Senior Cybersecurity Vulnerability Engineer

OSIGOV is looking for a Senior Cybersecurity Vulnerability Engineer to oversee security posture, the data security architecture, and development of security guardrails in support of national security objectives.  This position is onsite in Chambersburg, PA. You must be a US citizen, as this is part of a government contract that requires a Secret security clearance.

Duties and Responsibilities:

• Provide oversight of scheduling the scans (including ad hoc scans), ensure proper coordination with the mission partners occurs, ensure deconfliction is accomplished, assist other team members (i.e., an unresponsive mission partner), and assist with vulnerability scan reports.
• Operate, maintain, and administer approved security scanners to plan, create, manage, and retire scheduled or ad hoc scan and scan groups for workloads across NIPRNet and SIPRNet.
• Develop, distribute, and manage execution against the schedule of vulnerability scans.
• Monitor, identify, report, and facilitate the resolution of scan performance impacting issues.
• Maintain and ensure scans, accounts, and configurations are set in accordance with best practice guides and privileged access policies and procedures.
• Analyze mission requirements and organizational feedback to create, maintain, and improve scan results.
• Test and evaluate scanning tools and configurations.
• Maintain Mission Partner point of contact information, Internet Protocol (IP) ranges, and website/Universal Resource Locator (URL) information on the Data site via SharePoint.
• Create and deliver a Collective Trend Analysis Report and trend analysis including resolution data aimed at influencing the development of security strategies.
• Schedule, coordinate and perform vulnerability scans.
• Determine Ports/Protocols and Services Management (PPSM) compliance; provide mitigations, strategies, and false positive determinations.
• Create and deliver vulnerability scan reports, no later than two weeks after the scan is complete. Reports must include identified vulnerabilities, recommended resolutions/ mitigations, and trend analysis.
• When initiated by the Mission Partner, assist with a review of the report (i.e., answer questions, identify what was scanned, assist if assets were skipped).
• Communicate and validate scan results in accordance with policies and procedures.
• Help with vulnerability scan related issues/problem resolution with applicable Service desks.

Required Experience and Skills:

• Minimum 7 years of Cybersecurity experience.
• Proficiency in MS Office Suite products and SharePoint collaborative tools.
• In-depth experience with DISA STIGs and by-product analysis.
• Working knowledge of current government mandated cybersecurity policies and procedures.
• Strong inter-personal and communication skills (oral and written).

Education:

• A Bachelor’s degree in fields such as Information Technology, Cybersecurity, or Computer Science; OR any of the following certifications – GICSP, Cloud+, GCED, PenTest+, Security+, or GSEC CEH.

Certification:

• 8570 IAT Level II (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CNS, SSCP).

Security Clearance:

• DoD Secret security clearance

Cybersecurity Vulnerability Engineer

OSIGOV is looking for a Cybersecurity Vulnerability Engineer  to assist others with the scan environment, troubleshoot issues, and elevate problems when needed for both the External Vulnerability Scan (EVS), Web Vulnerability Scan (WVS) and Ad Hoc scan environments. This position is onsite in Chambersburg, PA.
You must be a US citizen, as this is part of a government contract that requires a Secret security clearance.

Duties and Responsibilities:

• Operate, maintain, and administer approved security scanners to plan, create, manage, and retire scheduled or ad hoc scan and scan groups for workloads across NIPRNet and SIPRNet.
• Develop, distribute, and manage execution against the schedule of vulnerability scans.
• Monitor, identify, report, and facilitate the resolution of scan performance impacting issues.
• Maintain and ensure scans, accounts, and configurations are set in accordance with best practice guides and privileged access policies and procedures.
• Analyze mission requirements and organizational feedback to create, maintain, and improve scan results.
• Test and evaluate scanning tools and configurations.
• Maintain Mission Partner point of contact information, Internet Protocol (IP) ranges, and website/Universal Resource Locator (URL) information on the Data site via SharePoint.
• Create and deliver a Collective Trend Analysis Report and trend analysis including resolution data aimed at influencing the development of security strategies.
• Schedule, coordinate and perform vulnerability scans.
• Determine Ports/Protocols and Services Management (PPSM) compliance; provide mitigations, strategies, and false positive determinations.
• Create and deliver vulnerability scan reports, no later than two weeks after the scan is complete. Reports must include identified vulnerabilities, recommended resolutions/ mitigations, and trend analysis.
• When initiated by the Mission Partner, assist with a review of the report (i.e., answer questions, identify what was scanned, assist if assets were skipped).
• Communicate and validate scan results in accordance with policies and procedures.
• Help with vulnerability scan related issues/problem resolution with applicable Service desks.

