How you will help

HealthVerity is seeking a seasoned and strategic leader to guide our Technology Operations teams in delivering scalable, secure, and cost-effective technology services across the company. Reporting to the CTO, you will define and execute an operations strategy that empowers our engineers with a modern cloud platform, gives our employees the corporate IT tools and access they need to do their best work, and brings disciplined financial governance to how we invest in technology. You will be the owner for the reliability, productivity, and cost of HealthVerity’s technology operations, with command over key vendors such as AWS, Databricks, and other cloud, data, and IT services.

What you will do

• Lead Technology Operations Strategy: Set and execute a unified operations vision spanning cloud infrastructure and platform, corporate IT and end-user computing, and FinOps, aligned with organizational goals and financial efficiency. Translate strategy into measurable outcomes — reliability SLAs, IT service levels, and cost-efficiency targets — and report on them to executive leadership.
• Budget Ownership and FinOps: Command vendor budgets, including AWS, Databricks, and other cloud and IT vendors, ensuring resource allocations are cost-effective and aligned with usage and performance requirements. Stand up and lead a formal FinOps practice that brings rigor and transparency to technology spend, including unit economics, forecast accuracy, commitment-based discount strategy, tagging hygiene, and showback/chargeback. Establish processes to measure, monitor, and report progress on cost-saving initiatives.
• Empower Engineering Teams: Develop and implement platform services to improve developer productivity, such as Infrastructure as a Service, CI/CD pipelines, observability, and self-service tooling, enabling engineering teams to operate more autonomously and efficiently.
• Run Corporate IT and End-User Computing: Own the employee technology experience end-to-end: device fleet, identity and access management, SaaS administration, helpdesk, and onboarding/offboarding. Establish service-level commitments for IT support and mature ticketing, escalation, and self-service so employees get unblocked quickly. Partner with Security and Compliance to ensure corporate IT controls satisfy regulatory commitments without slowing employees down.
• Team Leadership and Development: Hire, mentor, and develop a high-performing, multi-discipline organization across cloud platform, corporate IT, and FinOps, fostering a culture of innovation, reliability, and proactive problem-solving. Conduct regular 1:1s, support career development, and champion team needs with executive leadership.
• Vendor and Technology Evaluation: Assess, select, and manage partnerships with key cloud, data platform, and IT vendors to ensure HealthVerity leverages cutting-edge tools and services at optimized costs. Continually evaluate and integrate emerging technologies and platforms to improve the operations landscape.
• Reliability and Scalability Enhancement: Oversee strategies to increase system reliability, resilience, and scalability, implementing best practices in cloud architecture, observability, and performance monitoring to reduce incidents and improve SLAs. Lead disaster-recovery and business-continuity planning, including regular testing and executive-level reporting on readiness.

Required skill & experience

• 5+ years of experience in technology operations leadership, including direct ownership of large-scale AWS environments and the budgets that fund them.
• 5+ years of experience leading and managing hybrid or distributed teams across more than one operational discipline (e.g., cloud platform plus IT, FinOps, or SRE).
• Demonstrated experience in vendor management and budget optimization, particularly with AWS, Databricks, and related cloud, data, and IT providers, with measurable cost-savings outcomes.
• Experience running or formally partnering with a corporate IT / end-user computing function, including identity, SaaS, device management, and helpdesk.
• Familiarity with compliance and security standards like FedRAMP, ensuring that solutions meet necessary regulatory requirements.
• Proven track record in incident management and executing disaster recovery and business-continuity planning.
• Excellent executive communication — able to translate operational reality into business outcomes for the CEO and COO.

Base salary for the role is commensurate with experience and can range between $225,000 - 275,000 + annual bonus opportunity.

Process Validation Engineer (a minimum of 5 years of experience required)

Location: King of Prussia, PA 

Employment Type: Full-time, mostly onsite

About Us

Are you ready to take the next step in your career? LAPORTE, a consulting engineering firm with 25 years of experience and a strong presence in North America and Europe, is seeking an Process Validation Engineer to join our growing team. With 25 offices and over 480 employees worldwide, we specialize in delivering innovative solutions for the pharmaceutical and food & beverage industries.

The Process & Validation Engineer is responsible for supporting the validation of various systems across the pharmaceutical, biopharmaceutical, and medical device manufacturing sectors. The Process & Validation Engineer will ensure equipment, systems, and validation programs are compliant with a client’s global/site standards and industry practices.

The Process & Validation Engineer will live near King of Prussia, PA. They will be motivated to grow and excel with the support and direction from an interdisciplinary team of engineers. Become part of a supportive work environment that emphasizes team culture and empowering engineers with more responsibility, professional growth, and a work-life balance.

At LAPORTE, we offer:

• Competitive Salary
• Comprehensive Benefits
• Compensatory Paid Time Off (PTO)
• Paid Parental Leave
• A Flexible Work Environment that values work-life balance
• Opportunities for Professional Growth

Responsibilities and Duties:

• Carry out all aspects of a validation project for our clients including: authoring and/or executing Validation Master Plans (VMP), User Requirements Specifications (URS), Risk Assessments (RA), Design Qualification (DQ), Factory Acceptance Tests (FAT), Site Acceptance Tests (SAT), Commissioning, Installation Qualification (IQ), Operational Qualification (OQ), Performance Qualification (PQ), and Process Validation (PV) protocols/reports in accordance with corporate and departmental procedures.
• Validation Planning: Develop Validation Master Plans outlining the validation strategy, scope, and timelines for the project.
• Documentation Management: Oversee the creation, review, and approval of validation protocols, reports, and other documentation required for validation activities.
• Risk Assessment: Conduct Risk Assessments to identify potential validation issues and develop mitigation strategies to address them.
• Protocol Execution: Oversee the execution of validation protocols, including Installation Qualification (IQ), Operational Qualification (OQ), and Performance Qualification (PQ) for equipment and systems within the QC building.
• Commissioning Support: Collaborate with the commissioning team to ensure a seamless transition from construction to operation, verifying that systems and equipment are installed correctly and function as intended.
• Standard Operating Procedure: Provide technical input with respect to Standard Operating Procedures (SOP) development. Revise or develop SOPs in compliance with industry standards and cGMP.
• Support client Quality Assurance (QA) compliance teams by initiating change controls, documenting deviations, and contributing to the implementation of CAPA (Corrective and Preventive Actions) within validation activities.
• Perform Periodic Review for various validated systems including computerized systems, laboratory equipment, manufacturing equipment, and infrastructure systems. Analyze information, draw the right conclusions based upon technical knowledge of the systems, and work effectively with different groups across site to determine status, gaps, and corrective actions.
• Maintain up-to-date knowledge of validation requirements, practices, and procedures and coach other members of the team participating in validation activities. 
• Maintain up-to-date knowledge of current GP (Good Practices, e.g. GMP/GLP) regulations, guidelines within North America (Health Canada, US Food & Drug Administration) and EU Eudralex. 
• Maintain effective client relationships and act as a primary point of contact.
• Ensure that projects are implemented in accordance within the agreed scope, timelines and budget.

Qualifications:

• Bachelors degree in engineering field or relevant equivalent.
• Minimum 5 years of prior experience preparing and executing equipment qualification documents (IQ/OQ/PQ) required.
• Excellent knowledge of the Current Good Manufacturing Practices.
• Excellent communication skills - verbal, written, listening and interpersonal with the ability to transfer knowledge to others.
• Strong technical knowledge, relationship management, organizational planning, and project management skills.
• Ability to demonstrate a sense of urgency, flexibility, and accountability.
• Flexibility to travel to the client site as required.

Preferred Qualifications

• Prior experience performing GxP risk assessments such as Functional Risk Assessments (FRA) or Failure Mode and Effect Analysis (FMEA).
• Experience in Aseptic Processing.
• Familiarity with Computerized Systems Validation and ISPE GAMP5 and 21 CFR Part 11.

Available Location: Philadelphia or Pittsburgh 

What you'll do as a Solutions Engineer, Strategic Accounts 

The Solution Engineering organization is responsible for the technical sale of the Cloudflare solution portfolio, ensuring maximal business value, fit-for-purpose solution design and adoption roadmap for our customers. 

Reporting to the Senior Solution Engineering Manager, the Strategic Accounts Solutions Engineer is a Senior level role. You are a customer facing technologist within the Cloudflare Solutions Engineering team. You have strong experience in large account pre-sales management as well as excellent verbal and written communications skills suited for executive-level engagement. You are comfortable speaking about the Cloudflare vision and mission with C-level customer executives.Your role will be to build passionate champions within the technology ranks at your accounts, drive sales for identified opportunities, and leverage your relationships with these technical champions to build a revenue pipeline where no opportunities yet exist.

You will work within a high-profile pursuit team dedicated to certain strategic accounts, working closely with the strategic account executives attached to these accounts.

Specifically, we are looking for you to:

• Build and maintain long term technical relationships with the technical buyers (executives, managers and individual contributors) at your assigned accounts, becoming a trusted advisor to those stakeholders.
• Deeply understand the business-critical issues that your accounts are facing, and provide meaningful solution designs to facilitate technical validation of Cloudflare as a part of the customer’s infrastructure, including the coordination of Cloudflare colleagues throughout the sales and procurement cycle.
• Identify and drive technical conversations in every possible line of business within the accounts, engaging key technical buyers with the purpose of uncovering new areas of potential revenue & showing value to all possible parts of your accounts.
• Empower customers in their security and network transformation journeys, helping them to define strategies and architect necessary security controls aligned with Cloudflare product suites.
• Be the voice of the customer internally at Cloudflare, engaging with and influencing Cloudflare’s Product and Engineering teams to meet your customers’ needs.
• Represent and evangelize Cloudflare externally at Developer, Community, Technology, Cybersecurity and other industry events with thought leadership and expertise.

