Stafford Gray LLC

Security Engineer

• Own and manage the complete security program for the project, ensuring alignment with State of Michigan security policies, standards, and contractual security requirements
• Serve as the primary security and compliance liaison to client stakeholders — fielding compliance inquiries, coordinating security reviews, and representing the delivery team in audit and assessment activities
• Facilitate compliance activities end-to-end: gathering evidence, maintaining security documentation and artifacts, tracking remediation items to closure, and reporting status to both internal leadership and state contacts
• Establish and enforce secure delivery practices across the project team, including access management, data handling procedures, and incident response protocols
• Motivate, guide, and coach project staff to ensure secure, accurate, efficient, and timely delivery of services — building a security-conscious culture rather than policing one
• Identify, assess, and communicate security risks proactively; escalate issues with clear remediation recommendations
• Maintain awareness of applicable regulatory and framework requirements (e.g., NIST 800-53, CJIS, HIPAA, IRS Pub 1075 — *confirm with client which frameworks govern this engagement*) and translate them into practical guidance for the team

Security Officer

Consultant

• Support the IaaS team's daily operational activities across a large-scale vSphere environment
• Troubleshoot and maintain virtualization infrastructure, working within established automation (internal marketplace) and monitoring (Grafana) tooling
• Assist with workload migration to VCF 9 following validation of the migration design and roadmap
• Coordinate with the client's dedicated VMware migration team during the migration phase
• Document operational procedures and migration activities

VMware vSphere Consultant – VCF 9 Workload Migration

Software Engineer

• Write high-level functional requirement documents and technical specifications across the full SDLC
• Support and enhance IBM InfoSphere MDM (Virtual MDM) — data models, entities, transactions, batch processing, configuration, customization, troubleshooting
• Develop and maintain Kafka-based integrations (topic creation, producer/consumer development, message flow troubleshooting)
• Work in Linux/Unix environments; write PowerShell and Bash scripts, including CRON job scheduling
• Write and optimize SQL against Oracle and Microsoft SQL Server
• Manage code in Git/GitHub; support CI/CD pipelines (Azure DevOps or similar)
• Support WildFly application server deployments, health checks, and batch processing integration with Kafka and MDM
• Create and manage certificates on Windows and Linux
• Partner with DBAs, Infrastructure (Server/Network) teams, and client stakeholders on MPI/MIDSP ticket resolution
• Design/execute test plans, UAT support, defect tracking, and post-implementation testing
• Monitor production and non-production environments; support RFC-driven changes and maintain system documentation
• Deliver monthly reporting on MDM applications

Senior MDM Integration Developer

ServiceNow

• Design and implement REST/SOAP API integrations between ServiceNow and VCF OPS
• Enable real-time infrastructure inventory data flow into the SNOW CMDB
• Develop and maintain integration scripts, flows, and custom API endpoints
• Collaborate with ServiceNow developers, cloud architects, and infrastructure teams
• Document integration architecture, data mappings, and technical specifications
• Troubleshoot API connectivity, data sync, and performance issues
• Advise on best practices for ServiceNow platform governance and API security

Senior Consultant – ServiceNow, VCF OPS Integration

• **Description**
• We are seeking a skilled GRC Administrator and Developer to join a collaborative team of information technology professionals. This role focuses on maintaining and enhancing a web-based Governance, Risk, and Compliance (GRC) platform, with responsibilities spanning administration, development, troubleshooting, and implementation of new functionality. The ideal candidate will work cross-functionally with security, audit, and technology teams to deliver automation solutions that streamline compliance processes and reduce manual effort.
• Key responsibilities include serving as the primary administrator and developer for an enterprise GRC tool, leading automation initiatives for security accreditation processes — including evidence collection, workflow routing, and control reviews — and designing unified security controls frameworks aligned with applicable standards. The role also involves developing and maintaining Python API modules and automation scripts to support continuous monitoring, integrating structured data sources into the GRC platform, and maintaining centralized source control and documentation repositories.

GRC Administrator – Developer

Cloud Engineer

• Lead multiple design workshops with the client's engineering team over several weeks to define the full VCF solution architecture
• Design an end-to-end VMware Cloud Foundation 9.1 environment covering vSphere (virtualization), NSX (networking), vSAN (storage), VKS (containers), and the full Aria/vRealize monitoring stack (vROPS, vRNI, vRLI)
• Define the integration architecture between VCF and the client's existing cloud services — including compliance, authentication, and security systems
• Adapt and design provisioning systems to enable automation aligned with VCF standards, covering VM and container creation workflows
• Produce detailed engineering and architecture documents to serve as deployment references for the implementation team
• Interface with client stakeholders to ensure the solution meets both technical and business requirements

Security Officer

VMware vSphere Consultant – VCF 9 Workload Migration

Senior MDM Integration Developer

Senior Consultant – ServiceNow, VCF OPS Integration

GRC Administrator – Developer

Principal Cloud Architect – VMware VCF