Deputy Program Manager

Koniag Government Services•Washington, DC

13d•Hybrid

About The Position

Koniag Data Solutions, a Koniag Government Services company, is seeking an experienced Deputy Program Manager (Deputy PM) to support a comprehensive enterprise cybersecurity services program for a federal government client. This position requires the ability to obtain and maintain a Minimum Background Investigation (MBI), PIV credentials, and all requisite IT access authorizations prior to performing work. Primary work will be performed at the client site in Washington, DC and approved remote/telework locations. This role serves as a critical program leadership position responsible for supporting the day-to-day execution of a large-scale, multi-disciplinary cybersecurity program spanning Security Operations Center (SOC) operations, cybersecurity policy and compliance, security engineering, privacy, Controlled Unclassified Information (CUI) program support, and emerging technology disciplines including Zero Trust, DevSecOps, Artificial Intelligence, and Post-Quantum Cryptography—delivered on a 24x7x365 basis under a Firm-Fixed-Price contract vehicle. The ideal candidate is a seasoned program management professional with demonstrated experience leading complex federal cybersecurity programs, managing cross-functional technical teams, ensuring contractual deliverable compliance, and driving operational excellence across a geographically distributed federal IT security environment. This individual must possess a strong working knowledge of federal cybersecurity frameworks, FISMA requirements, NIST standards, and the full range of cybersecurity operational functions required to protect a complex enterprise IT ecosystem spanning on-premises, cloud, and hybrid environments. Position Description: The Deputy Program Manager will serve as the second-in-command to the Program Manager and will assume full program management responsibilities in the PM's absence. This individual plays a central role in the day-to-day execution of a comprehensive enterprise cybersecurity services program, ensuring all contract deliverables, performance standards, Security Level Agreements (SLAs), and compliance requirements are consistently met across all functional areas throughout the full base period and option periods of performance. Operating at the intersection of program management, cybersecurity operations oversight, technical coordination, and stakeholder engagement, the Deputy PM works closely with the Program Manager, functional leads, SOC management, security engineers, privacy and CUI specialists, and Government stakeholders to ensure seamless, high-quality, and compliant service delivery across all program workstreams.

Requirements

Bachelor’s degree in computer science, Information Technology, Cybersecurity, Business Administration, Program Management, or a related field from an accredited college or university.
Minimum of 5 years of progressive experience in program or project management within a federal government IT or cybersecurity contracting environment.
Minimum of 3 years of experience managing or supporting large-scale federal cybersecurity programs encompassing multiple functional areas such as SOC operations, cybersecurity policy and compliance, security engineering, or privacy support.
Demonstrated experience managing cross-functional technical delivery teams in a 24x7 operational cybersecurity environment with documented performance standards.
Experience with federal contract deliverable management, including status reporting, metrics development, risk management, and Government stakeholder communication.
Ability to obtain and maintain a Minimum Background Investigation (MBI) or higher, PIV credentials, and all requisite IT access authorizations; must be eligible for Top Secret clearance access should such a requirement arise during the period of performance.
Exceptional communication skills in English—both written and oral—with the demonstrated ability to communicate complex technical and programmatic information clearly and effectively to senior Government officials, technical cybersecurity teams, and non-technical stakeholders at all organizational levels.
Strong program management skills encompassing scope, schedule, cost, risk, quality, and stakeholder management within a high-tempo, 24x7 federal cybersecurity program environment.
Proven ability to lead and coordinate large, geographically distributed, cross-functional delivery teams across multiple concurrent operational workstreams, adjusting priorities and resources in response to evolving program demands and performance standards.
Working knowledge of enterprise cybersecurity program functional areas, including SOC operations, cybersecurity policy and compliance (RMF, FISMA, NIST SP 800-53), ISSO support, security engineering and architecture, vulnerability management, penetration testing, cyber threat intelligence, digital forensics, threat hunting, privacy program management, and CUI program support.
Familiarity with federal cybersecurity frameworks, standards, and regulations, including FISMA, NIST SP 800-37, NIST SP 800-53, NIST SP 800-61, NIST SP 800-207 Zero Trust Architecture, OMB M-22-09, OMB M-21-31, FedRAMP, HSPD-12/FIPS 201, and applicable OMB circulars and DHS Binding Operational Directives.
Knowledge of emerging cybersecurity disciplines including Zero Trust Architecture (ZTA), DevSecOps, Artificial Intelligence (AI) cybersecurity and risk management, and Post-Quantum Cryptography (PQC) sufficient to provide informed program oversight and effectively support Government stakeholders on these non-core functional areas.
Experience supporting and overseeing 24x7x365 SOC operations management, including shift coverage planning, escalation framework management, and SOC performance and investment metrics reporting.
Experience developing and maintaining program deliverables, status reports, risk registers, and action item logs that meet federal contract quality, timeliness, and Section 508 accessibility standards.
Experience monitoring, analyzing, and reporting on program performance metrics and operational dashboards, with demonstrated ability to identify performance trends and drive corrective action.
Familiarity with CUI, SBU, FOUO, and Privacy Act data handling requirements, including applicable safeguarding, storage, transmission, and disposal standards.
Experience managing program staffing continuity, including personnel onboarding, cross-training, certification maintenance tracking, nondisclosure agreement management, and key personnel substitution notification processes.
Proficiency with Microsoft Office Suite, collaboration tools such as Microsoft Teams and SharePoint, and enterprise ITSM platforms such as ServiceNow.
Familiarity with GSA ASSIST portal invoicing processes and GSA MAS contract administration requirements.

Nice To Haves

Master's degree in a relevant field.
Prior experience supporting federal civilian agency cybersecurity programs in a deputy or senior program management capacity.
Experience working on GSA Multiple Award Schedule (MAS) HACS SIN contracts or comparable IDIQ/GWAC Task Order contract vehicles.
Experience managing transition-in and transition-out activities for federal cybersecurity O&M contracts.
Project Management Professional (PMP) certification or equivalent (e.g., PMI-ACP, DAWIA Program Management certification).
Certified Information Systems Security Professional (CISSP) or equivalent advanced cybersecurity certification demonstrating broad enterprise cybersecurity knowledge.
Experience supporting GSA Multiple Award Schedule (MAS) contracts, including familiarity with FAR Subpart 8.4 and FAR 8.405 ordering procedures, MAS contract compliance requirements, and HACS SIN performance requirements.
Familiarity with ITIL-based IT Service Management (ITSM) principles as applied within a federal cybersecurity SOC and operational environment.
Experience supporting SOC COOP planning and execution, including deployment of SOC operations to alternate sites and maintenance of full cybersecurity coverage during emergency and continuity events.
Knowledge of Privacy Act program management, including Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), Privacy Threshold Analyses (PTAs), and Computer Matching Agreements (CMAs).
Familiarity with CUI program implementation, including CUI registry compliance, marking, safeguarding, destruction, and training program development.
Experience with High Value Asset (HVA) assessment and management requirements, including CISA HVA 3.0 framework and OMB M-19-03 compliance.
Familiarity with FedRAMP Continuous Monitoring (CONMON) management processes and requirements.
Experience supporting enterprise vulnerability management programs, including Tenable Security Center administration, CISA KEV monitoring, and Binding Operational Directive compliance tracking.
Knowledge of Zero Trust Architecture design and implementation principles (NIST SP 800-207, OMB M-22-09) and their practical application within a federal enterprise cybersecurity program.
Familiarity with penetration testing program management, including management of gray box assessments, purple team engagements, API testing, and dynamic and static code analysis activities.
Experience with Section 508 compliance oversight for enterprise cybersecurity deliverables, training materials, and digital reporting tools delivered under federal contracts.
Familiarity with Firm-Fixed-Price (FFP) contract administration and ASSIST portal invoicing requirements within a federal IT services environment.

Responsibilities

Assist the Program Manager in overseeing all aspects of the enterprise cybersecurity services program, including scope management, schedule management, resource allocation, risk management, quality assurance, deliverable management, and continuous improvement activities across all functional areas.
Serve as the primary accountable interface to the Government COR and Contracting Officer in the Program Manager's absence, managing all stakeholder communications, escalations, and program governance activities at all organizational levels.
Support the development and timely submission of all program management deliverables, including the Program Management Plan, Quality Assurance Surveillance Plan, meeting minutes, weekly activity reports, project status reports, Program Operational Status dashboards, Program Progress Reviews, Level of Effort Spend Plans, and the Program Issue and Risk Register, in accordance with required timelines and Government quality standards.
Maintain and manage the program risk and issues register, proactively identifying emerging risks and issues, developing mitigation strategies, and escalating critical items to the Program Manager and Government stakeholders with recommended courses of action.
Support the development and execution of the program's transition-in and transition-out plans, ensuring continuity of operations, effective knowledge transfer, zero gaps or downtime, and full cooperation with the Government and any successor contractor throughout all transition activities.
Coordinate the post-award kickoff meeting within 30 days of award, including agenda development, logistics coordination, and timely delivery of meeting minutes.
Ensure all program deliverables are peer-reviewed for accuracy, grammar, and compliance with applicable federal and agency standards, including Section 508 accessibility requirements, prior to Government submission.
Support financial reporting, invoice preparation, and level-of-effort documentation activities, ensuring accurate reflection of services delivered in accordance with contract payment terms and ASSIST invoicing requirements.
Oversee and coordinate the activities of cross-functional delivery teams spanning all program functional areas, including SOC operations, cybersecurity policy and compliance, information system security officer (ISSO) support, security engineering, privacy, CUI program support, vulnerability management, penetration testing, cyber threat intelligence, digital forensics, threat hunting, and emerging technology support functions.
Monitor program performance against all contractual performance standards and acceptable quality levels, proactively identifying performance gaps and coordinating corrective action with functional leads and program leadership.
Coordinate with Government stakeholders, including the COR, CISO, SOC Director, and program office representatives, to ensure program activities are aligned with Government priorities, mission objectives, and evolving requirements throughout the period of performance.
Support Change Advisory Board (CAB) and Enterprise Change Control Board (ECCB) participation, ensuring all changes to production systems and SOC infrastructure are properly documented, assessed for service impact, and implemented in accordance with defined change management standards.
Oversee the program's Continuity of Operations (COOP) support activities, ensuring the contractor can deploy SOC staff to the COOP site within 48 hours of COOP activation and maintain full operational capability throughout the COOP event.
Provide program-level oversight and coordination of 24x7x365 SOC operations, ensuring continuous coverage is maintained across all shifts, roles, and operational functions without degradation during leave, illness, training, certification activities, attrition, or personnel turnover.
Support the SOC Operations Management function by ensuring SOC shift managers are assigned, management responsibilities are properly delegated during absences, and all staff possess the necessary technical certifications and receive ongoing training required to maintain those certifications.
Oversee the preparation and timely delivery of SOC operational reporting, including daily, weekly, monthly, and quarterly SOC Order Status Reports, SOC Performance and Investment Metrics Program Summary briefings, and quarterly written performance and investment reports.
Coordinate with the Cybersecurity Operations Technical Lead on integration of the Risk Registry with Security Operations workflows, ensuring risks are effectively monitored, mitigated, and aligned with incident response, threat intelligence, and vulnerability management processes.
Support the development, maintenance, and execution of the SOC Communications Plan, Incident Management Concept of Operations, IR Implementation Procedures, COOP Plan, and all related Internal Operating Procedures (IOPs), ensuring timely initial drafts and ongoing updates in accordance with required schedules.
Ensure all program activities comply with applicable Federal statutes, regulations, and Government policies, including FISMA, NIST SP 800-53, FedRAMP, HSPD-12/FIPS 201, NIST SP 800-207 Zero Trust Architecture, OMB M-22-09, OMB M-21-31, OMB M-19-03, BOD 18-02, Section 508, FAR Subpart 8.4, and all referenced cybersecurity and privacy regulations and contractual requirements.
Ensure all contractor personnel obtain and maintain required background investigations, PIV credentials, IT access authorizations, nondisclosure agreements (NDAs), and applicable cybersecurity certifications prior to performing work, and that all personnel are eligible for Top Secret clearance access should such a requirement arise during the period of performance.
Ensure contractor compliance with all CUI, SBU, and FOUO handling requirements, including proper storage, transmission, safeguarding, and disposal of sensitive information in accordance with applicable regulations including NIST SP 800-88 and DoDI 5200.48.
Support personnel management activities, including maintaining current staff lists, managing key personnel substitution notifications and approvals, and ensuring all personnel replacements are of equal or greater qualification than the incumbent with no degradation to program performance.
Submit the contractor's current staff list to the Government 90 days prior to the end of the period of performance, and provide updated lists within 3 calendar days of any subsequent staffing changes.
Ensure compliance with FAR 52.219-14 Limitations on Subcontracting requirements.
Ensure compliance with FAR 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities, flowing down requirements to all subcontractors.
Oversee the program's Quality Assurance Surveillance Plan (QASP), ensuring it is developed within 10 days of award, maintained throughout the period of performance, and that all quality control activities are executed in alignment with Government-accepted standards.
Coordinate the review, revision, and timely resubmission of all non-conforming deliverables, ensuring deficiencies are corrected within 10 business days of rejection notice and that corrective action plans are provided promptly for any deficiencies that cannot be corrected within the required timeframe.
Ensure all written deliverables are submitted in Microsoft Office Suite format, include both draft and final iterations, and are responsive to all Government comments within 10 business days of receipt.
Maintain a comprehensive deliverable tracking log, monitoring due dates, review cycles, submission status, and Government feedback for all program deliverables throughout the period of performance.