Remote VA Cybersecurity & Compliance Specialist

Ironbow; Virginia, Northern (IL, KY); Hybrid; USD 95,000 - 130,000; Full time

Job summary

Iron Bow Technologies in the United States seeks a VA Cybersecurity and Compliance Specialist to lead cybersecurity compliance, RMF, ATO-support, FIPS 140-3, and security documentation for HSM environments.

Primarily remote with limited travel, you will bridge engineering work and VA cybersecurity requirements, maintain CMVP evidence, review certificates, support VA ISSO and program stakeholders, and ensure alignment with VA policies and FedRAMP considerations.

Qualifications

• Experience with Federal cybersecurity compliance.
• Familiar with VA ATO processes.
• Knowledge of NIST SP 800-37 and 800-53.
• FIPS 140-3 compliance experience.

Responsibilities

• Support VA RMF, ATO, continuous monitoring, and compliance activities.
• Develop, review, and maintain cybersecurity and authorization artifacts.
• Support RMF activities per NIST SP 800-37 and 800-53 controls.
• Maintain CMVP evidence for HSM platforms.
• Review CMVP/CAVP validation certificates and cryptographic attestations.
• Assist VA ISSO, OIS, COR, and stakeholders with ATO documentation.
• Evaluate HSM configurations for security/compliance impact.
• Coordinate security reviews of upgrades and migrations.
• Align with VA Handbook 6500 and VA security policies.
• Support security incident response and post-incident analysis.
• Review Federal/VA cybersecurity deliverables for compliance.
• Assist with FedRAMP-related documentation.

Skills

RMF experience

ATO processes

NIST SP 800-37

FIPS 140-3

CMVP docs

HSM/PKI configs

Evidence artifacts

VA Handbook 6500

Zero Trust

FedRAMP

Job description

Iron Bow Technologies in the United States seeks a VA Cybersecurity and Compliance Specialist to lead cybersecurity compliance, RMF, ATO-support, FIPS 140-3, and security documentation for HSM environments.

Primarily remote with limited travel, you will bridge engineering work and VA cybersecurity requirements, maintain CMVP evidence, review certificates, support VA ISSO and program stakeholders, and ensure alignment with VA policies and FedRAMP considerations.