ARETUM

Software Engineer

• Design and implement secure integration interfaces (RESTful APIs, SOAP, message queues, file-based) connecting vendor applications with client data systems
• Develop data orchestration workflows using AWS services (Lambda, Step Functions, EventBridge, SQS/SNS)
• Use VA-endorsed interoperability standards including FHIR R4, CDS Hooks, and SMART on FHIR
• Build error handling, retry logic, and dead-letter queue patterns for distributed system reliability
• Implement data transformation and validation logic to reconcile disparate source system formats
• Create reusable integration patterns and libraries for scaling to 130+ system instances
• Work with vendor-supplied containers to understand integration points and API requirements
• Design and implement fault-tolerant integration patterns with automatic retry, circuit breaker, and graceful degradation strategies
• Build multi-AZ deployment architectures ensuring integration availability during infrastructure failures
• Develop idempotent APIs and workflows to handle duplicate processing and enable safe retries
• Implement health checks, readiness probes, and self-healing mechanisms for integration endpoints
• Create disaster recovery procedures including backup strategies, failover mechanisms, and recovery time objective (RTO) compliance
• Design for horizontal scalability to handle variable workload demands across millions of client records
• Implement secure integration patterns including encryption (at-rest and in-transit), authentication/authorization (OAuth, API keys, IAM roles), and input validation
• Apply least-privilege IAM policies for cross-service and cross-account access
• Implement audit logging and traceability for compliance requirements
• Handle PII, PHI and other sensitive client data according to federal data protection standards
• Support RMF/ATO process by documenting security controls and providing evidence for assessment
• Develop comprehensive integration test suites (unit, integration, end-to-end)
• Create test data sets and mocking strategies for isolated component testing
• Perform load and performance testing on integration endpoints
• Support security testing and vulnerability remediation activities
• Document test plans, test cases, and test results for compliance review
• Build serverless integration workflows using Lambda functions and Step Functions state machines
• Configure API Gateway for RESTful endpoint exposure with throttling and authorization
• Implement event-driven architectures using EventBridge, SNS, and SQS
• Manage secrets and configuration using Secrets Manager and Parameter Store
• Monitor integration health using CloudWatch metrics, logs, and alarms
• Deploy infrastructure-as-code using AWS SAM, CloudFormation, or Terraform

Developer – Integration, API Development

Systems Engineer

• Lead AWS networking architecture, application load balancing, and enterprise monitoring/observability implementation for a Federal cloud integration solution.
• Responsible for designing secure network segmentation, configuring high-availability load balancing, and establishing comprehensive monitoring across Splunk, Dynatrace, and DataDog platforms.
• Design and implement AWS networking architecture including VPC design, subnets, route tables, security groups, and NACLs.
• Configure Application Load Balancer (ALB) with target groups, health checks, SSL/TLS termination, path-based routing, and WAF integration.
• Implement network security controls for federal compliance.
• Design multi-AZ high availability architecture ensuring resilience during infrastructure failures.
• Manage VPC Flow Logs and network traffic analysis for security monitoring and troubleshooting.
• Implement and configure enterprise monitoring platforms for comprehensive system visibility.
• Establish alert design, escalation policies, and incident response integration for operational excellence.
• Monitor network performance metrics and optimize for latency, throughput, and reliability.

