We are seeking a skilled Full-Stack Developer to join our team in San Antonio. The ideal candidate will have experience in both front-end and back-end development, capable of designing, developing, and maintaining robust applications. This role involves working on server-side logic, database management, integrating third-party services, and creating seamless and efficient user interfaces. 

What you’ll do:

• Design, develop, and maintain both front-end and back-end components of web applications
• Planning and implementing modifications to Graphic Use Interfaces (GUIs)
• Create technical design drawings, mockups, wireframes, and other associated documentation for PMO and stakeholder review
• Implement and manage server-side logic using programming languages such as Java, Python, Node.js, or Ruby
• Develop and maintain RESTful APIs and web services for seamless integration with front-end components
• Conduct code reviews and provide constructive feedback to team members
• Participate in the entire software development lifecycle, from requirement analysis to deployment and maintenance
• Monitor system performance and implement necessary improvements to ensure high availability and reliability
• Collaborate with DevOps teams to streamline CI/CD processes and automate deployment pipelines
• Develop and maintain and/or assist with technical documentation for systems and processes
• Stay updated with the latest trends and technologies in full-stack development and apply them to improve existing processes

What you’ll need:

• Experience in front-end frameworks such as: React, Angular, or Vue.js. 
• Experience in one or more server-side programming languages such as: Java, Python, Node.js. 
• Experience with one or more database management systems such as: PostgreSQL, MongoDB, Accumulo, or Hadoop
• Experience with containerization using Docker and management of Linux (RHEL) systems

Bonus Points if you have:

• Bachelor’s degree in a technical field
• Previous experience as a Full-Stack Developer or similar position
• Knowledge of RESTful API design and development 
• Experience with Elasticsearch for search functionalities 
• Experience with cloud platforms (e.g., AWS, Azure, Google Cloud) for full-stack development
• Familiarity with additional container orchestration technologies like Kubernetes
• Understanding of security best practices in web development
• Knowledge of DevOps practices and tools such as Gitlab, CI/CD pipelines, and Infrastructure as Code (IaC)
• Excellent problem-solving skills and attention to detail
•  Strong communication and collaboration skills

 Clearance: 

Must have an active Top Secret clearance

Cybersecurity Engineer, Senior Manager

Two Six Technologies is seeking a visionary Cybersecurity Engineer, Senior Manager to architect, build, and defend the highly secure environments that power our advanced R&D initiatives. We are looking for a true security architect who can seamlessly bridge the gap between rigorous government security frameworks (NIST, STIGs, CMMC) and complex operational engineering. In this role, you will lead the strategic design of our secure infrastructure, guide DevSecOps integration across software projects, and engineer pragmatic, intent-based security solutions. If you excel at deconflicting stringent compliance mandates with real-world engineering challenges, and thrive in a role that spans infrastructure defense, network architecture, and application security, we want you to lead our team.

Preferable locations are San Antonio TX and Arlington VA. The role is considered hybrid, and would require at least 3 days a week in the office at either location.

Key Responsibilities

• Strategic Security Architecture: Architect custom security solutions that deconflict stringent government compliance requirements with critical operational needs. Move beyond standard "box checking" to design risk-optimized, tailored controls.
• Intent-Based Engineering: Engineer alternative technical solutions when literal remediation causes operational failure. Leverage deep system knowledge and industry best practices to meet the core security intent of a framework while maintaining system functionality.
• Design & Implementation: Lead the hands-on technical development, configuration, and deployment of secure IT infrastructure and custom security tools, ensuring all architectures are defensible during an audit.
• Threat Defense & Mitigation Strategy: Develop high-level strategies, playbooks, and architectures for threat detection and incident response. Oversee the vulnerability mitigation lifecycle, guiding the team's efforts so that day-to-day monitoring is handled by staff while the Lead focuses on proactive, structural defense improvements.
• Collaborative Security: Partner with development and IT teams to seamlessly integrate security and compliance into CI/CD pipelines and software development lifecycles while supporting innovation.
• Team Leadership & Mentorship: Direct a small team of security professionals across multiple projects. Mentor junior team members on how to balance strict compliance auditing with pragmatic, operational engineering solutions.

Required Skills & Qualifications

• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or comparable experience.
• Leadership: Experience managing small interactive teams.  Candidates will be required to task junior reports, and should have strong mentorship skills.
• Strategic Risk & Compliance Mastery: Deep understanding of NIST 800-171, NIST 800-53b, CMMC, and DISA STIGs. Proven ability to interpret the underlying risk objective of a control to engineer solutions that satisfy auditors without breaking operations.
• Advanced Systems Expertise: Deep technical mastery of operating systems (primarily RHEL/Linux). Must possess the system-level knowledge (e.g., Linux internals, process management) required to design custom, defensible security configurations backed by vendor documentation when standard STIG guidance is insufficient.
• Operational Deconfliction: A highly analytical mindset with a track record of identifying conflicts between security mandates and operational uptime, and successfully architecting "semi-custom" solutions that keep risk to an acceptable minimum.
• Network Security Architecture: Strong architectural understanding of secure network paradigms (e.g., Zero Trust, macro/micro-segmentation) and fundamentals. Ability to guide the implementation of complex boundary defenses and validate network security controls.
• Application Security & Code Analysis: High technical competency in application security principles. Must be capable of analyzing SAST tool outputs, architecting defensible arguments for false positives to present to customers, and providing strategic guidance to developers on resolving legitimate vulnerabilities.
• Security Automation: Strategic approach to automating repetitive security operations using scripting and CI/CD pipelines. Proven ability to build self-sustaining security workflows that free up engineering staff to focus on high-complexity problems.
• Clearance:  Eligibility to obtain and maintain a security clearance up to TS/SCI. 

