By Light Professional IT Services

• Manage and execute the technical activities required to design, develop, integrate, test, and field applications and cloud computing resources to meet the USCG TDL Owner's deployment timelines and goals. • Develop and maintain Application Program Interfaces (APIs) required for USCG information systems to pull data from CG-OWL. • Customize CG-OWL User Interfaces for USCG use. • Gather CG-OWL user feedback, assess validity, and present to Effort POC to collaboratively add and prioritize features to the Product Roadmap / Backlog. • Conduct Operational and User Acceptance Testing. • Report performance metrics to USCG once per month, including any planned or unplanned downtimes and a summary of actions to address the downtime, and future mitigating factors. • Address all defects found in the MLMS system, or inform third parties (e.g., Moodle, Learning Locker, Rustici, Cloud One) of any defects found. • Update existing Sys/App Admin process guides from the USAF and USCG required to maintain the CG-OWL. • Identify gaps in Sys/App Admin process guides required to maintain the CG-OWL. • Assist Training Course owners upload course material. • Coordinate with Tier 1 and Tier 2 help desk to understand areas of friction for end-users. • Provide Tier 3 assistance for issues escalated through service desk process and critical issues; Tiered 3 support is defined by advanced support requiring investigation on a code level. • Keep process guides updated for System Administrators in accordance with the latest process or software release. • Defects will be reported in a central USCG SharePoint system, and will include all available information, as well as contact information of defect reporter. • Utilize the primary USCG ticketing system, currently CGFixIT (BMC Remedy), to properly document and respond to all incidents, problems, service requests, and maintenance IAW applicable USCG process guides, policies, and procedures.

• Develop engineering assessments of different configurations including the review of work products for correctness, adherence to the design concept and to customer standards, and for progress in accordance with schedules. • Coordinate with the Project and/or Program Manager to ensure problem solution and user satisfaction and with the Lead Engineer on network architecture and design decisions. • Make recommendations, if needed, for approval of major systems installations, prepares milestone status reports and deliveries/presentations on the system concept to colleagues, subordinates, and end user representatives. • Adhere to U.S. Army engineering processes during the development of all submissions; identify additional processes and documentation formats as necessary, submit site specific reports and drawings to Government for review and approval and adhere to the Government’s established process for reviewing, updating, approving, and disseminating Design and Engineering documents.

• Support the design and maintain landing zones using cloud applications such as AWS Organizations, Control Tower, SCP guardrails, Identity and Access Management (IAM) multi-account patterns, and VPC architectures (Transit Gateway, PrivateLink, NAT, IGW) for enclave isolation and cross-domain needs. • Engineer high-availability, multi-Region solutions leveraging cloud tools such as EC2, EKS/ECS Fargate, RDS/Aurora, DynamoDB, S3/EFS/FSx, Load Balancers, Route 53, and API Gateway. • Implement Zero Trust-aligned patterns (micro-segmentation, strong identity, continuous verification) consistent with DoD Zero Trust guidance. • Implement security controls and evidence generation for RMF ATO packages (SSP, SAR, POA&M) in coordination with cybersecurity teams. • Apply DISA STIGs (OS, DB, Kubernetes, Container) and SRG requirements for workloads at IL2–IL6. • Tailor and automate STIG application using IaC and configuration management. • Integrate encryption and key management with cloud tools such as AWS KMS/HSM; enforce IAM least privilege, SCPs, permission boundaries, ABAC, and robust secrets management. • Implement cloud logging and metrics tools such as CloudTrail/CloudWatch/GuardDuty/Config for comprehensive audit and detection. • Align architectures with FedRAMP Moderate/High baselines when required and ensure boundary compliance for controlled workloads. • Develop secure connectivity (AWS Direct Connect/VPN), hybrid routing, and segmentation; implement TLS mutual auth, certificate management, and private service endpoints. • Design logging and telemetry pipelines (CloudWatch, OpenTelemetry, Kinesis, S3, SIEM integration such as Splunk/ELK) with retention, metadata/tagging, and data lifecycle policies. • Own SLOs/SLAs for platform services. • Implement autoscaling, health checks, and proactive capacity management. • Lead cost management and alerting practices of cloud environments in coordination with project leads. • Provide Tier 3 support, on-call rotations during exercises, and incident response coordination with cybersecurity and training operations. • Collaborate with agile teams and product owners to translate training requirements into platform capabilities. • Provide mentorship for junior engineers. • Establish standards, design reviews, and repeatable processes. • Present cloud solutions to project leadership and accreditation authorities.

• Design, implement, and maintain security controls across system development and operations. • Secure AWS-based cloud environments; provide working knowledge of Azure and/or Google Cloud. • Perform system hardening, vulnerability scanning, monitoring, and incident response. • Analyze logs, develop alerts, and support forensic investigations. • Support security architecture design and integration for new and existing systems. • Provide support and oversight for systems, including: Patching selection and updates. Training data security and integrity. Network monitoring, access controls, and monitoring. Review and approval of AI-related changes and updates. • Support compliance activities aligned with CMMC Level 2, SOC 2, and ISO/IEC 27001. • Contribute to security documentation, risk assessments, and audit readiness efforts.

