Top Tech Jobs & Startup Jobs

Lead RMF execution and authorization efforts for classified cloud and AI-integrated systems. Develop and maintain SSPs, SARs, POA&Ms, and continuous monitoring documentation; assess NIST, DoD, CNSS, FedRAMP, cloud, container, and AI security controls. Conduct architecture reviews, threat modeling, vulnerability assessments, risk analysis, and security control assessments while coordinating with architects, developers, DevSecOps teams, customers, and third-party assessors.

Provide onsite information systems security engineering support at Fort Belvoir. Manage eMASS authorization packages, ATO documentation, POA&Ms, audit readiness, and DoD RMF compliance. Implement STIGs and security controls, perform system hardening, patching, and vulnerability remediation across Windows and Linux environments, and brief government and program stakeholders. Administer and secure systems using ACAS, ESS/HBSS, SCAP, virtualization platforms, and networking technologies.

Administer and maintain Veritas NetBackup master, media, and client servers. Configure backup policies, schedules, retention, lifecycle management, monitoring, troubleshooting, performance tuning, and restores. Coordinate backup requirements with infrastructure, storage, database, and application teams. Maintain operational documentation and compliance reports while applying Linux, Windows, virtualization, security, and DISA STIG best practices in a highly secure environment.

Serve as the primary cybersecurity advisor for assigned systems and lead Risk Management Framework assessment and authorization activities. Develop and maintain security plans, assessments, POA&Ms, risk acceptances, agreements, and other authorization artifacts. Conduct continuous monitoring, control assessments, vulnerability reviews, impact analyses, and user account reviews. Coordinate remediation with system owners and technical teams, support audits and inspections, and help maintain compliant Authority to Operate status.

Administer and maintain Windows server environments, implement security standards (DISA STIGS/SCAP), manage AD/GPO, automate with PowerShell (and Python), support VMware and RDS, document procedures, and coordinate with network teams to ensure secure, continuous operation.

Lead technical strategy and delivery for database architecture, DevSecOps, and secure web services. Architect, modernize, and transition legacy databases to cloud/hybrid environments; build CI/CD/DevSecOps pipelines; implement secure APIs and data pipelines; lead engineering teams, enforce standards, and drive Agile delivery, observability, and release management in a high-security federal environment.

Administer and maintain enterprise Citrix environments (CVAD, ADC/NetScaler, StoreFront, Gateway) for distributed users. Troubleshoot connectivity and performance, perform patching/upgrades, manage AD integration and access controls, automate tasks with PowerShell, and document configurations while supporting incident/change workflows and security/compliance requirements.

Design, implement, and maintain Palo Alto and Cisco firewall and load balancer security solutions for a DISA CESO environment. Provide Tier 3 support, conduct bi-monthly firewall assessments, generate reports, advise on architecture and cloud (AWS) VM deployments, ensure STIG/JSIG compliance, and support COOP and DevSecOps processes.

Design, build, and maintain secure AWS cloud environments (including Amazon C2S) using IaC and automation. Support CI/CD, deployment orchestration, monitoring, incident response, testing, and documentation across classified and unclassified environments. Automate operational tasks, manage core AWS services, support patching/vulnerability scanning/compliance, and participate in Agile release management and knowledge transfer.

Engineer, deploy, secure, and sustain an enterprise IDaaS/ICAM platform (ForgeRock/Ping) using DevSecOps practices, CI/CD, automated provisioning, federation (SAML/OAuth2/OIDC), and enterprise directory integration to support DISA CESO Zero‑Trust and cross‑domain operations.