Support DoD modernization engagements by implementing and validating secure configurations, supporting ATO/eMASS activities, producing operational runbooks, coordinating cutovers and testing, remediating vulnerabilities, and automating operations (scripting/AIOps) with emphasis on mainframe/legacy environments and DoD security frameworks.
Red Canyon Technologies is seeking an Operations and Security Engineer to support mainframe and legacy system modernization engagements under the DISA Reforged contract. This role is the operational and security anchor of the delivery team — the person who ensures that modernized systems are implemented correctly, secured appropriately, and handed off with the runbooks, documentation, and operational scaffolding needed to sustain them.
This is a broad, implementation-focused role. The ideal candidate combines hands-on technical depth in security and operations with the flexibility to support a range of modernization activities — from security compliance documentation and ATO support to operational configuration, testing, cutover planning, and automation. Experience in mainframe or legacy environments is a strong plus; experience in DoD security frameworks is essential.
*This position is contingent upon contract award.*
Responsibilities
Security & Compliance
Security & Compliance
- Support implementation of modernization solutions with a focus on security configuration, operational readiness, and compliance — including ICAM, RBAC, and Zero Trust architecture elements.
- Support ATO and SNAP/eMASS activities, including security control documentation, evidence collection, and coordination with ISSO/ISSM personnel.
- Conduct or support security and compliance reviews (NIST 800-53, RMF, CMMC Level 2, DISA STIGs) as they apply to modernized system architectures.
- Support security scanning remediation, POA&M-driven fixes, and configuration compliance reporting.
- Work with IAM/security teams on mainframe security administration (RACF or equivalent) and hardening guidance implementation.
Operations & Documentation
- Develop and maintain operational documentation: runbooks, system administration guides, standard operating procedures, change plans, and post-implementation support plans.
- Provide operational support during transition phases of engagements, ensuring continuity of service and rapid issue resolution as legacy systems are decommissioned.
- Support disciplined promotion of code and configuration changes by coordinating with release/change management processes; develop rollback procedures and post-migration validation steps.
Testing & Cutover
- Assist with testing and quality assurance activities: develop test plans, execute test cases, and document results for modernized systems and applications.
- Support cutover planning and execution activities, including pre-cutover validation, go/no-go assessment, hypercare monitoring, and post-cutover issue resolution.
Automation & AIOps
- Identify and implement automation opportunities to reduce operational toil — using scripting (REXX, shell), job automation, and workflow tooling.
- Apply AIOps concepts to improve alert quality, accelerate incident triage, and enhance performance/capacity insights within customer-approved tooling and processes.
- Support the development and delivery of AI-enabled operational tools (e.g., automated assessment agents, documentation generators) as part of Red Canyon’s internal innovation efforts under Reforged.
Performs other related duties as assigned.
Qualifications
- 5+ years of experience in IT operations, systems engineering, or cybersecurity, with a track record of supporting complex Federal IT environments.
- Eligible for Secret clearance; active clearance strongly preferred.
- Working knowledge of DoD security frameworks: RMF, NIST 800-53, CMMC, eMASS, and SNAP.
- Hands-on experience with security implementation activities including access control configuration, vulnerability assessment, and compliance documentation.
- Demonstrated ability to produce clear, professional operational documentation that enables downstream teams to independently manage and maintain modernized systems.
- Experience supporting system testing, UAT, or cutover activities in an enterprise IT context.
Preferred
- Experience working in or around mainframe environments — operational knowledge of IBM z/OS, DB2, CICS, RACF, JCL, or TSO/ISPF is highly valued.
- Familiarity with ICAM systems and modernization, including identity federation, access control, and credential management in hybrid environments.
- Automation/scripting experience: REXX, shell scripting, job automation, or operational runbook development.
- Familiarity with AIOps concepts and tooling (anomaly detection, alert reduction, faster incident triage) within approved DoD frameworks.
- Security certifications: CISSP, Security+, CAP, or equivalent.
- Experience with DISA STIGs, eMASS, and DoD cloud authorization processes (FedRAMP, DISA IL2/IL4/IL5).
- Background in agile delivery environments, including sprint-based testing cycles and DevSecOps pipelines.
- Familiarity with ITSM processes/tools (incident, problem, change, and knowledge management).
- Active TS/SCI clearance.
About Us
Diné Development Corporation (DDC) is a Navajo Nation owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and communities we serve.
Diné Development Corporation (DDC) is a Navajo Nation owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and communities we serve.
Benefits
Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, paid time off, voluntary supplemental benefits, and access to an employee assistance program. The package also includes educational assistance, with tuition reimbursement.
Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, paid time off, voluntary supplemental benefits, and access to an employee assistance program. The package also includes educational assistance, with tuition reimbursement.
EEO Statement
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.
Similar Jobs
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.
Top Skills:
AWSGCPLinuxmacOSPythonSIEMWindows
Logistics • Transportation
Designs, engineers, and maintains SIEM data collection and security monitoring infrastructure. Develops detection use cases, dashboards, alerts, reporting metrics, and log onboarding strategies. Integrates threat intelligence and SOAR technologies, supports incident response and threat hunting, troubleshoots security systems, and escalates complex investigations. Collaborates with SOC analysts, incident response teams, executives, and cross-functional stakeholders to improve detection, automation, and enterprise security operations.
Top Skills:
Active DirectoryBashData Loss Prevention (Dlp)DhcpDnsEndpoint SecurityFirewallsIntrusion Detection And Prevention Systems (Ids/Ips)LinuxPowershellPythonRouting ProtocolsSIEMSoarThreat Intelligence PlatformsUnixWindows
Information Technology
Develops Python scripts, automations, integrations, dashboards, reports, and documentation to improve incident response, vulnerability management, security monitoring, and security operations. Supports security engineering initiatives, learns DevOps and agile practices, and collaborates with senior engineers and global teams. The role requires programming ability, version-control familiarity, cybersecurity knowledge, and strong analytical and communication skills.
Top Skills:
AWSAzureDevOpsGitMitre Att&CkPalo Alto Cortex XsiamPythonServicenowSIEMSoar
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
