Kentro

ServiceNow

• Conduct requirements gathering sessions workflows, user stories, and acceptance criteria related to SAM.
• Collaborate directly with client stakeholders to refine and prioritize features.
• Collect end user requirements and document process workflows related to ServiceNow Software Asset Manager.
• Serve as Scrum Master for the delivery team, facilitating daily stand-ups, sprint planning, backlog grooming, and retrospectives.
• Help manage delivery cadence and align sprint goals with contract deliverables and resource availability.
• Track open action items, risks, and decisions across working sessions.
• Own the SAM story backlog and ensure alignment with technical feasibility and platform best practices.
• Serve as a key communication link between developers and business/technical stakeholders.
• Effectively lead and operationalize meetings to deliver consensus on desired outcomes.
• Collaborate with a diverse group of internal and external stakeholders, with the ability to communicate effectively across all audiences—including navigating complex personalities and fostering productive relationships with stakeholders who may have competing priorities or high expectations.

ServiceNow SAM Business Analyst / Scrum Master

Security Engineer

• Serve as the technical authority for the National Security portfolio
• Provide expert consultative insight and hands-on guidance on Zero Trust implementations
• Design, implement, and manage secure AWS and Azure-based cybersecurity solutions
• Develop and implement cybersecurity strategies in compliance with federal regulations
• Communicate complex cybersecurity risks to senior leaders of federal agencies

Principal Cybersecurity Subject Matter Expert

• Supervise, mentor, and develop a team of Systems Administrators supporting testing and quality assurance functions.
• Establish clear performance expectations, conduct regular one-on-ones, and deliver formal performance evaluations.
• Foster a culture of quality, continuous improvement, and accountability within the team.
• Identify training and professional development opportunities to build team capability in testing tools, methodologies, and best practices.
• Manage workload distribution, scheduling, and resource allocation across concurrent testing efforts.
• Recruit, onboard, and retain qualified testing personnel in alignment with contract requirements.
• Support subcontractor oversight, performance monitoring, and technical direction in accordance with program expectations.
• Develop, own, and continuously refine the ServiceNow SAM overall test strategy and test governance framework.
• Define testing scope, entry and exit criteria, risk-based testing approaches, and test coverage standards for all software initiatives.
• Create and maintain test plans that address functional testing, integration testing, and user acceptance testing (UAT) for each software deployment lifecycle.
• Collaborate with project managers, business analysts, and scrum masters to align testing timelines with project milestones and deployment schedules.
• Oversee the design, development, review, and maintenance of comprehensive test plans, test cases, test scripts, and test data sets. Test plans can be manual or automated using CI/CD.
• Ensure test cases provide traceability to business requirements and system specifications.
• Establish and enforce standards for test plan documentation, version control, and reusability.
• Leverage test management tools to maintain a centralized, organized repository of test artifacts in alignment with VA documentation standards.
• Serve as the primary coordinator for all UAT activities, partnering with VA business stakeholders.
• Develop UAT plans, schedules, and participant guides
• Facilitate UAT sessions, track participant feedback, and synthesize findings into actionable defect reports and go/no-go recommendations.
• Manage stakeholder communications throughout UAT cycles to ensure timely resolution of issues and alignment on release readiness.
• Lead the planning and execution of integration testing efforts following application updates, patches, and configuration changes.
• Coordinate with Systems Administrators to schedule and execute integration tests within defined project timelines.
• Evaluate opportunities to implement test automation to improve integration testing efficiency and coverage.
• Ensure all software deployment components have undergone appropriate QA review, including compatibility, security, and usability tests.
• Track post-deployment quality metrics and facilitate lessons-learned reviews to drive continuous improvement.
• Communicate risks, blockers, and testing outcomes clearly and proactively to all relevant stakeholders.
• Maintain comprehensive documentation of testing activities, decisions, and outcomes in support of VA audit and compliance requirements, including Section 508 and FISMA.

