Program Manager DoS CSS

OneZero Solutions•Washington, DC

22h

About The Position

The Program Manager is the single point of accountability for the contractor’s overall performance across the Cyber Security Services Blanket Purchase Agreement (BPA), supporting the Department of State (DOS), Bureau of Consular Affairs, Directorate of Technology, Enterprise Architecture, and Cyber Security Team. The role owns delivery across all active BPA Call Orders: ISSO Support, Security Control Assessment Services, Security Operations and Monitoring Services, Cyber Portfolio Management Services, and Cyber Tool Support Services. The Program Manager is the contractor’s primary interface with the Contracting Officer, Contracting Officer’s Representative, and Government technical points of contact. The position directs and integrates program performance, manages schedules, staffing, finances, risks, reporting, and deliverables, and ensures contract compliance and quality. It also leads transition planning, knowledge transfer, audit representation, and coordination of cybersecurity supply-chain risk management obligations. The role supports the National Capital Area, with on-site visits as required, and may be remote or hybrid. An active Secret clearance is required or must be obtainable and maintained.

Requirements

Bachelor’s degree.
At least 10 years of relevant program/project management experience, preferably supporting federal or DOS cybersecurity programs.
Active Project Management Professional (PMP) certification or equivalent.
Demonstrated experience managing multi-task or multi-call-order IT or cybersecurity services contracts of comparable scale and complexity.
Working knowledge of FISMA, RMF, and NIST SP 800-series standards sufficient to direct technical teams and communicate with Government leadership.
Ability to obtain and maintain a Secret-level personnel security clearance.
Strong written and verbal communication skills.
Experience presenting to senior Government stakeholders and Contracting Officers.

Nice To Haves

Experience supporting federal or Department of State cybersecurity programs.

Responsibilities

Serve as the contractor’s executive-level point of contact for the BPA and maintain ongoing communication with the CO, COR, and Government stakeholders.
Direct and integrate performance across all BPA Call Orders, ensuring Call Order Leads deliver the objectives and outcomes in the Statement of Objectives.
Own the program management plan and integrated master schedule; ensure milestones are achieved and resource allocation stays within planned levels.
Ensure timely and accurate delivery of contractually required Monthly Status Reports, Quarterly Performance Reports, Annual Reports, and the Final Report.
Oversee deliverable tracking and ensure deliverables meet the contract’s timeliness, quality, compliance, format, and security standards.
Maintain the program risk register; ensure risks are identified, tracked, mitigated, and regularly briefed to Government stakeholders.
Lead program staffing strategy, including recruitment, retention, onboarding, and prompt replacement of personnel with qualified replacements.
Manage Key Personnel substitutions in accordance with Section H.8, including CO notifications and the 90-day no-substitution period, subject to stated exceptions.
Oversee BPA financial performance, including budget tracking, variance reporting, and cost-benefit analysis for proposed security investments.
Ensure compliance across all Call Orders with applicable federal mandates and standards, including FISMA, NIST standards, OMB memoranda, and FedRAMP.
Direct knowledge-transfer activities so Government personnel develop sustainable independent capability, including train-the-trainer outcomes before contract end.
Lead the 90-day Transition-In and Transition-Out plans, coordinating phased assumption of responsibility, knowledge transfer, staffing ramp-up, and continuity of operations.
Represent the contractor in Government audits and assessments, including OIG and CISA activities, and ensure timely remediation of findings.
Enforce program-wide quality management processes, including deliverable review cycles and corrective action procedures.
Coordinate C-SCRM and cybersecurity supply-chain risk management obligations, including incident notification to the CO within required timeframes.