What Impact You'll Have
This position combines traditional content management responsibilities with modern security practices to ensure secure, automated, and efficient dissemination of NGA Mapping, Charting and Geodesy content. The role requires advanced technical proficiency in geospatial data management, Python automation, database technologies, and API development, enhanced with security engineering capabilities including CI/CD pipeline security, infrastructure-as-code security practices, vulnerability management, and security monitoring automation.
What You'll be Owning
- Develop and implement automation strategies to streamline seamless data handling, data integrity, and distribution processes to enhance efficiency and accuracy.
- Develop and apply methods to identify, collect, process, and analyze large volumes of data to build and enhance GEOINT processes, and systems.
- Design and deploy custom automation tools to facilitate streamlined workflows, rapid and secure data transfer, minimizing manual intervention and reducing turnaround times.
- Apply AI/ML techniques to enhance geospatial analysis capabilities and improve accuracy in data extraction from various sources.
- Develop API-based integration solutions to improve data exchange between NGA and partner systems.
- Maintain Legacy Python codebase, integrate codebase new security requirements and future Source dissemination solutions.
- Collaborate with GEOINT content teams to integrate automated quality checks, ensuring the highest standards of data integrity and reliability.
What You Must Have
- US Citizen with a TS/SCI clearance and the ability to obtain a CI Polygraph
- 10 years of combined experience in the field with a Bachelor’s in a relevant field of study
- Advanced proficiency with geospatial technologies including ArcGIS Suite (ArcPro, ArcGIS Online, ArcGIS Server), enterprise geodatabase management and geodatabase versioning workflows, and geospatial data formats and transformation processes.
- Advanced proficiency with Python programming (pandas, matplotlib libraries) and secure coding practices, including code review techniques
- Advanced proficiency developing and securing APIs, including API development with security controls (authentication, authorization, rate limiting), REST API security, and OAuth implementation
- Advanced proficiency with database technologies including PostgreSQL and Oracle database management, database security configuration and access controls, and cloud-based database solutions with security configurations
- Experience implementing database encryption (at-rest and in-transit), database audit logging and monitoring, and database backup and recovery security
- Advanced proficiency with ETL (Extract, Transform, and Load) processes with data validation, data integrity verification and quality assurance, and secure data transfer protocols and encryption
- Ability to use and contribute code to repositories with security scanning (GitHub/GitLab), including git security practices and pre-commit hooks
- Experience developing CI/CD pipelines with security integration, Infrastructure-as-Code with security controls, container security (Docker, Kubernetes), and integrating security scanning tools (Fortify integration)
- Experience with secrets management systems (AWS Secrets Manager) and vulnerability management platforms
- Experience implementing security controls in IC environments, with knowledge of NGA security policies and procedures, familiarity with GEOINT security classification guidance, and experience with cross-domain solutions and data transfers
- Knowledge of NGA systems and standards, including NGA's Mapping, Charting & Geodesy (MC&G) data formats and standards, NGA's Foundation GEOINT products and services, NSG (National System for Geospatial Intelligence) standards and specifications, and understanding of NGA's enterprise systems and databases
- Exemplary professional writing abilities with familiarity in AI tools, including security documentation and architecture diagramming, technical documentation for security controls and procedures, security risk assessment and mitigation planning, and cross-functional collaboration on security initiatives
What Would be Nice to Have
- Master’s coursework in relevant field of study
- JavaScript development with security libraries
- Advanced proficiency with geospatial open-source technologies (QGIS, OGR, GeoServer, PostGIS)
- Experience conducting web application security testing aligned to OWASP Top 10 and secure coding standards
- Experience designing cloud security architecture across AWS, Azure, and GCP, including applying CIS Benchmarks and security hardening guidance
- Experience with security orchestration and automation (SOAR) to support detection, response, and remediation workflows
- Experience performing penetration testing and ethical hacking activities in support of vulnerability identification and mitigation
- Experience implementing zero-trust architecture principles and controls
- Knowledge of NIST Cybersecurity Framework and its application to security governance and control mapping
- Holds (or ability to obtain) cloud security certifications (e.g., AWS Security, Azure Security)
- Experience securing container orchestration environments, including Kubernetes security controls and hardening practices
Why Choose GRVTY
The toughest national security challenges demand vision and ingenuity, not just resources. We deliver mission and technical expertise to outpace our adversaries. We’re purpose-built to tackle the most entrenched, systemic national security issues around the world.
We partner with our customers to help them overcome challenges in every corner of technology and defense—including the ones still being explored. Our growing capabilities create complementary advantages, giving on-the-ground operations the edge they need to succeed. We muster everything we have to answer every challenge presented, every day of our lives.
At GRVTY, we believe that when our employees thrive, our company thrives. That’s why we offer a comprehensive and competitive benefits package designed to support your well-being, growth, and work-life balance.
• Robust health plan including medical, dental, and vision
• Health Savings Account with company contribution
• Annual Paid Time Off and Paid Holidays
• Paid Parental Leave
• 401k with generous company match
• Training and Development Opportunities
• Award Programs
• Variety of Company Sponsored Events
EEO Statement
GRVTY, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran and will not be discriminated against on the basis of disability.
Anyone requiring reasonable accommodations should email recruiting@grvty.com or call 703-544-7930 with requested details. A member of the HR team will respond to your request within 2 business days.
Know Your Rights: Workplace Discrimination is Illegal (eeoc.gov)
Please review our current job openings and apply for the positions you believe may be a fit. If you are not an immediate fit, we will also keep your resume in our database for future opportunities.