Familiar with Infrastructure-as-Code practices using tools like Terraform or Ansible
Knowledge of compliance frameworks (CMMC, NIST 800-171, RMF)
Responsibilities
Ensure confidentiality, integrity, and availability of systems and data through security program management
Support cybersecurity operations for IT networks and cloud platforms
Administer enterprise security tools including firewalls and zero-trust technologies
Advise users on system risks and maintain security documentation
Prepare and update IA and ATO documentation for continuous accreditation
Conduct cybersecurity risk assessments and support RMF activities
Benefits
On-site work requirement, fostering team collaboration
Opportunity to work in a dynamic, fast-paced military operations environment
Engagement with cutting-edge cybersecurity technologies
Potential for career advancement in defense contracting and government programs
Support for continuous learning and compliance with security standards
Full Job Description
This position will provide operational and technical support to National & Navy missions in a dynamic, fast-paced environment. Successful candidates will have detailed knowledge of National SIGINT systems and their application to support Navy missions, the ability to work across intelligence disciplines to provide real-time support to operations and experimentation, apply technical expertise to complex analytical problems, and work as part of a team or independently. Candidates must also possess a demonstrated ability to operate shifting priorities, adapt to a fast-paced environment, and deliver under pressure. This position is located on a client site and may require on-call support to a 24x7 military operations team.
Skills and Responsibilities
Ensure the confidentiality, integrity and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security program, policies, procedures, and tools.
Support cybersecurity operations for IT networks, systems, and cloud platforms by applying cybersecurity policies and security engineering principles, including identity and access management, encryption, continuous monitoring, secure configuration, and automation.
Administer enterprise security tools, to include but not limited to firewalls, zero-trust technologies, logging and metrics systems.
Ensure necessary security controls are in place and operate as intended; advising users of risks to systems and assessing risk; completes and maintains appropriate security documentation including systems security plans.
Prepare and update documentation IA and ATO documentation, working with the US Government to ensure continuous accreditation.
Conduct cybersecurity risk assessments, evaluating security control implementations, analyzing residual risk, and supporting Risk Management Framework (RMF) activities and documentation.
Required Qualifications and Skills
High School Diploma or equivalent
REQUIRED: Active TS/SCI Clearance with Full-Scope Poly (or agreement to take poly when requested)
At least 3 years of experience as a Software Engineer or DevSecOps, system engineering or closely related technical role
Knowledge of: Container (Docker) Build and Infrastructures, Kubernetes, Software Configuration Management tools such as GitLab, CI/CD processes, GitLab procedures/documentation
Experience with SBOM generation, SCA, container scanning, artifact signing, provenance, or software supply-chain security
Experience with policy-as-code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies
Experience with Infrastructure-as-Code or Configuration-as-Code practices using Terraform, Ansible, Bicep, CloudFormation, or similar tools
Experience with Prometheus, Grafana, Loki, or similar observability platforms
Experience in defense contracting, government programs, CMMC, NIST 800-171, RMF, STIGs, or other compliance-driven environments
Desired Qualifications
Experience programming in Java, JavaScript, TypeScript, Python or C++
Familiarity with full-stack web application development in any frameworks/languages
Position location: Aurora, CO or Laurel, MD
**the selected individual will be required to work onsite, 5 days a week **
In compliance with Colorado's Equal Pay for Equal Work Act (the "Act") (C.R.S. 8-5-101 et seq.) all positions in Colorado should have a good faith wage or salary posted on all job advertisements. If one is not listed below please email Recruiting_VA@metsci.com and one will be provided.
Expected compensation range, Aurora, CO:
$100,000-$180,000 USD
About METRON
Metron delivers innovative solutions to challenging problems. For over 40 years, our dedication to technical rigor and a first-principles approach to problem-solving has consistently yielded creative solutions at the intersection of advanced mathematics, computer science, physics, and engineering.
Metron is an employee-owned company dedicated to delivering innovative solutions for the most challenging problems. Metronites are leaders in their technical fields who have made the commitment to solve real-world problems.
Our employees excel in applied mathematics, statistical inference, signal processing, autonomy, and software development. Equally important, they are inquisitive problem solvers who enjoy working in small teams to craft novel solutions to thorny problems.
