Source Job

• Responsible for supporting the integration of security, automation, and operational controls into development and deployment pipelines to enable secure, reliable delivery of MODES III systems.
• Supports development, implementation, and maintenance of CI/CD pipelines that integrate security, testing, and compliance controls.
• Assists with automation of build, deployment, and configuration processes to improve reliability, repeatability, and deployment efficiency.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe. As the world’s leading mission capability integrator and transformative enterprise IT provider, they deliver trusted, highly differentiated solutions and technologies.

• Accelerate Onebrief’s execution of GRC programs supporting NIST RMF, FedRAMP High, CMMC, and SOC2 authorizations
• Develop and manage integrated project plans for control implementation, remediation, and continuous monitoring
• Coordinate cross-functional teams (Infrastructure, Engineering, Product) to ensure timely delivery of compliance requirements

Onebrief provides collaboration and AI-powered workflow software designed specifically for military staffs, aiming to make them faster, smarter, and more efficient. Valued at $2.15B, the company has raised $320m+ from top-tier investors and operates as an all-remote company.

• Support the ISSM in managing security requirements and documentation throughout the SDLC.
• Review Merge/Pull Requests for security implications and adherence to secure coding standards.
• Analyze CI/CD pipeline security outputs, including SAST, DAST, SBOM findings, and CVSS scoring.

CommIT Enterprises, Inc. is a Certified Veteran-Owned Small Business (CVOSB) providing innovative technical engineering and data science services. Established in 2001, our enterprise systems support includes the Department of Defense’s (DoD) GCSS-MC, CAC2S, TBMCS-MC, and the Department of Veteran’s Affairs’ (VA) telehealth communications.

• Drive security vulnerability remediations with Engineering for CSPM, OS Runtime, SAST, SCA, DAST
• Coordinate and track services provided by the security team and assist with enforcement security requirements throughout the organization
• Assist with prioritizing work resulting from security findings, stakeholder requests, and strategic vision

Outreach provides a sales engagement platform to streamline communication and workflows for sales teams. They partner with Product, Engineering, Privacy, GRC, IT, and Legal teams to ensure security best practices are applied to protect the company and Outreach customers.

• Design, implement, and sustain security architecture across AWS GovCloud.
• Execute and maintain RMF activities across all system components.
• Implement, validate, and continuously maintain DISA STIG compliance across all infrastructure components.

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs.

• Own the technical roadmap and serve as the primary architect for the core product suite, driving high-level integration strategy decisions.
• Contribute high-quality, hands-on code (50% of time) to complex SaaS products while providing deep technical mentorship and guidance to development teams.
• Drive engineering excellence by adopting modern practices like AI-assisted development, DevSecOps, and Infrastructure as Code to ensure scalable, resilient services.

Cayuse provides integrated technology platforms that empower organizations to conduct globally connected research, advancing scientific discovery and societal impact. The company operates with a remote-first culture, emphasizing employee collaboration, customer-focused values, and industry-leading solutions to support ambitious growth plans.

• Architect, build, and maintain GitLab Pipelines for seamless application deployment.
• Design, deploy, and manage infrastructure across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
• Engineer automated processes for RHEL image hardening and execute automated STIG checklists.

LMI accelerates government impact with digital solutions and innovation. They bring commercial-grade platforms and mission-ready AI to federal agencies, focusing on agility and collaboration across defense, space, healthcare, and energy sectors.

• Implement, maintain, and secure CI/CD pipelines, infrastructure automation, and deployment tooling.
• Build and operate CI/CD pipelines integrating automated unit/integration tests and security scans.
• Implement Infrastructure as Code templates and automate environment provisioning.

Peraton delivers trusted, highly differentiated solutions and technologies to protect our nation and allies. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces.

• Supports configuration management processes for systems and documentation.
• Assists with maintaining configuration management repositories and version control.
• Supports configuration change control activities, including documentation and tracking.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe. As the world’s leading mission capability integrator and transformative enterprise IT provider, they deliver trusted solutions to protect our nation and allies.

• Serve as the primary point of contact for assigned customer programs
• Build deep, trusted relationships with technical and executive stakeholders
• Translate customer and policy requirements into executable technical delivery plans

Spruce builds privacy-preserving, standards-based digital identity and credentialing solutions. They give individuals control of their information while enabling governments and enterprises to deliver secure, interoperable services.

• Architect and implement enterprise-scale cloud infrastructure solutions, establish technical standards, and drive strategic initiatives for platform reliability, scalability, and security.
• Lead the design of sophisticated automation frameworks, CI/CD platforms, and infrastructure-as-code solutions to enable rapid, secure software delivery and drive DevOps maturity.
• Establish site reliability engineering practices, implement comprehensive monitoring, lead critical incident response, and drive continuous improvement to maintain exceptional system availability and performance.

