ResponsibilitiesPeraton is seeking a Information Assurance Project Manager (IA PM) to join our team of qualified and diverse individuals on our Department of State (DOS) Bureau of Diplomatic Technology (DT) Consular Affairs Enterprise Infrastructure Operations (CAEIO) program. CAEIO provides IT Operations and Maintenance to modernize the legacy networks, applications, and databases supporting consular applications and services globally.
The IA PM combines their technical Information Assurance knowledge and experience with project management acumen to manage a set of IA projects and tasks that improve cyber hygiene and security across various applications, platforms and operating systems.
Core Work Schedule: Monday - Friday, approximately 8:00 AM ET - 4:00 PM ET (flexible)
Location: This position is fully remote; however, candidates must reside in the Washington, DC, Metropolitan Area (DMV) to accommodate occasional onsite meetings, training, or customer support activities at the Washington, DC, customer location or the Peraton office in Sterling, VA. The number of days the IA PM works on-site in Washington, DC, or Sterling, VA, is subject to change based on government/program requirements (for example, surge support might require the individual to be in the office five days per week).
Roles and Responsibilities
Information Assurance Coordination & Technical Oversight
- Coordinate IA activities across the IA, Infrastructure, Engineering, and Applications teams, including responses to security findings.
- Oversee the efforts of IA analysts and engineers to ensure efficient resource utilization and timely delivery of program objectives.
- Review governance, risk, and cybersecurity documentation for compliance with NIST RMF (SP 800‑53 Rev. 4, SP 800‑37) and applicable security and privacy controls.
- Provide expert guidance on vulnerability assessments, risk analysis, and emerging cybersecurity technologies, including cloud security models.
- Communicate technical information effectively to both technical and non‑technical audiences, including developers, systems engineers, project managers, enterprise architects, and senior leadership.
Project Management, Risk Management & Documentation
- Develop and maintain IA documentation processes and procedures, including POA&M and AOR records.
- Create RMF accreditation packages to support systems in achieving and maintaining Authorization to Operate (ATO).
- Facilitate risk management activities, including identifying constraints, assessing impacts of system changes, and mitigating project‑level risks.
- Identify opportunities for process improvements and develop plans to implement enhanced workflows and efficiencies.
- Develop executive‑level dashboards summarizing risks, issues, impediments, and forecasted completion dates.
Stakeholder Engagement & Cross‑Team Collaboration
- Organize, nurture, and continuously improve communication channels and relationships with stakeholders across the CAEIO program.
- Coordinate cross‑functional IA activities to ensure alignment between cybersecurity, engineering, infrastructure, and application teams.
- Ensure stakeholders remain informed of IA priorities, milestone progress, and risk posture changes.
Operational Support & Continuous Improvement
- Support daily operational IA activities by monitoring progress toward security objectives and ensuring compliance with government cybersecurity requirements.
- Assist in reviewing, refining, and improving IA workflows, policies, and documentation as systems and technologies evolve.
Qualifications
Basic Qualifications
- Bachelor's degree and 12 years of experience or a Masters degree and 10 years of experience or an Associates degree and 14 years of experience or a High School diploma/equivalent and 16 years of experience.
- U.S. citizenship and an active SECRET government security clearance with the ability to obtain TOP SECRET, if needed.
- At least 4 years of related Information Assurance Analyst experience – primarily in a federal government environment, dealing with business critical, high availability systems.
- At least 2 years of task or project management experience.
- At least 1 year of cloud environment experience.
- Understanding of networking concepts and cybersecurity related tools to include Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) and Security Content Automation Protocol (SCAP), and vulnerability scanners.
- Experience collecting and analyzing performance data, developing metrics and presenting to colleagues and managers.
Desired Qualifications
- Project Management Professional (PMP) certification.
- Security+ CE or other 8570 IAT level II certification.
- Experience with DevSecOps concepts, tools and automation skills.
- Familiarity with industry standard host-based security systems (HBSS) and Assured Compliance Assessment Solutions (ACAS).
- Knowledge of various network vulnerability scanning and SEIM platforms (Nessus, Sentinel, Splunk etc.).
- Knowledge of A&A processes and authorization boundaries.
- Knowledge of current IT security best practices.
- Knowledge of system administration, networking, and operating system hardening techniques.
- Knowledge of the Independent Verification & Validation (IV&V) process.
- Application security experience – OWASP Top 10.
Target Salary Range$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
