Enterprise Platform Security Manager

Responsibilities

• Establish and lead the security program for enterprise platforms supporting cloud infrastructure, collaboration environments, DevSecOps pipelines, enterprise applications, AI services, and hybrid environments.
• Ensure security is integrated into every phase of the platform lifecycle while enabling rapid delivery of mission capabilities.
• Develop enterprise security strategies aligned with Zero Trust principles and oversee implementation of security controls across Microsoft Azure, Microsoft 365 GCC High, AWS, hybrid infrastructure, and containerized environments.
• Partner closely with engineering, platform, operations, compliance, and program leadership to ensure security enables—not slows—innovation.
• Lead security governance activities including risk assessments, architecture reviews, vulnerability management, incident response coordination, compliance reporting, and continuous monitoring.
• Oversee Authorization to Operate (ATO) efforts under the DoD Risk Management Framework (RMF) and ensure enterprise platforms remain compliant with evolving DoD cybersecurity requirements.
• Provide technical leadership for identity and access management, privileged access management, endpoint security, cloud security posture management, data protection, SIEM, EDR, and security automation initiatives.
• Identify emerging threats, evaluate new technologies, and continuously improve the organization's security posture through measurable risk reduction.
• Proactively solve complex organizational and technical challenges with minimal direction while balancing mission delivery, operational efficiency, and cybersecurity risk.

Qualifications

• Minimum of 8 years of progressively responsible cybersecurity experience with at least 3 years leading enterprise security initiatives or security teams.
• Demonstrated experience securing enterprise cloud environments, hybrid infrastructure, and modern software platforms within DoD, Intelligence Community, or other federal organizations.
• Strong understanding of DoD Risk Management Framework (RMF), NIST SP 800-53, NIST Cybersecurity Framework, and applicable DoD cybersecurity policies.
• Experience leading enterprise vulnerability management, security operations, incident response, and continuous monitoring programs.
• Working knowledge of Identity and Access Management (IAM), Entra ID, Conditional Access, Privileged Identity Management (PIM), and Multi-Factor Authentication.
• Excellent written and verbal communication skills.