Guidehouse

Consultant

• Design enterprise data models, data lakes, warehouses, and integration frameworks for structured and unstructured data.
• Architect secure systems aligned with NIST, ISO 27001, and CIS controls to ensure compliance.
• Implement NERC CIP standards (002–013), including audit preparation, evidence gathering, and mitigation planning.
• Secure data flows across AWS, Azure, and on-prem environments using encryption, IAM, and network segmentation.
• Develop and enforce RBAC, ABAC, MFA, and privileged access management in compliance with technical CIP standards or similar regulations.
• Create secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
• Protect OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
• Maintain data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.
• Collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.

Senior Consultant – NERC CIP SME

Risk

• The RMF / A&A Manager provides senior leadership and strategic oversight for federal cybersecurity authorization, compliance, and audit programs supporting Ginnie Mae enterprise and cloud environments.
• This role is accountable for end to end execution of the Risk Management Framework (RMF), Assessment & Authorization (A&A), FedRAMP integration, and IT audit support, ensuring sustained compliance with FISMA, NIST, OMB mandates, and agency policies.
• The Manager serves as the primary interface with government leadership and drives delivery excellence across multiple concurrent authorizations, audits, and third party assessments.
• Provide programmatic leadership across RMF, A&A, FedRAMP, and IT audit activities for major and minor systems and cloud platforms.
• Direct multi disciplinary teams delivering authorization packages, audit responses, third party assessments, and remediation activities.
• Serve as senior advisor to Authorizing Officials (AO), CISO, IAM, CTA, and System Owners on risk posture, authorization decisions, and compliance strategy.
• Oversee FedRAMP P ATO reviews, agency control inheritance analysis, risk acceptance documentation, and authorization recommendations.
• Lead third party assessment (3PAO) coordination and ensure quality, consistency, and timeliness of Security Assessment Reports (SARs).
• Ensure development and maintenance of all RMF artifacts (SSP, SAR, POA&M, BIA, PIA, ISA, FIPS 199, contingency plans, and risk acceptance).
• Lead enterprise audit readiness and execution for FISMA, financial system audits, and SSAE 18 reviews.
• Establish governance processes, SOPs, metrics, dashboards, and executive level reporting.
• Drive continuous improvement of RMF and audit processes to enhance efficiency, quality, and sustainability.

Risk Management Framework A&A Manager

• Assist with preparation of RMF documentation including SSPs, control matrices, and POA&Ms under senior guidance.
• Support audit evidence collection, organization, and tracking activities.
• Maintain action logs, audit trackers, and status reports.
• Participate in A&A and audit meetings and document meeting minutes.
• Support maintenance of compliance and evidence repositories.
• Assist with POA&M updates and remediation tracking activities.

Junior Analyst, Risk Management Framework

Compliance

• Advise Energy Provider clients on utility operations adherence to NERC standards.
• Lead the development, implementation, and maintenance of compliance programs.
• Conduct detailed assessments of utility operations to identify compliance gaps and develop corrective action plans.
• Prepare comprehensive documentation, reports, and audit responses demonstrating adherence to NERC standards.
• Provide expert guidance for internal audits and external reviews.
• Facilitate training sessions and workshops for client staff on NERC requirements.
• Stay current with evolving industry regulations, technological advancements, and emerging challenges.

Associate Director – NERC O&P, CIP Compliance

Security Engineer

• The Cloud Security & Authorization Technical Analyst provides deep technical expertise in securing, engineering, and independently assessing federal cloud environments.
• This role blends hands on cloud security engineering with Assessment & Authorization (A&A), Independent Verification & Validation (IV&V), and third party assessment support to ensure cloud platforms meet federal security, risk, and compliance requirements.
• Key Responsibilities Provide technical cloud security leadership for Assessment & Authorization (A&A) activities across IaaS, PaaS, and SaaS cloud environments aligned to NIST RMF and FedRAMP.
• Perform detailed technical reviews of cloud architectures, configurations, and security control implementations to validate compliance with NIST SP 800 53 and agency security requirements.
• Support and execute independent assessment or IV&V activities, including readiness reviews, control validation, and Security Assessment Report (SAR) development.
• Analyze Cloud Service Provider (CSP) FedRAMP packages (P ATO) and advise on agency specific control inheritance, shared responsibility models, and residual risk.
• Develop and review RMF artifacts including SSPs, control implementation matrices, SARs, POA&Ms, risk acceptance documentation, contingency plans, BIAs, PIAs, and ISAs.
• Conduct interviews and technical walkthroughs with system engineers, ISSOs, CSPs, and service providers to validate control implementation effectiveness.
• Support third party assessment (3PAO) coordination and provide technical quality assurance of assessment deliverables.
• Advise stakeholders on secure cloud design, compensating controls, and remediation strategies to address identified risks.
• Support IT audit and IV&V activities related to cloud security controls, evidence validation, and findings remediation.
• Contribute to cloud security standards, SOPs, and reusable authorization patterns to improve efficiency and consistency.

Cloud Security, Authorization Technical Analyst

Business Operations

• Lead day-to-day execution of core GMS business operations, including: Resource & bench management, Workforce and financial forecasting, Pipeline / PRT tracking and governance
• Own process integrity, standardization, and performance across the business
• Own GMS management information (MI), dashboards, and executive reporting
• Provide leadership with timely, accurate, and actionable insights to drive decision-making
• Lead and drive internal GMS initiatives
• Operate as the program manager across all internal workstreams with clear accountability for outcomes
• Act as the connective layer across Finance, Delivery, People, and Solutions functions
• Drive alignment on priorities, timelines, and execution across all GMS sub-functions
• Establish and track operational KPIs
• Identify and implement improvements to enhance scalability, efficiency, and cost performance

Business Operations Lead

Cloud Engineer

• Design, build, and manage scalable, secure, and highly available cloud platform environments across AWS, Azure, and/or GCP
• Develop and maintain cloud platform services and landing zones, including networking, identity, compute, and storage components
• Implement Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or Bicep to automate infrastructure provisioning
• Build and maintain CI/CD pipelines and platform automation frameworks to enable consistent and repeatable deployments
• Collaborate with application, DevOps, and security teams to onboard workloads and define platform standards, guardrails, and best practices
• Monitor, troubleshoot, and optimize platform performance, cost, and reliability using observability tools (logs, metrics, tracing)
• Implement and enforce security and compliance controls aligned to federal standards (e.g., NIST, FedRAMP)
• Support cloud migrations and modernization efforts, including rehost, re-platform, and re-architect initiatives
• Develop reusable platform modules, templates, and self-service capabilities for engineering teams
• Document platform architecture, configurations, and operational procedures

Cloud Platform Engineer

Scrum Master

• Lead Agile/Scrum processes across cross-functional teams including Product Management, Development, and QA to deliver high-quality software solutions.
• Facilitate all Scrum ceremonies including daily stand-ups, sprint planning, backlog grooming, sprint reviews, and retrospectives.
• Coach teams and stakeholders on Agile principles, Scrum practices, and SAFe methodologies to drive organizational adoption.
• Remove impediments and proactively resolve risks to ensure smooth sprint execution and delivery timelines.
• Track and analyze Agile metrics (velocity, predictability, team health) to drive continuous improvement.
• Ensure high-quality delivery standards by promoting best practices in engineering and testing.
• Partner with Product Owners to refine backlog, prioritize work, and align with business objectives.
• Foster a collaborative, high-performing team environment and manage team dynamics and conflict resolution.
• Maintain clear communication with leadership and stakeholders on progress, risks, and dependencies.

Infrastructure Engineer

• Design end-to-end AWS cloud infrastructure solutions to support enterprise applications, data platforms, and business critical services.
• Create high-availability, disaster recovery, and multi-region strategies.
• Develop migration strategies for transitioning on-premises workloads to AWS.
• Contribute to cloud strategy and technology roadmaps.
• Oversee deployment of Infrastructure as code (IaC) using tools like Terraform, AWS CloudFormation or CDK.
• Establish and enhance continuous integration and continuous delivery pipelines to streamline software deployment and infrastructure updates.
• Ensure observability, monitoring and logging using AWS CloudWatch, X-Ray or third-party tools.
• Design architecture that meets security, governance, and regulatory compliance requirements (HIPAA, FedRAMP, SOC 2 etc.) as applicable.
• Implement IAM best practices, encryption strategies, and secure networking.
• Partner with developers, DevOps engineers, and business stakeholders to ensure solutions meet mission-critical needs.
• Diagnose and resolve complex technical issues related to cloud infrastructure, ensuring high performance and reliability.
• Provide technical leadership, mentoring, and guidance to engineering teams.
• Stay current with emerging cloud technologies and trends, evaluating and recommending new solutions to enhance our capabilities.

Cloud Platform Infrastructure Architect

Artificial Intelligence

• Serve as a trusted advisor to State Health and Medicaid leaders on developing an AI strategy that covers: Core enterprise AI capabilities (data readiness, governance, model lifecycle management, tooling)
• Lead engagements from strategy through implementation, with a focus on outcomes, adoption, and sustainable operations.
• Translate complex health and Medicaid business challenges into actionable AI/ML and analytics solutions using platforms such as Azure, AWS, GCP, Databricks, Snowflake, and related services.
• Partner with IT, program, privacy, security, legal, and procurement stakeholders to support delivery that aligns to agency policies and applicable regulations.
• Facilitate use case discovery and prioritization workshops with stakeholders across agency divisions.
• Define an AI use case portfolio and roadmap that balances: Quick-win productivity use cases, Program modernization and longer-term transformation, Foundational capabilities (data, governance, operating model) needed to scale.
• Create pragmatic adoption plans including workforce readiness, change management, training, and communications.
• Guide solution design and implementation for AI and GenAI capabilities, including: Decision support and predictive analytics, Intelligent document processing, summarization, and search, Customer service and contact center augmentation, Caseworker support tools and workflow automation, Program integrity and anomaly detection.
• Lead and advise on production readiness topics such as model monitoring, drift, validation, human-in-the-loop workflows, and incident response procedures.
• Apply Medicaid and state health data knowledge across domains such as: Claims and encounters, eligibility and enrollment, provider data, managed care, long-term services and supports, pharmacy, behavioral health, and social determinants.
• Support data integration and interoperability approaches using standards and frameworks such as FHIR, HL7, and related health data exchange patterns where relevant.
• Incorporate responsible AI practices, transparency, auditability, and privacy-preserving approaches into delivery.
• Drive growth through capture support, proposal development, orals preparation, and strategic pursuits focused on State Health and Medicaid priorities.

AI Strategy Associate Director

Network Engineer

• The role will be responsible for designing, implementing, and managing the networking infrastructure across the on-premises environment and multiple cloud platforms, including AWS, Google Cloud Platform (GCP), and Microsoft Azure.
• Expertise in applying best practices in these three major cloud technologies will be crucial in ensuring the secure and efficient operation of the Bureau’s cloud-based systems.
• Provide design, implementation, and support of Cisco ASR-based on-premises network (Nexus Work with the cloud team for implementation and deployment of the cloud network architecture, ensuring that the solutions are scalable, reliable, and secure.
• Planning, performing, testing, and documenting network posture to ensure proper/secure connectivity and operations within our cloud environments and external connections.
• Ensure interoperability between applications that need to securely communicate.
• Creating and maintaining necessary supporting configuration artifacts such as network maps, detailed designs, test plans, operations readiness test reports, device configurations, and maintenance processes and procedures.
• Collaborate with other teams and stakeholders to define technical requirements, develop network architecture, and identify risks and mitigation strategies.

Cloud Network Engineer

DevOps Engineer

• Design, automate, and optimize cloud infrastructure and CI/CD pipelines while ensuring applications are highly available, scalable, secure and cost-efficient.
• Develop and manage CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, AWS CodePipeline, etc.) and support containerized workloads (Docker, ECS, EKS, Kubernetes).
• Enable automated testing, artifact management, and blue/green or canary deployments.
• Implement observability, monitoring, and logging solutions using AWS CloudWatch, X-Ray, or third-party tools.
• Troubleshoot system performance, latency, and reliability issues and define and maintain SLAs and SLOs.
• Automate provisioning, scaling, monitoring, recovery processes, security scanning, and vulnerability management with CI/CD.
• Ensure systems meet security, governance, and regulatory compliance requirements (HIPAA, FedRAMP, SOC 2, etc.) as applicable.
• Implement IAM best practices, encryption strategies, and secure networking.
• Work closely with developers, architects, and QA to ensure smooth releases.

AWS DevOps Engineer

• We are seeking an experienced AWS Security engineer to design, implement and maintain security controls across AWS cloud environments.
• This role will focus on safeguarding cloud workloads, ensuring compliance with industry standards, and driving best practices in identity management, monitoring, and threat detection.
• Design and implement secure architectures within AWS using services such as IAM, KMS, CloudTrail, Config, and third-party tools/services like Sentry, Datadog etc.
• Implement and manage centralized logging, monitoring, and alerting solutions.
• Conduct threat modeling, vulnerability scanning, and penetration testing.
• Ensure AWS environments comply with security frameworks (CIS Benchmarks, NIST, HIPAA, FedRAMP, SOC 2 etc.) as applicable.
• Support incident detection, investigation and response within AWS workloads.
• Maintain and monitor audit trails across accounts and services.
• Work with compliance and risk teams to align security with regulatory requirements.
• Automate security controls and compliance checks with Infrastructure as Code (IaC) (Terraform, CloudFormation etc.).
• Integrate security into CI/CD pipelines, enabling secure build and deployment processes.
• Collaborate with DevOps/Engineering teams to implement “shift-left” security practices.

AWS Cloud Security Engineer

Data Engineer

• Design and implement scalable data pipelines using AWS services including AWS Glue, Step Functions, Lambda, and Kinesis.
• Build ETL/ELT processes to ingest, transform, and load data from various sources into data warehouses and data lakes.
• Architect and maintain data lakes using S3, implement data cataloging with AWS Glue Catalog, and optimize data storage formats (Parquet, Delta, etc.).
• Design data warehouse solutions using Redshift and integrate with existing RDS/Aurora databases managed by the DBA team.
• Develop real-time and batch data processing solutions using Kinesis Data Streams, Kinesis Analytics, EMR, and AWS Batch.
• Create and maintain data models, schemas, and documentation.
• Work with the DBA team to optimize data access patterns and query performance across relational and analytical databases.
• Build automated data quality checks, monitoring, and alerting systems.
• Implement data governance policies and ensure compliance with data retention, privacy, and security requirements.

AWS Data Engineer

Database Administrator

• Design, implement, and manage AWS-managed databases including RDS (Oracle, PostgreSQL etc.), develop strategies for high availability, replication, failover, and disaster recovery.
• Migrate on-premises databases to AWS cloud environments using DMS, or native tools.
• Monitor database performance and tune queries, indexes, and configurations.
• Implement caching strategies (ElastiCachce, Redis, etc.) to optimize workloads.
• Proactively identify and resolve performance bottlenecks.
• Implement database encryption, access controls, and key management using KMS and IAM.
• Ensure compliance with industry standards (HIPAA, FedRAMP, SOC 2 etc.) as applicable.
• Automate provisioning, backups, restores, and monitoring using infrastructure as Code (Terraform, CloudFormation etc.).
• Integrate database operations into CI/CD pipelines for schema and data changes.
• Manage cost optimization for cloud-based database services.
• Set up monitoring and alerting with CloudWatch, Performance Insights, and third-party tools.
• Troubleshoot complex database issues across production and non-production environments.
• Conduct root cause analysis of incidents and implement preventive measures.
• Work closely with developers, architects, and QA to ensure smooth releases.