Software Gigs

Lyntris seeks a Cyber Security Engineer II to provide Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy software solutions. The role involves designing, implementing, and monitoring cybersecurity and information assurance policies for mission-critical systems; developing system IA documentation (categorization forms, security plans, assessment plans, continuous monitoring plans, risk assessments); and guiding the software development team through security scan review, evaluation, and remediation. The engineer will work with system owners and stakeholders to manage cybersecurity requirements and continuously improve cyber posture. Requires 2–3 years of Department of Navy accreditation experience and working knowledge of NIST standards, RMF, and eMASS.

Design, implement, and maintain secure DevSecOps automation frameworks across on-premise and cloud infrastructure, integrating security controls into CI/CD pipelines for application and configuration deployment. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, Python, and Bash across Windows, Linux, VMware, Azure, and hybrid environments. Automate provisioning, patching, vulnerability remediation, and compliance checks aligned with FFIEC, NCUA, CIS, and NIST standards while partnering with Cybersecurity, Infrastructure, and Application Development teams. Support container/platform engineering, cloud identity governance, and promote DevSecOps and GitOps practices across technology teams.

This Staff IT Engineer role supports secure enterprise environments serving government missions, with primary responsibility for implementing, administering, and optimizing Microsoft infrastructure technologies including Windows Server, Active Directory, Group Policy, SCCM, DNS, DHCP, file services, and print services. The candidate will provide Tier 2/3 support, troubleshoot complex infrastructure issues, perform system maintenance and patching, manage endpoint compliance, and ensure compliance with federal cybersecurity frameworks (NIST, RMF, CMMC). The role requires at least 3 years of hands-on experience with on-premises Microsoft infrastructure in enterprise environments and an active Top Secret security clearance.

Design, implement, and maintain secure DevSecOps automation frameworks and CI/CD pipelines across hybrid infrastructure, cloud, and application platforms. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, and Python to automate provisioning, configuration management, patching, and vulnerability remediation across Windows, Linux, VMware, and Azure environments. Integrate security controls into deployment pipelines including vulnerability scanning, secrets detection, code scanning, and policy enforcement aligned with FFIEC, NCUA, CIS, and NIST standards. Partner across Infrastructure, Security, and Application Development teams to advance DevSecOps practices, container engineering, and secure cloud governance.

This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation. The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.

Own end-to-end compliance program operations for a healthcare AI company, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and maintaining audit-readiness. Administer Google Workspace and MDM tooling, including user lifecycle management, access controls, and endpoint compliance. Coordinate external audits, manage evidence collection, and drive remediation from detection to closure while partnering with engineering, product, and leadership to scale compliance rigor as the company grows.