ARETUM

Security Engineer

• Independently perform all aspects of the security controls assessment in alignment with NIST 800-53 Revision 5
• Ensure comprehensive understanding and application of ATO documentation requirements
• Coordinate all aspects of testing with relevant stakeholders and team lead
• Develop a security assessment plan with input from stakeholders
• Conduct and lead assessment interviews and tests while managing evidence
• Provide insightful recommendations to improve security posture

Senior Security Controls Assessor

Security Analyst

• Leading and executing the end-to-end security control assessment process for federal information systems, aligned with NIST SP 800-53 Revision 5 and the Risk Management Framework (RMF)
• Development of Security Assessment Plans (SAPs)
• Conducting technical control evaluations and interviews
• Analyzing system artifacts
• Producing Security Assessment Reports (SARs)
• Presenting findings to stakeholders
• Daily coordination of assessor activities
• Alignment with CSAM or equivalent tools
• Validation of compliance documentation including POA&Ms and RMF lifecycle artifacts such as the BIA, Contingency Plan, Configuration Management Plan, and Privacy Threshold Analysis

SME Information Security Analyst

Data Engineer

• Lead hands-on development of data pipelines and data platform components, including writing and reviewing production-quality code
• Own end-to-end delivery for assigned pipelines and services
• Build, improve, and maintain ETL/ELT pipelines for large-scale data ingestion and transformation
• Implement CI/CD and automated testing for data pipelines (integration tests, data validation, and release workflows)
• Establish operational readiness for production data workflows
• Optimize performance and cost of pipelines and storage through tuning, partitioning, and workload right-sizing in AWS GovCloud
• Contribute to and implement modern data architecture patterns, including lakehouse approaches
• Ensure architecture and implement support DoD strategic initiatives, including enterprise data modernization efforts
• Drive creation and upkeep of data transformation roadmaps and technical documentation; support data maturity assessments and current-state analysis across agency-wide programs
• Translate technical approaches into clear, business-understandable frameworks and recommendations.
• Partner with cross-functional teams and program offices to understand data requirements, enable data-driven decision-making, and translate technical approaches into business-understandable frameworks and recommendations.
• Support delivery of leadership priority initiatives (e.g., childcare forecasting, Military OneSource analytics, readiness dashboards) and design/implement data solutions that connect outreach efforts to program uptake and readiness outcomes, for users with varying technical proficiency levels

Lead Data Engineer – Architecture, Data Governance

Business Development Rep

• Focus on the identification and capture of new business by leveraging customer relationships and personal experience to identify and assess business opportunities that result in measurable revenue growth.
• Manage capture activities for key engagements, identify gaps and emerging requirements, assess and recommend teaming partners, perform market and economic analysis, conduct business intelligence, design and execute formal capture plans, and monitor competitor activity for each capture.
• Conduct Business Development and Capture Management activities for assigned or suggested opportunities.
• Establish and meet new business targets, goals and objectives.
• Develop detailed and actionable strategies and account plans that achieve significant corporate growth targets.
• Identify leads and new business opportunities – leveraging past relationships/accounts.
• Formulate and implement strategies and action plans to develop healthy pipelines and path to attain and maintain sales performance targets.
• Participate in planning, pipeline reviews, solution development, pricing, gate reviews, color team reviews, win theme development, as well as providing proposal writing and reviews as required.
• Negotiate effective non-disclosure and teaming agreements for review and approval using Aretum Workflow.
• Partner and sometimes lead development of the win strategy and identify resources needed to increase the win probability.
• Work with various corporate divisions and business units to develop any necessary thought leadership, campaigns, or social media activity.
• Deliver excellent customer service/satisfaction and grow client business.
• Coordinate strategy, approach, and deliverables with other key stakeholders in the organization.
• Uphold and protect Aretum’s reputation of ensuring quality, professional and ethical standards, and compliance with company policies and processes.
• Exhibit technical writing skills, identify winning themes and benefits for customers, and an understanding of price-to-win strategies.
• Ensure capture follow all corporate operations for capture and proposal development such as Gate Review Processes.
• Work with the HR/Recruiting department to create job descriptions, hire competent personnel and oversee employee training programs.
• Ensure all BD/Capture actions are tracked in a detailed manner according to corporate processes.
• Work collaboratively with other enterprise resources to achieve successful execution of growth strategies.