Intelerad provides medical imaging solutions that streamline healthcare information flow to improve diagnostic speed and patient outcomes. The company is headquartered in Raleigh, NC and Montreal, has nearly 800 employees across four countries, and empowers about 2,000 healthcare organizations worldwide with its enterprise software.

• Play a pivotal role in shaping the future of our technical initiatives within the Security, Technology Enablement & Platform Services (STEPS) organization.
• Part-time contract role offering a short-term, unique opportunity.
• Remote from the UK/Scotland.

EarnIn builds products that deliver real-time financial flexibility for those with the unique needs of living paycheck to paycheck. They are growing fast and are excited to continue bringing world-class talent onboard to help shape the next chapter of their growth journey.

• Engage with customers in a technical consulting and advisory role during the pre-sales process, providing technical assistance and strategic guidance.
• Deliver executive-level thought leadership on DevSecOps, security, and compliance for strategic public sector opportunities, including new and growth accounts.
• Build and maintain relationships with customer leaders such as Chief Information Security Officers, Chief Security Officers, Chief Technology Officers, and chief security architects.

GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. With more than 50 million registered users and over 50% of the Fortune 100 trusting GitLab, they foster a high-performance culture driven by values and knowledge exchange, empowering team members to reach their full potential.

• Responsible for designing, developing, and integrating medium-complexity web applications, CMS extensions, and RESTful APIs supporting mission workflows and secure data exchange.
• Implements backend services with secure patterns (authN / authZ, logging, error handling) and integrates with enterprise identity solutions like SSO/CAC.
• Leads CMS feature development and content rendering optimizations while ensuring strict adherence to Section 508 accessibility and performance targets.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, they deliver trusted, highly differentiated solutions and technologies to protect our nation and allies.

• Lead Craft’s FedRAMP readiness program — defining the roadmap, owning the ATO timeline, and driving execution across engineering and security stakeholders.
• Design and implement AWS GovCloud architecture that meets FedRAMP Moderate and High requirements.
• Translate NIST 800-53 Rev. 5 controls into concrete, auditable, and continuously enforced technical implementations — not just documentation.

Craft is the leader in supplier risk intelligence, enabling enterprises to discover, evaluate, and continuously monitor their suppliers at scale. They are a post-Series B high-growth technology company backed by top-tier investors in Silicon Valley and Europe, headquartered in San Francisco with hubs in Seattle and Warsaw.

• Design, implement, and maintain enterprise technology solutions.
• Serve as a subject matter expert for assigned technologies.
• Contribute to system architecture, technology roadmaps, and lifecycle planning.

CI Azumano is Seneca Holdings' full-service travel management company for businesses, governments, and personal travelers. They offer 24/7 support for travelers while also supporting customers with travel expense management, policy implementation, technology solutions, business intelligence tools, and vendor negotiations.

• Design, build, and maintain scalable and secure CI/CD pipelines in GitLab.
• Implement and manage GitOps workflows for continuous delivery to RKE2 clusters using ArgoCD.
• Develop and maintain automation scripts and tools to streamline the software development lifecycle.

DecisionPoint delivers technology solutions and services. They focus on supporting federal government clients with IT modernization and digital transformation initiatives. They are an Equal Employment Opportunity and Affirmative Action employer.

• Support the Lead Solution Architect in the development of compliant, compelling and executable solutions.
• Work closely with Business Development, Capture Manager, and Corporate Offerings teams to determine the overall solution strategy.
• Support the development of solutions presented during governance reviews with senior Peraton management.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe. As the world’s leading mission capability integrator and transformative enterprise IT provider, they deliver trusted, highly differentiated solutions.

• Build, operate, and continuously improve secure cloud platforms.
• Deliver reliable, scalable SaaS environments for customers.
• Support Engineering and Security across teams.

Juvare is a SaaS software company focused on developing innovative enterprise resilience solutions for government agencies, corporations, healthcare providers, and higher education. Juvare solutions have supported over 500,000 emergency response incidents in all 50 states and 20 countries worldwide.

• Work cross-functionally with the InfoSec, SRE, and Engineering teams.
• Check code and repositories for insecure coding practices and work with Engineering teams to remediate.
• Implement security checks and practices within CI/CD pipelines to ensure secure code deployment and infrastructure.

Roadie, a UPS Company, is a logistics management and crowdsourced delivery platform. Founded in 2014, Roadie offers businesses fast, flexible and asset-light logistics solutions for last-mile delivery.