[Hiring] Program Manager – Cybersecurity Architecture & Engineering @Zermount, Inc

Role Description

Zermount is seeking a highly capable Program Manager to lead a federal cybersecurity architecture and engineering program supporting enterprise security modernization, Continuous Authorization to Operate (cATO), cloud and hybrid security engineering, DevSecOps enablement, and Emerging Technology and AI Security Engineering and Testing.

This is a leadership role for a Program Manager who can drive delivery across complex cybersecurity workstreams, coordinate technical teams, manage customer expectations, and ensure high-quality contract execution. The Program Manager will serve as a key interface between Government stakeholders, company leadership, cybersecurity engineers, architects, analysts, Agile teams, and mission partners.

The successful candidate does not need to be the hands-on engineer for every technology area, but must be able to understand cybersecurity delivery, manage technical execution, identify risks and dependencies, communicate clearly with senior stakeholders, and ensure deliverables are accurate, timely, and aligned with federal requirements.

This role is ideal for a strong cybersecurity or federal IT/Cybersecurity Program Manager who understands RMF, ATO/cATO, cloud security, DevSecOps, security architecture, and emerging technology risk management, and who can lead teams in a fast-moving customer environment.

Qualifications

• 8+ years of relevant experience supporting IT, cybersecurity, cloud, engineering, or federal technology programs.
• 5+ years of experience managing technical projects, cybersecurity projects, or federal IT/cybersecurity delivery teams.
• Experience managing complex cybersecurity, cloud, enterprise IT, or security engineering programs in a federal contracting environment.
• Experience managing program schedules, staffing, risks, issues, deliverables, status reporting, quality reviews, and client communications.
• Working knowledge of RMF, ATO, cATO, FISMA, NIST guidance, security assessments, and federal cybersecurity requirements.
• Experience coordinating technical teams across cybersecurity architecture, cloud security, infrastructure, application security, identity, DevSecOps, vulnerability management, GRC, or enterprise architecture workstreams.
• Experience leading work in Agile environments, including Scrum or Kanban, backlog refinement, sprint planning, team coordination, and retrospectives.
• Strong ability to communicate with senior Government stakeholders, technical teams, executives, and non-technical audiences.
• Strong writing skills with the ability to produce clear status reports, meeting minutes, briefings, plans, procedures, and decision-support materials.
• Strong organizational, analytical, problem-solving, and leadership skills.
• Ability to manage multiple priorities, shifting deadlines, complex dependencies, and customer-facing issues.
• Ability to operate with sound judgment, personal accountability, professionalism, and limited supervision.

Requirements

• Strong candidates should have familiarity with several of the following areas:
• Cybersecurity architecture and security engineering
• RMF, ATO, cATO, FISMA, NIST SP 800-37, NIST SP 800-53, and NIST SP 800-53A
• Cloud security architecture, shared responsibility models, and hybrid/multi-cloud environments
• AWS security services such as Security Hub, Config, GuardDuty, CloudTrail, CloudWatch, IAM, KMS, Lambda, or similar services
• Azure security services such as Entra ID, Key Vault, Azure Policy, Defender for Cloud, Monitor, Log Analytics, or similar services
• DevSecOps, CI/CD security, automated security scanning, evidence automation, SBOM, SAST, DAST, SCA, IaC scanning, and container security
• Vulnerability management, configuration management, continuous monitoring, security telemetry, and SIEM/SOC integration
• Identity, Credential, and Access Management, including Okta, Microsoft Entra ID, or similar identity platforms
• CMDB, asset inventory, GRC workflows, inherited controls, common controls, and evidence repositories
• Zero Trust, SCRM, ICAM, SASE, CASB, SWG, TIC 3.0, and enterprise security operations concepts
• Emerging technology and AI security risk evaluation, including intake, triage, testing, evidence collection, and decision-support processes

Preferred Qualifications

• Experience supporting federal civilian, defense, intelligence, or highly regulated cybersecurity programs.
• Experience managing cybersecurity architecture, cATO, RMF automation, GRC integration, cloud security modernization, or DevSecOps programs.
• Experience supporting automated control assessment, control-to-evidence mapping, continuous monitoring dashboards, common controls, inherited controls, or OSCAL-aligned documentation.
• Experience supporting AI, machine learning, generative AI, automation, or emerging technology security assessments.
• Experience helping develop or manage intake forms, triage rubrics, risk-tiering models, testing playbooks, decision gates, or evidence requirements.
• Experience with tools such as Microsoft Project, Rally, Microsoft 365, Confluence, ServiceNow, Archer, JCAM, RegScale, AWS Audit Manager, Tenable, Splunk, QRadar, Axonius, Prisma Cloud, Okta, Microsoft Defender, or similar platforms.

Education

• Bachelor's degree or higher in computer science, Information Technology, Information Security, Management, Business Administration, or similar fields.

Certifications

• PMP – required
• Agile/Scrum Master – required
• ITIL - preferred
• At least one of the following is required: CISSP; CISM; CISA; AWS, Azure, or GCP Solution Architect; or similar certification approved by Management

Clearance

• Minimum of Public Trust

Work Location and Core Hours

• Primary Location: Arlington and Alexandria, VA. Remote work is authorized. Occasional travel to the primary locations will be required.
• Hours: 6:00 am ET – 6:00 pm ET.
• Complete a background check for employment, education, credit, and criminal.