Examples of desirable skills, knowledge and experience

• Polished communication and executive presentation skills with ability to drive a discussion with a broad range of stakeholders (from the web developer to the CISO).
• Relationship building: a proven track record of building deep technical relationships with engineers and senior executives in large and strategic accounts. Experience in managing various stakeholder relationships to build consensus on security solutions/projects.
• Experience managing technical sales within large accounts.
• Developing champion-style relationships
• Driving technical wins
• Assisting with technical validation
• A deep understanding of core industry components of Cloudflare solutions (and a desire to learn more):
• Internet security technologies including DDoS and DDoS mitigation, Firewalls, TLS, VPN, DLP
• Networking technologies including TCP, UDP, DNS, IPv4 + IPv6, BGP routing, GRE, SD-WAN, MPLS, Global Traffic Management
• HTTP technologies including reverse proxy (e.g., WAF and CDN), forward proxy (secure web gateway), serverless application development
• Zero-trust network access (ZTNA & SASE) concepts including identity management and authentication
• Cloud computing technologies such as AWS, GCP, Azure and others
• Some scripting or programming experience with one or more of JavaScript, Python, Golang, BASH
• Understanding of, or experience with, regulatory requirements such as FedRAMP, GDPR, PCI DSS, HIPAA, SOC-2, ISO/IEC.

Compensation

Compensation may be adjusted depending on work location.

• For Maryland based hires: Estimated annual salary of $208,000 - $254,000.
• For New York City, New Jersey and Washington D.C. based hires: Estimated annual salary of $211,000 - $254,000.

This role is eligible to earn incentive compensation under Cloudflare’s Sales Compensation Plan. The estimated annual salary range includes the on-target incentive compensation that may be attained in this role under the Sales Compensation Plan.

Equity

This role is eligible to participate in Cloudflare’s equity plan.

Benefits

Cloudflare offers a complete package of benefits and programs to support you and your family.  Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun!  The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.

Health & Welfare Benefits

• Medical/Rx Insurance
• Dental Insurance
• Vision Insurance
• Flexible Spending Accounts
• Commuter Spending Accounts
• Fertility & Family Forming Benefits
• On-demand mental health support and Employee Assistance Program
• Global Travel Medical Insurance

Financial Benefits

• Short and Long Term Disability Insurance
• Life & Accident Insurance
• 401(k) Retirement Savings Plan
• Employee Stock Participation Plan

Time Off

• Flexible paid time off covering vacation and sick leave
• Leave programs, including parental, pregnancy health, medical, and bereavement leave

About the Role:  

Veeam, following its acquisition of Securiti AI - the leader in AI-powered data security posture management (DSPM) - is seeking a Senior Sales Engineer to drive technical leadership in our sales team, focusing on the Securiti AI portfolio. 

You will guide customers from needs assessment to solution design, delivering hands-on demos and proof-of-concepts to showcase value. Success in this role requires strong technical skills and the ability to build trust with clients.

You’re already a technical leader trusted at executive levels when the conversation shifts from “we need to secure our data” to “we need to enable safe, compliant AI at scale.” 

You’re already an expert on data/AI security and a proven enterprise sales engineer. Now it’s time to join the home of Data and AI Trust. 

You’ve already seen our new release of Agent Commander, but you haven’t seen what’s coming next. After the acquisition of Securiti AI, Veeam is even further into the forefront of data resilience, protection, trust, and the acceleration of safe AI at scale.

Are you ready for an exciting new challenge at enterprise scale?

What You’ll Do: 

• Act as the primary technical contact for Securiti AI solutions during the sales cycleServe as the primary technical data protection expert for Securiti AI and Veeam solutions throughout the pre-sales cycle.
  
• Lead discovery to translate risk, architecture, and business goals into a practical solution approach.
  
• Design and deliver tailored demos and hands-on proof-of-concepts that prove value in the customer’s environment.
  
• Drive technical conversations on AI Trust, Data Discovery, DSPM, Data Access & Governance, and Compliance (including GDPR, HIPAA, PCI-DSS).
  
• Provide solution guidance across AWS, Azure, and GCP, including cloud security best practices and identity/access concepts.
  
• Partner cross-functionally with sales, product, engineering, and customer success to ensure clean technical handoff and customer confidence post-sale.
  
• Hone your professional development through hands-on experimentation, team collaboration, robust onboarding, and more.
  
• Work ~80% remote, with client-facing travel usually 1-2 short trips per month.

What You’ll Bring (required): 

• Extensive enterprise sales experience in data protection, cloud security, networks, and AI.
  
• Proven ability to quickly develop trust and credibility with both technical and business stakeholders.
  
• Strong technical leadership foundation in enterprise data protection, cloud security, networks, and AI.
  
• Hands-on experience with AWS, Azure, or GCP (multi-cloud exposure strongly valued).
  
• Deep working knowledge of data privacy/security and compliance programs, especially GDPR, HIPAA, and PCI-DSS, plus data governance and access controls.
  
• Ability to build and run compelling demos and POCs while earning trust as a customer-facing technical lead.
  
• Practical technical fluency with areas such as Linux, Kubernetes/containerized environments, and modern cloud/data architectures.
  
• Strong expertise with DSPM, DLP, data discovery approaches (e.g., patterns/keywords/dictionaries/regex/exact matching) and with common cloud/data systems (e.g., object storage and enterprise databases/warehouses).