Required Experience and Skills:

• Minimum 4 years of Cybersecurity experience.
• Proficiency in MS Office Suite products and SharePoint collaborative tools.
• Experience with STIGs and by-product analysis.
• Working knowledge of government cybersecurity policies and procedures.
• Strong interpersonal and communication skills (oral and written).

Education:

• A Bachelor’s degree in fields such as Information Technology, Cybersecurity, or Computer Science; Or CEH certification.

Certification:

• 8570 IAT Level II (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CNS, SSCP).

Security Clearance:

• DoD Secret security clearance

Storage Administrator

Location:

• Montgomery, AL
• Ogden, UT
• Mechanicsburg, PA

Must be willing to work remotely with one day on-site per week.

Education: Associates Degree in Computer Science, Information Technology, or related field.

Clearance: Secret

Certification:

• IAT II or higher 8570/8140 Certification.
• Enterprise Storage Certification

Experience:

• Proven experience of 10 years IT experience with 5 years in Storage Administration.
• Experience with cloud storage solutions.
• Experience with Storage Area Network (SAN) fabric technologies.
• Knowledge of scripting languages for automation tasks.
• Design experience is a plus.
• Hand-on experience with storage management tools and software.

Job Description:

As a Storage Administrator, you will be responsible for the maintenance, configuration, and reliable operation of our company’s storage systems. The candidate shall work closely with our IT team to ensure the integrity and security of our data storage infrastructure. The ideal candidate must have a strong technical background in storage systems and a proven track record of managing storage environments effectively.

 Key Responsibilities:

The Storage Administrator role encompasses the installation, configuration, and maintenance of storage hardware and software systems, as well as proactive monitoring of performance and capacity. Responsibilities extend to managing volume distribution, maintaining data protection, and implementing backup and disaster recovery solutions for both virtual and physical servers. Collaboration with fellow IT professionals ensures seamless integration of storage systems with other infrastructure components. This role also involves the development and upkeep of comprehensive documentation related to storage configurations, processes, and procedures, along with conducting regular security audits to safeguard data integrity and confidentiality. Additionally, the Storage Administrator provides technical support and troubleshooting assistance for storage-related issues, stays updated on industry trends and best practices, and collaborates closely with vendors to address hardware issues and replacements.

VMWARE Virtualization Engineer

Location:

• Oklahoma City, OK

Must be willing to work remotely with one day on-site per week.

Education: Associates Degree in Computer Science, Information Technology, or related field.

Clearance: Secret

Certification:

• IAT II or higher 8570/8140 Certification.
• Need to obtain VMware Certified Professional – Data Center Virtualization (VCP-DCV) within 9 months of start date.

Experience:

• Proven experience of 10 years IT experience with 3-7 years in Virtualization experience
• Hands-on experience with VMware ESXi, vCenter Server, and vSphere Client.
• Experience with virtual networking concepts and technologies (e.g., VLANs, vSwitches).
• Experience with VMware vSAN and software-defined storage solutions.
• Architecture experience is a plus.
• Experience/ familiarity with cloud infrastructure software, services, products, and technologies, particularly in networking and security aspects.

