Abrar Admin

ITility, LLC

<div>ITility is seeking an experienced and mission-focused Senior Network Security Engineer to join our infrastructure team in support of a mission-critical enterprise modernization contract with the U.S. Department of Defense (DoD). This role directly supports enterprise network infrastructure enabling the secure processing of recruit candidates entering the U.S. Armed Forces across geographically dispersed sites nationwide.
This position is dedicated to hardening enterprise network infrastructure and ensuring continuous compliance with DoD security mandates across a complex, multi-technology environment. The Senior Network Security Engineer serves as the primary security authority for all network-layer compliance activities, effectively offloading the security compliance burden from other infrastructure SMEs, thereby enabling them to maintain focus on their core engineering duties while ensuring the organization's security posture remains audit-ready and continuously improving. 
The ideal candidate brings deep expertise in DoD compliance frameworks, network security engineering, and vulnerability management, with hands-on proficiency across a broad range of enterprise network technologies. 
Key Responsibilities:
Network Security &amp; STIG Compliance<div><ul><li>
Own and manage all network-related Security Technical Implementation Guide (STIG) compliance activities across the enterprise, spanning the full breadth of network infrastructure including:<ul><li>
Routers and Switches</li><li>
Firewalls</li><li>
F5 Load Balancers</li><li>
Cisco Identity Services Engine (ISE)</li><li>
Wireless infrastructure</li><li>
Additional network devices as required</li></ul></li><li>
Perform STIG assessments, gap analyses, and remediation across all in-scope network devices, maintaining continuous compliance with current DISA STIG benchmarks</li><li>
Develop, implement, and maintain baseline secure configurations for all categories of network equipment, leveraging Cisco DNA Center for configuration automation, policy enforcement, and compliance monitoring at scale</li><li>
Maintain a comprehensive STIG compliance inventory, tracking assessment status, remediation progress, and residual risk findings across the enterprise device landscape</li><li>
Support Authority to Operate (ATO) activities by producing accurate, current STIG compliance documentation and contributing to system security plans and assessment artifacts</li></ul></div> 
Vulnerability Management &amp; Threat Mitigation<div><ul><li>
Manage and mitigate findings from Information Assurance Vulnerability Management (IAVM) notices, Common Vulnerabilities and Exposures (CVEs), and other security alerts impacting network infrastructure</li><li>
Execute and remediate vulnerabilities identified through Assured Compliance Assessment Solution (ACAS) scans, coordinating with infrastructure teams to prioritize and resolve findings in alignment with DoD remediation timelines</li><li>
Monitor threat intelligence feeds and DISA advisories to proactively assess emerging vulnerabilities against the enterprise network environment and initiate mitigation actions</li><li>
Develop and maintain vulnerability remediation plans, tracking findings from identification through validated closure with documented evidence</li><li>
Coordinate with the ISSO/ISSM and security assessment teams to ensure vulnerability findings are accurately reflected in system security documentation and risk management artifacts</li></ul></div> 
POAM Management &amp; Security Governance<div><ul><li>
Lead and facilitate weekly Plan of Action and Milestones (POA&amp;M) meetings, driving structured tracking and resolution of open security findings across the network infrastructure portfolio</li><li>
Manage Exception to Policy (ETP) requests, developing technically sound justifications, compensating controls documentation, and tracking ETP lifecycles through approval and expiration</li><li>
Maintain accurate and current POA&amp;M entries in coordination with the ISSO/ISSM, ensuring findings are properly categorized, assigned, and progressing toward resolution within mandated timelines</li><li>
Produce clear security compliance reporting for program leadership and Government stakeholders, communicating open findings, remediation status, risk posture, and trending metrics</li><li>
Support continuous monitoring activities and periodic security reviews, contributing to the overall Risk Management Framework (RMF) lifecycle for in-scope network systems</li></ul></div> 
Security Automation &amp; Configuration Management<div><ul><li>
Leverage Cisco DNA Center to automate the deployment and enforcement of baseline secure configurations across the enterprise network device inventory</li><li>
Develop and maintain configuration compliance templates and policies within Cisco DNA, enabling automated drift detection and remediation at scale</li><li>
Establish and enforce change management processes for security-relevant network configurations, ensuring all changes are documented, reviewed, and validated against security baselines</li><li>
