Trusted Internet Connection Engineering Manager

General Dynamics Information Technology•Washington, DC

4d•Hybrid

About The Position

GDIT has an opportunity for a Trusted Internet Connection (TIC) Engineering Manager to support the Department of Veterans Affairs (VA). The TIC Engineering Manager will identify, evaluate, architect, and recommend technology solutions aligned with architecture standards and best practices. This role interfaces with customers and internal stakeholders to gather requirements, deliver solutions, and support incremental revenue opportunities. The position oversees infrastructure and network architecture functions to ensure timely, efficient, and high‑quality designs. HOW THE TIC ENGINEERING MANAGER WILL MAKE AN IMPACT: Partner with internal teams and customer groups to define strategy, design solutions, and advise implementation during deployments. Build and maintain technical relationships with organizational leaders and technology providers, ensuring solutions align with customer needs. Communicate project status, trends, and impacts to managers, team members, stakeholders, and clients. Research and evaluate new technologies; document findings, conduct pilots, assess vendors, and provide recommendations and business cases. Resolve escalations by assessing issues, recommending actions, and implementing solutions. Mentor and train staff on key technologies, processes, and soft skills. Develop and implement test plans. Establish project timelines and coordinate delivery. Support budgeting and understand financial impacts of technology decisions. Write functional requirements and specifications. Stay current with infrastructure technology trends. Assess competitors’ technologies. Guide selection, implementation, and deployment of new technologies. WHAT YOU’LL NEED TO SUCCEED: Education: Bachelor's Degree or 4+ years of additional experience in lieu of a degree. Required Experience: 10+ years in cloud/platform engineering or architecture with enterprise scale delivery; 3+ years leading hybrid/multi cloud (AWS/Azure) in regulated or federal environments. Previous experience supporting large-scale U.S. government agencies / customers Be willing and able to support 24×7×365 TIC operations, including critical incident bridge participation. Lead TIC 3.0 policy enforcement, DNS filtering, SSL decryption, and IPS/IDS signature deployment. Manage DHS Cyber Hygiene, ED 19 01, and BOD 18 01 / 19 02 compliance and remediation actions. Oversee external connections (BPE/S2S VPN) approval, audits, and configuration lifecycle. Deliver required weekly TIC reports, vulnerability rollups, and compliance status updates. Lead TIC technical refresh, architecture redesign, and next generation gateway modernization. Experience designing secure landing zones, network/identity patterns, and CI/CD/IaC pipelines; proven improvements in MTTR, change failure rate, and cost efficiency. Knowledge of NIST 800 53/RMF, Zero Trust/TIC 3.0, FedRAMP services, ATO sustainment, and audit/compliance processes. Experience delivering container platforms (Kubernetes/OpenShift) and platform services with DR/RTO/RPO requirements. Leadership in multi vendor/SIAM environments with shared KPIs, cross domain change coordination, and incident response. TECHNICAL SKILLS: Cloud Platforms: AWS and Azure expertise (GCP/OCI a plus); IAM/Entra ID, landing zones, networking, key management, security, monitoring. Networking & Identity: VPC/VNet design, hub and spoke, SD WAN, DNS, NAT, firewalls, service mesh, SSO, PIV/FIDO2, privileged access. Automation & Delivery: Terraform, CloudFormation/Bicep, Ansible, Packer, Helm; GitOps; policy as code; progressive delivery. Containers & Platform Engineering: Kubernetes/OpenShift operations, cluster lifecycle, security, supply chain controls. Observability & SRE: OpenTelemetry, Prometheus/Grafana, SIEM/log analytics, SLOs/error budgets, synthetic/RUM monitoring. Data & Storage: Managed databases, backup/restore, immutability, replication, lifecycle management. Security & Compliance: CIS/STIGs, patch/vulnerability orchestration, encryption, secrets management, RMF continuous monitoring. Cost & Performance: FinOps fundamentals, autoscaling, right sizing, storage tiering, app/network/data performance tuning.

Requirements

Bachelor's Degree or 4+ years of additional experience in lieu of a degree.
10+ years in cloud/platform engineering or architecture with enterprise scale delivery
3+ years leading hybrid/multi cloud (AWS/Azure) in regulated or federal environments.
Previous experience supporting large-scale U.S. government agencies / customers
Be willing and able to support 24×7×365 TIC operations, including critical incident bridge participation.
Experience designing secure landing zones, network/identity patterns, and CI/CD/IaC pipelines; proven improvements in MTTR, change failure rate, and cost efficiency.
Knowledge of NIST 800 53/RMF, Zero Trust/TIC 3.0, FedRAMP services, ATO sustainment, and audit/compliance processes.
Experience delivering container platforms (Kubernetes/OpenShift) and platform services with DR/RTO/RPO requirements.
Leadership in multi vendor/SIAM environments with shared KPIs, cross domain change coordination, and incident response.
Cloud Platforms: AWS and Azure expertise (GCP/OCI a plus); IAM/Entra ID, landing zones, networking, key management, security, monitoring.
Networking & Identity: VPC/VNet design, hub and spoke, SD WAN, DNS, NAT, firewalls, service mesh, SSO, PIV/FIDO2, privileged access.
Automation & Delivery: Terraform, CloudFormation/Bicep, Ansible, Packer, Helm; GitOps; policy as code; progressive delivery.
Containers & Platform Engineering: Kubernetes/OpenShift operations, cluster lifecycle, security, supply chain controls.
Observability & SRE: OpenTelemetry, Prometheus/Grafana, SIEM/log analytics, SLOs/error budgets, synthetic/RUM monitoring.
Data & Storage: Managed databases, backup/restore, immutability, replication, lifecycle management.
Security & Compliance: CIS/STIGs, patch/vulnerability orchestration, encryption, secrets management, RMF continuous monitoring.
Cost & Performance: FinOps fundamentals, autoscaling, right sizing, storage tiering, app/network/data performance tuning.

Nice To Haves

AWS Solutions Architect – Professional
Microsoft Azure Solutions Architect Expert
VMware Certified Professional / Advanced Professional
CKA/CKAD or OpenShift Administrator
HashiCorp Terraform Associate / Authoring and Operations Professional

Responsibilities

Partner with internal teams and customer groups to define strategy, design solutions, and advise implementation during deployments.
Build and maintain technical relationships with organizational leaders and technology providers, ensuring solutions align with customer needs.
Communicate project status, trends, and impacts to managers, team members, stakeholders, and clients.
Research and evaluate new technologies; document findings, conduct pilots, assess vendors, and provide recommendations and business cases.
Resolve escalations by assessing issues, recommending actions, and implementing solutions.
Mentor and train staff on key technologies, processes, and soft skills.
Develop and implement test plans.
Establish project timelines and coordinate delivery.
Support budgeting and understand financial impacts of technology decisions.
Write functional requirements and specifications.
Stay current with infrastructure technology trends.
Assess competitors’ technologies.
Guide selection, implementation, and deployment of new technologies.
Lead TIC 3.0 policy enforcement, DNS filtering, SSL decryption, and IPS/IDS signature deployment.
Manage DHS Cyber Hygiene, ED 19 01, and BOD 18 01 / 19 02 compliance and remediation actions.
Oversee external connections (BPE/S2S VPN) approval, audits, and configuration lifecycle.
Deliver required weekly TIC reports, vulnerability rollups, and compliance status updates.
Lead TIC technical refresh, architecture redesign, and next generation gateway modernization.

Benefits

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume