• Perform threat modeling (e.g., OWASP Top 10) and application/API security reviews; provide clear, relevant remediation guidance. • Design and validate application and API security controls, including authentication, authorization, encryption, and input validation. • Design and review security controls for cloud-native applications, including containerized workloads and managed cloud services. • Integrate security tooling into CI/CD pipelines (SAST, DAST, SCA, secrets, IaC scanning); implement policy-as-code and pipeline gating. • Review application source code to identify security vulnerabilities and collaborate with developers to remediate findings. • Establish and automate secure configuration baselines, drift detection, and security monitoring to support Security Operations. • Validate vulnerabilities, reduce false positives, and guide teams toward pragmatic remediation and compensating controls. • Serve as a trusted security partner to developers through guidance, reusable patterns, and enablement.

Role Description The Application Administrator II is an application design and configuration analyst for vendor-purchased and NMHC developed applications. Acts as liaison with designated department super users, application vendors, educators, and support staff regarding application upgrades, service requests, and optimization. The Application Administrator II will generally focus on one primary area of expertise, often being cross-trained on a related application. Application focus areas include: - Patient access - Revenue cycle - Clinical - Ancillary department - Administrative or corporate applications This position will function as an application team member, often taking work direction from the IT Application Administrator Lead or IT Project Manager. The Application Administrator II works closely with the IT Resource Educators and in conjunction with Infrastructure Services staff and Customer Support staff to maintain, optimize and support the application system environment. Qualifications - Required certification/associate degree or 3 years of related application use with business or health care work experience. - Prefer bachelor's degree in information technology, health care or related field. Requirements - Required 3 years experience in a health care related field using information technology in daily operations. - Demonstrated analytical critical thinking skills for process development or problem resolution. - Demonstrated customer service methodology and accountability. - Knowledge of healthcare processes and application system coordination. - Knowledge of database structure and reporting techniques and tools. - MyChart certification or accreditation and MyChart build experience required. - Maintained professional/clinical competence, certification and/or licensure as applicable. - Certified training, followed by demonstrated competency certification in applicable software within six (6) weeks of class completion. Benefits - Eligible for the Public Student Loan Forgiveness program. - Health & Welfare Benefit Packages. - 401k Retirement Match or Pension Plan, based on workgroup eligibility. - Generous Paid Time Off (PTO) Plans. - Adoption Reimbursement up to $3000 per child. - Child Care Discount Program with New Horizon 10% off weekly childcare tuition. - Education/Tuition Reimbursement. - 24/7 Fitness Center Access for all benefit eligible team members.

• Drive technical efforts to support the growth of direct and indirect sales of Cimatron CAD and Mold products/solutions. • Provide high-quality technical support to our sales team during the pre-sales stage and training along with successful implementation for customers. • Partner with the sales team to deliver product/solution technical presentations, demonstrations, and Proof of Concepts (POCs). • Plan and conduct customer and reseller training sessions, workshops. • Oversee and manage complex technical support cases for Cimatron CAD products/solutions. • Communicate and mentor a team of reseller application engineers. • Function as the voice of the customer to the product team by sharing feedback and new solution requests.

• Build and ship high-impact experiments (e.g., digital lockers or AI-augmented procurement tools) to expand the "impact possibilities frontier." • Translate vague policy objectives into robust, working systems. • Identify when to use LLMs, agentic orchestration, or RAG patterns versus simple rules engines or traditional ML models. • Collaborate with policy and domain experts to co-design civic-sector benchmarks, translating complex regulatory requirements into automated evaluation pipelines that rigorously measure model performance. • Identify and define new opportunity spaces by translating emerging policy, technology, and user needs into actionable technical bets. • Architect foundational tools, including declarative task specifications and agentic data layers. • Design infrastructure that respects public sector constraints, focusing on portability and explainability. • Build data layers that interoperate with legacy systems (COBOL, SQL, etc.) to deliver modern value without multi-year migrations. • Establish Code for America as a leader in responsible AI through external thought leadership, including publications, talks, and open-source contributions. • Share demos and earned insights internally to help the organization iterate toward better standards and internal use cases of responsible AI. • Document architectural decisions, successes, and failures to create a blueprint for responsible AI in government. • Drive alignment across engineering, product, policy, and program teams to ensure solutions are technically sound, policy-compliant, and operationally viable. • Partner with and mentor fellow engineers through hands-on code reviews and technical guidance, ensuring the team stays grounded in best practices for responsible AI. • Maintain system health through rigorous, hands-on code reviews and the development of shared utilities. • Ensure craftsmanship and system explainability for the vulnerable populations we serve.