Director, Business Development – Navy

Software Engineer

• Provide development capabilities to support ServiceNow organizational milestones, dashboards, and processes
• Migrate project instance from Jira to ServiceNow
• Creates and maintains Executive, Annual Operating Plan (AOP), and Internal Milestone dashboards
• Creates/maintains portfolio governance reporting and processes
• Generate reports for review and planning events
• Manages the upload and updates process of activities and milestones in ServiceNow
• Integrate reporting data with other tools/system
• Develops and maintains backlog of solutions prioritized by the client and Develops workflows within ServiceNow
• Oversee business management planning, integration, and execution of service IT and customer workflows for all customer segments from as identified through governance materials and frameworks into the ServiceNow application.
• Develop, review, and align ServiceNow documentation (playbooks, internal and external user guides, testing materials, etc.) with ServiceNow processes to ensure usability and understanding for all customer segments.
• Manage continuous improvement (testing) of service processes within the ServiceNow application regularly

Service Now Developer – Dashboard Lead

• Design and implement secure integration interfaces (RESTful APIs, SOAP, message queues, file-based) connecting vendor applications with client data systems
• Develop data orchestration workflows using AWS services (Lambda, Step Functions, EventBridge, SQS/SNS)
• Use VA-endorsed interoperability standards including FHIR R4, CDS Hooks, and SMART on FHIR
• Build error handling, retry logic, and dead-letter queue patterns for distributed system reliability
• Implement data transformation and validation logic to reconcile disparate source system formats
• Create reusable integration patterns and libraries for scaling to 130+ system instances
• Work with vendor-supplied containers to understand integration points and API requirements
• Design and implement fault-tolerant integration patterns with automatic retry, circuit breaker, and graceful degradation strategies
• Build multi-AZ deployment architectures ensuring integration availability during infrastructure failures
• Develop idempotent APIs and workflows to handle duplicate processing and enable safe retries
• Implement health checks, readiness probes, and self-healing mechanisms for integration endpoints
• Create disaster recovery procedures including backup strategies, failover mechanisms, and recovery time objective (RTO) compliance
• Design for horizontal scalability to handle variable workload demands across millions of client records
• Implement secure integration patterns including encryption (at-rest and in-transit), authentication/authorization (OAuth, API keys, IAM roles), and input validation
• Apply least-privilege IAM policies for cross-service and cross-account access
• Implement audit logging and traceability for compliance requirements
• Handle PII, PHI and other sensitive client data according to federal data protection standards
• Support RMF/ATO process by documenting security controls and providing evidence for assessment
• Develop comprehensive integration test suites (unit, integration, end-to-end)
• Create test data sets and mocking strategies for isolated component testing
• Perform load and performance testing on integration endpoints
• Support security testing and vulnerability remediation activities
• Document test plans, test cases, and test results for compliance review
• Build serverless integration workflows using Lambda functions and Step Functions state machines
• Configure API Gateway for RESTful endpoint exposure with throttling and authorization
• Implement event-driven architectures using EventBridge, SNS, and SQS
• Manage secrets and configuration using Secrets Manager and Parameter Store
• Monitor integration health using CloudWatch metrics, logs, and alarms
• Deploy infrastructure-as-code using AWS SAM, CloudFormation, or Terraform

Developer – Integration, API Development

Systems Engineer

• Lead AWS networking architecture, application load balancing, and enterprise monitoring/observability implementation for a Federal cloud integration solution.
• Responsible for designing secure network segmentation, configuring high-availability load balancing, and establishing comprehensive monitoring across Splunk, Dynatrace, and DataDog platforms.
• Design and implement AWS networking architecture including VPC design, subnets, route tables, security groups, and NACLs.
• Configure Application Load Balancer (ALB) with target groups, health checks, SSL/TLS termination, path-based routing, and WAF integration.
• Implement network security controls for federal compliance.
• Design multi-AZ high availability architecture ensuring resilience during infrastructure failures.
• Manage VPC Flow Logs and network traffic analysis for security monitoring and troubleshooting.
• Implement and configure enterprise monitoring platforms for comprehensive system visibility.
• Establish alert design, escalation policies, and incident response integration for operational excellence.
• Monitor network performance metrics and optimize for latency, throughput, and reliability.

Systems Engineer – Networking and Monitoring

• Lead the deployment, hardening, and operational management of containerized applications on AWS ECS or OpenShift platform for a Federal cloud environment
• Responsible for evaluating and hardening vendor-supplied containers, implementing container orchestration infrastructure-as-code, and establishing secure, compliant container operations
• Deploy, configure, and manage AWS ECS or OpenShift container orchestration platform in production Federal environment
• Evaluate vendor-supplied container images for security vulnerabilities, compliance gaps, and operational requirements
• Implement container hardening strategies applying CIS benchmarks, DSTI STIGs, and federal security baselines
• Configure container orchestration including task/service definitions (ECS) or deployments/operators (OpenShift)
• Manage container lifecycle including image versioning, updates, patching, and rollback procedures
• Implement horizontal auto-scaling policies based on CPU, memory, custom metrics, and workload patterns
• Establish container networking including service discovery, ingress/egress controls, and inter-container communication
• Perform container image scanning using tools such as Prisma Cloud, Aqua Security, Twistlock, or AWS ECR scanning
• Remediate container vulnerabilities identified through scanning and security assessments
• Implement runtime security controls including container isolation, resource limits, and security contexts
• Configure secrets management for containerized applications using AWS Secrets Manager or HashiCorp Vault
• Apply least-privilege principles to container IAM roles and service accounts
• Implement container image signing and verification workflows
• Document container security controls and provide evidence for RMF/ATO security assessment
• Develop and maintain infrastructure-as-code using Terraform or AWS CloudFormation for container platform
• Build automated deployment pipelines for container infrastructure and application updates
• Create repeatable, version-controlled infrastructure patterns for scaling to 130+ system instances
• Implement GitOps workflows for infrastructure change management and audit trails
• Develop automation scripts for container platform management and troubleshooting
• Establish configuration baselines and drift detection mechanisms
• Design and implement multi-AZ container deployments ensuring high availability during infrastructure failures
• Configure health checks, readiness probes, and liveness probes for container self-healing
• Implement disaster recovery procedures including backup strategies for persistent container data
• Establish resource reservation and quality-of-service policies to prevent resource contention
• Design capacity planning and scaling strategies to handle variable workloads serving millions of clients
• Implement zero-downtime deployment strategies including blue-green and rolling updates
• Create comprehensive operational runbooks for container platform management, troubleshooting, and incident response
• Document deployment procedures, configuration baselines, and security hardening steps
• Develop standard operating procedures (SOPs) for routine maintenance and emergency procedures
• Maintain container platform architecture diagrams and configuration documentation for RMF compliance
• Create knowledge transfer materials for scaling operations team

Systems Engineer – Container Platform

QA Engineer

• Lead comprehensive testing, validation, and quality assurance activities for a complex Federal cloud integration solution serving millions of clients.
• Develop comprehensive test strategy covering functional, integration, performance, security, and compliance testing
• Create detailed test plans aligned with RMF/ATO requirements and federal security control validation
• Define test environments, test data requirements, and testing infrastructure needs
• Establish test schedules, milestones, and success criteria for pilot deployment across 10 systems
• Identify testing tools, frameworks, and automation opportunities to meet aggressive timeline
• Coordinate testing dependencies across development, infrastructure, and security teams
• Test container platform deployments (ECS/OpenShift) including orchestration, scaling, and failover capabilities
• Validate infrastructure-as-code deployments for consistency, repeatability, and compliance with baselines
• Test application load balancer configurations including health checks, routing rules, and SSL/TLS termination
• Verify network segmentation, security group rules, and multi-AZ high availability configurations
• Validate backup and disaster recovery procedures including RTO/RPO compliance
• Test auto-scaling behaviors under various load conditions and failure scenarios
• Design and execute integration test cases for data flows across 10+ disparate source systems
• Test API interfaces, data orchestration workflows, and error handling/retry logic
• Validate data transformation accuracy, completeness, and consistency across integration points
• Test vendor container integration with custom infrastructure and security controls
• Verify Databricks pipeline processing and PowerBI report accuracy against expected outcomes
• Execute end-to-end business process testing for risk analysis and service coordination workflows
• Validate implementation of NIST 800-53 security controls required for ATO
• Coordinate and support security assessment testing activities with ISSO/ISSM
• Test authentication, authorization, and access control mechanisms across all system components
• Validate encryption implementation (at-rest and in-transit) for sensitive client data and PII
• Execute vulnerability scanning and verify remediation of identified security findings
• Test audit logging completeness, accuracy, and compliance with federal requirements
• Validate container hardening against CIS benchmarks and DSTI STIGs
• Support penetration testing activities and coordinate remediation verification
• Design and execute performance tests simulating millions of client records and concurrent users
• Test system performance under peak load, sustained load, and stress conditions
• Validate horizontal scaling effectiveness and resource utilization efficiency
• Identify performance bottlenecks in integration workflows, database queries, and API endpoints
• Test monitoring and alerting thresholds under various load scenarios
• Measure and validate response times, throughput, and latency against defined SLAs
• Develop automated test suites for regression testing of infrastructure and application components
• Integrate automated testing into CI/CD pipelines for continuous validation
• Create reusable test scripts and frameworks for scaling to 130+ system instances
• Automate security compliance checks and configuration validation
• Build synthetic monitoring and health check automation for production readiness
• Document test cases, test results, and defect findings with clear reproduction steps
• Track defects through resolution and verify fixes through regression testing
• Maintain traceability matrix linking requirements to test cases and security controls
• Create test summary reports for stakeholder reviews and compliance evidence
• Document test environments, configurations, and procedures for audit and knowledge transfer
• Provide testing evidence and artifacts for RMF/ATO security assessment package

