Remote Zero-Trust Cyber Architect and Policy Lead

TISTA Science and Technology Corporation; Rockville (MD); Hybrid; USD 183,000 - 199,000; Full time

Benefits offered by this job

Healthcare Benefits

Remote Work Options

Paid Time Off

Training/Certification opportunities

HSA / FSA

Life Insurance

Disability Insurance

401K Match

Tuition Reimbursement

Employee Assistance Program

Paid Holidays

Military Leave

Job summary

TISTA Science and Technology Corporation in Rockville, MD is seeking a Cyber Security Architect / Policy Lead to guide security architecture, policy interpretation, and ATO strategy across a diverse portfolio of applications for the VA DevSecOps program.

The role requires 12+ years in information security with 5+ years in architecture or policy leadership, plus strong experience with NIST RMF and VA security frameworks. Remote CONUS options and strong benefits accompany this mission-driven role.

Qualifications

• 12+ years of information security experience, including 5+ years as a security architect or security policy lead supporting federal IT programs.
• 5+ years of hands-on experience with the NIST Risk Management Framework and ATO lifecycle, including authoring and defending A&A packages.
• Demonstrated expertise with VA Zero Trust Architecture, TIC 3.0, VA Handbook 6500, VA Critical Security Controls, NIST security frameworks, and VA ICAM/PIV requirements.
• Experience securing hybrid environments spanning legacy applications, SaaS, cloud platforms, and containerized workloads.
• Experience integrating security into Agile and DevSecOps delivery, including CI/CD security controls, SAST/DAST, SBOM, and vulnerability management.
• Experience with security and privacy requirements involving PHI/PII and federal healthcare environments.
• VA OIT, VHA, or other federal health cybersecurity experience strongly preferred.

Responsibilities

• Lead cybersecurity architecture, policy interpretation, Zero Trust alignment, and ATO strategy across the product line.
• Define security requirements and architecture for legacy applications, SaaS platforms, cloud environments, containers, APIs, and system integrations.
• Lead ATO and Risk Management Framework activities and ensure required security and privacy controls are incorporated throughout delivery.
• Establish security standards and automated security controls within Agile and DevSecOps pipelines.
• Partner with VA security stakeholders, Product Owners, architects, engineers, and program leadership to identify and resolve security risks and delivery blockers.
• Lead vulnerability management, security risk, incident response, and remediation governance.
• Develop and maintain reusable security architecture, Zero Trust, ATO, and security-by-design standards and practices.
• Provide cybersecurity leadership, technical guidance, and mentorship across delivery teams.
• Contribute to TISTA’s cybersecurity practice, business growth, and continuous improvement initiatives.

Skills

Cybersecurity architecture

Security policy

Zero Trust

DevSecOps

Risk Management Framework

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering

Master’s degree

Tools

SAST/DAST

SBOM

CI/CD security controls

Job description

TISTA Science and Technology Corporation in Rockville, MD is seeking a Cyber Security Architect / Policy Lead to guide security architecture, policy interpretation, and ATO strategy across a diverse portfolio of applications for the VA DevSecOps program.

The role requires 12+ years in information security with 5+ years in architecture or policy leadership, plus strong experience with NIST RMF and VA security frameworks. Remote CONUS options and strong benefits accompany this mission-driven role.