         Preferred (strong differentiators): 

• Experience applying or discussing GenAI security in real enterprise contexts, including RAG (Retrieval-Augmented Generation) concepts and vector databases / indexing approaches.
  
• Exposure to CASB / SASE / DLP technologies and how customers operationalize them.
  
• Relevant certifications (CISSP, CISM, AWS/Azure/GCP).
  

#LI-JC3

Position Overview

The Fully Qualified Navy Validator III will support Naval Surface Warfare Center Philadelphia Division (NSWCPD) Department 40 as a contractor through Arlo Solutions, serving as a senior cybersecurity validation specialist providing comprehensive Risk Management Framework (RMF) package validation and assessment services for Propulsion, Power & Auxiliary Machinery Systems. This key personnel position acts as an independent third-party validator who assesses and validates that systems have implemented approved security control baselines in accordance with Department of Defense (DoD) RMF processes and Navy cybersecurity requirements for both afloat and Platform Information Technology (PIT) ashore systems.

Work Location; Primary: Philadelphia, PA; periodic travel to customer and operational sites may be required

Clearance:  Active Secret

Job Responsibilities and/or Success Factors

Navy Qualified Validator (NQV) Registration and Certification

• Register and maintain listing on the official Navy Qualified Validators registry
• Perform and support activities as a certified Navy Validator for Risk Management Framework (RMF) packages
• Ensure strict separation of duties between the Information System Security Manager (ISSM)/Information System Security Engineer (ISSE) and Navy Qualified Validator roles
• Maintain current NQV Level III certification and comply with all associated requirements
• Act as a trusted agent to the Security Control Assessor (SCA) and SCA Liaison throughout the validation process

Security Assessment Planning and Execution

• Prepare comprehensive Security Assessment Plans (SAPs) with input from system ISSEs and ISSMs
• Submit SAPs for approval by the SCA prior to validation activities
• Conduct independent third-party assessments to validate that systems have implemented approved security control baselines
• Perform on-site validation testing as required for afloat and PIT ashore systems
• Execute validation activities in accordance with DON SCA office requirements and procedures

Security Assessment Reporting and Documentation

• Develop comprehensive Security Assessment Reports (SARs) to document residual risk of non-compliant security controls
• Create SAR Executive Summaries and Functional Security Control Assessor (FSCA) Appendices
• Document residual risk in Risk Assessment Reports (RARs) in accordance with NAVSEAINST 9400.2 instruction
• Provide detailed briefings to Program Managers and ISSMs on validation findings and recommendations
• Ensure all validation documentation meets DON, NAVSEA Business Rules, and DoD cybersecurity standards

Risk Assessment and Validation Activities

• Conduct comprehensive risk and vulnerability assessments of planned and installed systems
• Identify vulnerabilities, risks, and protection needs through systematic validation processes
• Perform systems security reviews, audits, and evaluations to ensure accreditation documents accurately represent current risk posture
• Validate compliance with all applicable Controls and Assessment Procedures (APs) for assigned DON systems
• Develop appropriate test procedures when necessary and execute comprehensive security testing protocols

RMF Package Validation Support

• Validate RMF packages in accordance with DoD Instruction 8510.01, NAVSEA Business Rules, and DON RMF Process Guides
• Review and assess Authorization Boundary Diagrams, Defense in Depth Diagrams, Security Plans, and other RMF artifacts
• Evaluate system compliance with National Institute of Standards and Technology (NIST) SP-800-37, SP-800-53 Rev 4, and applicable cybersecurity frameworks
• Support continuous monitoring activities to maintain Authorization to Operate (ATO) status
• Coordinate validation activities with government personnel, system owners, and other RMF stakeholders

Technical Documentation and Analysis

• Perform detailed technical documentation analysis of software/hardware associated with systems and components
• Develop system architecture diagrams, software design requirements, and network connection diagrams
• Create and maintain vulnerability assessments and security compliance documentation
• Analyze logs, events, and reporting from various data collection tools including Assured Compliance Assessment Solution (ACAS), Host Based Security Systems (HBSS), Security Information and Event Management (SIEM), and firewall systems
• Present validation findings and submit comprehensive data to management in a cohesive manner

Cybersecurity Technical Writing and Communication

• Write technical documentation including user manuals, reports, policies, presentations, and security assessments
• Develop RMF plans, policies, and procedural documentation for multiple platforms
• Create comprehensive vulnerability assessments and risk assessment reports
• Support development of technical documents across configuration management and RMF documentation platforms
• Communicate validation results and recommendations effectively to all levels of management

Quality Assurance and Compliance

• Ensure all validation activities comply with published Navy, NAVSEA Business Rules, NIST standards, and DoD regulations
• Verify accuracy of security control implementations and document any deficiencies or non-compliance issues
• Support Information Assurance Vulnerability Management (IAVM) activities including validation of remediation efforts
• Test systems to verify adequate functionality for mission and project requirements while maintaining security posture
• Maintain security clearance and comply with all security requirements specified in the contract

Education and Minimum Qualifications

• Must be a U.S. Citizen
• Active Secret security clearance
• Bachelor's degree in computer science from an accredited college or university