 Job Description:

The VMware Virtualization Engineer will be responsible for designing, implementing, and managing our VMware virtualization infrastructure. The candidate shall play a crucial role in ensuring the reliability, performance, and scalability of our virtualized environment to support business operations. The ideal candidate must have a strong technical background in VMware technologies and a passion for implementing best practices in virtualization.

Key Responsibilities:

The Virtualization Engineer role involves designing, deploying, and managing VMware vSphere infrastructure to support business applications. Responsibilities include VM management, system performance monitoring, configuring HA and DRS clusters, maintaining vCenter Server, and performing routine maintenance tasks. The role operates 24/7, providing technical support and facilitating knowledge transfer. Additionally, it involves creating virtual networks, handling storage migrations, and conducting test and real system migrations.

Cloud Systems Engineer

Location:

• Montgomery, AL
• Oklahoma City, OK
• Ogden, UT
• Mechanicsburg, PA

Must be willing to work remotely with one day on-site per week.

Education: Associates Degree in Computer Science, Information Technology, or related field.

Clearance: Secret

Certification:

• IAT II or higher 8570/8140 Certification.
• Any Cloud Certification

Experience:

• Proven experience of 10 years IT experience with 3-5 years in cloud experience
• Hands-on experience with cloud platforms or government cloud offerings
• Experience utilizing cloud virtualization tools and utilities.
• Experience with serverless computing and microservices architectures.

Job Description:

The Cloud Engineer will play a pivotal role in designing, implementing, and managing our cloud infrastructure to support our business objectives. The candidate shall collaborate closely with our IT team to architect scalable, secure, and highly available cloud solutions. The ideal candidate must have a strong technical background in cloud technologies and a passion for driving cloud adoption within the organization.

Key Responsibilities:

The Cloud Infrastructure Engineer role encompasses designing, deploying, and managing cloud infrastructure, including implementing and automating provisioning, configuration, and orchestration using Infrastructure-as-Code (IaC) tools such as Terraform or CloudFormation. Additionally, the role involves developing and maintaining cloud-native applications and services leveraging Platform-as-a-Service (PaaS) offerings, along with monitoring cloud resources and performance, implementing scaling and optimization strategies. Security best practices, including identity and access management, encryption, and network security controls, are implemented, alongside designing and implementing disaster recovery and high-availability solutions. Collaboration with development teams ensures cloud applications are scalable, reliable, and performant while providing technical guidance and support to internal teams on cloud-related projects and initiatives.

Non-x86 Virtualization Engineer

Location:

• Montgomery, AL

Must be willing to work remotely with one day on-site per week.

Education: Associates Degree in Computer Science, Information Technology, or related field.

Clearance: Secret

Certification:

• IAT II or higher 8570/8140 Certification.
• Relevant certifications in non-x86 virtualization technologies.

Experience:

• Proven experience of 10 years IT experience with 5 years in Virtualization experience
• Hands-on experience with virtualization management tools and utilities.
• Prior DoD experience.
• Experience with virtualization management suites and related technologies, such as VCDNI, VXLAN, and Virtual switches.

Job Description:

The Non-x86 Virtualization Engineer will be responsible for designing, implementing, and managing our non-x86 virtualization infrastructure. The candidate shall play a key role in ensuring the reliability, performance, and scalability of our virtualized environments to support critical business operations. The ideal candidate must have a strong technical background in non-x86 virtualization technologies and a passion for implementing best practices in virtualization.

Key Responsibilities:

The Non-x86 Virtualization Engineer role involves designing, deploying, managing, and providing standard system and operations support for non-x86 virtualization environments within DISA’s infrastructure. Responsibilities include implementing and maintaining virtual machines (VMs) to support business applications, monitoring system performance and resource utilization, and optimizing virtual infrastructure for efficiency and scalability. Additionally, configuring and managing virtual networking and storage, performing routine maintenance tasks, and creating virtual networks and switches are key duties. Other responsibilities include loading virtual infrastructure software, configuring operating system partitions, provisioning virtual servers, and installing virtualization licenses. Developing and maintaining documentation, providing technical support and troubleshooting assistance for non-x86 virtualization-related issues, and collaborating with other IT teams to ensure integration with other infrastructure components. Operating on a 24x7x365 basis, the role includes full-lifecycle virtualization administration, technical support, and operational support. Unique network and storage installation and configuration tasks are performed, along with preparing servers for migration, conducting test migrations, and performing real conversions. Building generic operating environments, deploying templates for testing, maintaining standard deployment images, and assigning virtual networks are also part of the role.