Contribute to DevSecOps pipeline integration by incorporating network security validation and compliance checks into automated infrastructure workflows where applicable</li><li>
Document all baseline configurations, security procedures, and compliance workflows in Confluence or equivalent platforms, maintaining a current and accessible knowledge base</li></ul></div> 
Cross-Functional Collaboration &amp; SME Enablement<div><ul><li>
Serve as the dedicated network security authority, proactively identifying and resolving compliance and vulnerability issues before they impact other infrastructure SMEs or mission operations</li><li>
Collaborate with data center, wireless, cloud, and application teams to ensure security requirements are consistently applied across all infrastructure domains</li><li>
Provide security guidance and consultation to infrastructure engineers, enabling informed security decision-making without diverting SME focus from core engineering responsibilities</li><li>
Coordinate with DISA, Cybersecurity teams, and Government security personnel to stay current on evolving compliance requirements and ensure timely implementation of new mandates</li><li>
Maintain a proactive, solution-oriented communication style when engaging with team members, Government stakeholders, and security authorities</li></ul></div> 
Required Qualifications:
Candidates must possess experience and capabilities across the following skill areas, listed in order of importance:<div><ul><li>
U.S. Citizenship required; ability to obtain and maintain a DoD Secret clearance.</li><li>
Minimum of eight (8) years of progressive experience in network security engineering, with demonstrated expertise in DoD compliance frameworks and enterprise network hardening.</li><li>
CompTIA Security+ CE or equivalent (DoD 8570/8140 IAT II)</li></ul></div><ul><li>
Deep hands-on experience performing STIG assessments and remediation across a broad range of network device types including routers, switches, firewalls, load balancers, and wireless infrastructure</li><li>
Proven proficiency with ACAS/Nessus vulnerability scanning, findings analysis, and remediation management in a DoD environment</li><li>
Strong working knowledge of IAVM processes, CVE management, and DoD security alert response procedures</li><li>
Hands-on experience with Cisco DNA Center for network automation, configuration management, and compliance enforcement</li><li>
Demonstrated experience leading POA&amp;M management and ETP processes in coordination with ISSOs and security assessors</li><li>
Solid understanding of DISA STIGs, RMF, NIST 800-53, and federal network security compliance frameworks</li><li>
Strong experience with F5 load balancers, Cisco ISE, and enterprise firewall platforms in compliance-driven environments</li></ul><div><ul><li>
CompTIA Security+ CE or equivalent (DoD 8570/8140 IAT II)</li></ul></div><ul><li>
Active DoD Secret clearance (Top Secret preferred)</li></ul> 
Preferred Qualifications:<div><ul><li>
Direct experience supporting DoD enterprise IT modernization programs.</li></ul></div><ul><li>
Familiarity with Palo Alto Networks firewalls and Panorama security policy management</li><li>
Experience with SIEM platforms and security event correlation in support of continuous monitoring requirements</li><li>
Working knowledge of Cisco ACI and data center fabric security considerations</li><li>
Background in enterprise wireless security, including WIPS/WIDS implementation and wireless STIG compliance</li><li>
Experience with automated compliance tooling beyond Cisco DNA, such as Ansible, Terraform, or equivalent for security configuration enforcement</li><li>
Familiarity with eMASS or equivalent Government risk management and ATO tracking platforms</li></ul><div><ul><li>
Palo Alto Networks Certified Network Security Engineer (PCNSE)</li><li>
Cisco Certified Specialist &ndash; Network Security (Firepower)</li><li>
Bachelor&rsquo;s degree in Computer Science or related Network Engineering field (or equivalent professional experience)</li></ul></div> 
Work Environment:<div><ul><li>
Required to dress appropriately for the job environment, including adherence to safety, security, and site-specific dress standards</li><li>
Ability to sit or stand for extended periods while performing computer-based tasks.</li><li>
Requires sustained use of hands and fingers for keyboarding, writing, and operation of standard office equipment, as well as frequent verbal communication, active listening, and visual acuity to perform job responsibilities effectively.</li><li>
Occasional movement around the office, including climbing stairs.</li><li>
Ability to travel up to 10%, which may include occasional visits to client sites or government installations.</li></ul></div> 
Why ITility?
ITility is a Service-Disabled Veteran-Owned Small Business dedicated to delivering secure, innovative technology solutions that protect and defend our nation. We empower our teams to think beyond perceived limits and deliver mission-focused solutions that matter.
Your work will directly contribute to enterprise modernization efforts supporting national defense readiness.</div>

