Is Software, IT & Cybersecurity a Good Job Market in Baltimore-Columbia-Towson, MD?

Executive Verdict

Market rating: competitive | Confidence: High

This is still a real market, but not an easy one. Baltimore showed more than 2,200 Software, IT & Cybersecurity postings across more than 400 companies over the last 90 days, yet local conditions are tighter than a year ago: metro Information employment was down -4.8% year over year in March, Professional and Business Services was down -2.9%, and metro unemployment was 4.8% in February.[12][5][13][14] Maryland-level Software, IT & Cybersecurity signals point to selective hiring rather than broad expansion, with active postings up 7.8% year over year in April while statewide category employment was down 2.2%.[6][7]

Best positioned: Mid-to-senior candidates who can work on-site, show depth in Python or Java plus Kubernetes or Docker, and translate across software, cloud, and security have the best odds right now.[15][16][17]

Main caution: Do not assume this is a remote-friendly or sponsorship-friendly market: about 10% of local postings are remote, and among postings that state a policy, less than 5% mention visa sponsorship being available.[15][18]

What Changed Recently

• Baltimore's Information employment fell -4.8% year over year in March, worse than the metro's overall nonfarm change of -1.4%.[5][39]: That makes software and IT hiring more selective than a simple "overall jobs market" read would suggest.
• Maryland Software, IT & Cybersecurity postings rose 7.8% year over year in April even as statewide category employment fell 2.2%.[6][7]: There are openings, but they look more like targeted replacement and skill-gap hiring than a broad rebound.
• Leidos filed a WARN notice on April 6 affecting 156 employees at its Windsor Mill facility, effective June 5, 2026.[19]: If you are targeting defense and government-adjacent employers, diversify your pipeline rather than leaning on one contractor.
• Metro unemployment reached 4.8% in February and was up 45.5% year over year.[14]: Even if you are applying to tech roles, you are competing in a looser local labor market with more available candidates.
• National CPI rose +3.1% year over year in March, average hourly earnings rose +3.6% in April, and the federal funds rate was 3.64% in April.[2][3][4]: Pay pressure is still real, but employers are still balancing wage growth against tighter budgets and slower expansion.

What This Means for You

Entry-Level Candidates

Difficulty: High.

Best target: Aim for on-site support, QA, junior infrastructure, or security-operations-adjacent roles at large employers and contractors, not remote-only software titles.

Biggest mistake: Applying only to generic junior software engineer jobs without proof of shipping, automation, or troubleshooting ability.

Next step: Build one portfolio project that shows Python or Java, Git, tests, and either Docker or a basic security/control workflow, then tailor applications to commute-friendly employers.

Mid-Career Candidates

Difficulty: Moderate, but selective.

Best target: Target backend, platform, DevOps, cloud, IAM, security engineering, and regulated-environment roles where you can show measurable reliability, security, or delivery outcomes.

Biggest mistake: Positioning yourself as a narrow coder when the market is rewarding blended software-plus-cloud-plus-security capability.

Next step: Rewrite your resume around production systems, incident reduction, automation, cost control, and secure delivery, then create two versions: one for contractor/enterprise roles and one for commercial software roles.

Career Switchers

Difficulty: High, but possible with a narrow lane.

Best target: Look for bridge roles such as IAM, endpoint administration, QA automation, technical support, or compliance-heavy tech work where prior domain experience matters.

Biggest mistake: Leading with certificates alone and expecting them to substitute for hands-on evidence.

Next step: Choose one lane, build a small lab or portfolio around it, and prove you can do ticket work, automation, documentation, and secure change control.

Salary Reality

high pay highly concentrated

Local posted salary ranges center on about $144k to $210k, with hourly roles clustering around about $66 to $75 / hour, but those are posted-ad figures and are likely pulled upward by senior and specialized roles.[28][29] As a state-level proxy, Revelio Public Labor Statistics puts the mean offered salary on new Maryland Software, IT & Cybersecurity openings at ~$122,698 in April 2026 (n=1,528), while the national BLS median for the broader computer and mathematical family was $146,650 in 2024.[30][31]

Those pay signals fit a market that skews experienced: about 10% of local postings are entry-level, while about 45% are mid-level and about 45% are senior.[16]

The upside is offset by competition, on-site expectations, and employer mix. About 80% of local postings are on-site, and a meaningful share comes from enterprise employers that tend to expect stronger process, domain, and security discipline.[15][32]

Best-paying path: The strongest pay tends to sit in senior software, platform, security, and architecture tracks. Baltimore's upper-end local bands line up with national specialty paths like Cloud Security Architect, which national guidance places at $130K–$240K.[28][10]

Caution: Do not overread the $200k+ edge of the market unless your profile matches the local mix. This market is heavily mid-to-senior rather than broad-based entry hiring.[28][16]

Where the Opportunities Are Concentrated

Opportunity is not spread evenly across the metro. Within the local posting sample, the most-active industries are technology at about 40%, information technology at about 30%, engineering at about 10%, software development at about 10%, and aerospace & defense at about 5%.[37] The most consistently active named employers over the last 90 days include Akina Inc, Avid Technology Professionals, LLC, Peraton Corp, Wyetech, LLC, Erias Ventures, LLC., Dataannotation, Erias Ventures, and Booz Allen Hamilton, which points to a meaningful contractor and government-adjacent lane.[36] There is also a second lane through large regulated employers. Local major employers tied to tech demand include Johns Hopkins University, T. Rowe Price, and Constellation Energy.[38] About 25% of postings in the sample come from enterprise employers, and hiring is fragmented rather than dominated by one company, so broad targeting works better than waiting for one brand-name opening.[32][22]

• Government-adjacent contractors and engineering-heavy employers (high): This is the clearest concentration in the sample, led by Akina Inc, Avid Technology Professionals, LLC, Peraton Corp, Wyetech, LLC, Erias Ventures, LLC., and Booz Allen Hamilton.[36]
• Large regulated institutions (moderate): Johns Hopkins University, T. Rowe Price, and Constellation Energy give the market a second lane for candidates who can operate in healthcare, finance, research, or utility environments.[38]
• Remote-first generalist software roles (limited): This is the narrowest lane locally because only about 10% of postings are remote, while most openings are still tied to on-site work.[15]

Where to focus: Focus first on mid-to-senior on-site roles that combine software, infrastructure, and security for contractors and large regulated employers.

Skills and Credentials Worth Pursuing

• Python (premium): Python shows up in about 40% of local postings, making it the clearest shared language across software, automation, and security-adjacent work in this market.[17]
• Java (table stakes): Java appears in about 30% of local postings, which keeps it highly relevant for enterprise and contractor-side application work.[17]
• Kubernetes and Docker (premium): Kubernetes is requested in about 20% of local postings and Docker in about 15%, signaling real value for containerized platform, DevOps, and cloud delivery skills.[17]
• Secure-by-design cloud delivery (premium): National 2026 hiring signals cluster around AI, cybersecurity, and cloud, and software-engineer skill guidance emphasizes building secure systems from the start.[9][23]
• AI-assisted development workflow (differentiator): Over 275,000 active U.S. postings referenced some level of AI skills in January 2026, and 84% of developers reportedly use AI coding tools daily, so employers increasingly expect fluency plus human review discipline.[24][25]
• CISSP (premium): Among local postings that explicitly require a certification, CISSP is the one named most often, even though it still appears in less than 5% of postings overall.[26]
• Hands-on labs and portfolio evidence (differentiator): 2026 hiring guidance points toward skills-first selection, with employers putting more weight on certifications, portfolios, and hands-on lab experience than on degrees alone.[11]
• Bachelor's degree or related CS discipline (table stakes): Among local postings that state an education requirement, bachelor's-level requirements dominate, including bachelor's degree in computer science or a related discipline.[27]

Adjacent Roles to Consider

• Architect-Engineer (ARCE) (bridge): Federal Architect-Engineer openings in Baltimore can require software engineering and IT skills, creating a bridge into public-sector technical programs.[8]
• Cloud Security Architect (both): This role sits at the intersection of cloud and security, two of the strongest 2026 demand themes, and national guidance treats it as a prominent cybersecurity path.[9][10]
• AI Security Engineer (pivot): This is a logical pivot for candidates who already understand software delivery or security and want to align with the AI-cloud-security convergence shaping 2026 hiring.[11][10]
• IAM Engineer (bridge): IAM is one of the named 2026 high-demand roles tied to blended cloud and security hiring.[11]

30 / 60 / 90-Day Plan

First 30 Days

• Split your resume into two versions: one for contractor/enterprise infrastructure-security roles and one for software delivery roles.
• Build one interview-ready project that shows Python or Java, Git, tests, Docker or Kubernetes, and a short written security review.
• Rank your target employers by commute realism first, not brand preference, because local demand is still heavily on-site.
• If you need sponsorship, identify that constraint early and stop spending time on postings that do not state policy clearly.

