Spry Methods, Inc.

Security Analyst

• Understand/document information system specifications and security controls, including logical and physical diagrams, connectivity, communication, and data flow diagrams
• Advise stakeholders on multiple courses of action in an environment with changing unconfirmed policy, e.g., NIST RMF and DISA SRG
• Document multiple courses of action and identify risk mitigation recommendations in accordance with FedRAMP requirements, SAP NS2 policy, procedures, and best practices
• Apply enterprise security frameworks and capabilities, such as FISMA, NIST SP 800, etc.
• Develop/update policies and procedures to implement FedRAMP compliance as well as compliant with NIST 800-171 security requirements and other DFAR clauses
• Understand enterprise operating environments, including security posture, application environment, and associated security controls
• Demonstrate familiarity with current FedRAMP, DOD and NIST Security controls and technologies, including vulnerability management capabilities
• Identify and assess Cloud System state, including vulnerabilities, RMF package status/accreditation model, PPS compliance, and patching/CSVA mechanisms

IT Security Analyst

Business Analyst

• Deliver insightful program and financial analysis to support strategic decision-making.
• Collaborate with cross-functional teams to streamline processes and improve outcomes.
• Help shape project direction with clarity, logic, and a proactive mindset.
• Plan and execute programmatic reviews including: IPRs, PMRs, all hands, and budget reviews.
• Develop and maintain extensive information repositories
• Risk management
• Maintain key stakeholder relationships
• Arrange, facilitate, lead and/or report on multiple weekly meetings

Project Management Analyst

Security Engineer

• Strong working knowledge of IT Security requirements, technical security countermeasures, risk management processes, contingency planning, and secure data communications
• Conduct full cycle Security Assessments & Authorizations (SA&A)
• Test network, system, application and NIST controls from administrative and technical perspectives
• Analyze vulnerability scans, interpret risks, and employ manual checks to validate vulnerability data
• Assist customers in understanding risk and provide risk mitigation recommendations
• Create Security Assessment Plans, Reports, and POA&Ms
• Conduct documentation reviews, inspections, and interviews with personnel to collect evidence of compliance
• Determine compliance based on responses and analysis of supporting evidence

Security Assessor

DevOps Engineer

• Deploys and configures services using infrastructure as a service providers (e.g., Amazon Web Services, Microsoft Azure, Google Compute Engine, RackSpace/OpenStack)
• Configures and manages Linux-based servers to serve a dynamic website
• Debugs cluster-based computing architectures
• Uses scripting or basic programming skills to solve problems
• Installs and manages open-source monitoring tools
• Configures management tools (e.g., Puppet, Chef, Ansible, Salt)
• Architecture for continuous integration and deployment, and continuous monitoring
• Uses and works with containerization technologies (e.g., LXC, Docker, Rocket)
• Maintain, manage, and update current and future third-party software (e.g., COTS and GOTS tools) and ensure full compatibility, usability, security, and optimal performance
• Apply updates, troubleshoot issues, and coordinate with software vendors as needed to resolve issues or implement changes
• Maintain, manage, and update application programming interfaces (APIs), ensuring full compatibility, usability, security, and optimal performance
• Develop, maintain, and customize software solutions when required by the Government
• Ensure software development adheres to industry standards, best practices, DOJ, and FBI SDLC standards
• Develop, maintain, and provide documentation for all software, to include APIs, scripting, automation, changes, testing, and user/administrator guides
• Implement and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines to automate testing, deployment, and monitoring when required by the government
• Conduct regular code reviews, secure coding techniques, vulnerability scanning, and testing (unit, integration, system, and user acceptance) when required by the government
• Collaborate with stakeholders to gather and validate requirements ensuring software solutions align with Laboratory objectives and user needs
• Provide training and support to internal teams on new software applications and updates
• Stay current with emerging technologies and industry trends and integrate new tools and practices
• Design, develop, deliver, and sustain automated functional Extract, Transform and Load (ETL) processing and pipelines and validate extracted data from structured and unstructured inputs
• Validate data extracted from structured and unstructured data sources, databases, and other repositories using scripts and automated capabilities
• Advise government personnel on incremental changes for continuous improvement in products or processes.

Junior DevOps Engineer

• Deploys and configures services using infrastructure as a service provider (e.g., Amazon Web Services, Microsoft Azure, Google Compute Engine, RackSpace/OpenStack)
• Configures and manages Linux-based servers to serve a dynamic website and debugs cluster-based computing architectures
• Uses scripting or basic programming skills to solve problems
• Installs and manages open-source monitoring tools and configures management tools (e.g., Puppet, Chef, Ansible, Salt)
• Architecture for continuous integration and deployment, and continuous monitoring
• Uses and works with containerization technologies (e.g., LXC, Docker, Rocket)
• Maintain, manage, and update current and future third-party software (e.g., COTS and GOTS tools) ensuring compatibility, usability, security, and optimal performance
• Apply updates, troubleshoot issues, and coordinate with software vendors to resolve issues or implement changes
• Maintain, manage, and update application programming interfaces (APIs), ensuring compatibility, usability, security, and optimal performance
• Develop, maintain, and custom software solutions when the Government determines no other solution is available
• Ensure software development adheres to industry standards, best practices, DOJ, and FBI standards for the SDLC
• Develop, maintain, and provide documentation for all software, to include APIs, scripting, automation, changes, testing, and user/administrator guides
• Implement and maintain CI/CD pipelines to automate testing, deployment, and monitoring when required by the government
• Conduct regular code reviews, secure coding techniques, vulnerability scanning, and testing (unit, integration, system, and user acceptance) when required by the government
• Collaborate with stakeholders to gather and validate requirements
• Provide training and support to internal teams on new software applications and updates
• Stay current with emerging technologies and industry trends and integrate new tools and practices
• Design, develop, deliver, and sustain automated functional ETL processing and pipelines and validate extracted data from structured and unstructured inputs
• Validate data extracted from structured and unstructured data sources, databases, and other repositories using scripts and automated capabilities
• Advise government personnel on incremental changes for continuous improvement

DevOps Engineer – Mid

• Develop and maintain reusable Terraform scripts, modify and run infrastructure code from existing modules, and troubleshoot deployment issues across AWS, Azure, and GCP environments.
• Develop new Ansible playbooks, and modify, troubleshoot, and maintain existing Ansible code to automate infrastructure configuration and management tasks.
• Configure, deploy, and manage Kubernetes clusters including networking, storage, security, service mesh, and load balancer configuration; use tools like Helm for deployment, and monitor and troubleshoot cluster performance.
• Design, implement, and maintain CI/CD pipelines using tools like GitLab CI and ArgoCD; write and optimize pipeline scripts for automated testing and deployment; leverage GitOps practices for managing infrastructure and application delivery.
• Strong hands-on experience with public cloud platforms (AWS, Azure, GCP), including core services such as virtual networking, compute, storage, IAM, serverless functions, and monitoring.
• Deep hands-on experience developing, maintaining, and troubleshooting infrastructure-as-code using Terraform across multi-cloud environments.
• Experience using Ansible to automate day-to-day operational tasks, including configuration management and troubleshooting of infrastructure resources.
• Hands-on experience with GitLab CI and ArgoCD to design and maintain pipelines for automated testing, deployment, and infrastructure management using GitOps principles.
• Proficient in Linux system administration and automation using Python to streamline infrastructure management and operational tasks.
• Experience developing, deploying, and managing serverless functions using cloud-native services such as AWS Lambda, Azure Functions, and Google Cloud Functions.

DevOps Engineer – Cloud Infrastructure

System Administrator

• Lead and drive Microsoft 365 upgrades, migrations, and platform modernization efforts.
• Architect, configure, and maintain secure and resilient Microsoft 365 services, including Exchange Online, SharePoint Online, Teams, OneDrive, and the M365 Admin Center.
• Own and implement best practices around identity, access, and compliance policies using Conditional Access, DLP, Sensitivity Labels, and Defender for Office 365.
• Act as a technical lead for M365-related projects, working closely with internal IT, Security, and business stakeholders.
• Manage tenant-level configurations, including hybrid integrations and licensing strategies.
• Proactively monitor system health, usage metrics, and security compliance via tools like PowerShell, Graph API, and Security & Compliance Center dashboards.
• Develop and enforce governance standards, documentation, and disaster recovery procedures.
• Mentor junior team members and provide advanced support and escalation on complex issues.
• Evaluate emerging M365 technologies and make recommendations for adoption aligned with strategic goals.
• Provide end-user guidance and training on new capabilities to promote adoption and productivity.