Cyber Security Architect / Policy Lead

Location: Remote Work, TX, US | Date Posted: 2026-09-21 | Category: Cyber | Subcategory: Cyber GRC | Schedule: Full-Time, Day Shift | Travel: Yes – 10% of the time | Clearance: Must be eligible for VA background investigation (likely Tier 4/High Risk); must be US-based

About the role

Position Summary The Cyber Security Architect/Policy Lead is the program's senior cybersecurity authority, responsible for designing and enforcing the security architecture, managing the ATO/A&A lifecycle, and ensuring all HELM Product Line systems comply with VA, federal, and FISMA cybersecurity requirements. This role also serves as the primary interface with VA Information Security Officers (ISOs), Field Security Services (FSS), and the Office of Cyber Security (OCS).

Responsibilities

• Lead the development and maintenance of all Assessment and Authorization (A&A) artifacts required to obtain and maintain Authority to Operate (ATO) for all HELM Product Line systems, in accordance with NIST SP 800-37 Rev 2 and VA Handbook 6500
• Serve as the primary technical lead for cybersecurity, Zero Trust Architecture (ZTA), and RMF compliance across the HELM PL
• Participate in vulnerability scans and quality reviews in accordance with NIST SP 800-53 Rev 5; remediate critical and high severity vulnerabilities identified through government scans
• Provide vulnerability scanning reports and risk assessments per NIST SP 800-30 Rev 1
• Ensure cloud solutions comply with FedRAMP, VA Directive 6500/6517, VA Zero Trust Architecture principles, TIC 3.0, IPv6 requirements, and all VA cybersecurity policies
• Implement required cloud security controls encryption in transit and at rest, boundary protection, audit logging, identity federation, and secrets management
• Develop and maintain cybersecurity policy documentation, POA&Ms, and continuous monitoring artifacts
• Coordinate with VA ISOs, FSS, and OCS to support ATO compliance and respond to security findings
• Ensure all HELM systems comply with VA Critical Security Controls