ECS Tech Inc

Role Description Everforth ECS is seeking a Remote Vulnerability Management Lead who lives in close proximity to the National Capital Region (NCR) to join a premier, enterprise-scale cybersecurity program supporting a major federal civilian agency. Please Note: This position is contingent upon contract award. Salary Range: $115,000 - $135,000. This flagship initiative unifies 24x7x365 Security Operations (SOC), proactive threat hunting, and advanced Security Engineering and Architecture into a cohesive defensive mission. As a key leader on this program, you will drive the protection of highly sensitive, national-level financial and personally identifiable information (PII). You will be at the forefront of modernizing the agency's cyber posture, implementing advanced automation, and ensuring continuous operational resilience across a massive, highly complex federal IT enterprise. As the Vulnerability Management Lead, you will serve as the principal technical authority for enterprise vulnerability identification, prioritization, and remediation across a large-scale federal civilian environment. Working closely with Information System Security Officers (ISSOs), Information System Owners (ISOs), compliance teams, and engineering personnel, you will drive a proactive, risk-based approach to vulnerability management, delivering measurable reductions in the agency's attack surface while ensuring continuous alignment with federal compliance requirements. - Oversee enterprise vulnerability scanning operations, remediation tracking, and stakeholder communication with POA&M support across the program. - Coordinate with ISOs, ISSOs, compliance, and engineering teams to identify, prioritize, and close security gaps in a timely and risk-informed manner. - Lead ATO, POA&M and continuous monitoring activities. - Develop and maintain dashboards and metrics to provide real-time visibility into vulnerability management posture, trends, and remediation progress. - Produce compliance reports and vulnerability governance data to support continuous monitoring, audit readiness, and cybersecurity decision-making. - Manage integration of vulnerability management tools including Tenable, AquaSec, and the Continuous Diagnostics and Mitigation (CDM) program into enterprise workflows. - Apply risk-based prioritization methodologies to ensure the most critical vulnerabilities are addressed in alignment with agency risk tolerance and compliance requirements. - Support the review and maintenance of Plans of Action & Milestones (POA&Ms), ensuring timely and accurate tracking of identified vulnerabilities and remediation activities. - Collaborate with SOC, threat hunting, and security engineering teams to correlate vulnerability data with active threat intelligence and hunting findings. - Present vulnerability management findings, risk recommendations, and program metrics to both technical teams and senior government officials in a clear, actionable format. - Develop and refine vulnerability management policies, procedures, and standard operating procedures to ensure alignment with federal regulations and agency requirements. - Support continuous monitoring activities and provide input into the overall security posture of the agency's federal IT enterprise. Qualifications - US Citizenship required. - 6+ years of cybersecurity experience, with demonstrated expertise in vulnerability management, operating systems, and networking. - Remote but within close proximity to the NCR. - Active Public Trust 6c clearance, or the ability to obtain and maintain one. - At least one of the following certifications: GCIH, CISSP, CISM, or CRISC. - Hands-on experience with Tenable, AquaSec, and CDM integration in a federal or enterprise environment. - Strong understanding of federal compliance frameworks including NIST RMF, NIST SP 800-53, FISMA, and FedRAMP requirements. - Experience developing and maintaining POA&Ms and supporting remediation tracking within federal information system environments. - Demonstrated ability to coordinate cross-functional teams, including ISOs, ISSOs, compliance, and engineering stakeholders, to drive vulnerability remediation efforts. - Proven ability to translate complex technical vulnerability findings into clear, actionable language for both technical and executive audiences. - Strong written and verbal communication skills, with a track record of producing high-quality federal security documentation.