• Collaborate with the development team to design and implement a user-friendly web-based interface for the platform. • Develop high-quality, responsive, and interactive components using modern web dev tech stacks. • Work with existing backend services to integrate capability, ensuring seamless data exchange and API interactions. • Participate in code reviews, contribute to the improvement of the codebase, and maintain high standards of coding quality. • Develop and maintain documentation for the components, ensuring that it is accurate, up-to-date, and accessible to the development team. • Collaborate with the design team to ensure that the front-end aligns with the company's visual identity and design principles. • Troubleshoot and resolve issues, working closely with the development team to resolve any technical challenges.

• Develop and maintain a modern, responsive web interface. • Build backend scoring services, databases, and automated scoring agents for Windows and Linux. • Conduct system testing within integrated cyber range environments. • Create and maintain administrative, technical, and end‑user documentation. • Collaborate with the RangeOS development team to ensure seamless integration with versioned cyber ranges. • Contribute to solution designs that align with requirements and system constraints. • Estimate effort, complexity, and timelines for assigned tasks. • Implement clean, efficient, and maintainable code using modern programming practices. • Select optimal algorithms and approaches to solve technical problems. • Apply sound logic and design principles to feature development. • Follow established coding conventions and standards. • Document code structures, logic flows, and module behavior. • Produce clear technical documentation for developers, engineers, and stakeholders. • Develop customer-facing documentation as required. • Demonstrate strong written, verbal, and presentation skills. • Perform unit testing to validate functionality. • Support integration and validation testing across complex system environments.

• Manage the full lifecycle of vendor contracts, including sourcing, negotiation, execution, renewals, and compliance. • Develop pricing models, rate structures, and cost analyses to support proposals, renewals, and program planning. • Coordinate with internal teams to ensure contractual terms align with technical, operational, and financial requirements. • Maintain accurate records of agreements, amendments, obligations, and vendor performance. • Support vendor onboarding, qualification, and ongoing relationship management. • Ensure timely procurement of software, hardware, services, and licensing required for RangeOS deployments. • Collaborate with finance and program management to forecast spend, track budgets, and manage cost efficiencies. • Serve as the primary point of contact for vendor escalations, contract questions, and commercial negotiations. • Evaluate vendor proposals, pricing structures, and contract terms for alignment with program needs. • Assess risks, dependencies, and commercial impacts associated with vendor agreements. • Provide cost estimates, procurement timelines, and contract recommendations to leadership. • Draft, review, and refine statements of work, pricing schedules, and contractual deliverables. • Maintain a prioritized pipeline of upcoming renewals, expirations, and procurement actions. • Validate vendor invoices, pricing accuracy, and contract compliance. • Support competitive sourcing efforts to ensure best value and mission alignment. • Maintain contract files, pricing models, procurement logs, and vendor performance records. • Document procurement workflows, negotiation outcomes, and decision rationales. • Prepare vendor communications, contract summaries, and customer‑facing pricing documentation. • Demonstrate strong written, verbal, and presentation skills across technical and business audiences. • Monitor vendor performance, service levels, and delivery commitments. • Facilitate regular vendor reviews and coordinate corrective actions when needed. • Ensure vendors meet security, compliance, and operational requirements relevant to cyber training environments.

• DevOps duties include creating and maintaining online distribution repos • Developing Linux-based packages and patches • Developing and testing end-user installation strategies • Automating build and deployment processes • Contributing to developing, operating, and maintaining DevSecOps processes, tools, and an automation pipeline • Ensuring the DevSecOps environment facilitates designing, implementing, deploying, and executing automated tests • Continuously investigating new technologies to improve productivity, quality, ease of use, and maintenance. • Automating DevOps pipelines, software builds, and software tests. • Authoring and maintaining automation deployment and monitoring scripts • Developing and maintaining security controls and systems • Managing virtualized and containerized assets • Creating virtual and physical network configurations, servers, communications, and test and developer engineering support • Linux software package creation and deployment and for creation and maintenance of the on-line distribution repository • Design, integration, test, and initial deployment of a variety of applications in an enterprise Kubernetes environment using modern tools and patterns • Responsible for creating infrastructure as code environments for complex virtualized networks • Train others to perform similar DevSecOps and automation tasks • Maintain and evangelize content to support a corporate library of knowledge.

• Define, maintain, and communicate the RangeOS product vision, roadmap, and release strategy. • Translate operational, customer, and stakeholder needs into clear, actionable requirements and user stories. • Prioritize the product backlog to maximize mission impact, technical feasibility, and delivery velocity. • Work closely with engineering teams to ensure alignment between requirements, design, and implementation. • Coordinate with cyber range operators, exercise planners, and multi‑vendor partners to validate capabilities and workflows. • Support deployment planning, release readiness, and integration across RCS, ECS, and cloud environments. • Develop and maintain product documentation, feature briefs, and customer‑facing materials. • Serve as the primary voice of the customer, ensuring RangeOS capabilities meet operational training objectives. • Collaborate with engineering to shape solution designs that meet functional and non‑functional requirements. • Validate completed features against requirements and mission needs.

• Provide overall technical leadership and architectural governance for the application maintenance and modernization program • Serve as the principal technical authority across all project teams • Establish and maintain enterprise architecture standards • Guide the modernization strategy from legacy on-premise systems to AWS cloud services • Ensure technical decisions align with both immediate operational needs and long-term strategic objectives • Collaborate closely with government technical leads • Review and approve major architectural decisions • Oversee technical risk management • Ensure that all solutions comply with federal security requirements and GSA enterprise architecture standards while optimizing for performance, scalability, and cost-effectiveness