Target Experience

• Five (5) years of professional experience in the management of Information Assurance Technical (IAT), certification agents, and system engineers on compliance requirements to achieve certification and accreditation in accordance with the DoD RMF program and DON Chief Information Officer (CIO) IA Policy for Platform Information Technology (PIT) Systems

Minimum Certification

• Must demonstrate at least one of the following Information Assurance Management (IAM)/IAT Level 2 certifications (acceptable certifications include: CAP, CASP+ CE, CISM, CISSP or Associate, GSLC, CCISO, or HCISPP)

Required Certification

• Must provide evidence of current NQV Level III certification

Continuing Professional Education Requirements

• Maintain current IAM/IAT Level 2 certification with required Continuing Professional Education (CPE) as mandated by certification body
• Maintain current NQV Level III certification and complete all required training
• Complete all required Government mandated training including Antiterrorism Level 1 Awareness, Operations Security (OPSEC), Cybersecurity 101 Training, and other security-related training as specified

Desired Qualifications

• Professional experience supporting DON or DoD
• Experience with DON cybersecurity programs and RMF validation processes
• Familiarity with NIST Special Publications and DoD cybersecurity instructions
• Experience with eMASS, Vulnerability Remediation Asset Manager (VRAM), ACAS, and other DoD cybersecurity systems
• Knowledge of DON and DoD organizational structure and cybersecurity policies
• Experience supporting NAVSEA or other Navy commands
• Understanding of NAVSEA Business Rules and Standard Operating Procedures (SOPs)

Position Description: The Information System Security Officer (ISSO) III will support Naval Surface Warfare Center Philadelphia Division (NSWCPD) as a contractor through Arlo Solutions, serving as a key cybersecurity professional for NSWCPD Code 104. This key personnel position is responsible for coordinating cybersecurity processes and activities for assigned systems, ensuring compliance with all applicable policies, and managing security controls implementation throughout the Risk Management Framework (RMF) lifecycle.

Location:  Philadelphia, PA

Clearance:  Active Secret

Responsibilities and/or Success Factors:

Cybersecurity Compliance and Policy Implementation

•  Assist the Information System Security Managers (ISSM) in executing their duties and responsibilities
• Ensure compliance with all NAVSEA, DON, and DoD cybersecurity policies 
• Ensure relevant cybersecurity policy and procedural documentation is current and accessible 
• Coordinate cybersecurity processes and activities for assigned systems 
• Report changes in system security posture to the ISSM Security Assessment and Authorization (A&A) Management 
• Maintain and report Assess Only (AO) and Assessment and Authorization (A&A) status to Program Managers, Information System Owners, and ISSMs
• Provide oversight of Security Plans for assigned systems throughout their lifecycle 
• Manage and maintain Plan of Actions and Milestones (POA&M), tracking vulnerabilities through remediation 
• Assist with identification of security control baselines and applicable overlays 
• Coordinate the validation of security controls with Navy Qualified Validators (NQV) 
• Perform Risk Management Framework (RMF) Standard Operating Procedure (SOP) reviews 
• Adjudicate findings from Package Submitting Officer (PSO) System Security Management
• Register and maintain systems in Enterprise Mission Assurance Support Service (eMASS) 
• Plan and coordinate security control testing during Risk Assessments and Annual Security Reviews 
• Maintain vulnerability data in Vulnerability Remediation Asset Manager (VRAM) 
• Participate in change control and configuration management processes 
• Ensure execution of Continuous Monitoring requirements as defined in system strategies 
• Review all data produced by Continuous Monitoring activities and update eMASS records as necessary 
• Correlate findings from non-RMF vulnerability assessments to RMF controls for holistic risk assessment Cybersecurity Analysis and Reporting 
• Perform analysis of logs, events, and reporting from various data collection tools 
• Assess impacts from observed risks and report via the Cybersecurity Program chain of command 
• Present data to management in a comprehensive and cohesive manner 
• Develop reports and produce procedural documentation as required 
• Evaluate system administrator, security engineer, and/or system owner proposed corrections

Minimum Qualifications Including Certificates:

• Must be a U.S. Citizen 
• Active Secret security clearance 
• Bachelor's degree in computer science, information technology, communications systems management, or equivalent STEM degree from an accredited college or university 
• Minimum 6 years of experience coordinating and implementing security changes, ensuring compliance with published policies, conducting cybersecurity vulnerability and threat analysis, and supporting cyber incident response 
• Current IAM-II certification (CAP, CASP+ CE, CISM, CISSP, GSLC, CCISO, or HCISPP)

Desired Qualifications: 

• Experience with the DoD Information Assessment and Authorization (A&A) process 
• Familiarity with Risk Management Framework (RMF) implementation 
• Proficiency with eMASS, VRAM, and other DoD cybersecurity systems 
• Experience with NIST Special Publications and DoD/Navy cybersecurity directives 
• Experience with vulnerability management tools (ACAS, HBSS, etc.) 
• Knowledge of Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)

Position Overview

The Specialist, Information System Security III (SISS3) will support the Naval Surface Warfare Center Philadelphia Division (NSWCPD) Department 40 as contractor staff through Arlo Solutions. This key personnel position provides senior-level cybersecurity expertise and technical execution in support of Propulsion, Power & Auxiliary Machinery Systems Cybersecurity requirements, with specific focus on Risk Management Framework (RMF) lifecycle activities, Assessment & Authorization (A&A), and ongoing compliance and assurance across Navy afloat and ashore environments. The SISS3 is responsible for the development, validation, implementation, and continuous monitoring of cybersecurity controls in accordance with Department of Defense (DoD), Department of Navy (DON), and Naval Sea Systems Command (NAVSEA) policy.

