Senior Cybersecurity Architect & Policy Leader

Saic; Virginia (MN); Hybrid; USD 160,000 - 200,000; Full time

Job summary

SAIC is seeking a Cyber Security Architect/Policy Lead who serves as the program's senior cybersecurity authority, designing and enforcing security architecture, managing the ATO/A&A lifecycle, and ensuring HELM Product Line systems comply with VA, federal, and FISMA requirements.

This role interfaces with VA ISOs, FSS, and OCS, leads RMF and Zero Trust initiatives, and supports vulnerability management and incident response to maintain ongoing compliance with FedRAMP, TIC 3.0, and VA

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field; Master's preferred.
• 13+ years of experience; Masters 11 years; PhD/JD 8 years equivalent.
• 10+ years of cybersecurity experience, with at least 5 years on federal IT programs under FISMA/RMF.
• Deep expertise in NIST SP 800-53 Rev 5, NIST SP 800-37 Rev 2 (RMF), and VA Handbook 6500.
• Demonstrated experience obtaining and maintaining ATOs for federal information systems.
• Proficiency with VA or federal security scanning tools (Fortify, WASA, Nessus).
• Experience with Zero Trust Architecture principles and cloud environments (AWS, Azure, VAEC).
• Demonstrated expertise in VA Zero Trust Architecture, TIC 3.0, and ATO compliance.
• Knowledge of FedRAMP, FISMA, HIPAA/PHI security requirements, and VA Directive 6517 (cloud security).
• Familiarity with CISA Binding Operational Directives (BOD 19-02, 22-01, 23-01).
• Experience with FICAM, PIV/CAC, SAML, and identity assurance frameworks.
• Must be eligible for VA background investigation; US-based.

Responsibilities

• Lead development and maintenance of ATO artifacts to obtain and maintain ATO for HELM Product Line systems per NIST SP 800-37 Rev 2 and VA Handbook 6500.
• Serve as primary technical lead for cybersecurity, ZTA, and RMF across HELM PL.
• Participate in vulnerability scans and reviews; remediate high severity vulnerabilities.
• Provide vulnerability reports and risk assessments per NIST SP 800-30 Rev 1.
• Ensure cloud solutions comply with FedRAMP, VA directives and VA Zero Trust Architecture principles; TIC 3.0, IPv6.
• Implement cloud security controls: encryption, boundary protection, audit logging, identity federation, secrets management.
• Maintain cybersecurity policy docs, POA&Ms, and continuous monitoring artifacts.
• Coordinate with VA ISOs, FSS, and OCS for ATO compliance and findings response.
• Ensure all HELM systems comply with VA basic security controls and VA security memos.
• Support FICAM/PIV logical access policy compliance (IAL 3, AAL 3, FAL 3).
• Enforce cryptographic requirements per FIPS 140-2/140-3 and NIST SP 800-52; document protections.
• Manage patch governance: patch management, vulnerability management, and mitigations.
• Advise on AI/ML security implications and ensure compliance with EO/OMB memoranda.
• Ensure contractor personnel complete VA mandatory cybersecurity training (TMS #10176).
• Respond to security incidents; coordinate with VA PM and VA ISO within required timeframes.

Skills

NIST SP 800-53 Rev 5

NIST SP 800-37 Rev 2 (RMF)

Zero Trust Architecture

Cloud security

FIPS 140-2/140-3

PIV/CAC / FICAM

Vulnerability management

Incident response

ATO/A&A lifecycle

FedRAMP knowledge

AIO/ATO maintenance

Education

Bachelor's degree in Cybersecurity or related field

Master's degree preferred

PhD/JD with experience acceptable

Tools

Fortify

Nessus

WASA

VA security scanning tools

Job description

SAIC is seeking a Cyber Security Architect/Policy Lead who serves as the program's senior cybersecurity authority, designing and enforcing security architecture, managing the ATO/A&A lifecycle, and ensuring HELM Product Line systems comply with VA, federal, and FISMA requirements.

This role interfaces with VA ISOs, FSS, and OCS, leads RMF and Zero Trust initiatives, and supports vulnerability management and incident response to maintain ongoing compliance with FedRAMP, TIC 3.0, and VA