• Incorporate A Place for Mom Values into each customer and co-worker interaction. • Perform configuration, network, and application technical vulnerability assessments, identify vulnerabilities, validate their relevance, and work with teams to remediate them. • Design and implement security solutions across infrastructure and applications to ensure "secure by default" principles are followed. • Monitor, analyze, and respond to alerts from automated logging and monitoring tools, including AWS Security Hub, AWS Systems Manager, Cisco Duo Security, Endpoint protect and Security Information and Event Management (SIEM) tools, like Alert Logic or Rapid7, including collaborate with DevOps teams to automate security practices, integrating security controls and checks into CI/CD pipelines • Respond to security related requests, events, and incidents; perform triaging and investigation as needed; and provide the fixes as appropriate • Analyze security threats, vulnerability assessments, and audit results to identify the root cause and recommend or implement security solutions that enable business objectives. • Lead the development and enforcement of security standards, policies, and procedures, ensuring alignment with industry best practices. • Collaborate with other teams to support response efforts to security-related findings or concerns and drive to resolution. • Analyze mean time to remediation, incident response times, and other security metrics and provide assessment reports. • Develop and maintain automated security testing and scanning tools to detect vulnerabilities during the development lifecycle. • Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions and improved security processes. • Evangelize a culture of security to the rest of the company through education, support, and empathy, fostering a culture of security awareness • Stay up-to-date on the latest security threats, vulnerabilities, and trends, proactively recommending improvements to security posture. • Perform additional tasks as assigned.

• Supports systems requirements analysis, functional analysis, and requirements allocation for complex cloud and hybrid environments. • Supports security best practices, including identity and access management, logging, monitoring, vulnerability management, and compliance controls. • Support system integration, verification, validation, testing, and quality assurance activities across multiple technical domains. • Troubleshoot complex system issues, perform root cause analysis, and drive resolution across teams and provide written reports as requested by the government customer. • Develop and maintain technical documentation, architecture artifacts, and operational procedures, e.g. develop and SOP. • Collaborate with internal engineering teams, program leadership, customers, and external partners or vendors to deliver integrated solutions. • Supports Data Transport On-Call and Maintenance schedule as directed by program management. • Provide technical leadership, coaching, and design review support to junior and mid-level engineers.

• Maintain the infrastructure and ensure cloud cost governance • Lead the strategic migration of tools from GitHub to Azure DevOps • Implement and manage application security across the lifecycle using SAST and DAST • Manage container orchestration using Kubernetes • Monitor application performance using APM tools • Ensure network stability and connectivity across environments

• Monitor, maintain, and optimize Azure cloud infrastructure to ensure high availability, scalability, and performance of enterprise applications. • Troubleshoot and resolve operational issues related to Azure services, DevSecOps tools, and CI/CD pipelines in production and pre-production environments. • Configure and manage Azure resources, including virtual machines, storage accounts, networking components, Azure Container Registries, and Key Vault integration for secure resource management. • Support the deployment and operation of DevSecOps tools, including GitHub Advanced Security (CodeQL, Dependabot, SBOM), GitHub Workflows, and Visual Studio Code/Enterprise for development and pipeline automation. • Implement and maintain security tools such as Trellix, Invicti, and Anchore to ensure compliance with DoD cybersecurity standards. • Manage Windows Server environments, including general administration, policy enforcement, client-side domain joins, and troubleshooting SCCM-related issues affecting servers. • Manage Linux (RHEL, Ubuntu) environments for current and future server and appliance deployments. • Use Azure CLI and PowerShell scripting to automate operational tasks and streamline resource management. • Review Azure Monitor analytics and Azure portal logs to identify and remediate subscription and resource issues. • Manage containerized workloads using Docker and Azure Container Registries for image management and deployment. • Implement automated monitoring, logging, and alerting systems using Azure Monitor, Log Analytics, and Application Insights. • Collaborate with development and engineering teams to ensure seamless integration of applications, including SQL integration, into Azure environments. • Apply security best practices, including configuring Azure Security Center policies, managing role-based access control (RBAC), and ensuring compliance with DoD standards. • Assist in the automation of operational tasks using Infrastructure-as-Code tools like Terraform or Bicep. • Participate in incident response, root cause analysis, and post-incident reviews to improve system reliability. • Provide helpdesk support by taking ownership of tickets in the Remedy ticketing solution, resolving issues, and managing incidents to ensure timely resolution and user satisfaction. • Document operational processes, configurations, troubleshooting procedures, and helpdesk resolutions for knowledge sharing and audit compliance. • Contribute to Agile processes, including sprint planning, backlog grooming, and daily stand-ups, to align operational support with project goals.