Senior Network Security Engineer

<div>ITility is seeking a Senior Technical Functional Analyst to support a mission-critical enterprise modernization contract with the Department of Defense (DoD). This role supports mission-critical, AWS-hosted enterprise applications that enable the secure processing of recruit candidates entering the U.S. Armed Forces across geographically dispersed sites. This is a remote position with occasional travel (10%) to government installations.
This position operates at the intersection of mission operations, cloud architecture, and Agile DevSecOps delivery. The Senior Technical Functional Analyst serves as a senior liaison between Government stakeholders and cloud development teams, translating operational requirements into secure, scalable, and technically sound solutions within a modern AWS cloud environment.
The ideal candidate combines deep functional analysis expertise with technical fluency in cloud-native architectures and federal compliance frameworks. 
Key Responsibilities:
Requirements &amp; Functional Leadership<div><ul><li>
Lead complex requirements elicitation sessions with Government stakeholders, subject matter experts, and executive leadership.</li><li>
Translate business, operational, and compliance needs into structured functional and non-functional requirements.</li><li>
Own the end-to-end requirements lifecycle from discovery through production deployment.</li><li>
Decompose system capabilities into epics, features, and detailed user stories aligned to Agile delivery practices.</li><li>
Maintain bidirectional traceability between requirements, design artifacts, test cases, and release deliverables.</li></ul></div>
Cloud &amp; Technical Collaboration<div><ul><li>
Partner with AWS cloud development teams supporting Ruby on Rails backend services, React front-end applications, PostgreSQL databases, and GraphQL APIs.</li><li>
Provide functional guidance on data modeling, database design considerations, and API schema structures.</li><li>
Support integration patterns leveraging AWS services such as CloudWatch, SQS, and SNS.</li><li>
Contribute to architecture and design reviews to ensure alignment with mission scalability and performance requirements.</li><li>
Collaborate within a DevSecOps pipeline supporting CI/CD, automated testing, and secure release management.</li></ul></div>
Security, Compliance &amp; Risk Management<div><ul><li>
Ensure requirements incorporate DoD security controls, role-based access controls, and least-privilege models.</li><li>
Support RMF documentation updates and control validation activities in coordination with cybersecurity teams.</li><li>
Identify functional risks, integration gaps, and system impacts; recommend mitigation strategies.</li><li>
Contribute to audit readiness and ATO sustainment activities.</li></ul></div>
Agile Product &amp; Delivery Support<div><ul><li>
Participate in sprint planning, backlog refinement, release planning, and user acceptance testing.</li><li>
Support Product Owner in backlog prioritization aligned to mission value and operational impact.</li><li>
Analyze user feedback and system performance metrics to inform feature enhancements and continuous improvement.</li><li>
Develop clear, concise technical documentation, training materials, and executive-level briefings.</li></ul></div>
Stakeholder Engagement<div><ul><li>
Serve as a trusted advisor to Government leadership, technical teams, and cross-functional stakeholders.</li><li>
Deliver functional briefings and training sessions to both technical and non-technical audiences.</li><li>
Promote transparent communication and collaborative problem-solving across distributed teams.</li></ul></div> 
Required Qualifications:
