Careers at Anavationllc

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: The Information Assurance/Security Engineer will provide security engineering and information assurance support to the Government’s Assessment and Authorization (A&A) process to maintain Authority to Operate (ATO) and Authority to Connect (ATC) for mission applications and services. Designs, develops, monitors and documents security controls, security testing, security reporting, and plan of actions and milestones (POA&Ms) throughout systems and application lifecycles in support of mission systems. Provides security engineering design inputs, security design reviews, and security best practices as part of technical and change requests. Configures and validates secure systems, physical controls, and tests security products and systems to detect security weaknesses. Maintains XACTA security records for supported systems.

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: AnaVation is seeking a Software Engineer - Kubernetes to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will support engineering, hardening and continuously validating the security of Kubernetes and OpenShift platforms that host Government mission applications across value streams. The role designs, builds, and runs resilient, secure architectures using service-meshand loosely coupled design, and sustains Interim Authority to Test (IATT), Authority to Operate (ATO), and Continuous Authority to Operate (cATO) readiness aligned with the Government’s Cyber Assessment Roadmap. Position Responsibilities: This position sets the technical standard for securing container orchestration platforms and hardened workloads while keeping control evidence continuously validated and audit-ready. Responsibilities include: Design, build, and run Kubernetes/OpenShift clusters and manage providers (Amazon EKS/Fargate, Azure KS, Google KE) or self-managed clusters. Design network connectivity and provisioning strategy, and assess/design RBAC to keep the cloud foundation strong and compliant. Maintain, configure, and monitor containers using Infrastructure as Code (Terraform, Helm) across development, test, and live environments. Implement and validate security controls, security-relevant changes (SRCs), and Security Impact Assessments (SIAs) supporting IATT, ATO, and cATO readiness. Perform full-stack Kubernetes (K8s) risk assessments and apply STIGs, CIS Benchmarks, and Iron Bank hardened images. Advance control inheritance and automation aligned with the Government’s Cyber Assessment Roadmap. Support container vulnerability management against CVEs and open-source threat reporting, coordinating remediation with Value Stream engineering. Collaborate with ISSEs, ISSMs, DevSecOps engineers, COT, CPT, and Government stakeholders across Value Stream sprint cadences. Create and maintain documentation for implementations and supporting Bodies of Evidence (BOE). Support Zero Trust enforcement and cloud-native security best practices across mission environments. Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: AnaVation is seeking a Software Engineer-DevSecOps to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will develop and manage the CI/CD pipelines of mission applications across value streams. Considered a strong generalist on CI/CD and security requirements, the role automates security control implementation and evidence collection and advances inheritance and automation aligned with the Government’s Cyber Assessment Roadmap to sustain IATT, ATO, and cATO readiness. Position Responsibilities: This position establishes the automation standard for secure software delivery, ensuring security is built into pipelines, and control evidence is generated continuously. Responsibilities include: Build and maintain CI/CD pipelines (e.g., GitLab CI, Jenkins) for an enterprise consisting of many applications. Develop, test, and maintain containerized applications; work with source version control and build/release tooling. Develop Infrastructure as Code (IaC) and Configuration as Code (CaC) using Packer, Terraform, and Ansible. Automate security control implementation, validation, and evidence collection supporting RMF, ATO, and cATO. Integrate and tune pipeline security tooling: SAST, DAST, SCA, container scanning, secrets detection, and policy gates. Support security-relevant changes (SRCs), Security Impact Assessments (SIAs), and control validation for embedded value streams. Support application/container vulnerability management, whitelisting decisions, and CTF/pipeline compliance so changes do not invalidate the ATO. Collaborate with ISSEs, software developers, Value Stream engineers, COT, CPT, and Government stakeholders across sprint cadences. Architect logging, monitoring, and telemetry to support continuous monitoring. Maintain a strong security-first mindset and support Zero Trust and secure software supply chain practices. Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness. Develop automated security policies in CI/CD (e.g., GitLab Policies) to flag End-of-Life images, remediate pipeline vulnerabilities, prevent unauthorized deployments, and quarantine compromised artifacts.

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: AnaVation is seeking a Cloud Security Engineer to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will lead zero trust engineering, interoperability, and modern security capability development across the Government enterprise. The Cloud Security Engineer will manage security systems and tools for cloud technologies, investigate and enhance existing cloud structures, and drives issue identification/resolution, integration, gap assessment, and continuous improvement, while providing flexible reach-back across the Government’s Cyber Assessment Roadmap. Position Responsibilities: This position sets the engineering direction for the Government’s zero trust and cloud security modernization, translating roadmap objectives into deployed, measurable capability. Responsibilities include: Lead zero trust engineering and interoperability initiatives, future-proofing implementations as tools and requirements evolve. Design, implement, and maintain AWS cloud architecture using Terraform (including custom modules) and Ansible. Administer relevant cloud infrastructure-level consoles (e.g., AWS) and secure cloud services and accounts; apply advanced networking, VPC, peering, and subnet design. Support the SIEM, SOAR, Incident Management System (IMS), and Incident Response Team (IRT) roadmap, engineering, and integration. Architect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider (CSSP). Advance security automation and automated evidence collection to increase inheritance and continuous monitoring maturity. Provide flexible SME support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI. Provide updates to the Cyber Assessment Roadmap; create/maintain documentation and brief technical and non-technical stakeholders. Collaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools like git. Support Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments. Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness. Architect and integrate an enterprise SIEM ingesting logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd, audit), with dashboards for runtime monitoring, defense, and forensics. Enforce Zero Trust through ICAM integration and micro-segmentation validation and manage enterprise security tooling.

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: Come join our growing team and make a difference every day! As part of a high-performing team, the selected candidate will be part of a software research and development team focusing on mobile device forensic analysis including mobile device reverse engineering. The successful candidate will have a broad but strong skillset with numerous programming languages and experience collaborating with other developers. The candidate will be responsible for designing, developing, testing, and integrating software features as a member of a geographically dispersed team, either independently or with limited supervision. They will apply robust software engineering and database practices to address complex technical challenges, ensuring the delivery of reliable, scalable, and maintainable solutions. The strongest of software developers will thrive and take advantage of the opportunity to learn and further develop their advanced skillsets. The candidate will also be required to interface directly with data architects and software developers to ensure that the data model is able to capture the use cases that the software systems are responsible for. This position is currently hybrid (mostly remote, with up to two days per week on-site with our customer in Lorton, VA. Remote status is subject to change at the customer’s direction, but is expected to continue. There will also be several workshops throughout the year where engineers will collaborate on site for one to two weeks. This position requires an active Top Secret clearance and the ability to obtain SCI accesses with a CI polygraph.