Connected Logistics

Team Lead

• Lead technical quality reviews and formal internal readiness gates for RMF artifacts and authorization packages
• Maintain and apply step-specific DOS/CST quality and assessment-readiness checklists with documented pass/fail criteria
• Review categorization, boundaries, overlays, inheritance, implementation statements, inventories, evidence, markings, and calculations
• Check alignment among SSPs, BIA, privacy and identity artifacts, SIA/NOC records, cloud models, and current system versions
• Record deficiencies, assign correction actions through the responsible IASS or Lead, and revalidate returned items
• Track draft, review, Lead approval, Government comments, final submission, version, and acceptance status
• Analyze recurring defects and rework; recommend improvements to checklists, templates, training, and procedures
• Coordinate with RMF Leads and corporate QA while preserving independent assessment authority

Quality Analyses Team Lead

Risk

• Provide cybersecurity support to the Department of State Directorate of Technology, Enterprise Architecture, and Cyber Security Team
• Ensure compliance with FISMA and the Risk Management Framework (RMF)
• Support IASS personnel and RMF Leads in translating control deficiencies, vulnerability findings, and operational issues into risk records and remediation plans
• Maintain consistent risk characterization, POA&M development, remediation tracking, closure-evidence review, and portfolio risk analysis across RMF delivery teams
• Review findings for control mapping, risk rationale, system applicability, residual exposure, and remediation priority
• Develop POA&Ms with accountable owners, milestones, dependencies, and closure evidence
• Track overdue, stalled, recurring, and cross-system findings and recommend escalation to the ISSO Lead
• Review closure packages for technical sufficiency and traceability
• Develop risk-response recommendations and risk-acceptance materials for Government consideration
• Analyze portfolio trends and support authorization briefings, audits, and reporting without altering independent assessor conclusions

Risk Governance and POA&M SME

Security Engineer

• Provide comprehensive cybersecurity support for Department of State Directorate of Technology, Enterprise Architecture, and Cyber Security Team services
• Perform system-level cybersecurity analysis, authorization documentation, evidence validation, and stakeholder coordination for complex consular systems undergoing RMF Steps 1 through 3
• Develop system boundaries, architecture and data-flow packages, information-type mappings, and categorization justifications
• Document control baselines, overlays, tailoring, compensating controls, inheritance, and shared responsibilities
• Develop SSP content, implementation statements, Evidence Index entries, and supporting artifacts in ArchAngel and approved repositories
• Coordinate PIA, DIRA, ISA, contingency, incident-response, and configuration-management documentation
• Evaluate DevSecOps pipeline controls and document SAST, dependency, container, and infrastructure-as-code scan evidence
• Identify gaps, develop draft POA&Ms, resolve reviewer comments, and support control demonstrations and assessor requests
• Mentor less experienced staff and provide designated backup support without assuming independent assessment authority
• Deliver accurate artifacts, defensible control statements, traceable evidence, timely packages, and effective resolution of complex technical issues

Senior Information Assurance Security Specialist, RMF

• Provide senior-level continuous-monitoring analysis, authorization maintenance, and Tenable engineering or operational support for complex consular systems
• Analyze Tenable and Wiz findings, confirm affected systems, prioritize KEVs/BODs, and coordinate remediation
• Maintain POA&Ms, risk assessments, closure evidence, authorization conditions, and current RMF artifacts
• Perform SIA/NOC analysis and document effects on controls, boundaries, inventories, and authorization posture
• Support FISMA submissions, audit data calls, contingency tests, independent assessments, and post-incident documentation
• Manage Tenable scan policies, credentials, agents, schedules, plugins, access, backups, patches, dashboards, and approved integrations
• Troubleshoot incomplete or non-credentialed scans, stale data, service failures, and suspected false positives
• Document shift handoffs and escalation actions
• Mentor junior staff and provide engineering escalation support as assigned
• Deliver reliable scanning services, current risk records, timely change analysis, sound vulnerability prioritization, and evidence-backed remediation closure