Candidates must possess experience and capabilities across the following skill areas, listed in order of importance:<div><ul><li>
U.S. Citizenship required; active DoD Secret clearance preferred.</li><li>
Minimum of eight (8) years of progressive experience in functional analysis, business systems analysis, or requirements engineering supporting federal IT systems.</li><li>
Demonstrated experience supporting AWS cloud-native application development environments.</li><li>
Experience operating within Agile or DevSecOps delivery environments.</li><li>
Demonstrated experience constructing workflow diagrams, data flow diagrams, interface specifications, and requirements traceability matrices.</li><li>
Strong analytical and systems-thinking mindset with exceptional attention to detail.</li><li>
Excellent written and verbal communication skills, including experience briefing executive-level stakeholders.</li><li>
Bachelor&rsquo;s degree in Computer Science, Information Systems, or related field (or equivalent professional experience).</li></ul></div> 
Preferred Qualifications:<div><ul><li>
Experience supporting DoD or federal acquisition programs.</li><li>
Experience supporting systems operating under DoD RMF and cybersecurity compliance frameworks.</li><li>
Experience supporting applications built on Ruby on Rails, React, PostgreSQL, and GraphQL.</li><li>
Working knowledge of AWS services including CloudWatch, SQS, and SNS.</li><li>
Experience working in AWS GovCloud environments.</li><li>
Familiarity with role-based access control models and entitlement management.</li><li>
Experience supporting enterprise modernization or large-scale digital transformation initiatives.</li><li>
Agile certification (CSM, SAFe, or equivalent).</li></ul></div> 
Work Environment:<div><ul><li>
Required to dress appropriately for the job environment, including adherence to safety, security, and site-specific dress standards</li><li>
Ability to sit or stand for extended periods while performing computer-based tasks.</li><li>
Requires sustained use of hands and fingers for keyboarding, writing, and operation of standard office equipment, as well as frequent verbal communication, active listening, and visual acuity to perform job responsibilities effectively.</li><li>
Occasional movement around the office, including climbing stairs.</li><li>
Ability to travel up to 10%, which may include occasional visits to client sites or government installations.</li></ul></div> 
Why ITility?
ITility is a Service-Disabled Veteran-Owned Small Business dedicated to delivering secure, innovative technology solutions that protect and defend our nation. We empower our teams to think beyond perceived limits and deliver mission-focused solutions that matter.
Your work will directly contribute to enterprise modernization efforts supporting national defense readiness. 
ITility is an Equal Opportunity Employer
ITility is committed to providing a work environment that is non-discriminatory, harassment free, fair, ethical and inclusive. ITility is committed to the principle of equal employment opportunity and complies with all applicable laws which prohibit discrimination and harassment in the workplace. ITility strictly prohibits discrimination or harassment based on race, color, religion, national origin, sex, sexual orientation, gender identity, protected veteran status, disability, or any other characteristic protected by law in all terms, conditions and privileges of employment, including without limitation, recruiting, hiring, assignment, compensation, promotion, discipline and termination. This policy covers conduct occurring at ITility&rsquo;s offices, client sites, other locations where ITility is providing services, and to all work-related activities.</div>