Role Description The Senior Data Solutions Lead is a strategic, hands-on leadership role responsible for driving the design, development, and implementation of enterprise-scale data architecture and solutions. This individual will serve as the primary technical authority for our data engineering initiatives, bridging the gap between complex business requirements and scalable technical deliverables. The ideal candidate will guide a team of data engineers and analysts, champion best practices in data governance, and ensure that our data infrastructure supports advanced analytics, reporting, and mission-critical applications. - Strategic Leadership: Define and execute the overarching data strategy, ensuring alignment with organizational goals and technology roadmaps. - Architecture & Design: Architect scalable, secure, and highly available data platforms, including data lakes, data warehouses, and streaming data pipelines. - Team Management & Mentorship: Lead, mentor, and grow a cross-functional team of data engineers, developers, and analysts to deliver high-quality data solutions. - Stakeholder Collaboration: Partner with cross-functional business leaders, product managers, and external stakeholders to translate complex business needs into robust technical requirements. - Data Governance & Security: Establish and enforce data quality standards, governance frameworks, and security protocols to protect sensitive information and ensure compliance with relevant regulations. - Technology Evaluation: Continuously assess and recommend new data technologies, tools, and methodologies to optimize performance, reduce costs, and improve data accessibility. - Project Delivery: Oversee the end-to-end lifecycle of data projects, ensuring on-time delivery within Agile frameworks. Qualifications - U.S. Citizen: Must be a US Citizen. - Suitability: Ability to obtain and maintain a DHS Public Trust suitability determination. - Experience: 10+ years of progressive experience in data engineering, data architecture, or related fields, with at least 3 years in a leadership or lead architect role. - Cloud Platforms: Deep expertise in one or more major cloud service providers (AWS, Azure, or Google Cloud Platform) and their respective data ecosystems. - Technical Proficiency: Expert-level knowledge of SQL and programming languages such as Python, Scala, or Java. - Data Integration: Proven experience designing and building robust ETL/ELT pipelines using modern integration tools (e.g., Apache Airflow, dbt, Spark, Kafka). - Data Modeling: Strong proficiency in relational and non-relational database design, dimensional modeling, and data warehousing concepts. - Communication: Exceptional verbal and written communication skills, with the ability to explain complex technical concepts to non-technical stakeholders. - Stakeholder Management: Ability to effectively communicate and share knowledge with contacts at all levels. Skilled in developing collaborative relationships. - Team Management: Ability to manage multiple projects and priorities across multiple workstreams with tight deadlines in a fast-paced environment. Requirements - Salary Range: 175,000 - 200,000 Benefits - General Description of Benefits

Role Description Everforth ECS is seeking a full-time Associate Consultant to provide client delivery services to support the Veterans Health Administration (VHA) Claims and Appeals Modernization Office. - Supporting mail operations through multiple sources and escalating complex packets to peers and team leads. - Accessing and using VA claim and appeal systems, including Centralized Mail Portal, Caseflow, VBMS, and SharePoint to review, route, and track claims and appeals packets. - Assisting with project deliverables and activities. - Participating in team meetings, considering a variety of perspectives and supporting team goals and objectives. - Performing ad-hoc mail operations projects as needed under the supervision of senior team members. Salary Range: $65,000 - $70,000 Qualifications - Bachelor's degree or high school degree and relevant work experience. - Strong organization, time management, and prioritization skills. - Attention to detail and excellent at meeting deadlines. - Excellent communication (both written and verbal), teamwork, and interpersonal skills. - Proficiency in the Microsoft Office suite of products. Benefits - General Description of Benefits Company Description

Role Description ECS is seeking a passionate and driven Microsoft Dynamics CRM Developer to support an IT Services program for our Customer located in New York City, NY. The ideal candidate is a critical thinker, able to work in a fast-paced environment, and a perpetual learner who is excited to solve some of our clients’ toughest challenges. The successful candidate must be skilled in developing CRM applications using customization and configuration techniques to help our customers achieve their goals. Salary Range: $135,000 - $168,000 Qualifications - Bachelor's degree or equivalent with relevant certifications. - 5+ years demonstrated performance in software integration primarily focused on enterprise systems in topics such as component integration into SDLC, gap analysis, and software reutilization. - 5+ years of experience with Microsoft Dynamics CRM as a developer. - Design/architect solutions on Dynamics 365, SharePoint Online and Power Platform. - Develop applications using Power Platform Dataverse tables. - Implement business processes in Power Automate Flows. - Experience with data-driven dashboards. - Experience in developing public portals using Power Apps Portals, ADX Portals. - Experience in developing PlugIns, Business Process Flows, Business Rules, Form/View Customization in Microsoft Dynamics 365 online environment. - Experience in designing security model and related out of the box configurations on Microsoft Dynamics 365 online environment. - Experience in C#, .Net, Javascript, MS SQL, MS CRM SDK MSD developer kit. - Implement authentication, MFA and authorization using Azure AD and Azure B2C. - Implement application integration using Azure services such as Azure Service Bus, Azure Logic Apps, Azure Functions, etc. - Experience in MS CRM 3rd party integration using middleware tools such as Kingsway Soft, Scribe REST API, ODATA, and SSIS Packages. - Implement Continuous Integration and Continuous Deployment using Azure DevOps. - Confirm adherence of applications, components and services to established standards and best practices. - Ensure compliance with architecture standards and guidelines throughout the application development life-cycle. - Ensure compliance with agency standards. Propose updates to agency standards in line with industry best practices. Company Description

