Platform Authorization Lead

MANTECH•Washington, DC

15h•$142,200 - $254,000•Hybrid

About The Position

This role offers remote flexibility, with the potential for either a hybrid or fully remote arrangement depending on final operational needs, alongside periodic travel for key meetings and projects. The Platform & Authorization Lead in Healthcare IT coordinates with operational leadership on release, change, monitoring, patching, vulnerability remediation, and operational evidence. In this role, you will own the program's hosting posture, VA Enterprise Cloud (VAEC) and Federal Risk and Authorization Management Program (FedRAMP) alignment, Authority to Operate (ATO) strategy, disaster recovery, high availability, and security control implementation across cloud boundaries.

Requirements

Bachelor's degree in technical discipline with 10+ years of healthcare IT experience, or an equivalent combination of education and relevant work experience.
Active Certified Information Systems Security Professional (CISSP) certification or equivalent senior cybersecurity credentials.
Experience managing RMF BOE packages for VAEC, FedRAMP, or equivalent High-baseline ATO systems.
Technical expertise in designing resilient cloud architectures, including DR/HA strategies, control inheritance, and security boundary definitions.
Fluency translating federal security controls and authorization standards into operational infrastructure implementations.
U.S. Citizenship is required.
Must be able to obtain and maintain a Department of Veterans Affairs Moderate Risk Background Investigation (BI) or Public Trust clearance.

Nice To Haves

Experience securing and authorizing clinical SaaS solutions, hosted enterprise healthcare IT platforms, or sensitive federal environments.
Master's degree in Cybersecurity, Information Technology, or Computer Engineering.
Knowledge of Department of Veterans Affairs (VA) security policies and VAEC cloud architecture patterns.
Experience with automated compliance scanning, continuous monitoring tools, and security remediation platforms.

Responsibilities

Lead the cloud hosting posture, driving alignment with VAEC, FedRAMP, and High-baseline ATO security requirements.
Design and implement Software as a Service (SaaS) boundary architectures, control inheritance frameworks, Disaster Recovery (DR), and High Availability (HA) patterns to ensure infrastructure resilience.
Develop, maintain, and manage Risk Management Framework (RMF) Body of Evidence (BOE) packages and security authorization documentation.
Translate complex federal security and authorization mandates into operational, deployable workflows and platform architectures.
Coordinate daily with release, change, and operations teams to oversee continuous monitoring, patching, vulnerability remediation, and operational compliance evidence.
Collaborate with government security stakeholders and accreditation authorities to guide system architecture through formal assessment and authorization cycles.