Work Location:  Primary: Philadelphia, PA; periodic travel to customer and operational sites may be required

Clearance:  Active Secret security clearance

Job Responsibilities and/or Success Factors

Cybersecurity Assessment and Implementation

• Conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, risks, and protection needs
• Execute Security Assessment Plans (SAPs) by conducting on-site testing for afloat and Platform Information Technology (PIT) ashore systems
• Apply Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and perform Assured Compliance Assessment Solution (ACAS) scanning
• Implement security patches and configuration changes to obtain cybersecurity compliance and remediate vulnerabilities
• Perform analysis of logs, events, and reporting from various data collection tools including ACAS, Host Based Security Systems (HBSS), Security Information and Event Management (SIEM), firewall systems, and intrusion detection systems

Risk Management Framework (RMF) Support

• Develop and maintain Plan of Action and Milestones (POA&M) for all Information Assurance-related tasks and deliverables in Enterprise Mission Assurance Support Service (eMASS)
• Support continuous monitoring activities for authorized systems to maintain Authorization to Operate (ATO) status
• Document residual risks based on package content and assessment results for Security Controls Assessor review
• Maintain current vulnerability scan data and residual risk POA&Ms in Vulnerability Remediation Asset Manager (VRAM)
• Ensure compliance with NIST SP-800-37, SP-800-53 Rev 4, DoD Instruction 8510.01, and NAVSEA Business Rules

Systems Security and Monitoring

• Conduct systems security reviews, audits, and evaluations to ensure accreditation documents accurately represent current risk posture
• Monitor and assess impacts from observed cybersecurity risks and report via the Cybersecurity Program chain of command
• Perform evaluation of system administrator and security engineer proposed corrections to ensure compliance
• Test systems to verify adequate functionality for mission and project requirements
• Support Information Assurance Vulnerability Management (IAVM) activities including remediation, patching, and scanning

Technical Documentation and Reporting

• Develop technical documentation including vulnerability assessments, risk assessments, and security compliance reports
• Create and maintain system architecture diagrams, authorization boundary diagrams, and defense in depth diagrams
• Present and submit data to management, develop comprehensive reports, and produce procedural documentation
• Prepare security-related deliverables in accordance with contract CDRLs and government requirements

Operating System Administration

• Provide expert subject matter knowledge of Windows operating systems (Windows 11, 10, 7, XP, 2000, CE 6.0) and Red Hat Enterprise Linux
• Apply system configuration changes and software application updates as required by automated security assessment tools
• Identify, present, and implement improvements to operating system configuration settings to maintain secure operations
• Develop and enhance operating procedures, process guides, and system-level RMF Control Family Plans

Compliance and Coordination

• Ensure all security requirements and controls are implemented in accordance with DoD and Navy cybersecurity policies
• Coordinate with government personnel, system owners, and other stakeholders throughout the RMF process
• Support configuration control board practices and track deliverables per A&A guidance
• Maintain security clearance and comply with all security requirements specified in the contract

Education and Minimum Qualifications

• Must be a U.S. Citizen
• Active Secret security clearance
• Target Education: High school diploma or high school equivalency certificate
• Target Experience: Five (5) years of experience in the following areas:
  • Cybersecurity, Engineering, Test and Evaluation (T&E), or A&A related field
  • Information Assurance tools such as Defense Information Systems Agency (DISA) eMASS and ACAS
  • Microsoft Windows Operating System Administration, including Windows 11, Windows 10, Windows 7, and Windows XP (at a minimum)
  • Command line interface, PowerShell, and performing automated tasking through use of code
• Minimum Certification: Must demonstrate at least one of the following Information Assurance Technical (IAT) Level 2 certifications (acceptable certifications include: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP)

Continuing Professional Education Requirements

• Maintain current IAT Level 2 certification with required Continuing Professional Education (CPE) as mandated by certification body
• Complete all required Government mandated training including Antiterrorism Level 1 Awareness, Operations Security (OPSEC), Cybersecurity 101 Training, and other security-related training as specified

Desired Qualifications

• Experience with Navy cybersecurity programs and RMF processes
• Familiarity with NIST Special Publications and DoD cybersecurity instructions
• Experience with eMASS, VRAM, ACAS, and other DoD cybersecurity systems
• Knowledge of Navy and DoD organizational structure
• Experience supporting NAVSEA or other Navy commands
• Professional experience in DoD or Navy environments

Position Overview

The Specialist, Information Assurance Compliance II (SIAC2) will support the Naval Surface Warfare Center Philadelphia Division (NSWCPD) Department 40 as contractor staff through Arlo Solutions, serving as a senior cybersecurity compliance specialist providing comprehensive information assurance and Risk Management Framework (RMF) support services for Propulsion, Power & Auxiliary Machinery Systems. This key personnel position focuses on developing, implementing, and maintaining cybersecurity compliance programs and documentation to ensure adherence to Department of Defense (DoD) and Department of Navy (DON) cybersecurity policies and procedures for both afloat and Platform Information Technology (PIT) ashore systems.

Work Location:  Primary: Philadelphia, PA; periodic travel to customer and operational sites may be required

Clearance:  Active Secret security clearance

Job Responsibilities and/or Success Factors

Risk Management Framework (RMF) Development and Implementation

• Collect and collate system or site information to evaluate and document security postures in Enterprise Mission Assurance Support Service (eMASS)
• Develop, submit, and maintain RMF packages in accordance with DoD Instruction 8510.01, Naval Sea Systems Command (NAVSEA) Business Rules, DON RMF Process Guides, and NAVSEA Standard Operating Procedures (SOPs)
• Create comprehensive RMF package documentation including Assess Only (AO) Determination Request Packages, System Platform IT (PIT) Determinations, Categorization Forms, Authorization Boundary Diagrams, Defense in Depth Diagrams, Privacy Impact Assessments (PIA), and Security Plans (SPs)
• Develop and maintain Plan of Action and Milestones (POA&M) for all Information Assurance-related tasks and deliverables in eMASS

Policy and Compliance Management

• Develop or revise existing policies, plans, and strategy documents to meet requirements for RMF Control Families
• Create comprehensive documentation including Incident Response Plans, Contingency Plans, Information Assurance Vulnerability Management Plans, Configuration Management Plans, and Physical Security Plans
• Ensure all Information Assurance requirements are addressed and compliant with applicable DoD and DON cybersecurity policies
• Evaluate discrepancies and recommend potential mitigation measures for reducing or eliminating specific risks

Assessment and Evaluation Activities

• Conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, risks, and protection needs
• Execute Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems
• Perform systems security reviews, audits, and evaluations to ensure accreditation documents accurately represent current risk posture
• Determine residual risk of packages based on package content and assessment results for Security Controls Assessor review
• Conduct analysis of logs, events, and reporting from various data collection tools including Assured Compliance Assessment Solution (ACAS), Host Based Security Systems (HBSS), Security Information and Event Management (SIEM), firewall systems, and intrusion detection systems

Continuous Monitoring and Maintenance

• Support continuous monitoring activities for authorized systems to maintain Authorization to Operate (ATO) status
• Develop and update required eMASS documents at specified frequencies, including POA&Ms and Risk Assessment Reports (RARs)
• Determine system compliance with all applicable Controls and Assessment Procedures (APs) for assigned DON systems
• Maintain current vulnerability scan data and residual risk POA&Ms in Vulnerability Remediation Asset Manager (VRAM)
• Track deliverables and action items in accordance with A&A guidance

Technical Documentation and Reporting

• Perform detailed technical documentation analysis of software/hardware associated with systems and components
• Develop system architecture diagrams, software design requirements, network connection/authorization boundary diagrams, and RMF plans/policies
• Create and maintain vulnerability DON eMASS POAMs for systems
• Present and submit data to management, develop comprehensive reports, and produce procedural documentation
• Execute Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), ACAS scanning, and apply patches to assets to obtain cybersecurity compliance

Stakeholder Coordination and Communication

• Manage, attend, and support configuration control board practices
• Coordinate with government personnel, system owners, and other stakeholders throughout the RMF process
• Assess impacts from observed risks and report via the Cybersecurity Program chain of command
• Perform evaluation of system administrator and security engineer proposed corrections to ensure compliance
• Support Information Assurance Vulnerability Management (IAVM) activities including remediation, patching, and scanning

Compliance and Quality Assurance

• Ensure RMF artifacts comply with published Navy, NAVSEA Business Rules, NIST SP-800-37, and SP-800-53 Rev 4 requirements
• Create and verify accuracy of POA&Ms/RARs as identified by vulnerability test results
• Ensure information systems are operated, used, maintained, and disposed of in accordance with security policies
• Test systems to verify adequate functionality for mission and project requirements
• Maintain security clearance and comply with all security requirements specified in the contract

Education and Minimum Qualifications

• Must be a U.S. Citizen
• Active Secret security clearance
• Target Education: Bachelor's degree (Computer Science, Information Technology or related technical degree) from accredited College or University
• Target Experience: Four (4) years of professional experience in Information Assurance Compliance

Minimum Certification: Must demonstrate at least one of the following

• Information Assurance Management (IAM)
• Information Assurance Technical (IAT) Level 2 certifications (acceptable certifications include: CAP, CASP+ CE, CISM, CISSP or Associate, GSLC, CCISO, or HCISPP)

