Senior Technical Program Manager, Security & Infrastructure

True Anomaly•Long Beach, CA

3d•$140,000 - $210,000•Hybrid

About The Position

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground. TA builds and operates mission-critical space and defense systems for DoD and federal customers, spanning on-orbit and ground segment infrastructure. Our government/industrial security program operates in a regulated, federal-authorization-first environment where ATO timelines, federal authorization requirements, and industrial security obligations directly gate our ability to deliver to customers. We're hiring a Senior Technical Program Manager to drive the GOVSEC/INDSEC portfolio: the programs, authorization efforts, and cross-functional execution that keep TA's regulated workloads compliant and mission-ready. This is a senior, hands-on execution role for someone who can operate independently across a broad portfolio and hold operationally busy teams to realistic commitments. It reports into the CISO organization's technical program management function, which sets your program methodology and portfolio standards, and is embedded within the GOVSEC/INDSEC team, which drives your day-to-day work intake and priorities. Within GOVSEC/INDSEC, you'll partner primarily with its Director for program priorities and execution, coordinate day-to-day with the team's Manager and personnel, and interface directly with the VP on portfolio status, risk, and key trade-off decisions. You'll also partner closely with cybersecurity engineering, GRC, IT program leadership as well as cross-functionally across program delivery teams. Comfort operating credibly across all levels, driving detail with managers and engineers, and communicating crisply with executive leadership is essential.

Requirements

8+ years of technical program or project management, with a meaningful portion in a federal, defense, or otherwise regulated environment, and a demonstrated track record of owning complex programs end-to-end at a senior level.
Core TPM craft, demonstrated at scale: structured intake and prioritization, dependency and critical-path management, and schedule and risk management, and driving programs to closure across multiple concurrent efforts. This is first and foremost a program management role; domain fluency supports it, but does not substitute for it.
Technical judgment in a security context: enough fluency in federal authorization and security engineering to read the substance of the work, tell a real blocker from a soft one, and pressure-test estimates rather than taking them at face value. You won't author the technical content, but you must reason about it credibly.
Stakeholder and communication discipline: running a reliable status/risk/milestone cadence and tailoring it for audiences from engineers to executive leadership (and, where relevant, customers).
Experience owning delivery for teams you don't manage, where your leverage is cadence, visibility, and escalation rather than reporting lines.
Fluency with Atlassian tooling (Jira/Confluence) for program tracking and documentation.
Comfort operating in a matrixed structure: applying a defined program/portfolio methodology while taking day-to-day priorities from an embedded team.
U.S. citizenship and eligibility to obtain and hold a U.S. security clearance.

Nice To Haves

Direct experience with higher DoD Impact Levels (IL4/IL5, and IL6 where classified), DISA STIGs, and/or FedRAMP (Moderate+).
Exposure to industrial security (NISPOM/INDSEC) requirements and DCSA processes, and familiarity with operational security disciplines (OPSEC, PERSEC, COMSEC) in a cleared environment.
Demonstrated ability to drive an ATO or equivalent federal authorization effort to completion, in coordination with the responsible security officers.
Background in space systems, aerospace, or defense hardware/software delivery.
Experience standing up or maturing program/PMO processes, not just running existing ones.

Responsibilities

End-to-end program management for GOVSEC/INDSEC initiatives, from intake through delivery, using Jira and Confluence for tracking and documentation.
Driving schedule and delivery for ATO/RMF efforts owned by the responsible security officers (ISSM/ISSOs). You track artifact production (SSPs, POA&Ms, SARs), surface blockers, and keep control implementation and remediation on timeline. You keep the effort moving; the security officers own the technical authorization content.
Cross-functional coordination across security engineering, GRC, IT, and program/mission teams to unblock compliance-gating work.
Execution rigor across GOVSEC/INDSEC's operational security disciplines (OPSEC, PERSEC, and COMSEC programs), bringing cadence, tracking, and accountability to recurring and milestone-driven work these teams own and execute.
Cadence and reporting: status, risk, and milestone communication calibrated for both engineering teams and executive/customer stakeholders.
Capacity and roadmap planning for the GOVSEC portfolio, making trade-offs explicit and distinguishing committed work from aspirational.
Capacity stewardship across the portfolio: maintaining a clear picture of team capacity against both planned project work and ongoing operational efforts, surfacing contention early, and enforcing the discipline that keeps commitments realistic. When planned and operational demands collide, you make the trade-off visible and drive it to an explicit decision by leadership rather than letting capacity be silently over-committed.