PROGRAM MANAGER – CYBERSECURITY ARCHITECTURE & ENGINEERING

Program Manager to lead a federal cybersecurity architecture and engineering delivery program across modernization, governance, and secure cloud engineering.

Responsibilities

• Direct day-to-day execution of a federal cybersecurity architecture and engineering program, ensuring delivery is on schedule, within scope, and aligned with contract requirements.
• Act as the primary interface across Government stakeholders, company leadership, technical teams, subcontractors, and mission partners.
• Manage program scope, staffing, schedule, risks, issues, dependencies, action items, deliverables, and performance reporting.
• Create and maintain program management artifacts, including Integrated Master Schedule (IMS), sprint plans, deliverable tracker, risk register, issue log, action item register, staffing tracker, and status reports.
• Lead cross-functional teams supporting cybersecurity architecture, cloud security, RMF modernization, cATO, DevSecOps enablement, vulnerability management, continuous monitoring, and emerging technology or AI security testing.
• Coordinate cybersecurity architecture recommendations and secure design patterns, including implementation roadmaps, SOPs, playbooks, dashboards, briefings, and customer-ready deliverables.
• Support cATO implementation, including automated control assessment, control-to-evidence mapping, evidence collection, continuous monitoring, OSCAL-aligned documentation, metrics, dashboards, and authorization-support artifacts.
• Oversee Emerging Technology and AI Security Engineering and Testing activities, including intake, triage, risk-tiering, evidence expectations, decision gates, testing coordination, and risk reporting.
• Ensure emerging technology and AI assessments account for security, privacy, data protection, access control, supply chain risk, logging, monitoring, misuse risk, integration risk, and operational impact.
• Facilitate Agile delivery, including backlog refinement, sprint planning, capacity planning, sprint reviews, retrospectives, and recurring team coordination.
• Ensure work status is tracked in the Government-designated project management or Agile tracking tool.
• Prepare and deliver program status updates, executive briefings, meeting minutes, technical summaries, risk reports, and deliverables for Government review.
• Identify risks, blockers, staffing gaps, resource constraints, and quality concerns early, and recommend practical corrective actions.
• Review deliverables for quality, accuracy, completeness, professionalism, and alignment with customer requirements prior to submission.
• Support staffing, onboarding, knowledge transfer, team performance, and resource planning.
• Drive a delivery culture focused on accountability, technical quality, customer service, compliance, and mission outcomes.
• Perform additional/similar duties as assigned, including support across task areas, other programs/projects, as required by the Executive Team.

Requirements

• 8+ years of relevant experience supporting IT, cybersecurity, cloud, engineering, or federal technology programs.
• 5+ years of experience managing technical projects, cybersecurity projects, or federal IT/cybersecurity delivery teams.
• Experience managing complex cybersecurity, cloud, enterprise IT, or security engineering programs in a federal contracting environment.
• Experience managing program schedules, staffing, risks, issues, deliverables, status reporting, quality reviews, and client communications.
• Working knowledge of RMF, ATO, cATO, FISMA, NIST guidance, security assessments, and federal cybersecurity requirements.
• Experience coordinating technical teams across cybersecurity architecture, cloud security, infrastructure, application security, identity, DevSecOps, vulnerability management, GRC, or enterprise architecture workstreams.
• Experience leading work in Agile environments (Scrum or Kanban), including backlog refinement, sprint planning, team coordination, and retrospectives.
• Strong communication skills with senior Government stakeholders, technical teams, executives, and non-technical audiences.
• Strong writing skills for status reports, meeting minutes, briefings, plans, procedures, and decision-support materials.
• Strong organizational, analytical, problem-solving, and leadership skills.
• Ability to manage multiple priorities, shifting deadlines, complex dependencies, and customer-facing issues.
• Operate with sound judgment, personal accountability, professionalism, and limited supervision.

Technologies

• RMF, ATO, cATO, FISMA, NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A
• AWS Security Hub, AWS Config, AWS GuardDuty, AWS CloudTrail, AWS CloudWatch, AWS IAM, AWS KMS, AWS Lambda
• Azure Entra ID, Azure Key Vault, Azure Policy, Defender for Cloud, Azure Monitor, Log Analytics
• DevSecOps, CI/CD, SBOM, SAST, DAST, SCA, IaC scanning, container security, SIEM/SOC
• Okta, Microsoft Entra ID, CMDB, GRC, Zero Trust, SCRM, ICAM, SASE, CASB
• TIC 3.0, OSCAL

Technical Knowledge

• Cybersecurity architecture and security engineering
• RMF, ATO, cATO, FISMA, NIST SP 800-37, NIST SP 800-53, and NIST SP 800-53A
• Cloud security architecture, shared responsibility models, and hybrid or multi-cloud environments
• AWS and Azure security services (Security Hub, Config, GuardDuty, CloudTrail, CloudWatch, IAM, KMS, Lambda; Entra ID, Key Vault, Azure Policy, Defender for Cloud, Monitor, Log Analytics, or similar)
• DevSecOps, CI/CD security, automated security scanning, evidence automation, SBOM, SAST, DAST, SCA, IaC scanning, container security
• Vulnerability management, configuration management, continuous monitoring, security telemetry, and SIEM/SOC integration
• Identity, Credential, and Access Management (Okta, Microsoft Entra ID, or similar)
• CMDB, asset inventory, GRC workflows, inherited controls, common controls, evidence repositories
• Zero Trust, SCRM, ICAM, SASE, CASB, SWG, TIC 3.0, and enterprise security operations concepts
• Emerging technology and AI security risk evaluation (intake, triage, testing, evidence collection, decision-support processes)

Preferred Qualifications

• Experience supporting federal civilian, defense, intelligence, or highly regulated cybersecurity programs.
• Experience managing cybersecurity architecture, cATO, RMF automation, GRC integration, cloud security modernization, or DevSecOps programs.
• Experience with automated control assessment, control-to-evidence mapping, continuous monitoring dashboards, common controls, inherited controls, or OSCAL-aligned documentation.
• Experience supporting AI, machine learning, generative AI, automation, or emerging technology security assessments.
• Experience helping develop or manage intake forms, triage rubrics, risk-tiering models, testing playbooks, decision gates, or evidence requirements.
• Experience with tools such as Microsoft Project, Rally, Microsoft 365, Confluence, ServiceNow, Archer, JCAM, RegScale, AWS Audit Manager, Tenable, Splunk, QRadar, Axonius, Prisma Cloud, Okta, Microsoft Defender, or similar platforms.

Certifications

• PMP (required)
• Agile/Scrum Master (required)
• ITIL (preferred)
• At least one of the following (required): CISSP; CISM; CISA; AWS, Azure, or GCP Solution Architect; or similar certification approved by Management

Clearance

• Minimum of Public Trust

Work Location and Core Hours

• Primary locations: Arlington and Alexandria, VA (onsite). Remote work authorized.
• Occasional travel to primary locations required.
• Hours: 6:00 am ET to 6:00 pm ET

Salary

• USD 130,000 - 190,000 per year