PROGRAM MANAGER – CYBERSECURITY ARCHITECTURE & ENGINEERING

Zermount, Inc•Arlington, VA

3d•Hybrid

About The Position

Zermount is seeking a highly capable Program Manager to lead a federal cybersecurity architecture and engineering program supporting enterprise security modernization, Continuous Authorization to Operate (cATO), cloud and hybrid security engineering, DevSecOps enablement, and Emerging Technology and AI Security Engineering and Testing. This is a leadership role for a Program Manager who can drive delivery across complex cybersecurity workstreams, coordinate technical teams, manage customer expectations, and ensure high-quality contract execution. The Program Manager will serve as a key interface between Government stakeholders, company leadership, cybersecurity engineers, architects, analysts, Agile teams, and mission partners. The successful candidate does not need to be the hands-on engineer for every technology area, but must be able to understand cybersecurity delivery, manage technical execution, identify risks and dependencies, communicate clearly with senior stakeholders, and ensure deliverables are accurate, timely, and aligned with federal requirements. This role is ideal for a strong cybersecurity or federal IT/Cybersecurity Program Manager who understands RMF, ATO/cATO, cloud security, DevSecOps, security architecture, and emerging technology risk management, and who can lead teams in a fast-moving customer environment.

Requirements

8+ years of relevant experience supporting IT, cybersecurity, cloud, engineering, or federal technology programs.
5+ years of experience managing technical projects, cybersecurity projects, or federal IT/cybersecurity delivery teams.
Experience managing complex cybersecurity, cloud, enterprise IT, or security engineering programs in a federal contracting environment.
Experience managing program schedules, staffing, risks, issues, deliverables, status reporting, quality reviews, and client communications.
Working knowledge of RMF, ATO, cATO, FISMA, NIST guidance, security assessments, and federal cybersecurity requirements.
Experience coordinating technical teams across cybersecurity architecture, cloud security, infrastructure, application security, identity, DevSecOps, vulnerability management, GRC, or enterprise architecture workstreams.
Experience leading work in Agile environments, including Scrum or Kanban, backlog refinement, sprint planning, team coordination, and retrospectives.
Strong ability to communicate with senior Government stakeholders, technical teams, executives, and non-technical audiences.
Strong writing skills with the ability to produce clear status reports, meeting minutes, briefings, plans, procedures, and decision-support materials.
Strong organizational, analytical, problem-solving, and leadership skills.
Ability to manage multiple priorities, shifting deadlines, complex dependencies, and customer-facing issues.
Ability to operate with sound judgment, personal accountability, professionalism, and limited supervision.
PMP – required
Agile/Scrum Master – required
At least one of the following is required: CISSP; CISM; CISA; AWS, Azure, or GCP Solution Architect; or similar certification approved by Management
Minimum of Public Trust

Nice To Haves

Experience supporting federal civilian, defense, intelligence, or highly regulated cybersecurity programs.
Experience managing cybersecurity architecture, cATO, RMF automation, GRC integration, cloud security modernization, or DevSecOps programs.
Experience supporting automated control assessment, control-to-evidence mapping, continuous monitoring dashboards, common controls, inherited controls, or OSCAL-aligned documentation.
Experience supporting AI, machine learning, generative AI, automation, or emerging technology security assessments.
Experience helping develop or manage intake forms, triage rubrics, risk-tiering models, testing playbooks, decision gates, or evidence requirements.
Experience with tools such as Microsoft Project, Rally, Microsoft 365, Confluence, ServiceNow, Archer, JCAM, RegScale, AWS Audit Manager, Tenable, Splunk, QRadar, Axonius, Prisma Cloud, Okta, Microsoft Defender, or similar platforms.
ITIL - preferred

Responsibilities

Lead day-to-day execution of a federal cybersecurity architecture and engineering program, ensuring work is delivered on schedule, within scope, and in alignment with contract requirements.
Serve as the primary program interface with Government stakeholders, company leadership, technical teams, subcontractors, and mission partners.
Manage program scope, staffing, schedule, risks, issues, dependencies, action items, deliverables, and performance reporting.
Develop and maintain key program management artifacts, including the Integrated Master Schedule (IMS), sprint plans, deliverable tracker, risk register, issue log, action item register, staffing tracker, and status reports.
Lead cross-functional teams supporting cybersecurity architecture, cloud security, RMF modernization, cATO, DevSecOps, vulnerability management, continuous monitoring, and emerging technology/AI security assessment activities.
Coordinate the development of cybersecurity architecture recommendations, secure design patterns, implementation roadmaps, SOPs, playbooks, dashboards, briefings, and customer-ready deliverables.
Support cATO implementation activities, including automated control assessment, control-to-evidence mapping, evidence collection, continuous monitoring, OSCAL-aligned documentation, metrics, dashboards, and authorization-support artifacts.
Oversee Emerging Technology and AI Security Engineering and Testing activities, including intake, triage, risk-tiering, evidence expectations, decision gates, testing coordination, and risk reporting.
Ensure emerging technology and AI assessments consider security, privacy, data protection, access control, supply chain risk, logging, monitoring, misuse risk, integration risk, and operational impact.
Facilitate Agile delivery activities, including backlog refinement, sprint planning, capacity planning, sprint reviews, retrospectives, and recurring team coordination.
Ensure all work is accurately tracked in the Government-designated project management or Agile tracking tool.
Prepare and deliver program status updates, executive briefings, meeting minutes, technical summaries, risk reports, and deliverables for Government review.
Identify risks, blockers, staffing gaps, resource constraints, quality concerns, and schedule impacts early, and recommend practical corrective actions.
Review deliverables for quality, accuracy, completeness, professionalism, and alignment with customer requirements before submission.
Support staffing, onboarding, knowledge transfer, team performance, and resource planning.
Promote a delivery culture focused on accountability, technical quality, customer service, compliance, and mission outcomes.
The Program Manager may support all tasks areas, other programs and projects as required by the Executive Team, or perform other / similar duties as assigned.