VA Cybersecurity and Compliance Specialist

Ironbow; Virginia, Northern (IL, KY); Hybrid; USD 95,000 - 130,000; Full time

Job summary

Iron Bow Technologies in the United States seeks a VA Cybersecurity and Compliance Specialist to lead cybersecurity compliance, RMF, ATO-support, FIPS 140-3, and security documentation for HSM environments.

Primarily remote with limited travel, you will bridge engineering work and VA cybersecurity requirements, maintain CMVP evidence, review certificates, support VA ISSO and program stakeholders, and ensure alignment with VA policies and FedRAMP considerations.

Qualifications

• Experience with Federal cybersecurity compliance.
• Familiar with VA ATO processes.
• Knowledge of NIST SP 800-37 and 800-53.
• FIPS 140-3 compliance experience.

Responsibilities

• Support VA RMF, ATO, continuous monitoring, and compliance activities.
• Develop, review, and maintain cybersecurity and authorization artifacts.
• Support RMF activities per NIST SP 800-37 and 800-53 controls.
• Maintain CMVP evidence for HSM platforms.
• Review CMVP/CAVP validation certificates and cryptographic attestations.
• Assist VA ISSO, OIS, COR, and stakeholders with ATO documentation.
• Evaluate HSM configurations for security/compliance impact.
• Coordinate security reviews of upgrades and migrations.
• Align with VA Handbook 6500 and VA security policies.
• Support security incident response and post-incident analysis.
• Review Federal/VA cybersecurity deliverables for compliance.
• Assist with FedRAMP-related documentation.

Skills

RMF experience

ATO processes

NIST SP 800-37

FIPS 140-3

CMVP docs

HSM/PKI configs

Evidence artifacts

VA Handbook 6500

Zero Trust

FedRAMP

Job description

VA Cybersecurity and Compliance Specialist

United States

Iron Bow Technologies is for people who believe trust is paramount , transformation is embraced , and the future is here , because "What we do matters !

We are a next generation solutions provider, delivering mission success across government, healthcare, and commercial industries. Iron Bow relies on our passionate people , long standing partnerships , and strategic thinking to solve your most critical challenges.

Whether we team with clients, colleagues, or partners, we put each other first. It’s The Iron Bow Way.

THE OPPORTUNITY

The VA Cybersecurity and Compliance Specialist will lead cybersecurity compliance, RMF, ATO-support, FIPS compliance, and security documentation activities for the HSM and post-quantum cryptography environment. The position will serve as the principal interface between technical engineering activities and the customer’s cybersecurity/authorization requirements. Primarily remote. Limited travel to customer facility.

The candidate shall demonstrate experience supporting VA or Federal agency ATO processes, NIST SP 800-37 RMF, FIPS 140-3 compliance, ATO packages, CMVP documentation, and cryptographic compliance artifacts.

HOW YOU'LL MAKE AN IMPACT

• Support VA cybersecurity, RMF, ATO, continuous monitoring, and compliance activities.
• Develop, review, and maintain cybersecurity and authorization artifacts supporting VA systems.
• Support RMF activities consistent with NIST SP 800-37 and applicable NIST SP 800-53 controls.
• Maintain and validate FIPS 140-3 CMVP evidence for HSM platforms.
• Review CMVP/CAVP validation certificates, algorithm support matrices, OEM security attestations, and cryptographic compliance evidence.
• Support VA ISSO, OIS, COR, and program stakeholders with technical evidence required for ATO and ATO renewal.
• Evaluate proposed HSM configuration, firmware, integration, and architectural changes for security/compliance impact.
• Support vulnerability and patch compliance, including CISA KEV/BOD requirements.
• Coordinate security review of HSM upgrades, migrations, and production changes.
• Ensure alignment with VA Handbook 6500, VA Critical Security Controls, FICAM/ICAM, PIV/CAC, Zero Trust, and applicable VA security policies.
• Support security incident response, documentation, root-cause analysis, and corrective actions.
• Review technical deliverables for Federal and VA cybersecurity compliance.
• Support compliance documentation associated with FedRAMP-authorized cloud components, if included in the solution.

The candidate supports ATO renewal to provide current FIPS 140-3 CMVP certificates, algorithm-support matrices, vendor security attestations, and technical evidence packages for the VA ISSO, OIS, and formal ATO submissions.

SKILLS THAT DRIVE SUCCESS

• Federal cybersecurity compliance and RMF experience.
• Experience supporting Federal or VA ATO processes.
• Working knowledge of NIST SP 800-37 and NIST SP 800-53.
• FIPS 140-3 compliance experience.
• Experience preparing or supporting ATO packages.
• Experience with CMVP documentation and cryptographic compliance artifacts.
• Ability to translate highly technical HSM/PKI/cryptographic configurations into security and authorization evidence.

WHAT SETS YOU APART

• Prior VA OIT cybersecurity experience.
• CISSP, CAP/CGRC, CISM, Security+, or comparable cybersecurity credentials.
• Experience with VA Handbook 6500 and VA security/authorization processes.
• Experience with FedRAMP and Federal Zero Trust requirements.

WHY YOU'LL LOVE IT!

• You will be part of a company that is growing quickly and values your voice, ideas, and experience
• You will be a key contributor to Iron Bow’s transformational shift in how we deliver value to both customers and employees.
• You will have the pleasure of working with passionate professionals in a culture that fosters a workplace where everyone feels respected, supported and empowered to succeed.

OUR EQUAL OPPORTUNITY EMPLOYER COMMITMENT

Iron Bow Technologies is an Equal Opportunity Employer and is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Iron Bow are based on relevant business considerations, such as operational needs, job requirements and individual qualifications, without regard to race, color, religion, sex, sexual orientation, gender identity and/or gender expression, pregnancy, national origin, age, disability, status as a protected veteran or any other characteristic prohibited by law.Iron Bow will not tolerate discrimination or harassment based on any of these characteristics.

Join the Iron Bow team to learn, grow and develop yourself, our customers and, ultimately, our business.