Systems Engineer – Testing & Quality Assurance

DevOps Engineer

• Design, operate, and continuously improve automated CI/CD pipelines using GitLab CI to support zero-downtime deployments across multiple environments.
• Support development teams with standardized deployment tooling, automation, and operational best practices.
• Administer and support containerized workloads using Kubernetes (EKS) and Docker-based container platforms.
• Configure and manage Linux-based servers and systems.
• Implement Infrastructure as Code (IaC) using Terraform and/or AWS CDK for repeatable, auditable deployments.
• Support provisioning and configuration of AWS services including EC2, EKS, ECS, S3, RDS, VPC, Lambda, and related services.
• Coordinate infrastructure changes without performing AWS account provisioning or organizational administration.
• Integrate security scanning into CI/CD pipelines using tools such as Trivy, AWS Inspector, and AWS Security Hub.
• Perform vulnerability triage and coordinate remediation with development teams in accordance with defined timelines.
• Implement and manage IAM least-privilege policies, secrets, and encryption using AWS KMS, Secrets Manager, and SSM.
• Ensure encryption in transit and at rest across all in-scope systems.
• Configure and maintain monitoring and observability using CloudWatch, Prometheus, Grafana, and centralized logging solutions.
• Support Tier 2 and Tier 3 incident response for production systems, meeting SLA requirements.
• Participate in root-cause analysis and continuous improvement initiatives.
• Participate in Agile sprints, including backlog grooming, sprint planning, stand-ups, and retrospectives.
• Track work in JIRA, using story-point estimation and sprint metrics.
• Support reprioritization of backlog items in coordination with the COR and Product Owner.
• Produce and maintain technical documentation covering architecture, pipelines, monitoring, security, and disaster recovery.
• Support Business Continuity and Disaster Recovery (BCDR) planning, documentation, and exercises.
• Ensure all deliverables comply with ADA, Section 508, WCAG 2.2 A/AA, and digital accessibility standards.

Junior DevSecOps Engineer

DevSecOps Engineer

Program Manager

• Serve as the primary Aretum representative to VA leadership, COR, program offices, clinicians, and technical teams.
• Oversee all phases of the program: pilot, enterprise rollout, full capability deployment, and option periods.
• Coordinate across Aretum and subcontractors to ensure unified delivery
• Lead efforts related to AWS cloud architecture, ATO compliance, and secure hosting — aligning with experience performing cloud modernization and architecture reviews.
• Oversee architecture review processes, ensuring solutions comply with VA enterprise standards and cloud governance frameworks.
• Manage multi-million-dollar program operations including schedule, resourcing, risk, budget oversight, KPI tracking, and contract deliverables.
• Apply mature program management practices consistent with managing $50M+ programs and multi-disciplinary teams
• Lead integration activities between Polypharmacy software, VA systems, cloud environments, and data platforms.
• Direct testing, validation, performance improvement, and pilot success criteria defined in the QASP.
• Drive organizational change strategies aligning with VA clinical operations, Veteran-facing experiences, and enterprise engineering teams.
• Facilitate communications, training coordination, and adoption activities.
• Define staffing needs; develop role descriptions; oversee interviews and onboarding.
• Lead matrixed teams including cloud engineers, security SMEs, analysts, architects, and clinical-technical staff.

