Security Compliance

Security Compliance Developer Jobs

13 jobs found

20d ago

Mobile Application Developer

MANTECH Ashburn, VA

Ashburn, VA

20d ago

Full time Android APIs Apple Ios

Apply Now

Job Description

MANTECH is hiring a Mobile Application Developer for a hybrid role in Ashburn, VA. This position supports CBP personnel by designing, building, and maintaining secure, high-performance mobile applications for mission-critical field use, with an emphasis on DHS and FISMA-aligned cybersecurity practices.

You will help deliver iOS and Android tools that enable actionable information for operational teams, including integration with enterprise backends and real-time data feeds, while maintaining reliability in demanding environments.

Responsibilities

Design, code, test, and deploy native or cross-platform mobile applications for iOS/Android supporting CBP field operations.
Build mobile tools that support the processing of aliens, border security data management, and interdiction of illegal immigration.
Maintain compliance with DHS and federal cybersecurity standards, including data encryption, secure authentication, and FISMA compliance.
Integrate mobile applications with backend enterprise systems, databases, and real-time data feeds to deliver actionable intelligence to personnel in the field.
Create intuitive user interfaces optimized for field conditions and usability under varying operational constraints.
Monitor application performance, troubleshoot issues, and implement updates to support continuous availability and reliability.

Requirements

Education in Computer Science, Engineering, or a related technical field, with an acceptable combination of degree and experience: PhD/Doctorate with 3+ years (BS/BA with 7+ years; MS/MA/MBA with 5+ years).
Hands-on experience in mobile application development using Swift, Kotlin, React Native, or Flutter.
Proficiency with RESTful APIs, mobile security protocols, and cloud backend services such as AWS GovCloud or Azure Government.
Knowledge of mobile data storage and testing frameworks.
Demonstrated ability to develop software solutions for complex, high-stakes operational environments.
Must be a U.S. citizen with a current/active Top-Secret clearance and the ability to obtain and maintain DHS CBP suitability prior to starting.

Technology & Tools

Mobile: iOS, Android, Swift, Kotlin, React Native, Flutter
Backend & Security: RESTful APIs, AWS GovCloud, Azure Government, FISMA
Process: Agile/DevSecOps
Collaboration: Jira, Confluence

Preferred Qualifications

Experience developing applications for federal law enforcement or defense agencies.
Knowledge of mobile device management (MDM) solutions and secure containerization.
Experience with offline-first application architecture for remote or low-connectivity areas.
Familiarity with Agile/DevSecOps methodologies.
Experience with Atlassian tools such as Jira and Confluence.

Physical Requirements

Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, which may involve delivering presentations.

View full job page →

29d ago

Staff Software Engineer, Data Platform (FedRAMP)

Okta Bellevue, WA

Bellevue, WA

29d ago

$194k - $267k/yr Full time Backend Developer AWS Big Data

Apply Now

Job Description

Okta’s Data Platform organization is seeking an experienced Staff Software Engineer for its FedRAMP-focused environment. In this role, you will design, build, deploy, and continually optimize streaming infrastructure and data platform services that support analytics and machine learning use cases. The work centers on high-volume, low-latency distributed systems and foundational data services used to scale Okta’s security and data/ML capabilities.

What you’ll do

Design, implement, and take ownership of data-intensive, high-performance, scalable platform components
Collaborate with engineering teams, architects, and cross-functional partners on project development, including design and implementation
Participate in design reviews and code reviews, perform analysis, and conduct performance tuning
Coach and mentor engineers to help scale up the engineering organization
Debug production issues across services and multiple layers of the stack

What you bring

8+ years of experience using an object-oriented language, preferably Java
Hands-on experience with cloud-based distributed computing technologies, including messaging systems such as Kinesis and Kafka
Hands-on experience with data processing systems such as Flink, Spark, and Beam
Hands-on experience with storage and compute systems such as Snowflake and Hadoop
Hands-on experience with coordinators and schedulers such as Kubernetes, Hadoop, and Mesos
Experience developing and tuning highly scalable distributed systems
Excellent grasp of software engineering principles
Solid understanding of multithreading, garbage collection, and memory management
Experience with reliability engineering, including data quality, data observability, and incident management

Technologies you’ll work with

Java, Kinesis, Kafka
Flink, Spark, Beam
Snowflake, Hadoop
Kubernetes, Mesos
ElasticSearch