Role Description Everforth ECS is seeking an Engineering Drafter/BIM Modeler to work (part-time Monday-Wednesday) ideally in Newport, OR. This position will convert to a full-time opportunity in October. May consider remote resources. The Engineering Drafter/BIM Modeler shall provide drafting, modeling, and reality-capture support for the development and maintenance of marine engineering documentation and digital twin models. - Convert existing AutoCAD 2D engineering drawings into accurate Autodesk Revit 3D models. - Import, process, and coordinate LiDAR point cloud data using Autodesk ReCap Pro and Autodesk Revit. - Develop and maintain digital twin models of government vessels using engineering drawings and reality-capture data. - Validate model accuracy by comparing Revit models against LiDAR point clouds and existing engineering documentation. - Create parametric Revit families for marine equipment, structural components, piping systems, and vessel outfitting. - Update engineering models to reflect vessel modifications, repairs, and modernization projects. - Coordinate with naval architects, marine engineers, and technical staff to resolve discrepancies between drawings and as-built conditions. - Produce construction drawings, layouts, sections, elevations, schedules, and engineering documentation from Revit models. - Maintain model organization and data integrity in accordance with established BIM standards and government drafting requirements. - Participate in quality control reviews to ensure engineering models accurately represent existing vessel conditions. - Support digital twin initiatives by integrating engineering documentation with reality-capture technologies. Qualifications - A minimum of five (5) years of professional drafting and 3D modeling experience. - Demonstrated proficiency in Autodesk Revit, AutoCAD, and Autodesk ReCap Pro. - Must be able to obtain a Public Trust clearance. - Experience importing, registering, and managing LiDAR point cloud data within Autodesk Revit. - Experience developing accurate parametric 3D models from point cloud data and existing engineering drawings. - Strong understanding of engineering drafting standards, model coordination, and quality assurance procedures. - Ability to interpret engineering drawings, technical specifications, and vessel documentation. - Strong written and verbal communication skills.

Role Description Everforth ECS is seeking a Cyber Security Administrator II to work Remotely. Please Note: This position is contingent upon contract award. - Administers cybersecurity tools and supports lifecycle operations including patching, configuration compliance, endpoint security, vulnerability scanning, and system hardening. - Ensures secure operation of CI tools and platforms, maintains documentation and baselines, and supports automated processes for remediation and monitoring. Qualifications - Bachelors’ Degree in Cybersecurity, IT, or related field. - 5+ years’ experience. - IRS CI - IRS High Risk Clearance. - Experience with endpoint protection, DLP, IAM/PAM, EDR, vulnerability scanning tools. - Strong background in system hardening, patch management, and configuration compliance. - Knowledge of DISA STIGs, CIS Benchmarks, and federal security controls. - Ability to maintain tool configurations, baselines, and operational documentation.

