Geospatial Data Content Management Engineer – Senior
This position combines traditional content management responsibilities with modern security practices to ensure secure, automated, and efficient dissemination of NGA Mapping, Charting and Geodesy content. The role requires advanced technical proficiency in geospatial data management, Python automation, database technologies, and API development, enhanced with security engineering capabilities including CI/CD pipeline security, infrastructure-as-code security practices, vulnerability management, and security monitoring automation.
What You'll be Owning
Develop and implement automation strategies to streamline seamless data handling, data integrity, and distribution processes to enhance efficiency and accuracy.
Develop and apply methods to identify, collect, process, and analyze large volumes of data to build and enhance GEOINT processes, and systems.
Design and deploy custom automation tools to facilitate streamlined workflows, rapid and secure data transfer, minimizing manual intervention and reducing turnaround times.
Apply AI/ML techniques to enhance geospatial analysis capabilities and improve accuracy in data extraction from various sources.
Develop API-based integration solutions to improve data exchange between NGA and partner systems.
Maintain Legacy Python codebase, integrate codebase new security requirements and future Source dissemination solutions.
Collaborate with GEOINT content teams to integrate automated quality checks, ensuring the highest standards of data integrity and reliability.
What You Must Have
US Citizen with a TS/SCI clearance and the ability to obtain a CI Polygraph
10 years of combined experience in the field with a Bachelor’s in a relevant field of study
Advanced proficiency with geospatial technologies including ArcGIS Suite (ArcPro, ArcGIS Online, ArcGIS Server), enterprise geodatabase management and geodatabase versioning workflows, and geospatial data formats and transformation processes.
Advanced proficiency with Python programming (pandas, matplotlib libraries) and secure coding practices, including code review techniques
Advanced proficiency developing and securing APIs, including API development with security controls (authentication, authorization, rate limiting), REST API security, and OAuth implementation
Advanced proficiency with database technologies including PostgreSQL and Oracle database management, database security configuration and access controls, and cloud-based database solutions with security configurations
Experience implementing database encryption (at-rest and in-transit), database audit logging and monitoring, and database backup and recovery security
Advanced proficiency with ETL (Extract, Transform, and Load) processes with data validation, data integrity verification and quality assurance, and secure data transfer protocols and encryption
Ability to use and contribute code to repositories with security scanning (GitHub/GitLab), including git security practices and pre-commit hooks
Experience developing CI/CD pipelines with security integration, Infrastructure-as-Code with security controls, container security (Docker, Kubernetes), and integrating security scanning tools (Fortify integration)
Experience with secrets management systems (AWS Secrets Manager) and vulnerability management platforms
Experience implementing security controls in IC environments, with knowledge of NGA security policies and procedures, familiarity with GEOINT security classification guidance, and experience with cross-domain solutions and data transfers
Knowledge of NGA systems and standards, including NGA's Mapping, Charting & Geodesy (MC&G) data formats and standards, NGA's Foundation GEOINT products and services, NSG (National System for Geospatial Intelligence) standards and specifications, and understanding of NGA's enterprise systems and databases
Exemplary professional writing abilities with familiarity in AI tools, including security documentation and architecture diagramming, technical documentation for security controls and procedures, security risk assessment and mitigation planning, and cross-functional collaboration on security initiatives
What Would be Nice to Have
Master’s coursework in relevant field of study
JavaScript development with security libraries
Advanced proficiency with geospatial open-source technologies (QGIS, OGR, GeoServer, PostGIS)
Experience conducting web application security testing aligned to OWASP Top 10 and secure coding standards
Experience designing cloud security architecture across AWS, Azure, and GCP, including applying CIS Benchmarks and security hardening guidance
Experience with security orchestration and automation (SOAR) to support detection, response, and remediation workflows
Experience performing penetration testing and ethical hacking activities in support of vulnerability identification and mitigation
Experience implementing zero-trust architecture principles and controls
Knowledge of NIST Cybersecurity Framework and its application to security governance and control mapping
Holds (or ability to obtain) cloud security certifications (e.g., AWS Security, Azure Security)
Experience securing container orchestration environments, including Kubernetes security controls and hardening practices