Jobs at TIAG

Architects, develops, and modernizes full-stack containerized applications and microservices. Builds Kubernetes environments, CI/CD pipelines, Helm releases, and DevSecOps security automation. Optimizes relational databases, hardens systems to DISA STIG standards, and mentors engineering teams. Requires strong Linux, Docker, Kubernetes, software architecture, and deployment expertise, plus a Secret clearance or ability to obtain one.

Leads the design and implementation of Google Workspace solutions for USUHS, using Sheets, Forms, AppSheet, Looker Studio, and Apps Script to automate workflows, build dashboards, organize secure data, and support legacy-system migration. The role also develops documentation, trains users, validates migrated data, and creates a modernization roadmap for retiring legacy systems.

Monitors information systems for threats, vulnerabilities, and breaches; performs risk assessments, STIG compliance reviews, RMF A&A support, POA&M tracking, incident response, audits, and security documentation. The analyst helps develop security policies, verifies remediation, supports compliance reporting, and collaborates with IT teams to integrate security into system operations.

Supports the design, administration, troubleshooting, performance, security, and maintenance of enterprise Windows server infrastructure at the Office of Naval Research. Manages VMware environments, storage, backups, patching, disaster recovery servers, monitoring, and infrastructure changes. Collaborates with network teams, develops architecture recommendations, resolves capacity and availability issues, and leads cross-functional operations projects. The position requires onsite work in Arlington five days per week and an active Secret clearance.

Lead SIEM modernization and cloud transition for 150+ enterprise assets at a DoD university enclave. Evaluate Splunk Cloud, Microsoft Sentinel, and Google Chronicle; establish logging standards, security baselines, telemetry architectures, and operational governance. Direct two ISSEs, oversee implementation and troubleshooting, develop SOPs and training, tune alerts, and certify operational readiness. Ensure alignment with DISA STIGs, RMF controls, Zero Trust principles, and federal cybersecurity requirements.

Supports modernization from Splunk Enterprise to a cloud-native SIEM across 150+ servers. Responsibilities include SIEM platform evaluation, security baseline implementation, RMF and DoD compliance, vulnerability remediation, telemetry validation, asset onboarding, Tier 2 troubleshooting, SOP development, alert tuning, and training Tier 1 administrators.

Supports a cybersecurity modernization project migrating approximately 3,000 Windows, macOS, and Linux endpoints from Trellix to Microsoft Defender for Endpoint. Responsibilities include deploying agents through MECM/SCCM and scripts, monitoring telemetry, removing legacy agents, transitioning disk encryption to BitLocker and FileVault, verifying recovery-key escrow in Entra ID, checking STIG compliance, and documenting endpoint issues for senior engineers.

Modernize DoD RMF and ATO packages for Google Cloud, Google Workspace, and ServiceNow GCC-High environments. Conduct gap analyses, develop SSPs, SARs, POA&Ms, and continuous monitoring plans, validate Rev. 5 control narratives, map evidence in ServiceNow GRC, evaluate FedRAMP inheritance, and document organizational risk and authorization decisions.

Lead the migration of 3,000 Windows and macOS endpoints from legacy on-premise management to Microsoft Intune. Responsibilities include auditing and migrating GPO and SCCM configurations, implementing BitLocker and FileVault security policies, managing recovery keys in Entra ID, configuring Autopilot and automated macOS enrollment, maintaining Windows co-management, and participating in Agile modernization and architecture activities.

Deploys and integrates Dell enterprise servers and Cisco networking equipment for a secure NIWC Atlantic lab environment. Responsibilities include hardware staging, OS and hypervisor installation, firmware updates, VLAN and routing configuration, connectivity testing, STIG implementation, documentation, and coordination with project, architecture, and security teams. The role requires on-site work, physical equipment handling, active DoD Secret clearance, IAT Level II certification, and 5–8 years of systems or network infrastructure experience.

Lead end-to-end enterprise and technology architecture for the Office of Naval Research. Advise government and program stakeholders on modernization strategies, evaluate technologies, develop DoDAF-compliant architecture artifacts, and design secure AWS and enterprise infrastructure solutions. Guide migrations, consolidations, integrations, and troubleshooting across cloud, networks, virtualization, databases, and applications. Partner with cybersecurity teams on DoD security requirements and ATO objectives while establishing technical standards and producing architecture and engineering documentation.

Develop and maintain scalable Angular web applications with responsive, high-performance interfaces and API integrations. Write TypeScript code and unit tests using Jasmine and Karma, troubleshoot software issues, and optimize cross-browser compatibility. Collaborate with designers using Figma to implement accessible, pixel-perfect UI components and maintain design systems. The role also involves AWS cloud services, version control, Agile methodologies, database familiarity, DoD information assurance compliance, and onsite work at the Office of Naval Research.

Lead integration of AI/ML into a cloud-native human-performance platform: architect generative AI and RAG workflows, build serverless backends and microservices, optimize data pipelines (SQL/NoSQL, embeddings), maintain CI/CD, modernize legacy PHP backends, mentor engineers, and drive architecture and deployment of LLM-based features.