities.