Cherokee Federal

Security Engineer

• Provide independent assessments of MARAD information systems in support of system authorization, reauthorization, and continuous monitoring activities.
• Evaluate management, operational, and technical security controls in accordance with NIST Risk Management Framework (RMF) requirements.
• Support Authority to Operate (ATO) decisions.
• Develop assessment documentation and reports.
• Collaborate with MARAD, DOT, and cybersecurity stakeholders to ensure compliance, risk visibility, and mission assurance.
• Conduct independent assessments of specified MARAD information systems following the System Authorization process.
• Provide annual assessment support to the NSMV and MARAD CIO programs.
• Conduct on-site evaluations at the Philadelphia shipyard and other locations.
• Develop security assessment plans and assessment reports compliant with latest revisions of NIST Special Publication 800-53A.
• Develop Security Assessment Plan (SAP) detailing assessment scope and methods.

Senior Security Controls Assessor

Security Analyst

• Provide support to the MARAD Information Assurance Program for operations, business and administrative in support of the System Authorization Process and deliverables as defined in this document.
• Direct involvement with MARAD Program Office and the Information System Security Manager (ISSM) on cybersecurity and authority to operate (ATO) matters related to information systems supporting the MARAD CIO.
• Manage MARAD’s Information System’s core documentation, in accordance with each phase of the system engineering process / System Development Life Cycle (SDLC) with standardized templates, baseline management with supporting checklists and technical guides.
• Support creation/update of FIPS 199 Security Categorization document.
• Support creation/update security control selection listing (include justification for applicable tailor and or risk acceptance).
• Support creation/update System Security Plan (SSP); ensure discovered and identified system components, control implementation status are addressed.
• Assist in security incident response, risk mitigation, and compliance reporting.
• Performs other job-related duties as assigned.

Cyber Security Analyst

Data Analyst

• Analyze multi-source data
• Manage database configurations
• Support security and accreditation
• Drive improvements to the DoD Trauma Registry
• Ensure confidentiality, integrity, and availability of systems, networks, and data
• Plan, develop, implement, maintain, and enhance security programs, policies, procedures, and tools.
• Maintain certification/accreditation documentation
• Manage information assurance vulnerability assessment program
• Conduct security audits and risk/vulnerability assessments
• Participate in network/systems design
• Implement security policies
• Develop contingency plans and disaster recovery procedures.
• Manage information system accounts, network rights, and access for servers, workstations, and devices using industry tools.
• Evaluate database management technologies
• Investigate problems and inefficiencies
• Assess impacts of new/revised software on operations and applications.
• Use DBMS tools to analyze storage consumption, access times, read/write frequencies.
• Analyze archived data usage
• Optimize existing systems
• Provide, maintain, and manage end-user accounts and profiles.
• Apply patches, execute field-engineering notices, verify checksums.
• Identify substantive issues; analyze and develop alternatives; recommend changes to senior Joint Trauma System leadership for the DoD Trauma Registry.

Configuration Data Analyst

Salesforce Analyst

• Support end-to-end Salesforce delivery across core platform capabilities, including Service Cloud, Sales Cloud, and custom CRM solutions, with a focus on business analysis and requirements definition.
• Act as the primary liaison for business stakeholders, building strong relationships and serving as a trusted advisor throughout discovery and delivery phases.
• Lead and facilitate discovery sessions, stakeholder interviews, and workshops to elicit business, functional, and reporting requirements.
• Document current-state and future-state business processes, workflows, and use cases to support solution design.
• Translate business needs into well-defined user stories, acceptance criteria, and functional requirements aligned with Agile methodologies.
• Collaborate closely with Salesforce Administrators, Developers, and Architects to ensure requirements are clearly understood and solutions meet stakeholder expectations.
• Support backlog grooming, sprint planning, and ongoing prioritization in partnership with Product Owners and project leadership.
• Validate requirements and solution designs through walkthroughs, prototypes, and iterative stakeholder feedback.
• Coordinate and support User Acceptance Testing (UAT), including test scenario creation, execution support, defect triage, and final sign-off.
• Ensure solutions comply with federal governance, security, data, and regulatory standards.
• Contribute to change management efforts, including documentation, training materials, and stakeholder communications.
• Performs other job-related duties as assigned

Senior Salesforce Business Analyst

• Support end-to-end Salesforce delivery across core platform capabilities, including Service Cloud, Sales Cloud, and custom CRM solutions, with a focus on business analysis and requirements management.
• Serve as the primary liaison for business stakeholders, building strong client relationships and acting as a trusted advisor throughout discovery and delivery phases.
• Lead discovery sessions, stakeholder interviews, and workshops to elicit business, functional, and reporting requirements.
• Document current-state and future-state business processes, workflows, and use cases to inform solution design and implementation.
• Translate business needs into clear, well-defined user stories, acceptance criteria, and functional requirements aligned with Agile delivery methodologies.
• Collaborate closely with Salesforce Administrators, Developers, and Architects to ensure requirements are clearly understood and solutions meet stakeholder expectations.
• Support backlog refinement, sprint planning, and ongoing prioritization in partnership with Product Owners and project leadership.
• Validate requirements and solution designs through walkthroughs, prototypes, and iterative stakeholder feedback.
• Coordinate and support User Acceptance Testing (UAT), including test scenario development, execution support, defect triage, and final approval.
• Ensure solutions comply with federal governance, security, compliance, and data standards.
• Support change management activities, including documentation, training materials, and stakeholder communications.

Junior Salesforce Business Analyst

Salesforce Developer

• Design, develop, and implement Salesforce solutions using Apex, Lightning Web Components, and other code-based Salesforce technologies.
• Collaborate with business analysts, stakeholders, and development teams to gather requirements and translate them into technical solutions.
• Participate in the full software development lifecycle, including design, coding, testing, and deployment.
• Know how to use Flow for complex requirements, with the ability to bridge out to code as necessary.
• Develop efficient and scalable code following best practices and industry standards.
• Develop Lightning Web Components and Visualforce pages to meet business requirements.
• Integrate Salesforce with other systems and platforms, ensuring seamless data flow and system interoperability.
• Perform code reviews to ensure code quality, adherence to standards, and best practices.
• Troubleshoot and debug Salesforce applications, identifying and resolving issues in a timely manner.
• Collaborate with cross-functional teams, including other developers, administrators, and QA testers, to ensure successful project delivery.
• Stay updated on Salesforce releases, new features, and industry trends, and provide recommendations for enhancing development processes and applications.
• Provide technical guidance and mentorship to junior team members, fostering a culture of knowledge sharing and continuous learning.

Senior Salesforce Developer

Project Manager

• Lead the planning, execution, and delivery of a complex Salesforce program, ensuring it is completed on time, within budget, and meets business requirements.
• Define program scope, goals, and deliverables, and establish project plans, timelines, and milestones.
• Collaborate with key stakeholders, including business leaders, executives, and technical teams, to gather requirements, align program objectives, and manage expectations.
• Develop and maintain program documentation, including project charters, status reports, and risk management plans.
• Manage and coordinate cross-functional teams, including developers, administrators, and business analysts, to ensure effective collaboration and resource allocation.
• Monitor program progress, identify and mitigate risks, and resolve issues to ensure successful delivery.
• Track and report on program metrics, providing regular updates to stakeholders and senior management.
• Serve as the primary point of contact for program-related communication, facilitating effective and transparent communication across all stakeholders.
• Stay current with Salesforce best practices, industry trends, and new features, assessing their potential impact on program objectives and making recommendations accordingly.
• Provide leadership, mentorship, and guidance to project teams, fostering a collaborative and results-oriented work environment.
• Drive continuous improvement initiatives, identifying opportunities to optimize processes, increase efficiency, and enhance program delivery.
• Performs other job-related duties as assigned

Salesforce Project Manager

Operations

• Supervise staff of 5-10 personnel who are responsible for recruitment, onboarding, training, scheduling, and performance management.
• Monitor staffing levels to meet mission and contract requirements
• Oversee timely and accurate deployment of medical personnel
• Conduct forecasting and personnel planning to meet operational needs
• Streamline workflows to improve service efficiency and consistency
• Conduct regular audits and performance reviews
• Resolve discrepancies, and enforce adherence to contractual and regulatory standards
• Prepare briefings and deliver reports, updates, and recommendations to leadership
• Leverage data and software tools to identify trends and proactively address challenges
• Develop, update, and maintain Standard Operating Procedures (SOPs)
• Performs other job-related duties as assigned

Operations Manager

Administration

• Design, develop, deploy, and maintain Splunk SOAR (Phantom) playbooks, apps, and integrations with secure, scalable configurations.
• Integrate Splunk ES correlation searches and notable events into automated triage, enrichment, containment, and ServiceNow IR workflows using CIM-compliant data pipelines.
• Build AWS-focused automations leveraging GuardDuty, CloudTrail, Security Hub, VPC Flow Logs, IAM, EC2, S3, and asset tagging for enrichment and response.
• Implement response actions such as EC2 isolation, S3 access controls, EBS snapshots for forensics, IAM key rotation or revocation, MFA enforcement, and Security Hub updates, with human-in-the-loop approvals and rollback procedures.
• Orchestrate endpoint and identity response by integrating EDR tools for host containment, IOC blocking, and remote response actions.
• Integrate ServiceNow IR to auto-create and manage incidents, enrich tickets with cloud and CI context, track SLAs, manage approvals, and attach playbook evidence.
• Optimize SOAR operations by tuning triggers, deduplicating events, reducing latency, standardizing reusable Python modules, and maintaining version control and documentation.
• Collaborate with SOC, IR, and cloud teams to translate runbooks (e.g., phishing, malware, IAM abuse, EC2 compromise) into reliable, measurable automations.
• Measure and report automation outcomes including MTTR reduction, auto-resolution rates, and SLA performance; support audits with control mapping and POA&M updates.
• Maintain governance through RBAC, secrets handling, logging, change control, and safe-response guardrails.
• Performs other job-related duties as assigned

Splunk Administrator

Cloud Engineer

• Responsible for documenting user stories based on product owner requirements and backlog
• Ingest and visualize data sets from internal and external providers for integration or ingestion into cloud deployed solutions.
• Elicit data requirements from the product owner and other stakeholders.
• Create/update SDLC documentation based on stakeholder requirements. SDLC documentation includes but is not limited to: Requirements Documentation, Use Case Documentation, Data Flow Documentation, Business Process Flows, Visio system diagrams (of systems and components), Testing Plan, Test Cases, Security Impact Analysis Worksheet, Change Control Request Form.
• Support the Product Owner by facilitating user acceptance testing with stakeholders.
• Support the scrum team with any additional web/cloud development tasks as necessary.
• Responsible for developing cloud-based applications using and integrating with AWS native tooling: Python (Expert level proficiency needed), Javascript / Javascript-based frameworks (Expert level proficiency needed), API Development (Expert level proficiency needed), AWS Lambda, AWS API Gateway, AWS DynamoDB, AWS Glue, AWS SageMaker (Jupyter Notebooks), AWS Cognito, AWS Relational Database Service (RDS), AWS Simple Storage Service (S3), AWS CodePipeline, AWS Fargate (Running WordPress CMS and/or containerized workloads), AWS DataZone, GitHub Enterprise.
• Expected to whenever possible leverage Infrastructure as Code (IaC), open source and/or approved NOAA tools and resources.
• Responsible for developing APIs and other application integrations.
• Responsible for ensuring participation in an agile software development team.
• Due to the agile and changing nature of workload, may be required to perform other software development and analysis activities in support of the development team.

Cloud Computing Specialist – Journeyman

Program Manager

• Lead the planning, execution, and delivery of a complex Salesforce program
• Define program scope, goals, and deliverables
• Collaborate with key stakeholders to gather requirements
• Develop and maintain program documentation
• Manage and coordinate cross-functional teams
• Monitor program progress, identify and mitigate risks
• Track and report on program metrics
• Serve as the primary point of contact for program-related communication
• Stay current with Salesforce best practices and industry trends
• Provide leadership, mentorship, and guidance to project teams
• Drive continuous improvement initiatives
• Perform other job-related duties as assigned

