Platform Authorization Lead

MANTECH; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Job summary

MANTECH is seeking a Platform Authorization Lead to advance healthcare IT security posture, focusing on cloud hosting, FedRAMP alignment, and RMF artifacts.

The role requires translating complex federal requirements into deployable, scalable security controls while coordinating with release and operations teams and government stakeholders for continuous monitoring and authorization processes.

Qualifications

• BS in technical discipline with 10+ years healthcare IT experience.
• CISSP or equivalent senior cybersecurity credentials.
• Experience managing RMF BOE packages for VAEC or FedRAMP.

Responsibilities

• Lead cloud hosting posture in alignment with VAEC and FedRAMP.
• Design SaaS boundary architectures and DR/HA patterns.
• Develop and manage RMF BOE packages and security documentation.
• Translate federal security mandates into deployable workflows and architectures.
• Coordinate with release/operations for continuous monitoring and patching.
• Collaborate with government stakeholders through assessment cycles.

Skills

CISSP

RMF

Cloud architecture

Security controls translation

Education

Bachelor's degree in technical discipline

Master's degree in Cybersecurity/related field

Job description

MANTECH seeks a motivated, career and customer-oriented Platform Authorization Lead to join our team. This role offers remote flexibility, with the potential for either a hybrid or fully remote arrangement depending on final operational needs, alongside periodic travel for key meetings and projects.

Platform & Authorization Lead in Healthcare IT

Coordinates with operational leadership on release, change, monitoring, patching, vulnerability remediation, and operational evidence. In this role, you will own the program's hosting posture, VA Enterprise Cloud (VAEC) and Federal Risk and Authorization Management Program (FedRAMP) alignment, Authority to Operate (ATO) strategy, disaster recovery, high availability, and security control implementation across cloud boundaries.

Responsibilities Include But Are Not Limited To

• Lead the cloud hosting posture, driving alignment with VAEC, FedRAMP, and High-baseline ATO security requirements.
• Design and implement Software as a Service (SaaS) boundary architectures, control inheritance frameworks, Disaster Recovery (DR), and High Availability (HA) patterns to ensure infrastructure resilience.
• Develop, maintain, and manage Risk Management Framework (RMF) Body of Evidence (BOE) packages and security authorization documentation.
• Translate complex federal security and authorization mandates into operational, deployable workflows and platform architectures.
• Coordinate daily with release, change, and operations teams to oversee continuous monitoring, patching, vulnerability remediation, and operational compliance evidence.
• Collaborate with government security stakeholders and accreditation authorities to guide system architecture through formal assessment and authorization cycles.

Minimum Qualifications

• Bachelor's degree in technical discipline with 10+ years of healthcare IT experience, or an equivalent combination of education and relevant work experience.
• Active Certified Information Systems Security Professional (CISSP) certification or equivalent senior cybersecurity credentials.
• Experience managing RMF BOE packages for VAEC, FedRAMP, or equivalent High-baseline ATO systems.
• Technical expertise in designing resilient cloud architectures, including DR/HA strategies, control inheritance, and security boundary definitions.
• Fluency translating federal security controls and authorization standards into operational infrastructure implementations.

Preferred Qualifications

• Experience securing and authorizing clinical SaaS solutions, hosted enterprise healthcare IT platforms, or sensitive federal environments.
• Master's degree in Cybersecurity, Information Technology, or Computer Engineering.
• Knowledge of Department of Veterans Affairs (VA) security policies and VAEC cloud architecture patterns.
• Experience with automated compliance scanning, continuous monitoring tools, and security remediation platforms.

Clearance Requirements

• U.S. Citizenship is required.
• Must be able to obtain and maintain a Department of Veterans Affairs Moderate Risk Background Investigation (BI) or Public Trust clearance.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, and engage with team members.
• Frequently communicates with co-workers, management, and government stakeholders, which may involve delivering technical security presentations; must be able to exchange accurate information in these situations.