Zero Trust Cyber Architect & RMF Policy Lead

SAIC; United States; Remote; USD 160,000 - 200,000; Full time

Job summary

SAIC is seeking a Cyber Security Architect / Policy Lead to serve as the program's senior cybersecurity authority. You will design and enforce security architecture, manage the ATO/A&A lifecycle, and ensure HELM Product Line systems meet VA, federal, and FISMA requirements.

You will interface with VA ISOs, FSS, and OCS to address findings and maintain compliance. The role emphasizes Zero Trust, RMF, and cloud security across AWS/Azure environments, with premiums on policy development,

Qualifications

• Bachelor's degree in Cybersecurity or related field required; Master's preferred.
• 10+ years of cybersecurity experience with 5+ years in federal IT/RMF programs.
• Experience obtaining and maintaining federal ATOs.
• Deep expertise in NIST SP 800-53 Rev 5 and 800-37 Rev 2; VA Handbook 6500.
• Proficiency with VA/federal security scanning tools (Fortify, WASA, Nessus).
• Experience with Zero Trust Architecture in cloud environments (AWS, Azure).
• Demonstrated VA Zero Trust Architecture, TIC 3.0, and ATO compliance knowledge.
• Familiarity with FedRAMP, FISMA, HIPAA/PHI, and VA cloud security directives.
• Knowledge of FICAM, PIV/CAC, SAML, and identity assurance frameworks.
• US-based and eligible for VA background investigation.

Responsibilities

• Lead A&A artifact development to obtain and maintain ATO for HELM Product Line systems.
• Serve as technical lead for cybersecurity, ZTA, and RMF compliance.
• Conduct vulnerability scans and remediate high-severity findings per NIST SP 800-53 Rev 5.
• Provide vulnerability reports and risk assessments per NIST SP 800-30 Rev 1.
• Ensure cloud solutions comply with FedRAMP and VA/ZTA policies.
• Implement encryption, boundary protection, audit logging, and identity federation.
• Develop and maintain cybersecurity policy docs, POA&Ms, and monitoring artifacts.
• Coordinate with VA ISOs, FSS, and OCS for ATO support and findings.
• Ensure compliance with VA Critical Security Controls and VA security memoranda.
• Support FICAM/PIV logical access levels and EO/OMB policy alignment.
• Oversee patch governance and vulnerability management processes.
• Advise on AI/ML security and regulatory EO implications.
• Ensure VA training compliance for contractors and staff.
• Respond to security incidents within required timeframes.

Skills

NIST SP 800-53 Rev 5

RMF/SP 800-37 Rev 2

Zero Trust Architecture

VA/Fed security controls

PIV/CAC/SSO concepts

FIPS 140-2/140-3 cryptography

Vulnerability management

A&A/ATO processes

Cloud security (AWS/Azure)

SAML/Identity assurance

Background investigation (Tier 4)

Education

Bachelor's degree in Cybersecurity / Information Assurance

Master's degree preferred

Tools

Fortify

WASA

Nessus

Job description

SAIC is seeking a Cyber Security Architect / Policy Lead to serve as the program's senior cybersecurity authority. You will design and enforce security architecture, manage the ATO/A&A lifecycle, and ensure HELM Product Line systems meet VA, federal, and FISMA requirements.

You will interface with VA ISOs, FSS, and OCS to address findings and maintain compliance. The role emphasizes Zero Trust, RMF, and cloud security across AWS/Azure environments, with premiums on policy development,