Days 31-60

• Add one proof point that blends domains: incident automation, IAM workflow, container hardening, CI/CD security, or cloud cost-and-reliability improvement.
• Prepare quantified stories for interviews around uptime, delivery speed, defect reduction, automation hours saved, or audit/security outcomes.
• For cyber candidates, decide whether CISSP fits your level; for software candidates, decide whether cloud-security architecture is the better differentiator.
• Run a focused outreach sprint to recruiters and hiring managers at the consistently active employer set rather than applying randomly.

Days 61-90

• If you are not getting traction, pivot from generic software titles toward platform, IAM, cloud-security, QA automation, or regulated-environment roles.
• Complete one visible credential or lab milestone that matches your lane, then refresh all application materials with that evidence.
• Broaden geographically within commuting distance and prioritize employers with recurring openings instead of one-off listings.
• Reassess whether your target salary matches the seniority and on-site expectations of the local market, and adjust your target band if needed.

Methodology and Confidence

This April 2026 report was generated on May 10, 2026. Latest direct national data: May 2026. Latest direct Baltimore-Columbia-Towson, MD data: May 2026.

Confidence: Overall confidence: High. Based on 7 direct local occupation data points and 29 total local evidence items with recent coverage.

Limitations

• This report mixes metro-level labor data with state-level Software, IT & Cybersecurity proxy data because a full occupation-by-metro series is not available for every measure, so Maryland signals may not match Baltimore perfectly.[7][6][30]
• Several March 2026 Maryland year-over-year labor figures are preliminary and may be revised later, especially for unemployment, employment, and labor-force changes.[33][34][35]
• The Callings.ai job database is a partial, deduplicated sample of online postings, so leading employer names, skill patterns, work-arrangement mix, and salary bands are more reliable here than exact market totals or exact market share.[12][36][15][17][28]
• This category covers a broad bundle of work—from software engineering to infrastructure and cybersecurity—so a strong signal for one lane does not automatically describe every sub-role equally well.
• April layoff notices include a June 5 Leidos restructuring in Windsor Mill and a June 26 Towson closure at Stoney River Steakhouse & Grill, which are real local risk signals but should not be read as a direct count of tech layoffs alone.[19][21]

References

1. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-04 · data.bls.gov
2. Federal Reserve Economic Data. Consumer Price Index for All Urban Consumers: All Items in U.S. City Average · 2026-03 · fred.stlouisfed.org
3. Federal Reserve Economic Data. Average Hourly Earnings of All Employees, Total Private · 2026-04 · fred.stlouisfed.org
4. Federal Reserve Economic Data. Federal Funds Effective Rate · 2026-04 · fred.stlouisfed.org
5. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
6. Reveliolabs. Job Openings - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
7. Reveliolabs. Employment - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
8. Usajobs. USAJOBS connects job seekers with federal jobs across the United States and around the world as the official employment site for the federal government · 2026-05 · usajobs.gov
9. Robert Half. 2026 Technology job market: In-demand roles and hiring trends · 2026-02 · roberthalf.com
10. Cybersecjobs. Cybersecurity Salary Guide 2026: What Cleared Professionals Actually Earn - Cleared Cyber Security Jobs | CyberSecJobs.com · 2026-01 · cybersecjobs.com
11. Ascendeducation. IT Roles in Demand for 2026 | Ascend Education · 2025-12 · ascendeducation.com
12. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
13. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
14. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-02 · data.bls.gov
15. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
16. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
17. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
18. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
19. Labor. Labor - warn_notice_layoff · 2026-04 · labor.maryland.gov
20. Reveliolabs. Mass-layoff Notices - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
21. Labor. Labor - warn_notice_layoff · 2026-04 · labor.maryland.gov
22. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
23. Smoothstack. 5 Core Software Engineer Skills Needed in 2026 · 2026-01 · smoothstack.com
24. CompTIA. Tech Job Trends, Job Growth, and Future Opportunities | CompTIA Blog · 2026-03 · comptia.org
25. Netcorpsoftwaredevelopment. AI-Generated Code Statistics 2026: Can AI Replace Your Development Team? · 2026-04 · netcorpsoftwaredevelopment.com
26. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
27. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
28. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
29. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
30. Reveliolabs. Salaries - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
31. Bureau of Labor Statistics. Bureau of Labor Statistics Data · data.bls.gov
32. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
33. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
34. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
35. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
36. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
37. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
38. Livebaltimore. Major Employers - Live Baltimore · 2026-04 · livebaltimore.com
39. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov