nist jobs in San Diego

This DevOps Engineer role bridges software developers and systems administration teams at a fusion research facility, managing high-availability virtualization clusters, infrastructure-as-code automation, and CI/CD pipelines. Key responsibilities include Proxmox VE cluster management, Ansible-based infrastructure templating, patch lifecycle automation via Red Hat Satellite/Foreman, Docker containerization, and rapid-response security deployments to meet DOE compliance SLAs.…See more The position requires deep expertise in Linux system administration, configuration management, CI/CD tools, scripting (Bash, Python, JavaScript), and experience operating in regulated federal/research environments under NIST and DOE cybersecurity frameworks.

Director-level role leading cyber architecture strategy and teams at an enterprise consulting firm. Responsibilities include architecting secure cloud and AI-enabled solutions, guiding security controls and design patterns, mentoring security professionals, and providing technical thought leadership on emerging technologies like generative AI and agentic systems.…See more Requires 10+ years of security architecture experience, expertise across IaaS/PaaS/SaaS platforms, and proven ability to influence enterprise technology strategy while balancing business enablement with risk management.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

Serve as a primary administrator for core security technologies including Microsoft Defender Suite, Entra ID, Conditional Access, and endpoint protection, while also administering enterprise infrastructure across Microsoft 365, Azure, AWS, VMware, and hybrid platforms. Troubleshoot complex infrastructure and security issues, manage cloud backup and disaster recovery, monitor alerts through LogicMonitor and SIEM/MDR/SOCaaS services, and coordinate with security operations teams on investigations and remediation.…See more Requires 8+ years of hands-on experience in cybersecurity and infrastructure engineering in business-critical environments, with deep expertise in Microsoft identity and security technologies, cloud platforms, vulnerability management, and enterprise backup solutions. Participate in after-hours support and escalation activities as needed.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), driving control remediation to closure, administering Google Workspace and MDM, coordinating external audits, and maintaining audit-readiness. This role requires hands-on management of a compliance platform of record, continuous monitoring of compliance tests, security policy maintenance, evidence collection, and risk tracking—operating with high rigor in a fast-scaling startup without routing issues to others.See more

Lyntris seeks a Cyber Security Engineer II to provide Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy software solutions. The role involves designing, implementing, and monitoring cybersecurity and information assurance policies for mission-critical systems; developing system IA documentation (categorization forms, security plans, assessment plans, continuous monitoring plans, risk assessments); and guiding the software development team through security scan review, evaluation, and remediation.…See more The engineer will work with system owners and stakeholders to manage cybersecurity requirements and continuously improve cyber posture. Requires 2–3 years of Department of Navy accreditation experience and working knowledge of NIST standards, RMF, and eMASS.

Design, implement, and maintain secure DevSecOps automation frameworks across on-premise and cloud infrastructure, integrating security controls into CI/CD pipelines for application and configuration deployment. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, Python, and Bash across Windows, Linux, VMware, Azure, and hybrid environments.…See more Automate provisioning, patching, vulnerability remediation, and compliance checks aligned with FFIEC, NCUA, CIS, and NIST standards while partnering with Cybersecurity, Infrastructure, and Application Development teams. Support container/platform engineering, cloud identity governance, and promote DevSecOps and GitOps practices across technology teams.

This Staff IT Engineer role supports secure enterprise environments serving government missions, with primary responsibility for implementing, administering, and optimizing Microsoft infrastructure technologies including Windows Server, Active Directory, Group Policy, SCCM, DNS, DHCP, file services, and print services. The candidate will provide Tier 2/3 support, troubleshoot complex infrastructure issues, perform system maintenance and patching, manage endpoint compliance, and ensure compliance with federal cybersecurity frameworks (NIST, RMF, CMMC).…See more The role requires at least 3 years of hands-on experience with on-premises Microsoft infrastructure in enterprise environments and an active Top Secret security clearance.

Design, implement, and maintain secure DevSecOps automation frameworks and CI/CD pipelines across hybrid infrastructure, cloud, and application platforms. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, and Python to automate provisioning, configuration management, patching, and vulnerability remediation across Windows, Linux, VMware, and Azure environments.…See more Integrate security controls into deployment pipelines including vulnerability scanning, secrets detection, code scanning, and policy enforcement aligned with FFIEC, NCUA, CIS, and NIST standards. Partner across Infrastructure, Security, and Application Development teams to advance DevSecOps practices, container engineering, and secure cloud governance.

This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation.…See more The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance platforms (SOC2 Type II, HIPAA, NIST, ISO), administering Google Workspace and MDM, driving remediation of failing controls to closure, and coordinating external audits. Monitor compliance tests continuously, maintain security policies and evidence collection, and work cross-functionally with engineering and leadership to keep the company audit-ready at scale.…See more The role requires hands-on compliance platform administration (Vanta, Drata, or similar), not purely administrative ticket routing.