Full Stack Developer

Location:  Remote

Education: Bachelor’s Degree in Computer Science, Information Technology, or related field.

Clearance: Secret (Can start with Interim)

Certification:

• IAT II Certification or able to obtain within 6 months of hired date

Experience:

• 10+ years of proven experience.
• Experience with Java or similar Object-Oriented languages.
• Familiarity with Docker or Kubernetes.
• Experience working in a SCRUM environment for software development

Job Description:

The Full Stack Developer will be responsible for developing and implementing web applications, both front-end and back-end, that meet our clients’ needs. You will work closely with our product management and design teams to translate requirements into high-quality software solutions. The ideal candidate will have a strong understanding of web development technologies and frameworks, as well as a passion for creating scalable and maintainable code.

Key Responsibilities:

Design, develop, and maintain scalable applications from concept to delivery. Work with cross-functional teams to ensure security compliance is met as well as ensuring full capabilities are delivered per customer requirements. This position will be working in an AWS Cloud for development and deployment for Production on VMware-based virtualized on Prem Cloud environment with microservices architecture. Spring Boot Framework, Postgres, or other SQL database experience a plus.

SQL Database Administrator

Location:

• Mechanicsburg, PA
• Montgomery, AL
• Ogden, UT
• Oklahoma City, OK

Must be willing to work remotely with one day on-site per week.

Education: Bachelor’s Degree in Computer Science, Information Technology, or related field.

Clearance: At least DOD Interim Active Secret

Certification:

• CompTIA Security +

Experience:

• 5+ years of proven experience in SQL Server Database Administration.
• Experience with SQL Database technologies
• Experience with database integration and performance tuning.

Job Description:

The SQL DBA will be responsible for providing comprehensive database administration support for our managed database systems on a 24x7x365 basis. The candidate will have expertise in database technologies, environments, and system types, including Database Vendor Software, Database Homes and Instances, Database Storage, Database Memory, Database Network Integration and Connectivity, Database Security, Database Auditing, Database Logging, and more.

Key Responsibilities:

Ensure the availability and data protection of managed database systems at DISA. This includes implementing and configuring backup methodologies, monitoring daily backup job logs, and initiating incident tickets to address failures impacting data restore capability. Perform backup and recovery testing to ensure effectiveness, execute database and data recovery in response to incidents or data integrity issues, and assist in application restoration. Implement and configure data replication schemes for managed systems to ensure data redundancy and system/data recoverability and provide integration support throughout the lifecycle of managed databases with master applications. Furthermore, the candidate will execute database manipulation language scripts, perform database integration with applications, and conduct database performance tuning to optimize performance and troubleshoot issues.

DevSecOps Lead

Location:

• Remote

Education: Bachelor’s Degree

Clearance: Secret (can start with Interim)

Certification:

•  IAT II Certification or able to obtain in 6 months

Experience:

• 10+ years of relevant experience on DoD or Federal Civilian programs supporting DevSecOps activities.

Key Responsibilities:

On-prem and cloud integrating multiple tools including build engines, testing and deployment and security tooling. Lead the technical planning, configuration, integration, verification and validation of the pipeline toolchain and its operation. Support DevSecOps efforts to ensure delivery of a demand model that leverages continuous everything to reduce defects while increasing productivity and time-to-market. Experience in managing pipelines for development. Experience working in AWS GovCloud with AWS security services, IaC, AWS IAM, Network ACLs, and container security are highly desired.