About the team

The Data Platform team builds foundational data services, systems, and data products for Okta that benefit users
Streaming analytics
Interactive end-user reporting
Data and ML platform to scale Okta
Telemetry of products and data

About the position

Scale high-volume, low-latency distributed data platform services and data products
Build foundational infrastructure to help Okta scale for years to come
Design, build, and deploy systems that power data analytics and ML
Work on an analytics infrastructure stack sitting on modern technologies including Kinesis, Flink, ElasticSearch, and Snowflake

Nice to have

Experience maintaining security, encryption, identity management, or authentication infrastructure
Hands-on use of major public cloud providers to build mission-critical, high-volume services
Experience building data integration applications for large-scale (petabyte scale) environments across both batch and online systems
Contributions to distributed systems or use of high-volume, high-criticality systems such as Kafka or Hadoop
Experience developing Kubernetes-based services on AWS Stack

Location and compensation

Bellevue, WA (hybrid)
USD 194,000 - 267,000 per year

Federal environment requirements

Ability to access federal environments and/or have access to protected federal data
Upon hire, submit documentation establishing U.S. Person status (for example, U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee under 22 CFR 120.15)

View full job page →

1mo ago

Senior Data Engineer

NIRA Inc. Washington, DC

Washington, DC

1mo ago Closed

$170k+/yr Full time Senior Apache Airflow Aws Govcloud

This position is no longer accepting applications (closed Sep 8, 2026).

Job Description

The Senior Data Engineer position supports the U.S. Department of Justice Digital Evidence Review Platform program. The role is responsible for designing, building, testing, operating, and improving high-volume data ingestion and processing pipelines that maintain integrity, provenance, auditability, access controls, and chain-of-custody information.

Responsibilities

Design, develop, test, operate, and optimize high-volume data ingestion, transformation, integration, and processing pipelines.
Ingest, normalize, enrich, validate, store, search, export, archive, and restore structured and unstructured data.
Process inputs such as forensic extraction packages, documents, messages, multimedia, call records, geolocation data, cloud-provider returns, metadata, and outputs from Government-furnished parsers and external systems.
Implement validation, hashing, error handling, retry, reconciliation, reprocessing, and data-quality controls.
Preserve source identifiers, processing history, lineage, provenance, and chain-of-custody events.
Support workflows for OCR, transcription, translation, deduplication, metadata extraction, entity extraction, and enrichment.
Develop schemas, canonical data models, metadata structures, and open, portable export formats.
Enable search, analytics, and AI/ML-enabled processing while maintaining human oversight and auditability.
Automate deployment and testing using CI/CD and configuration-management practices.
Tune pipeline performance and troubleshoot failures across development, test, UAT, production, and disaster-recovery environments.
Maintain technical documentation and collaborate with architects, software engineers, cloud integrators, cybersecurity personnel, and product specialists.

Requirements

Bachelor’s degree in engineering, mathematics, or science.
At least 15 years of relevant experience in data engineering, data integration, data architecture, software engineering, or large-scale data processing.
A master’s degree may substitute for two years of required experience; a PhD may substitute for four years.
Extensive experience designing, developing, and maintaining enterprise data ingestion, transformation, integration, and processing pipelines.
Experience processing structured and unstructured data from multiple sources and formats.
Experience with data modeling, metadata, schema design, data lineage, data quality, error handling, reconciliation, and audit logging.
Experience developing in Python, Java, Scala, SQL, or comparable data-engineering languages.
Experience with cloud-based data platforms, distributed processing, object storage, databases, search platforms, or analytics environments.
Experience supporting CI/CD, automated testing, configuration management, performance tuning, and production troubleshooting.
U.S. citizenship and ability to meet DOJ residency and personnel-security requirements.
Ability to obtain and maintain a High-Risk Public Trust investigation and PIV credential.