Salesforce Program Manager

Technical Project Manager

• Responsible for maintaining a kanban task board using NOAA approved tools (currently Github enterprise)
• Responsible for administering a project management tool (Currently GitHub Enterprise - Replacement tool will be JIRA software development and Confluence)
• Ensure that all submitted documentation completes the OAR Change Control process and any feedback provided by the IT Security Officer, System Owner or Enterprise Architect is addressed prior to moving solutions into production.
• Coordinate with the contracting organization’s program office to enable timely problem resolution.
• Facilitate product reporting in line with Agile delivery methods.
• Ensure Agile development principles are employed; expected to work with the government to develop Product / Sprint plans and reporting in line with Agile delivery approaches.
• Facilitate an Agile methodology among team members; coach Agile processes and remove impediments.
• Coordinate and facilitate Agile ceremonies, including, but not limited to: sprint planning meetings, stand-ups, sprint reviews, and retrospectives and provide records consistent with statutory and regulatory requirements.
• Manage team performance and metrics: Works with product leadership and the team to define relevant metrics that are formulated and utilized for meeting project objectives.
• Team coaching and coordination: planning and coordinating training and coaching for the team on the Scrum processes.
• Assist the Product Owner with management of the Product Backlog to maximize value.
• Due to the agile and changing nature of workload, the contractor may be required to perform other software development and analysis activities in support of the development team such as User Acceptance Testing, system documentation, standard operating procedure documentation, user guide creation and change control documentation.
• Performs other job-related duties as assigned.

IT Project Manager II

Systems Engineer

• Assess current business systems, processes, and workflows.
• Identify areas for improvement or automation to enhance efficiency and effectiveness.
• Collaborate with stakeholders to understand business objectives and strategies.
• Develop and propose system solutions that align with business goals.
• Clearly articulate user needs, program specifications, and system functionality requirements.
• Collaborate with software developers and engineers to design and implement solutions.
• Provide detailed specifications and guidance for the development and modification of computer programs and systems.
• Serve as a subject matter expert (SME) on business systems and processes.
• Offer strategic advice and consultation on complex projects and initiatives.
• Act as a senior-level contributor, providing expertise and leadership.
• Mentor junior analysts and team members.
• Lead or participate in cross-functional teams and projects.
• Performs other job-related duties as assigned.

Business Systems Analyst

Security Operations

• Lead end-to-end incident response operations, ensuring rapid triage, containment, remediation, and recovery.
• Direct and mentor IR analysts; manage on-call rotations and surge response support.
• Develop, maintain, and standardize IR playbooks, procedures, and escalation workflows.
• Coordinate cross-functional incident bridges; provide timely executive and customer briefings, including daily IR status updates.
• Oversee digital forensics and evidence handling, ensuring chain of custody and investigative integrity.
• Drive proactive threat hunting aligned to current threat actor TTPs and integrate intelligence into detections and response plans.
• Partner with SOC leadership on detection engineering, alert tuning, and use-case development.
• Active participation in meetings, reviews agendas, coordinates with contractors and staff to ensure cooperation and task implementation, reviews and validates security artifacts to ensure that they are sufficient in preparing the customer to address known security operations and security engineering requirements.
• Provide daily incident response briefing to the customer.
• Support the security review of IT systems and architecture as well as Cybersecurity policy development on IT service use, access, refresh, and configuration control, etc.
• Conduct post-incident reviews documenting root cause, impact, corrective actions, and preventive controls.
• Track and report IR metrics (e.g., MTTD, MTTR, containment time, recurrence).
• Ensure compliance with regulatory and contractual requirements (FISMA, FedRAMP, DFARS/CMMC, as applicable).
• Coordinate third‑party engagements (forensics, breach counsel, PR) when needed.
• Lead tabletop exercises, readiness drills, phishing simulations, and after-action reporting.
• Conduct phishing exercises; Plan, using relevant, real-world examples (e.g., HR updates, IT alerts, new vendor invoices). Execute and monitor, track and analyze, and conduct after-action reports.
• Support security architecture reviews, cybersecurity policy development, and system risk assessments.
• Guide selection and optimization of IR technologies, including EDR/XDR, SIEM/SOAR, NDR, threat intelligence, and forensics tools.
• Performs other job-related duties as assigned

Cybersecurity Incident Response Lead

• Provides planning support to project teams, to ensure that projects are well-planned and have a high probability of being executed on-schedule and on-budget.
• Maintains institutional awareness of the project schedule and proactively identifying and mitigating risks.
• Coordinates and communicates the status of the project with project team members and customers, as needed, using enterprise collaboration tools and portals.
• Performs other job-related duties as assigned