Koniag Data Solutions, a Koniag Government Services company, is seeking an experienced
Deputy Program Manager (Deputy PM) to support a comprehensive enterprise cybersecurity services program for a federal government client. This position requires the ability to obtain and maintain a Minimum Background Investigation (MBI), PIV credentials, and all requisite IT access authorizations prior to performing work. Primary work will be performed at the client site in Washington, DC and approved remote/telework locations.
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
This role serves as a critical program leadership position responsible for supporting the day-to-day execution of a large-scale, multi-disciplinary cybersecurity program spanning Security Operations Center (SOC) operations, cybersecurity policy and compliance, security engineering, privacy, Controlled Unclassified Information (CUI) program support, and emerging technology disciplines including Zero Trust, DevSecOps, Artificial Intelligence, and Post-Quantum Cryptography-delivered on a 24x7x365 basis under a Firm-Fixed-Price contract vehicle.
The ideal candidate is a seasoned program management professional with demonstrated experience leading complex federal cybersecurity programs, managing cross-functional technical teams, ensuring contractual deliverable compliance, and driving operational excellence across a geographically distributed federal IT security environment. This individual must possess a strong working knowledge of federal cybersecurity frameworks, FISMA requirements, NIST standards, and the full range of cybersecurity operational functions required to protect a complex enterprise IT ecosystem spanning on-premises, cloud, and hybrid environments.
Position Description:The Deputy Program Manager will serve as the second-in-command to the Program Manager and will assume full program management responsibilities in the PM's absence. This individual plays a central role in the day-to-day execution of a comprehensive enterprise cybersecurity services program, ensuring all contract deliverables, performance standards, Security Level Agreements (SLAs), and compliance requirements are consistently met across all functional areas throughout the full base period and option periods of performance.
Operating at the intersection of program management, cybersecurity operations oversight, technical coordination, and stakeholder engagement, the Deputy PM works closely with the Program Manager, functional leads, SOC management, security engineers, privacy and CUI specialists, and Government stakeholders to ensure seamless, high-quality, and compliant service delivery across all program workstreams.
Principal responsibilities will include but are not limited to:
Program Management & Governance- Assist the Program Manager in overseeing all aspects of the enterprise cybersecurity services program, including scope management, schedule management, resource allocation, risk management, quality assurance, deliverable management, and continuous improvement activities across all functional areas.
- Serve as the primary accountable interface to the Government COR and Contracting Officer in the Program Manager's absence, managing all stakeholder communications, escalations, and program governance activities at all organizational levels.
- Support the development and timely submission of all program management deliverables, including the Program Management Plan, Quality Assurance Surveillance Plan, meeting minutes, weekly activity reports, project status reports, Program Operational Status dashboards, Program Progress Reviews, Level of Effort Spend Plans, and the Program Issue and Risk Register, in accordance with required timelines and Government quality standards.
- Maintain and manage the program risk and issues register, proactively identifying emerging risks and issues, developing mitigation strategies, and escalating critical items to the Program Manager and Government stakeholders with recommended courses of action.
- Support the development and execution of the program's transition-in and transition-out plans, ensuring continuity of operations, effective knowledge transfer, zero gaps or downtime, and full cooperation with the Government and any successor contractor throughout all transition activities.
- Coordinate the post-award kickoff meeting within 30 days of award, including agenda development, logistics coordination, and timely delivery of meeting minutes.
- Ensure all program deliverables are peer-reviewed for accuracy, grammar, and compliance with applicable federal and agency standards, including Section 508 accessibility requirements, prior to Government submission.
- Support financial reporting, invoice preparation, and level-of-effort documentation activities, ensuring accurate reflection of services delivered in accordance with contract payment terms and ASSIST invoicing requirements.
Operations Oversight & Stakeholder Coordination- Oversee and coordinate the activities of cross-functional delivery teams spanning all program functional areas, including SOC operations, cybersecurity policy and compliance, information system security officer (ISSO) support, security engineering, privacy, CUI program support, vulnerability management, penetration testing, cyber threat intelligence, digital forensics, threat hunting, and emerging technology support functions.
- Monitor program performance against all contractual performance standards and acceptable quality levels, proactively identifying performance gaps and coordinating corrective action with functional leads and program leadership.
- Coordinate with Government stakeholders, including the COR, CISO, SOC Director, and program office representatives, to ensure program activities are aligned with Government priorities, mission objectives, and evolving requirements throughout the period of performance.
- Support Change Advisory Board (CAB) and Enterprise Change Control Board (ECCB) participation, ensuring all changes to production systems and SOC infrastructure are properly documented, assessed for service impact, and implemented in accordance with defined change management standards.
- Oversee the program's Continuity of Operations (COOP) support activities, ensuring the contractor can deploy SOC staff to the COOP site within 48 hours of COOP activation and maintain full operational capability throughout the COOP event.
SOC & Cybersecurity Operations Support- Provide program-level oversight and coordination of 24x7x365 SOC operations, ensuring continuous coverage is maintained across all shifts, roles, and operational functions without degradation during leave, illness, training, certification activities, attrition, or personnel turnover.
- Support the SOC Operations Management function by ensuring SOC shift managers are assigned, management responsibilities are properly delegated during absences, and all staff possess the necessary technical certifications and receive ongoing training required to maintain those certifications.
- Oversee the preparation and timely delivery of SOC operational reporting, including daily, weekly, monthly, and quarterly SOC Order Status Reports, SOC Performance and Investment Metrics Program Summary briefings, and quarterly written performance and investment reports.