Role Description Everforth ECS is seeking a SOC Analyst II to work Remotely. Please Note: This position is contingent upon contract award. - Performs SOC Tier 1–3 continuous monitoring of SIEM, SOAR, EDR, IAM, DLP, vulnerability management, and other automated security platforms. - Conducts triage, threat analysis, threat hunting, correlation, enrichment, risk mitigation, and incident response activities. - Documents investigations and artifacts in accordance with IRS and DHS reporting requirements and supports insider threat program and forensic collection. - Collaborates with senior analysts and incident response teams to mitigate risks, enhance security monitoring capabilities, and improve the organization's security posture. Qualifications - Bachelors’ Degree in Cybersecurity, IT, or related field. - 3+ years of SOC experience. - IRS CI - IRS High Risk Clearance. - Knowledge of SIEM, SOAR, EDR, DLP, IAM/PAM tools. - Experience with incident response, threat intelligence, threat hunting, triage, and investigation. - Understanding of federal incident reporting (NIST 800-53, FISMA, IRM 10.8, DHS/Treasury requirements). - Ability to document cases and perform forensic support.

Role Description Everforth ECS is seeking a Cyber Security System Engineer II (SOAR/SIEM Engineer) to work Remotely. Please Note: This position is contingent upon contract award. - Engineers, administers, and maintains CI's SOAR and SIEM platforms. - Develops automated playbooks for alert triage, enrichment, case management, and incident response. - Performs onboarding, correlation tuning, dashboards, retention, and compliance configuration. - Ensures platform availability and alignment with federal security requirements. Qualifications - Bachelors’ Degree in Cybersecurity, IT, or related field. - 5+ years of relevant experience. - IRS CI - IRS High Risk Clearance. - Experience in SIEM engineering, log onboarding, parser development, and correlation tuning. - SOAR platform engineering, playbook development, and automation design skills. - Proficiency integrating SIEM/SOAR with scanners, EDR, DLP, IAM/PAM, and ticketing systems. - Knowledge of NIST, FISMA, IRS IRM 10.8, CDM requirements. - Ability to build and maintain system baselines and architecture documentation.

Role Description Everforth ECS is seeking an OpenShift Cloud Engineer to work in a remote capacity. Ability to meet on-site at ECS’ Fairfax, VA office once a week is preferred, but not required. This exciting opportunity will support the modernization of a DHS system to the Oracle Cloud Infrastructure (OCI) cloud. This role will function as an OpenShift subject matter expert (SME) and coordinate with cloud and on-premise infrastructure teams to develop, deploy, optimize, and support multiple Red Hat OpenShift deployments in OCI. - OpenShift Architecture and Administration: - Develop, plan, and execute deployment of OpenShift environments at any impact level (IL2-IL6) and within cloud, on-premise, or hybrid infrastructures. - Documentation and adherence to security policies as mandated by ATO requirements. - Advise Project Management, Customer leadership, and partner teams on migration to OpenShift operations. - OpenShift Operational Support: - Support onboarding of customer and partner teams into supported OpenShift deployments. - Coordinate with Project Management teams and partners to ensure appropriate resourcing while operating within provided budgetary guidance. - Function as SME for existing Cloud and Infrastructure teams and facilitate cross-training and documentation to expand OpenShift knowledge within the existing team. - OpenShift Troubleshooting and Support: - Troubleshoot production failures. - Support partners and customers with troubleshooting operational failures. - Maintain security compliance and develop/execute remediations, patching, and POAMS as necessary to maintain security compliance and ATO status. - Successfully communicate to customers, contract program managers, industry partners, ECS senior management, and Government representatives. - Track industry trends and leverage them to drive innovation and solution excellence across various functional domains. Qualifications - Bachelor's degree or equivalent experience. - Ability to pass a DHS Public Trust investigation. - 12+ years of relevant experience in the progression of roles to include delivering and sustaining technical and cloud solutions. - DOD 8570-01M certification: IAM Level I or better (e.g., Security+). - Expertise with OpenShift Architecture and Administration: To include cluster configuration, updates, backup/restore, networking, storage, security, and performance. - Expertise with RHEL and OpenShift. - A strong understanding of cloud-based technologies with a desire to learn more. - Demonstrated customer focus and strong analytical and problem-solving skills. - Strong verbal and written communications skills. Requirements - Salary Range: $175,000-$210,000 Benefits - General Description of Benefits