Preferred Experience

• Advanced Code Review: Practical experience reading, reviewing, and defending SAST findings in compiled languages such as Java, Golang, or C and/or interpreted languages like Python or NodeJS.
• DevSecOps & Containerization: Hands-on experience architecting secure CI/CD pipelines and software development workflows utilizing platforms like Jenkins, GitHub, or GitLab. Familiarity with securing OCI-compliant container ecosystems (e.g., Docker) is highly desirable.
• Virtualization & Cloud Architecture: Experience securing, architecting, or managing hyperconverged virtual infrastructure (specifically VMware or Proxmox) and/or cloud-native enterprise environments (e.g., AWS).
• Enterprise Boundary Defense: Practical experience engineering, deploying, or migrating advanced enterprise firewall and network security solutions (e.g., Fortinet).
• Specialized Enclaves & R&D Networks: Proven experience designing, auditing, or managing compliance for research and development (R&D) environments, specifically involving the creation or maintenance of CMMC Level 2 compliant networks.
• AI Security Oversight: Experience implementing security guardrails for teams using AI-assisted coding tools (e.g., Cursor, GitHub Copilot, Gemini).
• Automated Compliance: Ability to translate security mandates into Policy-as-Code to ensure rapid, AI-generated deployments remain compliant with NIST/CMMC frameworks.
• AI Risk Assessment: Practical understanding of the OWASP Top 10 for LLMs and how to mitigate risks related to prompt injection and AI-generated code vulnerabilities.
• Clearance:  Active TS/SCI clearance

Clearance Requirements:

• This position requires eligibility to obtain and maintain a security clearance up to TS/SCI

#LI-MS1

#Hybrid

Cybersecurity Engineer, Senior Manager

Two Six Technologies is seeking a visionary Cybersecurity Engineer, Senior Manager to architect, build, and defend the highly secure environments that power our advanced R&D initiatives. We are looking for a true security architect who can seamlessly bridge the gap between rigorous government security frameworks (NIST, STIGs, CMMC) and complex operational engineering. In this role, you will lead the strategic design of our secure infrastructure, guide DevSecOps integration across software projects, and engineer pragmatic, intent-based security solutions. If you excel at deconflicting stringent compliance mandates with real-world engineering challenges, and thrive in a role that spans infrastructure defense, network architecture, and application security, we want you to lead our team.

Preferable locations are San Antonio TX and Arlington VA. The role is considered hybrid, and would require at least 3 days a week in the office at either location.

Key Responsibilities

• Strategic Security Architecture: Architect custom security solutions that deconflict stringent government compliance requirements with critical operational needs. Move beyond standard "box checking" to design risk-optimized, tailored controls.
• Intent-Based Engineering: Engineer alternative technical solutions when literal remediation causes operational failure. Leverage deep system knowledge and industry best practices to meet the core security intent of a framework while maintaining system functionality.
• Design & Implementation: Lead the hands-on technical development, configuration, and deployment of secure IT infrastructure and custom security tools, ensuring all architectures are defensible during an audit.
• Threat Defense & Mitigation Strategy: Develop high-level strategies, playbooks, and architectures for threat detection and incident response. Oversee the vulnerability mitigation lifecycle, guiding the team's efforts so that day-to-day monitoring is handled by staff while the Lead focuses on proactive, structural defense improvements.
• Collaborative Security: Partner with development and IT teams to seamlessly integrate security and compliance into CI/CD pipelines and software development lifecycles while supporting innovation.
• Team Leadership & Mentorship: Direct a small team of security professionals across multiple projects. Mentor junior team members on how to balance strict compliance auditing with pragmatic, operational engineering solutions.

Required Skills & Qualifications

• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or comparable experience.
• Leadership: Experience managing small interactive teams.  Candidates will be required to task junior reports, and should have strong mentorship skills.
• Strategic Risk & Compliance Mastery: Deep understanding of NIST 800-171, NIST 800-53b, CMMC, and DISA STIGs. Proven ability to interpret the underlying risk objective of a control to engineer solutions that satisfy auditors without breaking operations.
• Advanced Systems Expertise: Deep technical mastery of operating systems (primarily RHEL/Linux). Must possess the system-level knowledge (e.g., Linux internals, process management) required to design custom, defensible security configurations backed by vendor documentation when standard STIG guidance is insufficient.
• Operational Deconfliction: A highly analytical mindset with a track record of identifying conflicts between security mandates and operational uptime, and successfully architecting "semi-custom" solutions that keep risk to an acceptable minimum.
• Network Security Architecture: Strong architectural understanding of secure network paradigms (e.g., Zero Trust, macro/micro-segmentation) and fundamentals. Ability to guide the implementation of complex boundary defenses and validate network security controls.
• Application Security & Code Analysis: High technical competency in application security principles. Must be capable of analyzing SAST tool outputs, architecting defensible arguments for false positives to present to customers, and providing strategic guidance to developers on resolving legitimate vulnerabilities.
• Security Automation: Strategic approach to automating repetitive security operations using scripting and CI/CD pipelines. Proven ability to build self-sustaining security workflows that free up engineering staff to focus on high-complexity problems.
• Clearance:  Eligibility to obtain and maintain a security clearance up to TS/SCI. 

