Top Tech Jobs & Startup Jobs

Reviews cybersecurity documentation and assessment evidence against NIST, FISMA, RMF, FedRAMP, and Zero Trust requirements. Elicits and maintains security requirements, performs control-gap and maturity assessments, supports authorization activities, tracks findings and remediation in eMASS, coordinates corrective actions with technical stakeholders, and prepares assessment reports, risk summaries, and leadership briefings.

Engineer and assess Zero Trust security capabilities across identity, devices, networks, applications, and data. Translate federal security requirements into technical controls, support authorization activities, review security evidence, analyze vulnerabilities and control gaps, manage remediation plans, and advise stakeholders on security architecture and compliance. Assess cloud, hybrid, and on-premises environments for authorization readiness and continuous monitoring, while preparing technical reports, risk summaries, and briefings.

Administer and optimize an Oracle Enterprise Data Warehouse, including capacity monitoring, SQL and database performance tuning, schema and table refreshes, access controls, backups, recovery, patching, replication support, and disaster recovery testing. Implement and document database changes, troubleshoot production issues, maintain security and data integrity, and collaborate with developers, analysts, project managers, and stakeholders. The role is fully onsite in Washington, DC and requires eligibility for a security clearance.

Performs cybersecurity risk assessments, compliance reviews, audits, and RMF/ATO support for federal systems. Identifies vulnerabilities, control gaps, and compliance deficiencies; develops mitigation strategies, remediation reports, risk analyses, and traceability matrices. Coordinates with government stakeholders, auditors, system owners, engineers, and vendors. Maintains cybersecurity policies, evidence, findings, dashboards, and risk records while monitoring remediation and evolving federal requirements. The role may include occasional onsite visits and support for third-party and supply-chain risk management.

Provides configuration management, technical writing, documentation, change management, and knowledge management support for cybersecurity and IT programs. Develops and maintains technical artifacts, configuration items, baselines, repositories, procedures, diagrams, reports, and training materials. Ensures documentation is accurate, version-controlled, accessible, compliant with government standards, and synchronized with approved system configurations. Coordinates reviews, approvals, change control, quality assurance, and stakeholder communications throughout the project lifecycle.

Designs, assesses, implements, and supports secure cloud architectures for VA enterprise systems. Translates Federal, VA, and business requirements into security controls and engineering solutions; supports FedRAMP, RMF, A&A, and ATO activities; performs threat modeling, risk and gap analyses, architecture reviews, configuration-baseline assessments, and cloud security posture reviews. Develops security reference architectures and patterns, supports identity, networking, data protection, and application security, and advises technical and executive stakeholders on compliance, risks, and remediation.

Provides quantum computing, cryptography, and post-quantum cryptography expertise for federal cybersecurity modernization. Assesses cryptographic technologies, inventories algorithms and dependencies, evaluates quantum risks, and develops migration plans toward quantum-resistant standards. Designs crypto-agile architectures, conducts simulations and testing, implements algorithms using Python, C++, and Java, and supports security assessments, policy, governance, and technical reviews. Collaborates with architects, engineers, program managers, and government stakeholders while communicating quantum risks and modernization recommendations to technical and executive audiences.

Serves as the senior technical authority for enterprise cybersecurity architecture and engineering supporting a federal VA program. Leads security architecture reviews, threat modeling, risk and gap analyses, modernization, governance, requirements traceability, and secure implementation across cloud, health IT, network, data, identity, and emerging technologies. Advises government and technical leadership, guides multidisciplinary teams, develops architectural standards and recommendations, supports A&A and ATO activities, presents executive briefings, reviews deliverables, and mentors cybersecurity personnel.

Designs, automates, secures, and maintains DevSecOps processes, CI/CD pipelines, cloud-native environments, containerized workloads, and deployment workflows. Integrates security testing, compliance checks, vulnerability management, incident response, secure configuration baselines, and cybersecurity tools throughout the SDLC. Maintains Git repositories, automation scripts, traceability, SBOM processes, and secure software delivery controls. Collaborates with developers, cloud engineers, architects, and government stakeholders while supporting audits, remediation, modernization, and VA security requirements.

Leads end-to-end management and execution of a federal VA cybersecurity program. Oversees contract performance, technical teams, staffing, schedules, risks, deliverables, reporting, stakeholder communications, security authorizations, documentation, training, and resource planning. Ensures cybersecurity architecture, cloud security, engineering, modernization, compliance, and operational efforts align with contract requirements and government priorities.