Systems Engineer – Networking and Monitoring

• Lead the deployment, hardening, and operational management of containerized applications on AWS ECS or OpenShift platform for a Federal cloud environment
• Responsible for evaluating and hardening vendor-supplied containers, implementing container orchestration infrastructure-as-code, and establishing secure, compliant container operations
• Deploy, configure, and manage AWS ECS or OpenShift container orchestration platform in production Federal environment
• Evaluate vendor-supplied container images for security vulnerabilities, compliance gaps, and operational requirements
• Implement container hardening strategies applying CIS benchmarks, DSTI STIGs, and federal security baselines
• Configure container orchestration including task/service definitions (ECS) or deployments/operators (OpenShift)
• Manage container lifecycle including image versioning, updates, patching, and rollback procedures
• Implement horizontal auto-scaling policies based on CPU, memory, custom metrics, and workload patterns
• Establish container networking including service discovery, ingress/egress controls, and inter-container communication
• Perform container image scanning using tools such as Prisma Cloud, Aqua Security, Twistlock, or AWS ECR scanning
• Remediate container vulnerabilities identified through scanning and security assessments
• Implement runtime security controls including container isolation, resource limits, and security contexts
• Configure secrets management for containerized applications using AWS Secrets Manager or HashiCorp Vault
• Apply least-privilege principles to container IAM roles and service accounts
• Implement container image signing and verification workflows
• Document container security controls and provide evidence for RMF/ATO security assessment
• Develop and maintain infrastructure-as-code using Terraform or AWS CloudFormation for container platform
• Build automated deployment pipelines for container infrastructure and application updates
• Create repeatable, version-controlled infrastructure patterns for scaling to 130+ system instances
• Implement GitOps workflows for infrastructure change management and audit trails
• Develop automation scripts for container platform management and troubleshooting
• Establish configuration baselines and drift detection mechanisms
• Design and implement multi-AZ container deployments ensuring high availability during infrastructure failures
• Configure health checks, readiness probes, and liveness probes for container self-healing
• Implement disaster recovery procedures including backup strategies for persistent container data
• Establish resource reservation and quality-of-service policies to prevent resource contention
• Design capacity planning and scaling strategies to handle variable workloads serving millions of clients
• Implement zero-downtime deployment strategies including blue-green and rolling updates
• Create comprehensive operational runbooks for container platform management, troubleshooting, and incident response
• Document deployment procedures, configuration baselines, and security hardening steps
• Develop standard operating procedures (SOPs) for routine maintenance and emergency procedures
• Maintain container platform architecture diagrams and configuration documentation for RMF compliance
• Create knowledge transfer materials for scaling operations team

Systems Engineer – Container Platform

QA Engineer

• Lead comprehensive testing, validation, and quality assurance activities for a complex Federal cloud integration solution serving millions of clients.
• Develop comprehensive test strategy covering functional, integration, performance, security, and compliance testing
• Create detailed test plans aligned with RMF/ATO requirements and federal security control validation
• Define test environments, test data requirements, and testing infrastructure needs
• Establish test schedules, milestones, and success criteria for pilot deployment across 10 systems
• Identify testing tools, frameworks, and automation opportunities to meet aggressive timeline
• Coordinate testing dependencies across development, infrastructure, and security teams
• Test container platform deployments (ECS/OpenShift) including orchestration, scaling, and failover capabilities
• Validate infrastructure-as-code deployments for consistency, repeatability, and compliance with baselines
• Test application load balancer configurations including health checks, routing rules, and SSL/TLS termination
• Verify network segmentation, security group rules, and multi-AZ high availability configurations
• Validate backup and disaster recovery procedures including RTO/RPO compliance
• Test auto-scaling behaviors under various load conditions and failure scenarios
• Design and execute integration test cases for data flows across 10+ disparate source systems
• Test API interfaces, data orchestration workflows, and error handling/retry logic
• Validate data transformation accuracy, completeness, and consistency across integration points
• Test vendor container integration with custom infrastructure and security controls
• Verify Databricks pipeline processing and PowerBI report accuracy against expected outcomes
• Execute end-to-end business process testing for risk analysis and service coordination workflows
• Validate implementation of NIST 800-53 security controls required for ATO
• Coordinate and support security assessment testing activities with ISSO/ISSM
• Test authentication, authorization, and access control mechanisms across all system components
• Validate encryption implementation (at-rest and in-transit) for sensitive client data and PII
• Execute vulnerability scanning and verify remediation of identified security findings
• Test audit logging completeness, accuracy, and compliance with federal requirements
• Validate container hardening against CIS benchmarks and DSTI STIGs
• Support penetration testing activities and coordinate remediation verification
• Design and execute performance tests simulating millions of client records and concurrent users
• Test system performance under peak load, sustained load, and stress conditions
• Validate horizontal scaling effectiveness and resource utilization efficiency
• Identify performance bottlenecks in integration workflows, database queries, and API endpoints
• Test monitoring and alerting thresholds under various load scenarios
• Measure and validate response times, throughput, and latency against defined SLAs
• Develop automated test suites for regression testing of infrastructure and application components
• Integrate automated testing into CI/CD pipelines for continuous validation
• Create reusable test scripts and frameworks for scaling to 130+ system instances
• Automate security compliance checks and configuration validation
• Build synthetic monitoring and health check automation for production readiness
• Document test cases, test results, and defect findings with clear reproduction steps
• Track defects through resolution and verify fixes through regression testing
• Maintain traceability matrix linking requirements to test cases and security controls
• Create test summary reports for stakeholder reviews and compliance evidence
• Document test environments, configurations, and procedures for audit and knowledge transfer
• Provide testing evidence and artifacts for RMF/ATO security assessment package