Technologies

Python, Java, Scala, SQL
CI/CD
OCR
Spark, Databricks, Kafka, Airflow
AWS GovCloud, Azure Government
FedRAMP-authorized SaaS
LLM/RAG

Preferred Qualifications

Experience with digital evidence, forensic data, eDiscovery, law-enforcement data, case-management data, or other high-integrity federal datasets.
Experience processing PDFs, text, messages, multimedia, call records, geolocation data, forensic extraction files, or large document collections.
Experience with OCR, natural-language processing, entity extraction, transcription, translation, deduplication, AI/ML enrichment, or LLM/RAG pipelines.
Experience implementing hashing, immutable audit records, provenance, lineage, retention, archival, and data-restoration controls.
Experience designing open-format exports, APIs, canonical schemas, or data-exchange interfaces that reduce vendor lock-in.
Experience with AWS GovCloud, Azure Government, FedRAMP-authorized SaaS, or hybrid federal cloud environments.
Experience with Python-based data frameworks, Spark, Databricks, Kafka, Airflow, cloud-native data services, or comparable technologies.

Location and Salary

Location: Washington, DC (onsite)

Compensation: USD 170,000 per year

Education

Bachelor’s degree in engineering, mathematics, or science.

View full job page →

1mo ago

Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Deloitte Atlanta, GA

Atlanta, GA

1mo ago Closed

Full time Agentic Ai Artificial Intelligence Authentication

This position is no longer accepting applications (closed Aug 24, 2026).

Job Description

Deloitte is seeking a Delivery Senior Consultant to drive Identity and Gen AI engineering initiatives, building and securing AI solutions that enforce identity, access, and trust across both human and non-human identities and GenAI platforms. This hands-on role blends active engineering, system integration, and ongoing refinement to help clients deploy responsible AI at scale.

Responsibilities

Design, build, and integrate generative AI capabilities such as large language model applications, retrieval-augmented generation, and AI agents, ensuring secure data access and seamless connectivity to downstream systems.
Implement authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities operating within enterprise and cloud environments.
Establish guardrails for agentic workflows, applying scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
Set up comprehensive logging, monitoring, and governance to provide traceability and accountability for AI system actions.
Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and day-to-day operations.
Create and maintain reference architectures, reusable patterns, and thorough technical documentation for building and securing AI systems.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Ability to work onsite up to five days per week.
At least 3 years of software engineering experience with Python or an equivalent language.
Over one year of hands-on experience building, integrating, or deploying generative AI solutions such as LLM applications, retrieval-augmented generation, or AI agents, including use of model APIs, orchestration frameworks, and tools like Claude Code, OpenAI Codex, GitHub Copilot, or Cursor.
Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on, and standards such as OpenID Connect, SAML, OAuth, and JWT.
Ability to travel about 15 percent on average, depending on client engagements and project needs.
Eligibility to obtain and maintain the necessary security clearance.
Must be legally authorized to work in the United States without the need for employer sponsorship, now or in the future.
Hybrid delivery model requiring residence within a commutable distance to a Deloitte Delivery Center or Geo-Hub location in the United States (examples include Gilbert, Lake Mary, Mechanicsburg, Atlanta, Charlotte, Dallas, Houston, and Philadelphia).
Co-location expectation up to 30 percent of working time for orchestrated opportunities, including projects, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project site.
Maximum of 10 percent overnight travel for client or project purposes.
If relocation is necessary, the move must be completed within 12 weeks from the start date to reside within a commutable distance.

Technologies

Python
Claude Code, OpenAI Codex
GitHub Copilot, Cursor
LangChain, LangGraph
Model Context Protocol, Open Policy Agent
Cedar, OpenFGA
HashiCorp Vault, CyberArk, SailPoint, Okta, Microsoft Entra ID
AWS, Microsoft Azure
Terraform, Ansible
OpenID Connect, SAML, OAuth, JWT

View full job page →

1mo ago

Software Engineer III (Graphics Support, Web Designer)

PEOPLE TECHNOLOGY AND PROCESSES LLC Aberdeen Proving Ground, MD

Aberdeen Proving Ground, MD

1mo ago Closed

Full time Cyber Security Cybersecurity Designer

This position is no longer accepting applications (closed Aug 18, 2026).

Job Description

People Technology and Processes LLC is seeking a Software Engineer III who specializes in graphics support and web design to support Army CPE IEW&S programs. The role provides cybersecurity engineering leadership, RMF/A&A guidance, and lifecycle support within a defense-focused environment, backed by a TS/SCI clearance. The position is based on-site at Aberdeen Proving Ground, Maryland.

