[Hiring] Technical Project Manager @Zermount, Inc

Role Description

The cATO Technical PM plans and drives delivery of cybersecurity architecture and engineering initiatives such as enterprise security and Continuous Authorization to Operate (cATO). This role coordinates cross-functional teams to deliver secure cloud and hybrid solutions, automate controls and evidence collection (including OSCAL), and improve risk management outcomes through repeatable standards, roadmaps, and Agile execution.

Qualifications

• Excellent written and verbal communication skills; high attention to detail; able to work with minimal guidance.
• Demonstrated ability to operate at both the strategic and hands-on technical level; able to explain technical risks and options to executive audiences.
• Proven project leadership experience coordinating cross-functional teams and stakeholders; able to manage changing priorities and deliver to schedule.
• Experience leading delivery in Agile environments (e.g., Scrum/Kanban), including backlog refinement, sprint planning, capacity planning, and retrospectives.
• 5+ years (10+ preferred) experience across network, systems, and application security domains (e.g., LAN/WAN, WAF/CDN/DDoS, firewalls, IDS/IPS, virtualization, containers, CI/CD, microservices, serverless).
• 5+ years designing and/or implementing security in cloud environments (AWS required; Azure strongly preferred; GCP a plus), including shared responsibility model and hybrid/multi-cloud concepts.
• Working knowledge/experience with cloud security services and tooling such as:
• AWS: Security Hub, Config, GuardDuty, CloudTrail, CloudWatch, Lambda, IAM/KMS (or equivalent services).
• Azure: Entra ID/AD, Key Vault, Monitor/Log Analytics, Policy, Defender for Cloud (or equivalent services).
• Experience with DevSecOps security strategy and implementation, including integrating automated security assessments/scanning and evidence collection into CI/CD pipelines.
• Experience designing and assessing architectures in accordance with RMF and federal security guidance (e.g., NIST, FISMA, FedRAMP); familiarity with CSF preferred.
• Familiarity with Zero Trust (EO 14028), SCRM, ICAM, SASE/CASB/SWG/TIC 3.0 concepts and enterprise security operations (SIEM/SOC) preferred.
• Strong analytical and problem-solving skills; ability to research, evaluate, and recommend mitigations for threats and vulnerabilities.
• Experience developing security documentation such as SOPs, procedures, guidelines, and assessment reports.

Requirements

• Bachelor of Science (or higher) in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical field.
• CISSP is required. In addition, at least one of the following are also required:
• CCSP
• AWS Certified Solutions Architect (Associate or higher)
• AWS Certified Security - Specialty
• Microsoft Certified: Azure Solutions Architect Expert
• Google Professional Cloud Architect (or equivalent)
• Minimum of an active Secret clearance.

Benefits

• Primary locations are Arlington and Alexandria, VA.
• Remote work is authorized.
• Occasional travel to the primary locations will be required.
• Hours: 6:00 am ET – 6:00 pm ET.
• Ability to pass a minimum background investigation.