Systems Engineer – Testing & Quality Assurance

DevOps Engineer

• Design, operate, and continuously improve automated CI/CD pipelines using GitLab CI to support zero-downtime deployments across multiple environments.
• Support development teams with standardized deployment tooling, automation, and operational best practices.
• Administer and support containerized workloads using Kubernetes (EKS) and Docker-based container platforms.
• Configure and manage Linux-based servers and systems.
• Implement Infrastructure as Code (IaC) using Terraform and/or AWS CDK for repeatable, auditable deployments.
• Support provisioning and configuration of AWS services including EC2, EKS, ECS, S3, RDS, VPC, Lambda, and related services.
• Coordinate infrastructure changes without performing AWS account provisioning or organizational administration.
• Integrate security scanning into CI/CD pipelines using tools such as Trivy, AWS Inspector, and AWS Security Hub.
• Perform vulnerability triage and coordinate remediation with development teams in accordance with defined timelines.
• Implement and manage IAM least-privilege policies, secrets, and encryption using AWS KMS, Secrets Manager, and SSM.
• Ensure encryption in transit and at rest across all in-scope systems.
• Configure and maintain monitoring and observability using CloudWatch, Prometheus, Grafana, and centralized logging solutions.
• Support Tier 2 and Tier 3 incident response for production systems, meeting SLA requirements.
• Participate in root-cause analysis and continuous improvement initiatives.
• Participate in Agile sprints, including backlog grooming, sprint planning, stand-ups, and retrospectives.
• Track work in JIRA, using story-point estimation and sprint metrics.
• Support reprioritization of backlog items in coordination with the COR and Product Owner.
• Produce and maintain technical documentation covering architecture, pipelines, monitoring, security, and disaster recovery.
• Support Business Continuity and Disaster Recovery (BCDR) planning, documentation, and exercises.
• Ensure all deliverables comply with ADA, Section 508, WCAG 2.2 A/AA, and digital accessibility standards.

Junior DevSecOps Engineer

DevSecOps Engineer

Program Manager

• Serve as the primary Aretum representative to VA leadership, COR, program offices, clinicians, and technical teams.
• Oversee all phases of the program: pilot, enterprise rollout, full capability deployment, and option periods.
• Coordinate across Aretum and subcontractors to ensure unified delivery
• Lead efforts related to AWS cloud architecture, ATO compliance, and secure hosting — aligning with experience performing cloud modernization and architecture reviews.
• Oversee architecture review processes, ensuring solutions comply with VA enterprise standards and cloud governance frameworks.
• Manage multi-million-dollar program operations including schedule, resourcing, risk, budget oversight, KPI tracking, and contract deliverables.
• Apply mature program management practices consistent with managing $50M+ programs and multi-disciplinary teams
• Lead integration activities between Polypharmacy software, VA systems, cloud environments, and data platforms.
• Direct testing, validation, performance improvement, and pilot success criteria defined in the QASP.
• Drive organizational change strategies aligning with VA clinical operations, Veteran-facing experiences, and enterprise engineering teams.
• Facilitate communications, training coordination, and adoption activities.
• Define staffing needs; develop role descriptions; oversee interviews and onboarding.
• Lead matrixed teams including cloud engineers, security SMEs, analysts, architects, and clinical-technical staff.