ServiceNow SAM Quality Assurance – Test Manager

• API Development & Integration
• Design, develop, and maintain RESTful API integrations between ServiceNow SAM Pro and external data sources (e.g., publisher portals, CMDB feeds, procurement systems, entitlement databases).
• Build and manage integration endpoints, authentication mechanisms (OAuth2, API keys, certificates), and data pipelines within ServiceNow.
• Develop MID Server configurations and Integration Hub spokes/flows to support bi-directional data exchange with VA enterprise systems.
• Ensure API integrations comply with VA security standards, including FISMA, FedRAMP, and VA Handbook 6500 requirements.
• Data Aggregation & Normalization
• Aggregate software inventory data from disparate sources including SCCM/MECM, Flexera, Active Directory, and cloud platforms (AWS, Azure, GCP).
• Implement data normalization routines using the ServiceNow Content Library and custom normalization rules to ensure consistent publisher, product, and version mapping.
• Develop and maintain transformation scripts (JavaScript, GlideScript) to map source data to ServiceNow SAM data models.
• Collaborate with VA data stewards and asset managers to define normalization standards and resolve data conflicts.
• Automated Data Import Workflows
• Build and manage scheduled import jobs, Import Set transforms, and JDBC/LDAP data sources within ServiceNow to automate recurring data ingestion.
• Design robust error handling, alerting, and retry logic for import workflows to ensure data integrity and continuity.
• Create and maintain data reconciliation processes to detect and remediate discrepancies between discovery data, entitlement records, and the ServiceNow CMDB.
• Document all automated workflows and maintain runbooks to support operational sustainment and knowledge transfer.
• Integration Testing & Validation
• Develop and execute integration test plans covering unit, functional, regression, and end-to-end testing scenarios for all data pipelines and API connections.
• Validate data completeness, accuracy, and consistency after each import cycle or integration event.
• Conduct performance testing and optimization of integration processes to meet VA throughput and latency requirements.
• Coordinate with VA test teams and change management processes to validate changes prior to production deployment.
• Maintain integration test documentation and traceability matrices in alignment with VA Section 508 and compliance requirements.
• Team Leadership & Mentorship (SAM Lead Developer)
• Serve as the technical lead for a team of SAM Developers and subcontract staff, providing day-to-day work direction, code reviews, and technical guidance.
• Establish and enforce development standards, coding best practices, and integration design patterns across the team.
• Mentor junior and mid-level developers, facilitating professional growth, knowledge sharing, and skills development in ServiceNow SAM capabilities.
• Coordinate with the Program Manager to assign tasks, track progress, and communicate risks and issues related to integration workstreams.
• Conduct sprint planning, backlog grooming, and retrospective participation within an Agile/SAFe delivery framework.
• Support Kentro and subcontractor onboarding, performance monitoring, and technical oversight in accordance with contract requirements.

ServiceNow SAM Integration Developer / Lead SAM Developer

Salesforce Developer

• - Provide program-level oversight of a Salesforce Operations & Maintenance and enhancement team supporting ITA mission systems
• - Lead sprint governance, backlog prioritization alignment, and release planning in partnership with product owners and stakeholders
• - Ensure platform stability, performance optimization, and proactive risk mitigation across environments
• - Oversee DevOps maturity including CI/CD practices, deployment governance, and release discipline
• - Serve as technical escalation authority for complex platform issues and architectural decisions
• - Establish and enforce development standards, reusable patterns, and security guardrails
• - Provide executive-level reporting on program health, roadmap execution, risks, and resource alignment
• - Guide agile ceremonies and ensure adherence to Scrum best practices across teams
• - Coordinate integration strategy across Salesforce, middleware, and external federal systems
• - Drive continuous improvement initiatives across operations, incident management, and enhancement workflows
• - Support potential expansion into additional DOC Salesforce programs as the portfolio grows
• - Mentor technical leads and scrum masters to ensure delivery consistency and performance accountability

Salesforce Technical Program Manager

• Provide day-to-day operational support to the Agency’s Cybersecurity Risk Management (CSRM) Program
• Support governance operations, maintain cybersecurity risk register
• Ensure CSRM program documentation is current, accurate, and compliant with federal requirements
• Manage Cybersecurity Risk Register within ServiceNow IRM
• Support daily updates of cybersecurity risk data
• Support operations of CSRM governance bodies like Security Review Board
• Develop and maintain governance artifacts such as charters, SOPs, and meeting notes
• Review and update CSRM Program documentation at least annually as needed

Cybersecurity Risk Analyst – GRC, ServiceNow IRM

Supply Chain

• Design and govern the Cyber Supply Chain Risk Management continuous monitoring program
• Develop and maintain the Continuous Monitoring Program Plan
• Define monitoring strategies and escalation paths
• Identify Tier 1 vendors for monitoring
• Define cyber risk categories and monitoring frequency
• Establish remediation requirements for vendors
• Oversee analyst execution of monitoring and reporting
• Coordinate with various teams including Strategic Sourcing and CSCRM teams
• Lead escalation efforts when risks are identified
• Develop and maintain the Continuous Improvement Plan

Cyber Supply Chain Risk Program Lead

• Provide expert-level guidance to the CSRM Program Team, CISO, and Agency executives
• Review CSRM Program deliverables, including Cyber risk management strategy and Program plans
• Provide expert recommendations to support continued CSRM program maturation
• Respond to advisory requests from the CSRM Program Team
• Identify and interpret cybersecurity risk management best practices

Senior Cybersecurity Risk Advisor – GRC / Federal

• Conduct independent cybersecurity program assessments using NIST Cybersecurity Framework (CSF 2.0+) and Risk Management Framework (RMF) principles
• Identify program strengths, weaknesses, and maturity gaps.
• Develop recommendations to improve the Agency’s cybersecurity posture.
• Support assessment planning and execution, including project planning and scheduling, stakeholder engagement, documentation and evidence collection
• Maintain assessment artifacts and documentation in designated collaboration platforms
• Develop assessment deliverables, including Assessment Report and Executive Summary Presentation

Senior Cybersecurity Assessor – NIST CSF/RMF

Program Manager

• Lead and coordinate Zero Trust program activities approved for inclusion by SSA.
• Develop and maintain program artifacts, including implementation roadmaps, work plans and schedules, scope definitions and phased strategies.
• Ensure Zero Trust efforts align with SSA’s ISCM program and enterprise cybersecurity priorities.
• Oversee development of business processes that integrate with SSA’s security infrastructure and Zero Trust tooling.
• Ensure processes are implementable, repeatable, and aligned with operational realities.
• Lead Zero Trust reporting activities by ingesting reporting requirements from external entities, validating data accuracy and consistency, and ensuring metrics reflect actual Zero Trust progress and capability maturity.
• Coordinate efforts to translate ZTA gap analysis findings into actionable implementation strategies and support prioritization and sequencing of gap closure activities.
• Represent SSA interests in coordination with DHS/CISA and DHS-provided integrators.
• Facilitate cross-organizational meetings between SSA workgroups and external partners.
• Review and enhance existing collaboration models to improve effectiveness and information flow.

Zero Trust Program Manager – ZTA Lead

• Perform structured gap analyses across all five Zero Trust pillars: Identity, Devices, Networks, Applications & Workloads, Data
• Evaluate current-state capabilities against Zero Trust target-state requirements.
• Identify technical, architectural, integration, and process gaps.
• Support development of Zero Trust Reference Architecture artifacts.
• Identify required capabilities, integrations, and dependencies to support Zero Trust maturity.
• Contribute to defining how existing and future tools can be leveraged within a Zero Trust model.
• Assist in developing phased implementation strategies to close identified gaps.
• Provide technical recommendations aligned with SSA’s infrastructure and security ecosystem.
• Ensure recommendations are realistic, interoperable, and scalable.
• Collaborate with program and business stakeholders to ensure technical solutions align with defined business processes.
• Support development of processes that can be operationalized within SSA’s security infrastructure.
• Clearly document findings, recommendations, and architectural considerations.
• Contribute to reports, briefings, and artifacts used for leadership decision-making and external reporting.

