Evergreen: Cybersecurity & Identity Automation Engineer

This is a evergreen position.

We are continuously sourcing for talent while we await anticipated job openings. Candidates who apply to this role understand we may not have an immediate opening and wish to be considered for future opportunities.

Ad Hoc is a technology company that empowers organizations to deliver scalable, impactful digital services. Using modern, agile methods, our team creates products that meet people's needs and transform their experience of government.

Work on things that matter

Our collaborations have shaped some of the defining moments in public-sector service delivery. We've helped build products that connect Veterans to tailored services, help millions access affordable health care, and support important programs like Head Start. As we work with agencies to deliver critical services, we're also changing how the government approaches technology.

Our culture, communications, and tools are built for remote work, enabling us to bring together top talent nationwide. At Ad Hoc, remote life empowers our teams to design work environments that fit their lives and that foster flexibility and collaboration to achieve positive outcomes for our customers.

Committed to high expectations and a welcoming culture

Ad Hoc values acceptance, accountability, and humility. We aren't heroes. We learn from our mistakes and improve the process for the next time. We build small, inclusive teams to collaborate closely with our partners to solve the right problems and deliver software that works.

The Federal Civilian business unit supports many customers spanning the federal, commercial, and nonprofit space. Our customers include NASA, the General Services Administration, Office of Personnel Management, the Library of Congress, Health & Human Services, and the FDIC. We partner with these agencies to build new capabilities, deliver products, establish data as a strategic asset for informed decision-making, modernize legacy systems, and build the digital service infrastructure necessary to scale their mission impact.

Primary Responsibilities:

As Cybersecurity & Identity Automation, you will be responsible for exhibiting a forward-thinking vision for the Security and Compliance discipline. Cybersecurity & Identity Automation is a people manager, leader and mentor that effectively manages team operations in support of delivery success. You will serve as a subject matter expert and the primary decision maker for the Security and Compliance discipline. A Senior Director of Cybersecurity & Identity Automation is expected to successfully lead through direct reports and effectively communicate and execute against organizational objectives. In this role, Cybersecurity & Identity Automation will actively partner with leadership peers to achieve business objectives, but must also employ a strategic mindset to influence organizational growth. The Senior Director of Security and Compliance must exhibit strong communication skills, with the ability to coordinate among varying teams and departments to develop and implement standard processes and procedures in support of operational efficiencies. Primary expectations of a Senior Director of Cybersecurity & Identity Automation include:

• Automate Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise using dedicated security tools.
• Implementing automated entitlement provisioning and JML (Joiner-Mover-Leaver) workflows in SailPoint.
• Automating privileged account onboarding/offboarding in CyberArk. Defining RBAC models.
• Configuring Network ACLs, firewalls, and security groups to enforce policy and isolate sensitive workloads.
• Design secure network infrastructure enforcing Zero Trust principles for the DXP.
• Ensure 100% compliance with IRS/NIST boundary protection standards.
• Manages the security of information resources for the company and customer assets for which it is responsible
• Ensures optimal return on investment on security-related decisions
• Keeps ahead of the threat landscape and prepares the organization to proactively react to these threats
• Educates the company on industry security standards and ensures compliance
• Advises company executive-level leadership on how business decisions affect its security posture
• Meets with external parties as needed to represent company interests in security-related matters
• Leads initiatives and fosters a culture that drives the importance and value of security
• Works across the organization with leaders to educate on security gaps and coordinate on improvement efforts
• Articulates a forward-thinking vision for security and compliance and executes a roadmap to evolve new capabilities and approaches to meet it
• Implements frameworks and processes that help teams learn, build, measure, and evolve
• Leads the senior security and compliance leadership team to meet expectations for delivery excellence
• Ensures security and compliance team members have clear pathways for growth and that support systems scale
• Identifies organizational roadblocks inhibiting success, delivering on initiatives that support operational needs in partnership with other groups in the organization
• Supports growth efforts, ensuring capabilities and interests of security and compliance align with the business
• Exhibits executive communication skills, with the ability to clearly articulate business and practice initiatives, goals and strategies
• Responsible for budget planning and management for their respective department

Basic Qualifications:

• Internal Requirement: Bachelor's degree in computer science, information assurance, cybersecurity or related field, 10+ years of experience
  
  
  
  
  • Relevant years of experience may be substituted for education
  
  
  
  
• 6+ years of people management experience, responsible for defining expectations for team operations and performance management; 7+ years experience directing assignments for cross-functional team
• At least 10+ years experience in cybersecurity as a practitioner and at least 8+ years of exposure to various security frameworks
• Expert knowledge of audit methodologies and standard deliverables
• CompTIA Sec+ and CISSP or CISM required, CRISC or additional security certifications are recommended

Preferred Qualifications:

• Deep expertise in IAM/PAM solutions and identity lifecycle management.
• Proficiency in scripting and integrating security tools via APIs.
• Strong understanding of network security, FISMA/NIST compliance, and Zero Trust architecture.
• SailPoint, CyberArk, Active Directory (AD), Python/Go (for automation/scripting), NIST 800-53/RMF, Security Information and Event Management (SIEM) tools (e.g., Splunk, Datadog), Terraform (for network security group management).

To learn more about working at Ad Hoc, please visit:https://adhocteam.us/join

Ad Hoc LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, sex, sexual orientation, gender identity or expression, religion, age, pregnancy, disability, work-related injury, covered veteran status, political ideology, marital status, or any other factor that the law protects from employment discrimination.

https://adhoc.team/