Program Manager – Contingent

• Design, operate, and continuously improve automated CI/CD pipelines using GitLab CI to support zero-downtime deployments across multiple environments.
• Support development teams with standardized deployment tooling, automation, and operational best practices.
• Produce monthly CI/CD pipeline performance reports, identifying risks, trends, and optimization opportunities.
• Administer and support containerized workloads using Kubernetes (EKS) and Docker-based container platforms.
• Configure and manage Linux-based servers and systems.
• Implement Infrastructure as Code (IaC) using Terraform and/or AWS CDK for repeatable, auditable deployments.
• Support provisioning and configuration of AWS services including EC2, EKS, ECS, S3, RDS, VPC, Lambda, and related services.
• Coordinate infrastructure changes without performing AWS account provisioning or organizational administration.
• Integrate security scanning into CI/CD pipelines using tools such as Trivy, AWS Inspector, and AWS Security Hub.
• Perform vulnerability triage and coordinate remediation with development teams in accordance with defined timelines.
• Implement and manage IAM least-privilege policies, secrets, and encryption using AWS KMS, Secrets Manager, and SSM.
• Ensure encryption in transit and at rest across all in-scope systems.
• Configure and maintain monitoring and observability using CloudWatch, Prometheus, Grafana, and centralized logging solutions.
• Support Tier 2 and Tier 3 incident response for production systems, meeting SLA requirements.
• Participate in root-cause analysis and continuous improvement initiatives.
• Participate in Agile sprints, including backlog grooming, sprint planning, stand-ups, and retrospectives.
• Track work in JIRA, using story-point estimation and sprint metrics.
• Support reprioritization of backlog items in coordination with the COR and Product Owner.
• Produce and maintain technical documentation covering architecture, pipelines, monitoring, security, and disaster recovery.
• Conduct knowledge transfer and mentoring sessions for staff and contractor teams.
• Support Business Continuity and Disaster Recovery (BCDR) planning, documentation, and exercises.
• Ensure all deliverables comply with ADA, Section 508, WCAG 2.2 A/AA, and digital accessibility standards.

Senior DevSecOps Engineer

Database Administrator

• - Supporting the unification of application and database development frameworks and participating in database migration activities across development, test, and production environments.
• - Designing, building, and maintaining database structures and schemas to support transactional, reporting, and invoicing/payment system components.
• - Managing data structures and data administration procedures to control redundancy and ensure consistency across database environments.
• - Assisting with the design, development, and maintenance of a comprehensive repository for data standards, data models, and data element definitions.
• - Creating and maintaining a data directory that includes an inventory of stored procedures, scheduled tasks, and database scripts.
• - Developing, documenting, and maintaining backend database scripts and processes and storing documentation in a centralized repository.
• - Administering repository rules and coordinating the process for adding, changing, and deleting database objects and information.
• - Ensuring synchronization and consistency between physical databases and repository information.
• - Recommending and implementing database standards, guidelines, and best practices related to data ownership, retrieval, and modification rights.
• - Coordinating with system administrators to ensure database compatibility with development, test, and production environments.
• - Supporting performance tuning, troubleshooting, and resolution of database-related issues.
• - Investigating and resolving developer-reported database problems or performance complaints.
• - Supporting data migration, backup, and recovery activities to ensure data availability and integrity.
• - Assisting with the development of test cases and supporting regression testing activities related to database changes.
• - Participating in user acceptance testing (UAT) activities related to database functionality.
• - Supporting application enhancements by implementing approved schema changes and backend updates.
• - Assisting with data administration workshops and participating in enterprise data administration programs.
• - Providing input into technical recommendations and white papers related to database modernization and optimization.

Senior Oracle Database Administrator

System Administrator

• Providing day-to-day operational management and user support for development, test, and production environments supporting the enterprise information system.
• Maintaining maximum system uptime and reliability across all supported environments.
• Managing and renewing security certificates for application systems and external-facing sites prior to expiration.
• Imaging and configuring baseline development workstations for technical staff and maintaining approved integrated development environments (IDEs).
• Managing and administering servers and virtual environments supporting development, test, and production systems.
• Ensuring that development and test environments mirror production environments for configuration consistency and reliability.
• Performing system patching, virus updates, and routine system maintenance in accordance with continuous monitoring requirements.
• Supporting assessment and authorization (A&A) activities for the enterprise information system.
• Assisting with the maintenance and updates of required security documentation, including system security plans (SSP), privacy impact assessments (PIA), and IT contingency plans.
• Ensuring system configurations adhere to approved federal and departmental technical standards.
• Monitoring and maintaining system security posture to ensure compliance with risk thresholds and security performance requirements.
• Initiating approved purchase orders for hardware and software acquisitions in support of system operations.
• Supporting backup, recovery, and disaster recovery preparedness activities.
• Coordinating with database administrators and application developers to ensure system compatibility and operational readiness.
• Supporting regression testing and production release activities related to system changes.
• Assisting with troubleshooting and resolution of system-level incidents and operational issues.
• Supporting continuous monitoring and vulnerability remediation activities.
• Maintaining documentation related to system configurations, processes, and operational procedures.