Preferred Experience

• Advanced Code Review: Practical experience reading, reviewing, and defending SAST findings in compiled languages such as Java, Golang, or C and/or interpreted languages like Python or NodeJS.
• DevSecOps & Containerization: Hands-on experience architecting secure CI/CD pipelines and software development workflows utilizing platforms like Jenkins, GitHub, or GitLab. Familiarity with securing OCI-compliant container ecosystems (e.g., Docker) is highly desirable.
• Virtualization & Cloud Architecture: Experience securing, architecting, or managing hyperconverged virtual infrastructure (specifically VMware or Proxmox) and/or cloud-native enterprise environments (e.g., AWS).
• Enterprise Boundary Defense: Practical experience engineering, deploying, or migrating advanced enterprise firewall and network security solutions (e.g., Fortinet).
• Specialized Enclaves & R&D Networks: Proven experience designing, auditing, or managing compliance for research and development (R&D) environments, specifically involving the creation or maintenance of CMMC Level 2 compliant networks.
• AI Security Oversight: Experience implementing security guardrails for teams using AI-assisted coding tools (e.g., Cursor, GitHub Copilot, Gemini).
• Automated Compliance: Ability to translate security mandates into Policy-as-Code to ensure rapid, AI-generated deployments remain compliant with NIST/CMMC frameworks.
• AI Risk Assessment: Practical understanding of the OWASP Top 10 for LLMs and how to mitigate risks related to prompt injection and AI-generated code vulnerabilities.
• Clearance:  Active TS/SCI clearance

Clearance Requirements:

• This position requires eligibility to obtain and maintain a security clearance up to TS/SCI

#LI-MS1

#Hybrid

Role

This position is for a systems administrator that enjoys building hardware-based operational platforms using internal and external products to include Linux OS images, Kubernetes cluster deployment, and logging systems. As a software engineer, you will be responsible for deploying OS images to hardware, managing an RKE2 multi-node Kubernetes cluster, managing additional containers, network policies, and other Kubernetes Custom Resource Definitions to the cluster, and initial monitoring and maintenance of the cluster. As the systems administrator, on-site support is expected.

Responsibilities

• Participate and lead design and architecture of back-end systems
• Deploy and maintain a robust and high-quality platform, putting the user’s requirements first and always driving towards a working product on-time
• Limit and resource test the platform
• Facilitate delivery and deployment of the platform

Required Qualifications

• Must be able to obtain and maintain a TS/SCI security clearance (only US Citizens are eligible for security clearances).
• Bachelor's degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline. In the absence of one of the aforementioned degrees, this requirement can be met with four years of hands-on experience in a Software Engineering or similar full-time position.
• A strong desire to respond to and meet user needs, exemplified by listening, documenting, disseminating, and prioritizing user needs over "nice to haves."
• Willingness to ask questions and stay engaged with team members when tasks are unclear or blockers are encountered.
• Ability to identify necessary tasks, communicate those to the broader team for feedback, and then largely execute independently.
• Trustworthy and able to adapt when project requirements change.
• Able and willing to contribute to the design process for new software features and capabilities.
• Knowledge, expertise, and proficiency with one or more common, general purpose programming languages (Go, Python, C, Rust, JavaScript, etc.). Being language agnostic is a plus (i.e. picking the right tool for the job, not just picking one tool for all jobs).
• Able to set up and maintain one's own development system (e.g., Ubuntu VM) in a cloud-based platform, including personalized IDE settings, access keys, system package updates, etc.
• Familiar and comfortable working with containers, including creating, deploying, and debugging custom images with common tools (Docker, Podman, etc.).
• Familiarity with cloud-based computing resources (e.g., AWS, Azure).
• Knowledge of security concepts, networks, and system internals to use on a daily basis.
• Ability to work with and troubleshoot real hardware of varying types (network switches, servers, routers, hubs, etc.).
• Proficient in Linux-based development environments (e.g., Debian- or RedHat-based distributions).
• Proficient with version control software (e.g., Git) and repository hosting tools (e.g., GitLab).
• Willingness and ability to travel up to 15% of the year, including both travel that is local to the DC, Maryland, Virginia (DMV) area and travel to multiple sites in the United States.

Preferred Qualifications (in addition to the required qualifications)

• Current US TS/SCI security clearance
• 2 years of industry experience in a platform engineering, DevOps or similar role in the Cyber Operation Domain
• Experience communicating with customers and end-users