Role Description Everforth ECS is seeking a Security Engineer to work in our Portland, OR office or remotely. Note: This position is contingent upon contract award. The Security Engineer supports the design, implementation, configuration, and maintenance of cybersecurity technologies, controls, and secure infrastructure capabilities across enterprise systems and security operations environments. This role helps ensure that systems, applications, networks, endpoints, and cloud environments are protected, monitored, hardened, and aligned with organizational security requirements. The ideal candidate has hands-on experience implementing and supporting security tools, troubleshooting technical security issues, applying secure configuration standards, and collaborating with SOC analysts, system administrators, network engineers, control assessors, and program stakeholders to improve the organization's security posture. Key Responsibilities - Security Engineering & Implementation - Implement, configure, maintain, and support cybersecurity technologies, tools, platforms, and technical security controls. - Assist with engineering secure solutions for enterprise systems, networks, endpoints, cloud environments, applications, and operational support platforms. - Support security architecture decisions by providing implementation input, technical feasibility analysis, and operational considerations. - Apply security engineering practices across the system lifecycle, including planning, deployment, configuration, testing, operations, and sustainment. - System Hardening & Secure Configuration - Apply secure configuration baselines, hardening standards, and technical control requirements to servers, endpoints, network devices, applications, and cloud services. - Review system configurations, permissions, authentication settings, logging settings, encryption settings, and access controls for alignment with security requirements. - Support implementation of vulnerability remediation, configuration changes, patching activities, and risk reduction measures in coordination with system owners. - Validate that security controls are operating as intended and support remediation when control gaps or technical weaknesses are identified. - Security Tool Support & Integration - Support deployment, tuning, and sustainment of tools such as SIEM, EDR, vulnerability scanners, firewalls, IDS/IPS, email security, identity security, logging, and monitoring platforms. - Integrate security tools with enterprise systems, data sources, ticketing systems, dashboards, identity platforms, and incident response workflows. - Troubleshoot tool performance, connectivity, data collection, alerting, agent health, policy enforcement, and integration issues. - Coordinate with SOC analysts, Splunk engineers, threat hunters, and system administrators to ensure security tooling supports monitoring, investigation, and response requirements. - Vulnerability, Risk & Remediation Support - Analyze vulnerability scan results, configuration findings, security alerts, and control weaknesses to support prioritization and remediation planning. - Work with technical teams to identify root causes, validate remediation options, and confirm closure of vulnerabilities or security findings. - Support risk treatment activities by documenting technical constraints, compensating controls, residual risk, and remediation status. - Assist control assessors and assessment leads by providing technical evidence, configuration details, screenshots, logs, and implementation explanations. - Incident Response & Operational Support - Provide technical engineering support during security incidents, investigations, containment activities, eradication efforts, and recovery actions. - Assist with log collection, tool validation, endpoint or network containment actions, access changes, system isolation, and forensic preservation activities as directed. - Develop and maintain scripts, queries, automation, and repeatable procedures to improve security operations and engineering response efficiency. - Participate in after-action reviews and support implementation of technical improvements based on incident lessons learned. - Documentation, Standards & Continuous Improvement - Develop and maintain technical documentation, configuration standards, diagrams, implementation guides, runbooks, and operational procedures. - Support change management, configuration management, asset documentation, and security engineering governance processes. - Recommend improvements to security tools, engineering processes, baselines, automation, monitoring coverage, and technical control implementation. - Stay current with emerging threats, security technologies, hardening guidance, and engineering best practices relevant to enterprise security environments. Qualifications - U.S. Citizenship with ability to obtain and maintain a DOE “L” clearance after start. - 3-5 years of experience in cybersecurity engineering, security operations, systems administration, network administration, cloud security, or related technical security roles. - Hands-on experience implementing, configuring, or supporting security tools, technical controls, secure configurations, and enterprise security technologies. - Working knowledge of Windows, Linux, networking, identity and access management, endpoint security, logging, vulnerability management, and common security architectures. - Experience applying security requirements, hardening standards, vulnerability remediation guidance, and configuration baselines across technical environments. - Ability to troubleshoot technical security issues involving systems, networks, applications, integrations, agents, logs, policies, and monitoring tools. - Familiarity with cybersecurity frameworks, standards, and best practices such as NIST, CIS Controls, DISA STIGs, ISO 27001, or organizational security baselines. - Strong documentation, communication, collaboration, and problem-solving skills.