• Lead the installation, configuration, monitoring, maintenance and troubleshooting of SQL and NoSQL database platforms, including MySQL, PostgreSQL and MongoDB. • Design, implement and maintain highly available and scalable database solutions that support business and technical requirements. • Monitor database performance and proactively identify optimization opportunities. • Administer database servers and optimize operating systems for database workloads. • Define, implement and improve backup, recovery and disaster recovery strategies. • Manage database patching and upgrade processes while ensuring service continuity. • Deploy and maintain physical servers and containerized environments supporting database services. • Develop and maintain automation and configuration management solutions. • Collaborate closely with software development, DevOps and infrastructure teams across multiple business units. • Drive database architecture planning and technical decision-making. • Mentor junior database administrators and share best practices across the team. • Develop and maintain internal procedures, operational documentation and best practices. • Respect internal procedures related to the usage of company tools and equipment.

• Develop, implement, and maintain comprehensive security policies and procedures to protect organizational data and systems. • Monitor and assess system vulnerabilities, implementing corrective actions to mitigate risks. • Lead incident response efforts, including investigation, documentation, and resolution of security breaches. • Oversee the implementation of security technologies, tools, and best practices across the organization's infrastructure. • Conduct regular security audits and assessments to identify gaps and ensure compliance with industry standards and regulations. • Collaborate with cross-functional teams to educate staff on security best practices and promote a culture of cybersecurity awareness. • Stay current with the latest trends in cybersecurity and recommend proactive improvements to strengthen defenses.

• Serve as a Cybersecurity Assessment & Authorization (A&A) Subject Matter Expert supporting enterprise Risk Management Framework (RMF) activities across customer Information Systems, Cloud Hosted Services, Operational Technology (OT), Platform Information Technology (PIT), Facility Related Control Systems (FRCS), and hybrid computing environments. • Lead and support all phases of the RMF lifecycle, including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring. • Develop, review, update, and maintain RMF artifacts including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), Continuous Monitoring Strategies, Privacy Impact Assessments (PIAs), Risk Assessment Memorandums (RAMs), Authorizing Official Risk Acceptance (AORA) documentation, and authorization packages. • Assess and validate security controls in accordance with DoDI 8510.01, NIST SP 800-53, DLA RMF guidance, and applicable Federal and DoD cybersecurity requirements. • Conduct security control assessments, vulnerability analyses, and compliance reviews to evaluate the effectiveness of implemented cybersecurity controls. • Support authorization decisions by identifying residual risk, evaluating compensating controls, and providing technical recommendations to Security Control Assessors (SCAs), Authorizing Officials (AOs), and senior Government leadership. • Perform cybersecurity assessments supporting enterprise IT infrastructure, Cloud environments, Operational Technology (OT), Facility Related Control Systems (FRCS), warehouse execution systems, and Platform IT (PIT) environments. • Support implementation and validation of Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Assured Compliance Assessment Solution (ACAS) scans, IAVA compliance, vulnerability remediation, and continuous monitoring activities. • Utilize eMASS to manage authorization packages, track security control implementation, document vulnerabilities, and maintain authorization status throughout the system lifecycle. • Coordinate remediation efforts with ISSMs, System Owners, engineers, Information Owners, Program Managers, and Government stakeholders to resolve cybersecurity findings and maintain authorization. • Support cybersecurity inspections, audits, compliance assessments, incident response activities, and investigations involving potential cybersecurity events or unauthorized disclosures. • Prepare executive-level briefings, technical reports, dashboards, and risk assessments communicating authorization status, cybersecurity posture, and recommendations to Government leadership. • Monitor evolving cybersecurity threats, regulatory changes, and emerging technologies to ensure continued compliance and improve enterprise cybersecurity posture. • Provide technical mentorship and cybersecurity expertise to project teams while promoting continuous improvement, collaboration, and cybersecurity best practices.

• You support Kertos customers end-to-end in the implementation, operation, and continuous development of information security frameworks, helping them sustainably meet regulatory and organizational requirements. • With your expertise in information security (ISO 27001, SOC2, TISAX, NIS2), you act as a trusted advisor for our clients and provide subject-matter support to our product and sales teams. • As the bridge between our customers and our product team, you use direct customer feedback to continuously identify product improvements and new features. • You help shape our internal processes so they can grow with the company and meet customer needs.