What Impact You'll Have

This position combines traditional content management responsibilities with modern security practices to ensure secure, automated, and efficient dissemination of NGA Mapping, Charting and Geodesy content. The role requires advanced technical proficiency in geospatial data management, Python automation, database technologies, and API development, enhanced with security engineering capabilities including CI/CD pipeline security, infrastructure-as-code security practices, vulnerability management, and security monitoring automation.

What You'll be Owning

• Develop and implement automation strategies to streamline seamless data handling, data integrity, and distribution processes to enhance efficiency and accuracy.
• Develop and apply methods to identify, collect, process, and analyze large volumes of data to build and enhance GEOINT processes, and systems.
• Design and deploy custom automation tools to facilitate streamlined workflows, rapid and secure data transfer, minimizing manual intervention and reducing turnaround times.
• Apply AI/ML techniques to enhance geospatial analysis capabilities and improve accuracy in data extraction from various sources.
• Develop API-based integration solutions to improve data exchange between NGA and partner systems.
• Maintain Legacy Python codebase, integrate codebase new security requirements and future Source dissemination solutions.
• Collaborate with GEOINT content teams to integrate automated quality checks, ensuring the highest standards of data integrity and reliability.

What You Must Have

• US Citizen with a TS/SCI clearance and the ability to obtain a CI Polygraph
• 10 years of combined experience in the field with a Bachelor’s in a relevant field of study
• Advanced proficiency with geospatial technologies including ArcGIS Suite (ArcPro, ArcGIS Online, ArcGIS Server), enterprise geodatabase management and geodatabase versioning workflows, and geospatial data formats and transformation processes.
• Advanced proficiency with Python programming (pandas, matplotlib libraries) and secure coding practices, including code review techniques
• Advanced proficiency developing and securing APIs, including API development with security controls (authentication, authorization, rate limiting), REST API security, and OAuth implementation
• Advanced proficiency with database technologies including PostgreSQL and Oracle database management, database security configuration and access controls, and cloud-based database solutions with security configurations
• Experience implementing database encryption (at-rest and in-transit), database audit logging and monitoring, and database backup and recovery security
• Advanced proficiency with ETL (Extract, Transform, and Load) processes with data validation, data integrity verification and quality assurance, and secure data transfer protocols and encryption
• Ability to use and contribute code to repositories with security scanning (GitHub/GitLab), including git security practices and pre-commit hooks
• Experience developing CI/CD pipelines with security integration, Infrastructure-as-Code with security controls, container security (Docker, Kubernetes), and integrating security scanning tools (Fortify integration)
• Experience with secrets management systems (AWS Secrets Manager) and vulnerability management platforms
• Experience implementing security controls in IC environments, with knowledge of NGA security policies and procedures, familiarity with GEOINT security classification guidance, and experience with cross-domain solutions and data transfers
• Knowledge of NGA systems and standards, including NGA's Mapping, Charting & Geodesy (MC&G) data formats and standards, NGA's Foundation GEOINT products and services, NSG (National System for Geospatial Intelligence) standards and specifications, and understanding of NGA's enterprise systems and databases
• Exemplary professional writing abilities with familiarity in AI tools, including security documentation and architecture diagramming, technical documentation for security controls and procedures, security risk assessment and mitigation planning, and cross-functional collaboration on security initiatives

What Would be Nice to Have

• Master’s coursework in relevant field of study
• JavaScript development with security libraries
• Advanced proficiency with geospatial open-source technologies (QGIS, OGR, GeoServer, PostGIS)
• Experience conducting web application security testing aligned to OWASP Top 10 and secure coding standards
• Experience designing cloud security architecture across AWS, Azure, and GCP, including applying CIS Benchmarks and security hardening guidance
• Experience with security orchestration and automation (SOAR) to support detection, response, and remediation workflows
• Experience performing penetration testing and ethical hacking activities in support of vulnerability identification and mitigation
• Experience implementing zero-trust architecture principles and controls
• Knowledge of NIST Cybersecurity Framework and its application to security governance and control mapping
• Holds (or ability to obtain) cloud security certifications (e.g., AWS Security, Azure Security)
• Experience securing container orchestration environments, including Kubernetes security controls and hardening practices