Information Assurance Project Manager

Peraton•,

2d•$112,000 - $179,000•Hybrid

About The Position

Peraton is seeking an Information Assurance Project Manager (IA PM) to join their team on the Department of State (DOS) Bureau of Diplomatic Technology (DT) Consular Affairs Enterprise Infrastructure Operations (CAEIO) program. This program focuses on IT Operations and Maintenance to modernize legacy networks, applications, and databases supporting consular applications and services globally. The IA PM will leverage their technical Information Assurance knowledge and project management skills to manage projects aimed at improving cyber hygiene and security across various applications, platforms, and operating systems.

Requirements

Bachelor's degree and 12 years of experience or a Masters degree and 10 years of experience or an Associates degree and 14 years of experience or a High School diploma/equivalent and 16 years of experience.
U.S. citizenship and an active SECRET government security clearance with the ability to obtain TOP SECRET, if needed.
At least 4 years of related Information Assurance Analyst experience – primarily in a federal government environment, dealing with business critical, high availability systems.
At least 2 years of task or project management experience.
At least 1 year of cloud environment experience.
Understanding of networking concepts and cybersecurity related tools to include Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) and Security Content Automation Protocol (SCAP), and vulnerability scanners.
Experience collecting and analyzing performance data, developing metrics and presenting to colleagues and managers.

Nice To Haves

Project Management Professional (PMP) certification.
Security+ CE or other 8570 IAT level II certification.
Experience with DevSecOps concepts, tools and automation skills.
Familiarity with industry standard host-based security systems (HBSS) and Assured Compliance Assessment Solutions (ACAS).
Knowledge of various network vulnerability scanning and SEIM platforms (Nessus, Sentinel, Splunk etc.).
Knowledge of A&A processes and authorization boundaries.
Knowledge of current IT security best practices.
Knowledge of system administration, networking, and operating system hardening techniques.
Knowledge of the Independent Verification & Validation (IV&V) process.
Application security experience – OWASP Top 10.

Responsibilities

Coordinate IA activities across IA, Infrastructure, Engineering, and Applications teams, including responses to security findings.
Oversee the efforts of IA analysts and engineers to ensure efficient resource utilization and timely delivery of program objectives.
Review governance, risk, and cybersecurity documentation for compliance with NIST RMF (SP 800‑53 Rev. 4, SP 800‑37) and applicable security and privacy controls.
Provide expert guidance on vulnerability assessments, risk analysis, and emerging cybersecurity technologies, including cloud security models.
Communicate technical information effectively to both technical and non‑technical audiences, including developers, systems engineers, project managers, enterprise architects, and senior leadership.
Develop and maintain IA documentation processes and procedures, including POA&M and AOR records.
Create RMF accreditation packages to support systems in achieving and maintaining Authorization to Operate (ATO).
Facilitate risk management activities, including identifying constraints, assessing impacts of system changes, and mitigating project‑level risks.
Identify opportunities for process improvements and develop plans to implement enhanced workflows and efficiencies.
Develop executive‑level dashboards summarizing risks, issues, impediments, and forecasted completion dates.
Organize, nurture, and continuously improve communication channels and relationships with stakeholders across the CAEIO program.
Coordinate cross‑functional IA activities to ensure alignment between cybersecurity, engineering, infrastructure, and application teams.
Ensure stakeholders remain informed of IA priorities, milestone progress, and risk posture changes.
Support daily operational IA activities by monitoring progress toward security objectives and ensuring compliance with government cybersecurity requirements.
Assist in reviewing, refining, and improving IA workflows, policies, and documentation as systems and technologies evolve.