Infrastructure Security Team Lead

Govcio LLC•UNAVAILABLE, UNAVAILABLE

10d•Remote

About The Position

GovCIO is hiring an Infrastructure Security Lead for its U.S. Coast Guard program. This fully remote position is based within the United States. The role leads and matures the organization’s security posture across network security, security and compliance, identity, credentialing and access management (ICAM), boundary protection services, and the Authority to Operate (ATO) program. The lead partners with technology, governance, and operations teams to design, implement, and operate secure, compliant, and resilient infrastructure. The position includes managing and developing a security team, shaping the security roadmap, overseeing security architecture and risk activities, and ensuring that security controls and operations align with business objectives and applicable regulatory requirements.

Requirements

Bachelor’s degree with 12+ years of experience, or commensurate experience.
12 years of progressive information security experience.
3–5 years in a leadership or lead role.
Must be clearable up to an active Secret clearance.
U.S. citizenship is required to obtain and maintain an active Secret clearance.
CISSP certification required.
Experience or skills in security architecture and engineering, leadership and people management, risk management and compliance, incident response and crisis management, IAM/ICAM governance, boundary/perimeter security, communication and stakeholder engagement, and strategic thinking and roadmapping.

Nice To Haves

Additional relevant certifications such as CISM, CISA, CCSP, CEH, or CCIE Security.
U.S. Coast Guard experience is highly preferred.

Responsibilities

Oversee and mature security posture across network security, security and compliance, ICAM, boundary protection services, and the ATO program.
Lead the design, implementation, and ongoing operation of organizational security controls across network security, compliance, ICAM, boundary protection, and ATO.
Develop and execute a strategic security roadmap aligned with business goals and regulatory requirements.
Own security architecture reviews, threat modeling, and risk assessments for new and existing infrastructure.
Establish and maintain security incident response, detection, and recovery capabilities; lead major security incidents and post-incident reviews.
Define and enforce security policies, standards, and procedures, ensuring alignment with applicable compliance frameworks.
Manage, mentor, and develop a high-performing security team, including engineers, analysts, IAM specialists, and boundary specialists.
Collaborate with IT, DevOps/DevSecOps, and cloud teams to implement secure-by-default infrastructure and automated controls.
Oversee vulnerability management, patch management, configuration management, and hardening baselines.
Monitor and report security metrics, KPIs, and risk indicators to executives and stakeholders.
Maintain documentation, runbooks, and playbooks for security operations and incident handling.