Senior Information Assurance Security Specialist, Tenable

• Provide comprehensive cybersecurity support services for Department of State Directorate of Technology, Enterprise Architecture, and Cyber Security Team systems and data
• Manage a dedicated rapid-response work queue under the ISSO Lead
• Coordinate senior and junior team effort
• Obtain authoritative information, validate responses, and escalate requests requiring additional capacity or Government decisions
• Triage and deliver urgent cybersecurity data calls, artifact updates, risk inquiries, audit support, and leadership requests
• Confirm request scope, deadline, sensitivity, stakeholders, source systems, and approval path
• Triage and assign urgent data calls, POA&M inquiries, SIA actions, audit requests, and artifact updates
• Coordinate with assigned IASS personnel and shared SMEs while retaining system-level accountability
• Validate response accuracy, evidence references, security markings, consistency, and completeness before release
• Track requests, dependencies, review status, delivery, and follow-up actions in approved workflows
• Escalate conflicting deadlines, incomplete evidence, material risks, and requests beyond authorized scope
• Return system changes and findings to the responsible IASS and RMF Lead for authoritative record updates

Cybersecurity Rapid Response Lead

Security Analyst

• Direct personnel supporting the operational security and authorization posture of consular systems
• Direct continuous monitoring, ongoing authorization support, vulnerability and cloud-posture analysis, POA&M tracking, change-impact reviews, and CO1 Tenable operational coverage
• Assign continuous-monitoring work and review exception queues, authorization milestones, overdue findings, and emerging risk
• Oversee scheduled Tenable coverage, relief staffing, shift handoffs, escalation, platform health, and recovery coordination
• Correlate Tenable and Wiz findings with consular-affairs systems and authorization boundaries using approved system identifiers
• Prioritize KEVs, BOD actions, critical and high findings, remediation milestones, and evidence-backed closure
• Direct SIA/NOC reviews and updates to SSPs, diagrams, inventories, privacy artifacts, and POA&Ms
• Coordinate annual assessment support, contingency tests, audit responses, FISMA submissions, and incident-related artifact updates
• Escalate authorization-impacting conditions and coordinate return to earlier RMF activities when required
• Coordinate CO1 tool responsibilities with CO5 through approved responsibility assignments and interfaces
• Maintain reliable operational coverage, current authorization records, actionable monitoring data, timely risk escalation, and validated remediation progress

Information Security Analyst, Lead

• Serve as Pod Lead for RMF Steps 1 through 3
• Provide comprehensive cybersecurity support to the Department of State Directorate of Technology Enterprise Architecture Cyber Security Team
• Coordinate daily technical assignments, workload, due dates, dependencies, and backup coverage
• Guide IASS personnel on boundaries, categorization, control selection, inheritance, implementation statements, and evidence collection
• Review drafts for technical accuracy and readiness before Quality Analyses Team review
• Track TRT comments, missing artifacts, evidence requests, POA&M gaps, and quality corrections through resolution
• Coordinate with system owners, engineers, developers, and shared SMEs to resolve package dependencies
• Mentor junior and journeyman personnel
• Escalate schedule, capacity, technical, and risk issues to the RMF Lead
• Maintain authorization package readiness and primary and backup coverage for assigned systems

Information Security Analyst, SME, Pod Lead

• Provide comprehensive cybersecurity support services for Department of State Directorate of Technology Enterprise Architecture Cyber Security Team systems and data
• Perform RMF analysis, authorization artifact development, evidence collection, and action tracking for moderately complex consular systems
• Develop system descriptions, boundaries, inventories, information-type mappings, and categorization documentation
• Apply approved control baselines and document implementation statements, inheritance, evidence references, and known gaps
• Maintain SSPs and supporting artifacts in ArchAngel and approved repositories
• Collect configurations, logs, screenshots, scans, procedures, diagrams, and other evidence from technical teams
• Coordinate privacy, contingency, risk, and writing support
• Track actions and resolve quality-review comments
• Support TRT reviews, implementation-readiness reviews, independent assessor requests, and backup system coverage
• Escalate complex control, architecture, or risk questions to senior personnel

Journeyman Information Assurance Security Specialist, RMF

Full-stack Engineer

• Lead full-stack development across multiple concurrent AI pilots
• Own software components and services from design through production deployment
• Build AI/ML-enabled functionality, including user experiences and application layers surfacing model outputs
• Integrate with LangChain, LangGraph, and similar tools
• Modernize pilot applications onto a secure, cloud-native golden path
• Build React/TypeScript front ends and Python/FastAPI back ends
• Migrate legacy Streamlit pilots to modern React and VA Design System frontends
• Build and maintain reusable CI/CD templates, containerization, and Azure deployment workflows
• Integrate application layers with Azure AI Foundry, AI/ML services, model inference, and document-processing workflows
• Establish automated testing, code review, supply-chain/CVE remediation, and release management practices
• Produce system-design and automation documentation
• Mentor engineers and provide technical direction within an Agile team

Senior Software Engineer

Cloud Engineer

• Lead enterprise and solution-level cybersecurity architecture across cloud, hybrid, application, identity, data, network, and platform environments
• Define security architecture principles, standards, reference architectures, reusable security patterns, and technical guardrails
• Architect and support Zero Trust capabilities across identities, devices, networks, applications, workloads, and data
• Develop cloud and hybrid security architectures covering identity, access controls, network segmentation, workload protection, data protection, encryption, logging, monitoring, and secure connectivity
• Define and evaluate identity and access management architectures
• Assess existing cybersecurity systems, architectures, controls, and protocols for vulnerabilities, gaps, technical debt, and modernization opportunities
• Develop current-state and target-state security architectures and transition strategies
• Establish reusable patterns for cloud workloads, APIs, applications, containers, data services, identity services, external connectivity, and integrations
• Integrate security requirements into enterprise architecture, application modernization, cloud adoption, and DevSecOps
• Provide architecture guidance during system design and engineering reviews
• Collaborate with engineering and DevSecOps teams on security controls, automated testing, vulnerability management, configuration management, and continuous monitoring
• Evaluate cybersecurity technologies and proposed solutions for fit, effectiveness, interoperability, scalability, and standards alignment
• Define security boundaries, trust relationships, security zones, authentication and authorization flows, and secure interfaces
• Support cybersecurity roadmaps and modernization initiatives
• Provide senior technical leadership and cybersecurity subject matter expertise
• Develop and maintain architecture documentation, diagrams, security patterns, design decisions, standards, and implementation guidance
• Support risk assessments and recommend architectural safeguards and mitigation strategies
• Ensure security architecture remains integrated with modernization initiatives and evolving mission requirements

Senior Security Architect – Cloud, Zero Trust, Identity, Security Patterns

QA Automation Engineer

• Perform end-to-end incident response for PII incidents and PII-related data breaches, including identification, containment, eradication, and recovery
• Use Data Loss Prevention (DLP) tools to identify improperly stored or transmitted PII
• Quarantine improperly stored PII and support remediation to prevent unauthorized access or disclosure
• Assess PII-related security risks and recommend corrective and risk-mitigation actions
• Ensure security controls and safeguards protect sensitive and personally identifiable information
• Coordinate security response, containment, eradication, and recovery activities with stakeholders and mission partners
• Validate completion and effectiveness of remedial actions resulting from PII incidents
• Ensure cybersecurity and privacy activities comply with applicable information security and privacy policies
• Support security automation and repeatable processes that improve security monitoring, incident response, and remediation efficiency and consistency
• Support the Department of Veterans Affairs Office of Information Security Cybersecurity Operations Systems Engineering program

Security Engineer – Security Automation Engineer, Mid

• Support operation and maintenance of the PRiMES application for the Department of State's Bureau of Population, Refugees, and Migration
• Develop enhancements to the PRiMES system
• Keep the Project Manager, COR, and GTM apprised of significant IT operations and application development issues
• Help lead transformation of existing applications and design new applications for a modernized interface and architecture
• Interact with systems experts, developers and programmers on migration from the current platform to a cloud-based platform
• Attend customer meetings as requested and serve as primary liaison for technical solutions
• Design, develop and maintain enterprise solutions within Dynamics 365 CRM and Microsoft Power Platform
• Configure custom entities, forms, views, business rules, workflows and CRM security models
• Develop CRM plugins, JavaScript web resources and custom business logic using C#, JavaScript and the Dynamics CRM SDK
• Build and maintain Power Apps and Power Automate workflows for business process automation
• Develop and enhance custom applications using .NET, ASP.NET, Web API, C#, JavaScript, HTML/CSS and related technologies
• Integrate Dynamics 365 CRM and Power Platform solutions with external systems using REST APIs, OData, JSON, XML and web services
• Support SQL Server database development, including stored procedures, views, triggers, data queries and reporting
• Support automated notifications, workflow processes and system-triggered business logic
• Troubleshoot application issues, support production systems and implement enhancements based on user and stakeholder needs
• Participate in Agile/Scrum ceremonies, including sprint planning, backlog grooming, estimation and status updates
• Collaborate with cross-functional teams to gather requirements, document technical solutions and deliver high-quality software