Program Manager – Contingent

• Design, operate, and continuously improve automated CI/CD pipelines using GitLab CI to support zero-downtime deployments across multiple environments.
• Support development teams with standardized deployment tooling, automation, and operational best practices.
• Produce monthly CI/CD pipeline performance reports, identifying risks, trends, and optimization opportunities.
• Administer and support containerized workloads using Kubernetes (EKS) and Docker-based container platforms.
• Configure and manage Linux-based servers and systems.
• Implement Infrastructure as Code (IaC) using Terraform and/or AWS CDK for repeatable, auditable deployments.
• Support provisioning and configuration of AWS services including EC2, EKS, ECS, S3, RDS, VPC, Lambda, and related services.
• Coordinate infrastructure changes without performing AWS account provisioning or organizational administration.
• Integrate security scanning into CI/CD pipelines using tools such as Trivy, AWS Inspector, and AWS Security Hub.
• Perform vulnerability triage and coordinate remediation with development teams in accordance with defined timelines.
• Implement and manage IAM least-privilege policies, secrets, and encryption using AWS KMS, Secrets Manager, and SSM.
• Ensure encryption in transit and at rest across all in-scope systems.
• Configure and maintain monitoring and observability using CloudWatch, Prometheus, Grafana, and centralized logging solutions.
• Support Tier 2 and Tier 3 incident response for production systems, meeting SLA requirements.
• Participate in root-cause analysis and continuous improvement initiatives.
• Participate in Agile sprints, including backlog grooming, sprint planning, stand-ups, and retrospectives.
• Track work in JIRA, using story-point estimation and sprint metrics.
• Support reprioritization of backlog items in coordination with the COR and Product Owner.
• Produce and maintain technical documentation covering architecture, pipelines, monitoring, security, and disaster recovery.
• Conduct knowledge transfer and mentoring sessions for staff and contractor teams.
• Support Business Continuity and Disaster Recovery (BCDR) planning, documentation, and exercises.
• Ensure all deliverables comply with ADA, Section 508, WCAG 2.2 A/AA, and digital accessibility standards.

Senior DevSecOps Engineer

Database Administrator

• - Supporting the unification of application and database development frameworks and participating in database migration activities across development, test, and production environments.
• - Designing, building, and maintaining database structures and schemas to support transactional, reporting, and invoicing/payment system components.
• - Managing data structures and data administration procedures to control redundancy and ensure consistency across database environments.
• - Assisting with the design, development, and maintenance of a comprehensive repository for data standards, data models, and data element definitions.
• - Creating and maintaining a data directory that includes an inventory of stored procedures, scheduled tasks, and database scripts.
• - Developing, documenting, and maintaining backend database scripts and processes and storing documentation in a centralized repository.
• - Administering repository rules and coordinating the process for adding, changing, and deleting database objects and information.
• - Ensuring synchronization and consistency between physical databases and repository information.
• - Recommending and implementing database standards, guidelines, and best practices related to data ownership, retrieval, and modification rights.
• - Coordinating with system administrators to ensure database compatibility with development, test, and production environments.
• - Supporting performance tuning, troubleshooting, and resolution of database-related issues.
• - Investigating and resolving developer-reported database problems or performance complaints.
• - Supporting data migration, backup, and recovery activities to ensure data availability and integrity.
• - Assisting with the development of test cases and supporting regression testing activities related to database changes.
• - Participating in user acceptance testing (UAT) activities related to database functionality.
• - Supporting application enhancements by implementing approved schema changes and backend updates.
• - Assisting with data administration workshops and participating in enterprise data administration programs.
• - Providing input into technical recommendations and white papers related to database modernization and optimization.

Senior Oracle Database Administrator

System Administrator

• Providing day-to-day operational management and user support for development, test, and production environments supporting the enterprise information system.
• Maintaining maximum system uptime and reliability across all supported environments.
• Managing and renewing security certificates for application systems and external-facing sites prior to expiration.
• Imaging and configuring baseline development workstations for technical staff and maintaining approved integrated development environments (IDEs).
• Managing and administering servers and virtual environments supporting development, test, and production systems.
• Ensuring that development and test environments mirror production environments for configuration consistency and reliability.
• Performing system patching, virus updates, and routine system maintenance in accordance with continuous monitoring requirements.
• Supporting assessment and authorization (A&A) activities for the enterprise information system.
• Assisting with the maintenance and updates of required security documentation, including system security plans (SSP), privacy impact assessments (PIA), and IT contingency plans.
• Ensuring system configurations adhere to approved federal and departmental technical standards.
• Monitoring and maintaining system security posture to ensure compliance with risk thresholds and security performance requirements.
• Initiating approved purchase orders for hardware and software acquisitions in support of system operations.
• Supporting backup, recovery, and disaster recovery preparedness activities.
• Coordinating with database administrators and application developers to ensure system compatibility and operational readiness.
• Supporting regression testing and production release activities related to system changes.
• Assisting with troubleshooting and resolution of system-level incidents and operational issues.
• Supporting continuous monitoring and vulnerability remediation activities.
• Maintaining documentation related to system configurations, processes, and operational procedures.