• Study and transform data science prototypes and apply appropriate machine learning algorithms and tools
• Run machine learning tests and experiments, and document findings and results
• Train, retrain, and monitor machine learning systems and models as needed
• Consult with managers to determine and refine machine learning objectives
• Extend existing machine learning libraries and frameworks
• Assist team leads in identifying multiple emerging tech initiatives running in parallel related to such technologies as AI, ML, Blockchain and agile tooling
• Maintain and upgrade existing team-developed software tools
• Perform as a hands-on developer to implement solutions

AI/ML Developer

Financial Planning and Analysis

• Conduct comprehensive budget analysis and forecasting to monitor financial performance and resource utilization.
• Prepare and maintain budget reports, assessments, and financial statements for decision-making support.
• Collaborate with project managers to develop and implement financial plans for various projects.
• Identify areas of financial improvement and recommend strategies to enhance budget management processes.
• Ensure compliance with federal regulations and accounting standards in all budget-related activities.
• Conduct planning for Budget and Contracts Office, ensuring alignment with organizational goals.
• Adjudicate budget change requests.

Financial and Budget Analyst

Security Engineer

• Lead end-to-end delivery of cybersecurity/IT risk assessment engagements managing scope, scheduled, resources, risks, and deliverables
• Serve as the primary client point of contact; provide clear status updates, briefings, and issue resolution to keep stakeholders aligned
• Direct assessment activities to evaluate government systems and networks, identify vulnerabilities, and document findings and recommendations
• Oversee A&A/RMF support and author review/ required security documentations (as applicable), ensuring completeness and audit readiness
• Manage POA&M development and remediation tracking, including evidence-based closure support and continuous monitoring reporting
• Coordinate cross-functional teams (security, engineering, operations) to execute assessment plans and maintain quality standards across deliverables
• Advise technical and non-technical stakeholders on security risks, control implementation, and practical mitigation strategies
• Stay current on federal cybersecurity guidance and requirements and communicate impacts to the team and client
• Support proposal efforts and other program needs as required in a federal consulting environment

Cybersecurity Risk Assessment Engagement Manager – Project Manager

• Assess enterprise IT environments (on-prem, cloud, and hybrid) to identify security risks, architectural weaknesses, misconfigurations, and opportunities to improve defense-in-depth
• Design and document security architectures and reference patterns (network segmentation, secure remote access, privileged access, boundary protections, logging/monitoring, and secure configuration baselines)
• Work with network/infrastructure teams on secure network design and validation, including connectivity flows, trust boundaries, and segmentation approaches aligned to modern federal security architecture practices (e.g., zero trust concepts)
• Lead or support security testing activities for government systems (vulnerability scanning coordination, configuration assessments, and validation testing) and translate results into clear remediation actions
• Provide technical leadership and project management support for security improvement initiatives (planning, task tracking, coordinating dependencies, and delivery of architecture artifacts)
• Ensure security designs and infrastructure changes align with applicable control requirements and are documented in an audit-ready manner consistent with federal control frameworks
• Create and maintain architecture diagrams, security design documentation, implementation guidance, and standards for operational teams
• Brief technical and non-technical stakeholders on architecture risk, tradeoffs, and prioritized remediation recommendations

Security Architect – Infrastructure Security Specialist

• Perform vulnerability assessments and penetration testing of government systems and applications in accordance with approved rules of engagement and testing plans
• Execute technical testing activities (e.g., reconnaissance, scanning, enumeration, validation/exploitation where authorized) and document evidence, risk, and impact
• Assess systems and networks to identify deviations from acceptable configurations and security policy, and translate findings into prioritized remediation actions
• Support secure network design reviews by analyzing network architecture, trust boundaries, segmentation, and exposed services to identify risk and attack paths
• Contribute to project delivery by estimating effort, tracking tasks, communicating blockers, and supporting status reporting and deliverable timelines
• Produce high-quality technical write-ups and executive-ready summaries, including reproduction steps, affected assets, severity rationale, and remediation recommendations
• Retest/validate remediation and provide closure evidence for resolved vulnerabilities as required by the engagement and client process
• Maintain careful handling of sensitive information and ensure testing remains ethical, authorized, and auditable