Senior Software Developer, Applications

• Perform cybersecurity incident response activities involving PII incidents and PII-related data breaches, including identification, containment, eradication, recovery, and validation of corrective actions
• Utilize Data Loss Prevention (DLP) tools and security technologies to identify PII that is improperly stored, handled, or transmitted
• Identify and investigate potential exposure of PII data at rest and data in transit
• Perform or coordinate the quarantine of improperly stored PII to prevent unauthorized access, disclosure, or further distribution
• Analyze security incidents and recommend technical and procedural actions to mitigate risks associated with unauthorized access to sensitive information
• Support implementation and validation of security controls designed to safeguard PII and other sensitive information
• Engage with system owners, cybersecurity teams, privacy personnel, technical stakeholders, and mission partners on PII-related incident response
• Track remediation efforts and validate corrective actions
• Ensure incident response and remediation activities comply with applicable information security and privacy policies
• Assess security events and potential data breaches to determine scope, affected information, and required remediation
• Document incident findings, remediation activities, security recommendations, and validation results
• Collaborate with cloud, infrastructure, application, and cybersecurity teams to integrate data protection and information security controls

Cloud Security Engineer – Mid

Solutions Engineer

• Lead and perform cybersecurity architecture reviews for enterprise systems, applications, infrastructure, cloud services, networks, and technology solutions
• Develop and document secure solution architectures integrating cybersecurity requirements, security controls, and risk mitigation measures
• Conduct threat modeling and security design analysis to identify attack paths, threats, vulnerabilities, trust boundaries, and security risks
• Evaluate existing cybersecurity architectures, controls, technologies, and protocols to identify security gaps and recommend improvements
• Define security architecture requirements for hardware, software, network, application, data, identity, and cloud platforms
• Review solution designs, system integrations, interfaces, and data flows for architectural security concerns
• Develop security architecture artifacts, technical recommendations, diagrams, patterns, standards, and design guidance
• Incorporate cybersecurity considerations throughout the system development and solution lifecycle
• Provide cybersecurity technical leadership and guidance to architects, engineers, developers, security teams, and stakeholders
• Assess emerging technologies for cybersecurity risks, architectural impacts, and integration requirements
• Support upgrades and improvements to cybersecurity capabilities, controls, and architectures
• Identify cybersecurity risks and develop architectural mitigation strategies
• Support security engineering for system modernization, cloud adoption, application transformation, and enterprise technology initiatives
• Communicate security architecture findings, risks, recommendations, and design decisions to technical and program stakeholders
• Support the VA OIS COSE cybersecurity architecture and engineering services program

Senior Security Architect – Architecture Reviews, Threat Modeling, Solution Architectures

• Lead cybersecurity risk management, compliance, and C-SCRM activities across systems, applications, infrastructure, cloud environments, products, services, and supporting technology supply chains
• Conduct comprehensive IT security risk assessments and threat analyses to identify vulnerabilities, control weaknesses, threat exposure, and potential impacts
• Lead and coordinate C-SCRM assessments of technology products, software, hardware, services, suppliers, vendors, and third-party dependencies
• Identify and evaluate supply chain cybersecurity risks related to product provenance, supplier dependencies, software components, third-party services, and technology acquisition
• Conduct and oversee security control assessments to determine safeguard effectiveness and identify remediation or risk treatment gaps
• Evaluate risks associated with unauthorized access, excessive privileges, insecure access procedures, platform vulnerabilities, system configurations, data protection weaknesses, and third-party access
• Develop and maintain cybersecurity and C-SCRM risk registers
• Perform risk analysis and develop actionable mitigation and remediation recommendations
• Track security deficiencies and remediation activities through closure, including POA&M development and management
• Support RMF processes, including security assessment, authorization, continuous monitoring, and ongoing risk management
• Assess compliance with cybersecurity policies, security requirements, contractual obligations, and security control frameworks
• Review system security documentation, assessment results, vulnerability findings, control evidence, architecture artifacts, and supporting documentation
• Collaborate with cybersecurity, engineering, architecture, acquisition, program management, and operational stakeholders
• Provide risk-based recommendations to program and cybersecurity leadership
• Support continuous monitoring of cybersecurity and supply chain risks
• Develop and maintain risk assessment reports, compliance documentation, C-SCRM artifacts, executive risk summaries, metrics, dashboards, and supporting cybersecurity documentation
• Serve as a senior cybersecurity risk and C-SCRM advisor to project teams, system owners, security personnel, and organizational leadership