Location

Aberdeen Proving Ground, MD (onsite)

Overview

The Software Engineer III combines graphics-focused development with web design expertise to support Army CPE IEW&S initiatives, delivering cybersecurity engineering input and lifecycle oversight across program efforts. This role operates with a TS/SCI clearance in a structured, mission-critical setting.

Responsibilities

Apply Digital Engineering practices across program implementation.
Review Cybersecurity packages (RMF) using eMASS to present evidence of proper RMF implementation for the Designated Approving Authority (DAA/AO).
Provide feedback to Information System Security Officers (ISSO’s) to ensure ATO, IATO, IATT, and ATC packages meet CPE standards.
Offer technical expertise to PMs in developing Cybersecurity Strategies (CSSs) under the Clinger-Cohen Act and DoD Acquisition policy, coordinating CSSs with HQDA for Army CIO/G6 approval to support major milestone decisions.
Coordinate with HQDA, CPE IEW&S Staff, CECOM Staff, other agencies, and Warfighters to address cybersecurity requirements for CPE IEW&S Tactical and Developmental systems (including PKI and HBSS waivers/exemptions, Windows XP, Vista, and Server 2003 eliminations).
Maintain the Army Portfolio Management Solution (APMS) database to track Information Assurance accreditation status and provide portfolio management oversight for FISMA compliance.
Manage online repositories of current CPE IEW&S A&A documentation within eMASS, Xacta, and AKO-SIPRNET.
Provide cybersecurity engineering subject matter expertise and guidance.
Consult with PM staff on RMF implementation and security controls.
Serve as a subject-matter expert for component-level policy and coordinate policy exceptions at the headquarters level for tactical equipment and mission requirements.
Identify cybersecurity requirements for systems in acquisition or development to comply with RMF, CTOs, STIGs, and related policies, analyzing the requirements development and design across CPE IEW&S program offices.
Lead Army vulnerability management and Assess and Authorization (A&A) processes, including POA&Ms, risk assessment, and recommending actions to the Authorizing Official.
Lead A&A activities within established timelines, advising program managers and system owners to maintain compliance with FISMA, DoD, and Army standards and acceptable risk levels.
Develop cybersecurity education, training, mitigation strategies, and awareness initiatives at the headquarters level.
Create processes to support the Army in the lifecycle of information system packages, including templates and how-to guides for waivers and important system artifacts.
Serve as a subject-matter expert to provide technical guidance on all aspects of cybersecurity to staff, stakeholders, and leadership.
Oversee product teams to ensure cybersecurity objectives are met.
Plan, execute, and provide technical expertise in obtaining ATO or appropriate interim authorities.

Qualifications

Bachelor’s Degree.
Minimum of five (5) years’ related work experience.

Technologies

eMASS
Xacta
AKO-SIPRNET
APMS (Army Portfolio Management Solution)
Public Key Infrastructure (PKI)
Host Based Security Systems (HBSS)
Windows XP
Windows Vista
Windows Server 2003
RMF (Risk Management Framework)

View full job page →

1mo ago

Software Developer V

Bio-Rad Laboratories, Inc. Hercules, CA

Hercules, CA

1mo ago Closed

$179k - $247k/yr Full time Senior Engineering Information Security

This position is no longer accepting applications (closed Aug 18, 2026).

Job Description

Bio-Rad Laboratories, a leader in clinical diagnostics, is seeking a senior technical leader to own the strategy, governance, and execution of the Product Cybersecurity Program and PSIRT across the Clinical Diagnostics portfolio. This onsite role in Hercules, California, anchors the company’s efforts to align with FDA and global regulatory expectations while guiding product teams through secure design, development, and maintenance throughout the product lifecycle. As the Software Developer V, you will serve as the technical authority on product cybersecurity, coordinating cross-functional collaboration and external engagements to uphold a security-first posture.

