nist-800-171 jobs in San Diego

Lead large, multi-workstream enterprise technology programs including ERP rollouts, cloud migrations, identity/security initiatives, and system integrations from planning through go-live and stabilization. Define program structure, roadmap, and delivery strategy; coordinate multiple project managers and vendor teams; drive technical delivery conversations across architecture, data migration, security, and testing; establish governance and executive reporting; own risk management and budget accountability; and mentor junior program managers.…See more Requires 8+ years of program management experience with 5+ years leading complex multi-workstream technology programs and proven delivery of large-scale enterprise initiatives through go-live.

This role involves conducting comprehensive security assessments of AI systems and deployments, evaluating them against NIST frameworks (AI RMF, CSF, 800-53, 800-171) and other security standards. The consultant will identify AI-specific risks such as prompt injection, model misuse, data leakage, and supply-chain vulnerabilities across cloud platforms (AWS, Azure, hybrid).…See more Responsibilities include developing AI governance frameworks, policies, and controls; assessing AI development environments, model pipelines, APIs, and orchestration layers; and delivering executive-level recommendations and remediation roadmaps. Requires 7+ years of cybersecurity/consulting experience and 3+ years supporting AI/machine learning security initiatives, with strong expertise in AI threat modeling, secure AI deployment, and governance frameworks.

This role supports the development, implementation, and maintenance of IT compliance programs, policies, and procedures aligned with regulations including NIST 800-171, DFARS, CMMC, and ISO 27000 Series. The position conducts internal assessments, manages external audits by government agencies and third-party assessors, and works cross-functionally to ensure systems meet compliance requirements.…See more Responsibilities include monitoring regulatory changes, developing compliance reports and presentations, investigating violations, and serving as the primary point of contact for IT compliance inquiries. The role requires 10+ years of progressive experience in information assurance or a related field, ability to obtain a DoD security clearance, and certifications such as CompTIA Security+, CISSP, or higher.

A senior technical architect role responsible for designing cloud and security solutions for multi-client MSP environments, conducting technical quality assurance across engineering teams, and establishing configuration standards and documentation. The role requires 5+ years of hands-on infrastructure/cloud/security/identity experience with deep expertise in Azure, Entra ID, and the Microsoft Defender/Security suite, plus demonstrated ownership-level depth across endpoint protection, RMM, network/firewall, and VDI platforms.…See more The architect will mentor junior engineers, sanity-check technical feasibility and scope, and validate Statements of Work before client delivery while owning the technical planning for complex multi-workstream projects.

Senior DevOps Build Engineer responsible for designing, building, and maintaining CI/CD pipelines that compile, test, package, and publish software across defense and government contract programs. The role owns build automation, release engineering, artifact management, and container registries end-to-end, while integrating security and compliance checks directly into the build process.…See more Requires 8+ years of hands-on experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins), strong scripting skills in Python and Bash, and proficiency with containerization, artifact management, and cloud platforms (AWS or Azure). The engineer will partner with development, security, and compliance teams to deliver self-service tooling and standardize builds across unclassified and controlled unclassified environments.

Architect and maintain ServiceNow security controls aligned to DoD Zero Trust architecture in FedRAMP High and DoD IL4/IL5 environments. Configure role-based access controls (RBAC), access control lists (ACLs), data policies, and edge encryption; maintain security matrices and enforce information-level segregation.…See more Develop System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts to support ATO attainment and sustainment. Conduct vulnerability assessments, continuous monitoring, manage Plans of Action and Milestones (POA&M), and generate security assessment reports.

Senior DevOps Build Engineer responsible for designing and maintaining CI/CD pipelines, build automation, and artifact management systems across defense and government contract programs. The role owns end-to-end build and release engineering, standardizing compilation, packaging, versioning, and promotion across unclassified and controlled environments while integrating security and compliance checks into the build process.…See more Key responsibilities include pipeline design (GitLab CI, GitHub Actions, Jenkins), artifact repository management, build tooling development (Bash, Python, Bazel, Gradle), container image management, and infrastructure provisioning using Terraform. The position requires 8+ years of build/release engineering or DevOps experience, strong scripting skills, and U.S. citizenship with the ability to obtain a security clearance.

A Junior Operating Systems Engineer will build and maintain custom Linux images using Yocto Project (recipes, layers, BitBake, kernel configuration), supporting immutable A/B-updatable OS architectures with secure boot and update tooling. The role involves packaging, integrating, and troubleshooting system services, drivers, and third-party software on embedded x86 hardware, as well as contributing to OS hardening (FIPS mode, secure boot, compliance configuration).…See more Daily use of generative AI tools will accelerate development tasks including recipe writing, test scaffolding, and debugging. The engineer will debug boot, kernel, driver, and userspace issues on real appliance hardware and document build processes, image releases, and provisioning workflows.