Cyber Security Architect – Policy Lead

SAIC

. Lead development and maintenance of Assessment and Authorization artifacts to obtain and maintain ATOs for HELM Product Line systems .

Posted 9/21/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Cybersecurity, including ATO compliance, vulnerability management, and Zero Trust Architecture implementation. Proficient in developing and maintaining security policies and ensuring compliance with federal regulations such as FedRAMP and FISMA.

Highest-signal resume keywords

Cybersecurity ExpertiseATO ComplianceNIST SP 800-53 Rev 5Zero Trust Architecture ImplementationVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityVulnerability ManagementRisk AssessmentCloud Security ControlsNIST SP 800-53 Rev 5NIST SP 800-37 Rev 2FISMA/RMF ComplianceEncryptionIdentity FederationSecrets Management

Soft Skills

LeadershipCommunicationCollaborationAdvisory SkillsIncident Response

Tools & Technologies

FortifyWASANessusAWSAzureVAECFICAMPIV/CACSAMLVA Security Scanning Tools

Certifications & Qualifications

CISSP-ISSAPCISSP-ISSEPGIAC GSLCCISMCompTIA Security+

Industry Keywords

FedRAMPFISMAVA Cybersecurity PoliciesTIC 3.0VA Critical Security ControlsCISA Binding Operational DirectivesHIPAA/PHI Security RequirementsVA Handbook 6500IA 3AAL 3

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Lead development and maintenance of Assessment and Authorization artifacts to obtain and maintain ATOs for HELM Product Line systems
Serve as the senior technical lead for cybersecurity, Zero Trust Architecture, and RMF compliance
Participate in vulnerability scans and quality reviews; remediate critical and high-severity vulnerabilities
Provide vulnerability scanning reports and risk assessments
Ensure cloud solutions comply with FedRAMP, VA directives, VA Zero Trust Architecture principles, TIC 3.0, IPv6 requirements, and VA cybersecurity policies
Implement cloud security controls including encryption, boundary protection, audit logging, identity federation, and secrets management
Develop and maintain cybersecurity policies, POA&Ms, and continuous monitoring artifacts
Coordinate with VA ISOs, FSS, and OCS on ATO compliance and security findings
Ensure HELM systems comply with VA Critical Security Controls and VA Security Controls memorandum
Support FICAM/PIV logical access policy compliance, including IAL 3, AAL 3, and FAL 3
Enforce cryptographic requirements under FIPS 140-2/140-3 and NIST SP 800-52
Manage patching governance, vulnerability management, and mitigation processes
Advise on AI/ML security implications and applicable executive orders and OMB memoranda
Ensure contractor personnel complete mandatory VA cybersecurity and role-based security training
Respond to security incidents and coordinate with the VA PM and Information Security Officer within required timeframes
Serve as the primary interface with VA Information Security Officers, Field Security Services, and the Office of Cyber Security

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field
Master's degree and PhD/JD are alternative degree pathways with corresponding experience requirements
13 years of experience with a bachelor's degree, 11 years with a master's degree, or 8 years with a PhD/JD
10+ years of cybersecurity experience
At least 5 years supporting federal IT programs under FISMA/RMF
Deep expertise in NIST SP 800-53 Rev 5, NIST SP 800-37 Rev 2 (RMF), and VA Handbook 6500
Demonstrated experience obtaining and maintaining ATOs for federal information systems
Proficiency with VA or federal security scanning tools, including Fortify, WASA, Nessus, or equivalent
Experience with Zero Trust Architecture principles and implementation in AWS, Azure, or VAEC
Demonstrated expertise in VA Zero Trust Architecture, TIC 3.0, and ATO compliance
Knowledge of FedRAMP, FISMA, HIPAA/PHI security requirements, and VA Directive 6517
Familiarity with CISA Binding Operational Directives BOD 19-02, BOD 22-01, and BOD 23-01
Experience with FICAM, PIV/CAC logical access, SAML, and identity assurance frameworks
Must be eligible for a VA background investigation, likely Tier 4/High Risk
Must be US-based
Preferred certifications: CISSP-ISSAP, CISSP-ISSEP, GIAC GSLC, CISM, and CompTIA Security+

Benefits

Comp & perks

Remote work arrangement
Equal Opportunity Employer