Senior Technical Functional Analyst

<div>ITility is seeking an experienced Business Analyst &ndash; Cloud Applications to support a mission-critical enterprise modernization contract with the Department of Defense (DoD). This role supports mission-critical, AWS-hosted enterprise applications that enable the secure processing of recruit candidates entering the U.S. Armed Forces. This is a remote position with occasional travel (10%) to government installations. 
The Business Analyst operates within an Agile DevSecOps environment, serving as the primary liaison between Government stakeholders and cloud-based development teams. This position translates operational needs into structured, technically implementable requirements that align with mission objectives, compliance mandates, and system scalability. 
This role supports multiple related MITES workstreams, including coordination with the Dev Force team, and requires the ability to balance priorities across parallel Agile delivery efforts. 
Key Responsibilities:
Requirements Elicitation &amp; Functional Analysis<div><ul><li>
Lead structured requirements elicitation sessions with Government stakeholders, subject matter experts, and end users.</li><li>
Translate business and operational needs into clear functional and non-functional requirements.</li><li>
Decompose high-level capabilities into epics, user stories, and acceptance criteria within Jira.</li><li>
Ensure traceability from mission need through implementation and validation.</li></ul></div>
Backlog Governance &amp; Agile Delivery<div><ul><li>
Manage and prioritize requirements backlogs in collaboration with Product Owners and Scrum Masters.</li><li>
Ensure user stories are development-ready, properly estimated, and sequenced for sprint planning.</li><li>
Maintain traceability across epics, stories, subtasks, and test artifacts.</li><li>
Participate actively in sprint planning, backlog refinement, demonstrations, and release cycles.</li><li>
Serve as the primary point of contact for requirements clarification during development.</li></ul></div>
Cloud &amp; Technical Collaboration<div><ul><li>
Collaborate with development teams supporting modern cloud-native applications utilizing technologies such as Ruby on Rails, Python, Typescript, React, PostgreSQL, and GraphQL.</li><li>
Support design discussions by providing functional context for data models, database structures, and API interfaces.</li><li>
Engage with cloud infrastructure teams to understand monitoring, logging, and integration patterns that inform system requirements.</li><li>
Ensure requirements are technically feasible within AWS-hosted environments.</li></ul></div>
Security &amp; Compliance Integration<div><ul><li>
Incorporate security, compliance, and role-based access control considerations into functional requirements.</li><li>
Support collaboration with cybersecurity teams to ensure alignment with DoD security standards and system authorization requirements.</li><li>
Identify risks, dependencies, and potential system impacts early in the requirements lifecycle.</li></ul></div>
Testing, Validation &amp; Stakeholder Support<div><ul><li>
Ensure acceptance criteria and test scenarios are sufficient for QA and QAT execution.</li><li>
Coordinate with stakeholders during User Acceptance Testing to validate functional outcomes.</li><li>
Disposition defects and change requests through structured backlog management.</li><li>
Develop technical documentation, training materials, and executive-level briefings.</li></ul></div>
Continuous Improvement<div><ul><li>
Evaluate and recommend enhancements to requirements management processes, tools, and templates.</li><li>
Promote transparent communication and collaboration across development, security, operations, and program management teams.</li></ul></div> 
Required Qualifications:<div><ul><li>
U.S. Citizenship required; active DoD Secret clearance preferred.</li><li>
Minimum of eight (8) years of progressive experience in business analysis, functional analysis, or requirements engineering supporting federal IT systems.</li><li>
Demonstrated experience supporting Agile development environments.</li><li>
Experience supporting modern cloud-hosted application environments.</li><li>
Proficiency in Jira or similar Agile lifecycle management tools.</li><li>
Demonstrated ability to develop workflow diagrams, data flow diagrams, and requirements traceability artifacts.</li><li>
Strong analytical and systems-thinking skills.</li><li>
Excellent written and verbal communication skills, including experience briefing senior leadership.</li><li>
Bachelor&rsquo;s degree in Computer Science, Information Systems, Business, or related field (or equivalent professional experience).</li></ul></div>
Preferred Qualifications:<div><ul><li>
Experience supporting DoD or federal acquisition programs.</li><li>
Experience supporting AWS-hosted or GovCloud-based applications.</li><li>
Familiar with DevSecOps delivery models.</li><li>
Experience collaborating with application teams using technologies such as Ruby on Rails, Python, Typescript, React, PostgreSQL, and GraphQL.</li><li>
Experience incorporating role-based access controls and entitlement modeling into requirements.</li><li>
Agile certification (CSM, SAFe, or equivalent).</li></ul></div> 
Work Environment and Physical Requirements:<div><ul><li>
Primarily remote position requiring consistent professional virtual presence.</li><li>
Participation in video-enabled collaboration sessions is expected.</li><li>
Occasional travel (up to 10%) to government installations may be required.</li><li>
Must comply with applicable security and access requirements when traveling.</li><li>
Work is typically performed in an office setting.</li><li>
Prolonged periods of sitting at a desk and working on a computer.</li><li>
Must have the ability to lift 15-25 pounds.</li></ul></div> 
Why ITility?
ITility is a Service-Disabled Veteran-Owned Small Business dedicated to delivering secure, innovative technology solutions that protect and defend our nation. We empower our teams to think beyond perceived limits and deliver mission-focused solutions that matter.
Your work will directly contribute to enterprise modernization efforts supporting national defense readiness.</div>

Business Analyst, Cloud Applications

Join ITility, LLC and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

ITility, LLC

About Company

Senior Network Security Engineer

Senior Technical Functional Analyst

Business Analyst, Cloud Applications