Responsibilities

Own and advance the Product Cybersecurity Program, including PSIRT governance, operating model, decision rights, and escalation pathways.
Align with FDA medical device cybersecurity expectations for premarket and post-market vulnerability management, coordinated disclosure, and incident response.
Define and maintain a cybersecurity framework aligned to NIST CSF 2.0, ISO 81001‑5‑1, ISO/IEC TS 27110, and ISO/IEC 27032, ensuring integration with Global IT security practices.
Embed product cybersecurity requirements into the Global Quality Management System (QMS), including Design Controls, risk management, and change management.
Lead the cross-functional Cybersecurity Core Team, sustaining engagement across R&D, Software, Systems, QA/RA, Global Supply Chain (Manufacturing and Procurement), and Global Information Security.
Provide clear expectations, guidance, and oversight to product teams for secure design, development, and maintenance, without direct development ownership.
Ensure cybersecurity considerations are integrated throughout the product lifecycle, from concept and design through post‑market support.
Serve as the single point of accountability for product cybersecurity intake, triage, and prioritization.
Oversee end‑to‑end vulnerability management, including risk assessment, remediation planning, regulatory timelines, and customer deployment.
Lead technical coordination for cybersecurity incident investigations, containment, and remediation, ensuring timely response to high‑severity issues.
Guide product teams on mitigations, patches, and workarounds to meet security and regulatory expectations.
Ensure cybersecurity incidents and disclosures comply with FDA, international regulatory, and internal quality requirements.
Oversee the development and approval of security advisories, customer notifications, and regulatory communications.
Act as the technical authority in engagements with external security researchers, customers, regulators, and industry groups.
Drive cybersecurity awareness and training for R&D, Support, and Quality teams to reinforce a security‑first culture.
Define, track, and report program‑level cybersecurity and PSIRT performance metrics to leadership.
Continuously improve program effectiveness based on metrics, lessons learned, and evolving regulatory expectations.

Requirements

Bachelor’s degree in Computer Science, Information Security, Engineering or a related field.
7+ years of experience in cybersecurity, including architecture design in a regulated environment, preferably FDA, healthcare, or medical devices.
System thinker with deep expertise in medical device cybersecurity, including FDA premarket and post‑market requirements.
Expert knowledge of NIST CSF 2.0, ISO 81001‑5‑1, ISO/IEC TS 27110, and ISO/IEC 27032.
Proven ability to lead cross‑functional programs in complex, matrixed organizations.
Strong technical judgment, communication skills, and executive presence.
Demonstrated ability to build, mature, and scale cybersecurity programs across organizations.
Preferred: Master’s degree in a technical field.
Certifications: CISSP, CSSLP, CISM, or equivalent.
Experience with cloud-based systems, IoT security, or medical device security.

Technologies

NIST CSF 2.0
ISO 81001‑5‑1
ISO/IEC TS 27110
ISO/IEC 27032

Benefits

Competitive medical plans for you and your family
Free HSA funds
New fertility offering with stipend
Group life and disability
Paid parental leave
401k plus profit sharing
Employee stock purchase program
New upgraded and streamlined mental health platform
Extensive learning and development opportunities
Education benefits
Student debt relief program
Pet insurance
Wellness challenges and support
Paid time off
Employee Resource Groups (ERG’s)

View full job page →

1mo ago

Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Deloitte Gilbert, AZ

Gilbert, AZ

1mo ago Closed

Full time Agentic Ai Artificial Intelligence Cloud Operations

This position is no longer accepting applications (closed Aug 13, 2026).

Job Description

Responsibilities

Build and integrate generative AI solutions, including large language model applications, retrieval-augmented generation, and AI agents, with secure access to data and downstream systems.
Engineer authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities operating across enterprise and cloud environments.
Develop guardrails for agentic workflows, including scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
Implement logging, monitoring, and governance that provide traceability and accountability for AI system actions.
Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and operations.
Create and maintain reference architectures, reusable patterns, and technical documentation for building and securing AI systems.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Ability to work onsite up to five days a week
3+ years of software engineering experience with Python or a comparable language
1+ year of hands-on experience building, integrating, or deploying generative AI solutions such as LLM applications, retrieval-augmented generation, or AI agents, including use of model APIs, orchestration frameworks, and AI development tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor
Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on, and standards such as OpenID Connect, SAML, OAuth, and JWT
Ability to travel 15% on average, based on the work and client needs
Ability to obtain and maintain the necessary security clearance
Legally authorized to work in the United States without the need for employer sponsorship now or in the future
Hybrid work model requiring residence within a commutable distance to a Deloitte Delivery Center location (Gilbert, Lake Mary, Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, Philadelphia); up to 30% time co-located
Travel up to 10% overnight for client or project purposes
If relocation is necessary, complete the move within 12 weeks from the start date