- Coordinate with the Cybersecurity Operations Technical Lead on integration of the Risk Registry with Security Operations workflows, ensuring risks are effectively monitored, mitigated, and aligned with incident response, threat intelligence, and vulnerability management processes.
- Support the development, maintenance, and execution of the SOC Communications Plan, Incident Management Concept of Operations, IR Implementation Procedures, COOP Plan, and all related Internal Operating Procedures (IOPs), ensuring timely initial drafts and ongoing updates in accordance with required schedules.
Compliance, Security & Personnel Management- Ensure all program activities comply with applicable Federal statutes, regulations, and Government policies, including FISMA, NIST SP 800-53, FedRAMP, HSPD-12/FIPS 201, NIST SP 800-207 Zero Trust Architecture, OMB M-22-09, OMB M-21-31, OMB M-19-03, BOD 18-02, Section 508, FAR Subpart 8.4, and all referenced cybersecurity and privacy regulations and contractual requirements.
- Ensure all contractor personnel obtain and maintain required background investigations, PIV credentials, IT access authorizations, nondisclosure agreements (NDAs), and applicable cybersecurity certifications prior to performing work, and that all personnel are eligible for Top Secret clearance access should such a requirement arise during the period of performance.
- Ensure contractor compliance with all CUI, SBU, and FOUO handling requirements, including proper storage, transmission, safeguarding, and disposal of sensitive information in accordance with applicable regulations including NIST SP 800-88 and DoDI 5200.48.
- Support personnel management activities, including maintaining current staff lists, managing key personnel substitution notifications and approvals, and ensuring all personnel replacements are of equal or greater qualification than the incumbent with no degradation to program performance.
- Submit the contractor's current staff list to the Government 90 days prior to the end of the period of performance, and provide updated lists within 3 calendar days of any subsequent staffing changes.
- Ensure compliance with FAR 52.219-14 Limitations on Subcontracting requirements.
- Ensure compliance with FAR 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities, flowing down requirements to all subcontractors.
Deliverable & Quality Management- Oversee the program's Quality Assurance Surveillance Plan (QASP), ensuring it is developed within 10 days of award, maintained throughout the period of performance, and that all quality control activities are executed in alignment with Government-accepted standards.
- Coordinate the review, revision, and timely resubmission of all non-conforming deliverables, ensuring deficiencies are corrected within 10 business days of rejection notice and that corrective action plans are provided promptly for any deficiencies that cannot be corrected within the required timeframe.
- Ensure all written deliverables are submitted in Microsoft Office Suite format, include both draft and final iterations, and are responsive to all Government comments within 10 business days of receipt.
- Maintain a comprehensive deliverable tracking log, monitoring due dates, review cycles, submission status, and Government feedback for all program deliverables throughout the period of performance.
Education and Experience:Required:- Bachelor's degree in computer science, Information Technology, Cybersecurity, Business Administration, Program Management, or a related field from an accredited college or university.
- Minimum of 5 years of progressive experience in program or project management within a federal government IT or cybersecurity contracting environment.
- Minimum of 3 years of experience managing or supporting large-scale federal cybersecurity programs encompassing multiple functional areas such as SOC operations, cybersecurity policy and compliance, security engineering, or privacy support.
- Demonstrated experience managing cross-functional technical delivery teams in a 24x7 operational cybersecurity environment with documented performance standards.
- Experience with federal contract deliverable management, including status reporting, metrics development, risk management, and Government stakeholder communication.
- Ability to obtain and maintain a Minimum Background Investigation (MBI) or higher, PIV credentials, and all requisite IT access authorizations; must be eligible for Top Secret clearance access should such a requirement arise during the period of performance.
Preferred:- Master's degree in a relevant field.
- Prior experience supporting federal civilian agency cybersecurity programs in a deputy or senior program management capacity.
- Experience working on GSA Multiple Award Schedule (MAS) HACS SIN contracts or comparable IDIQ/GWAC Task Order contract vehicles.
- Experience managing transition-in and transition-out activities for federal cybersecurity O&M contracts.
Required Skills and Competencies:- Exceptional communication skills in English-both written and oral-with the demonstrated ability to communicate complex technical and programmatic information clearly and effectively to senior Government officials, technical cybersecurity teams, and non-technical stakeholders at all organizational levels.
- Strong program management skills encompassing scope, schedule, cost, risk, quality, and stakeholder management within a high-tempo, 24x7 federal cybersecurity program environment.
- Proven ability to lead and coordinate large, geographically distributed, cross-functional delivery teams across multiple concurrent operational workstreams, adjusting priorities and resources in response to evolving program demands and performance standards.
- Working knowledge of enterprise cybersecurity program functional areas, including SOC operations, cybersecurity policy and compliance (RMF, FISMA, NIST SP 800-53), ISSO support, security engineering and architecture, vulnerability management, penetration testing, cyber threat intelligence, digital forensics, threat hunting, privacy program management, and CUI program support.
- Familiarity with federal cybersecurity frameworks, standards, and regulations, including FISMA, NIST SP 800-37, NIST SP 800-53, NIST SP 800-61, NIST SP 800-207 Zero Trust Architecture, OMB M-22-09, OMB M-21-31, FedRAMP, HSPD-12/FIPS 201, and applicable OMB circulars and DHS Binding Operational Directives.
- Knowledge of emerging cybersecurity disciplines including Zero Trust Architecture (ZTA), DevSecOps, Artificial Intelligence (AI) cybersecurity and risk management, and Post-Quantum Cryptography (PQC) sufficient to provide informed program oversight and effectively suppo