Senior Cybersecurity Engineer – Zero Trust Architect

• Perform structured gap analyses across all five Zero Trust pillars
• Evaluate current-state capabilities against Zero Trust target-state requirements
• Identify technical, architectural, integration, and process gaps
• Support development of Zero Trust Reference Architecture artifacts
• Identify required capabilities, integrations, and dependencies to support Zero Trust maturity
• Assist in developing phased implementation strategies to close identified gaps
• Provide technical recommendations aligned with SSA’s infrastructure and security ecosystem
• Ensure recommendations are realistic, interoperable, and scalable
• Collaborate with program and business stakeholders to ensure technical solutions align with defined business processes
• Clearly document findings, recommendations, and architectural considerations

Mid-Level Cybersecurity Engineer – Zero Trust Architect

Platform Engineer

• Design, develop, and customize SharePoint sites, workflows, and applications.
• Implement and manage SharePoint Online and/or On-Premises environments.
• Create and maintain document libraries, lists, content types, and metadata structures.
• Develop custom web parts, features, and solutions using SPFx, C#, JavaScript, and REST APIs.
• Ensure SharePoint governance, security, and compliance standards are met.
• Build interactive dashboards and reports using Power BI connected to SharePoint and other data sources.
• Optimize data models for performance and scalability.
• Implement row-level security and data governance policies.
• Collaborate with business stakeholders to design KPIs and visualizations that drive decision-making.
• Partner with business analysts, project managers, and end-users to gather requirements.
• Provide technical guidance and mentorship to junior developers.
• Conduct training sessions and create documentation for SharePoint and Power BI solutions.
• Monitor system performance and troubleshoot issues.
• Apply patches, updates, and upgrades to SharePoint environments.
• Ensure high availability, disaster recovery, and backup strategies.

Power Platform Developer

• Configure and operate third-party cyber supply chain risk monitoring tools to assess Tier 1 vendors and upstream suppliers
• Review and analyze alerts, risk scores, and reports related to: Data breaches, Ransomware exposure, Known vulnerabilities, Compliance issues
• Ensure monitoring frequency aligns with defined risk categories (daily, weekly, monthly)
• Identify high-risk vendors based on monitoring data and established thresholds
• Develop and maintain dashboards highlighting Tier 1 high-risk vendors
• Contribute to bi-weekly status reports with clear summaries of risks, trends, and remediation progress
• Notify vendors when cyber risk scores fall below acceptable thresholds
• Track vendor remediation actions, including: Patch timelines, Vulnerability resolution, Compliance remediation, Incident response actions
• Coordinate with internal teams (CSCRM, Strategic Sourcing, CORs, program managers) to support remediation efforts
• Escalate unresponsive or non-compliant vendors per defined escalation paths
• Use the Agency’s Third-Party Risk Management (TPRM) tool integrations to manage and track continuous monitoring data
• Ensure risk data is accurate, current, and accessible for review and decision-making

Cyber Supply Chain Risk Analyst

Full-stack Engineer

• Design and implement multi-step, agentic AI workflows (planner/executor, tool-using agents, RAG + memory patterns)
• Engineer robust contextual pipelines including:
• Retrieval-augmented generation (RAG)
• Structured memory (short-term, long-term, episodic)
• Tool invocation and function calling
• Control hallucination, drift, and overreach through grounding, validation, policy constraints, and ensemble methods.
• Optimize context windows, token usage, and latency under federal cost, platform quotas, and performance constraints.
• Build production-grade services using Python, Java, C++, Rust, GO, C#, TypeScript
• Implement APIs and microservices that integrate AI agents with:
• Data lake house
• SharePoint
• Microsoft Graph API
• Line-of-business systems
• Apply secure coding practices aligned with NIST 800-53 / 800-171
• Design and deploy solutions in GCCH environments
• Work within constraints such as:
• Limited model availability
• Restricted outbound network access
• Controlled identity and authentication flows
• Use Azure services including:
• Azure AI (OpenAI / Foundry where applicable)
• Azure Kubernetes Service (AKS)
• Azure Functions / App Services
• Azure Data Lake Storage
• Azure Key Vault
• Implement identity, RBAC, and managed identities aligned with federal requirements
• Design AI systems with auditability, traceability, and explainability
• Support Authority to Operate (ATO) processes
• Implement logging, monitoring, and human-in-the-loop controls
• Ensure data residency, data minimization, and model usage compliance