Continuing Professional Education Requirements

• Maintain current IAM/IAT Level 2 certification with required Continuing Professional Education (CPE) as mandated by certification body
• Complete all required Government mandated training including Antiterrorism Level 1 Awareness, Operations Security (OPSEC), Cybersecurity 101 Training, and other security-related training as specified

Desired Qualifications

• Experience with Navy cybersecurity programs and RMF processes
• Familiarity with NIST Special Publications and DoD cybersecurity instructions
• Experience with eMASS, VRAM, ACAS, and other DoD cybersecurity systems
• Knowledge of Navy and DoD organizational structure
• Experience supporting NAVSEA or other Navy commands
• Professional experience in DoD or Navy environments
• Understanding of NAVSEA Business Rules and SOPs

The IT Systems Administrator is responsible for managing and optimizing Centri’s entire technology ecosystem, ensuring security, reliability, and performance across all platforms. This includes Microsoft 365 and Azure environments, Check Point security infrastructure, and a diverse set of business-critical applications. The role also focuses on integrating modern productivity tools such as Microsoft Copilot and Power Platform (Power Apps, Dataverse, Copilot Studio) into the Microsoft 365 and Azure environments to drive automation and efficiency. The ideal candidate will have hands-on experience with enterprise systems administration, security best practices, and automation, while supporting a hybrid workforce and collaborating across departments.

Core Responsibilities

Microsoft 365 & Azure Administration

• Administer and optimize Microsoft 365 services (Exchange Online, OneDrive, Teams, Teams Phone, SharePoint) and Microsoft Azure resources (VMs, Storage, Networking).
• Integrate Microsoft Copilot, Power Apps, Dataverse, and Copilot Studio into Microsoft 365 and Azure environments to enhance automation, workflows, and business intelligence.
• Oversee roadmap releases for Microsoft 365 and Azure, ensuring proper testing, deployment, and documentation.

Security & Network Infrastructure

• Manage SASE solutions, including FWaaS, ZTNA, CASB, SWG, and VPN/SDP technologies to ensure secure cloud access and robust protection against external threats.
• Manage identity protection and management solutions (Passwordless authentication, MFA, Conditional Access, DLP) and maintain compliance with security standards (SOC 2, ISO 27001).
• Collaborate with Information Security to enforce security policies and respond to incidents.

Enterprise Applications & Business Systems

• Administer and support company-wide systems including:

• Finance & Accounting: FloQast, QuickBooks, Bill.com, NetSuite
• CRM & Marketing: HubSpot
• Audit & Compliance: DataSnipper, Intelligize, Trullion
• Security & Training: Bitwarden, KnowBe4
• Reservation & Scheduling: Skedda

• Ensure integration, uptime, and performance of these platforms while coordinating with vendors and internal stakeholders.

Automation & Optimization

• Develop PowerShell scripts for automation of administrative tasks and reporting.
• Build workflows and apps using Power Apps, Dataverse, and Copilot Studio to streamline business processes.
• Optimize system performance through proactive monitoring and capacity planning.

Disaster Recovery & Business Continuity

• Manage backup and recovery strategies for Microsoft 365, Azure, and critical business systems.
• Support Azure Site Recovery and business continuity planning initiatives.

Endpoint & Device Management

• Administer Microsoft Intune for device compliance, mobile device management, and endpoint security.

Collaboration & Support

• Provide advanced technical support for Microsoft 365, Azure, Windows operating systems, and SaaS applications.
• Train end-users on new features and best practices.
• Maintain confidentiality of all client and employee information.
• Promote collaboration and relationship-building in a hybrid work environment.

• Support Firm initiatives and development opportunities.

 Required Skills/Abilities:

Candidates must have extensive hands-on experience with all of the following:

• Microsoft 365 and Azure administration (Exchange, OneDrive, Teams, SharePoint, VMs, Storage, Networking).
• Integration and administration of Microsoft Copilot, Power Apps, Dataverse, and Copilot Studio within Microsoft 365 and Azure environments.
• Check Point security services (FWaaS, VPN/SDP).
• Identity protection and management (MFA, Conditional Access, DLP).
• PowerShell scripting for automation.
• Experience in API configuration, integration, and troubleshooting.
• Endpoint management via Microsoft Intune and RMM.
• Administration of enterprise SaaS platforms (FloQast, QuickBooks, Bill.com, NetSuite, HubSpot, DataSnipper, Intelligize, Trullion, Bitwarden, KnowBe4, Skedda).
• Strong knowledge of network and SASE solutions infrastructure design and maintenance.
• Excellent problem-solving, troubleshooting, and communication skills.

 Education and Experience

• Bachelor’s degree in Computer Science or related field.
• Minimum of 7 years of experience in IT systems administration.
• Preferred Certifications:

• • Microsoft 365 Certified: Enterprise Administrator Expert
  • Microsoft Certified: Azure Administrator Associate
  • Microsoft Certified: Azure Security Engineer Associate
  • Microsoft Certified: Power Platform Functional Consultant Associate
  • Check Point Certified Security Administrator (CCSA)
  • Microsoft Certified: Security, Compliance, and Identity Fundamentals

Physical Requirements:

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift items up to 30 pounds at times.
• Travel will be 25% of the time when necessary.