VA Cybersecurity and Compliance Specialist

About the role

Iron Bow Technologies is a next-generation solutions provider delivering mission success across government, healthcare, and commercial industries. The company values trust, transformation, and impact, operating under “The Iron Bow Way” to prioritize clients, colleagues, and partners. This role is primarily remote with limited travel to customer facilities.

Responsibilities

• Lead cybersecurity compliance, RMF, ATO-support, FIPS compliance, and security documentation activities for HSM and post-quantum cryptography environments.
• Serve as the principal interface between technical engineering activities and the customer’s cybersecurity and authorization requirements.
• Support VA cybersecurity, RMF, ATO, continuous monitoring, and compliance activities.
• Develop, review, and maintain cybersecurity and authorization artifacts supporting VA systems.
• Support RMF activities consistent with NIST SP 800-37 and applicable NIST SP 800-53 controls.
• Maintain and validate FIPS 140-3 CMVP evidence for HSM platforms.
• Review CMVP/CAVP validation certificates, algorithm support matrices, OEM security attestations, and cryptographic compliance evidence.
• Support VA ISSO, OIS, COR, and program stakeholders with technical evidence required for ATO and ATO renewal.
• Evaluate proposed HSM configuration, firmware, integration, and architectural changes for security and compliance impact.
• Support vulnerability and patch compliance, including CISA KEV/BOD requirements.
• Coordinate security review of HSM upgrades, migrations, and production changes.
• Ensure alignment with VA Handbook 6500, VA Critical Security Controls, FICAM/ICAM, PIV/CAC, Zero Trust, and applicable VA security policies.
• Support security incident response, documentation, root-cause analysis, and corrective actions.
• Review technical deliverables for Federal and VA cybersecurity compliance.
• Support compliance documentation associated with FedRAMP-authorized cloud components, if included in the solution.
• Support ATO renewal to provide current FIPS 140-3 CMVP certificates, algorithm-support matrices, vendor security attestations, and technical evidence packages for the VA ISSO, OIS, and formal ATO submissions.

Skills

• Federal cybersecurity compliance and RMF experience.
• Experience supporting Federal or VA ATO processes.
• Working knowledge of NIST SP 800-37 and NIST SP 800-53.
• FIPS 140-3 compliance experience.
• Experience preparing or supporting ATO packages.
• Experience with CMVP documentation and cryptographic compliance artifacts.
• Ability to translate highly technical HSM/PKI/cryptographic configurations into security and authorization evidence.

Qualifications

• Prior VA OIT cybersecurity experience.
• CISSP, CAP/CGRC, CISM, Security+, or comparable cybersecurity credentials.
• Experience with VA Handbook 6500 and VA security/authorization processes.
• Experience with FedRAMP and Federal Zero Trust requirements.

What sets you apart

• Prior VA OIT cybersecurity experience.
• CISSP, CAP/CGRC, CISM, Security+, or comparable cybersecurity credentials.
• Experience with VA Handbook 6500 and VA security/authorization processes.
• Experience with FedRAMP and Federal Zero Trust requirements.

Why you’ll love it

You will be part of a fast-growing company that values your voice, ideas, and experience. You will contribute to Iron Bow’s transformational shift in delivering value to customers and employees. You will work alongside passionate professionals in a culture that fosters respect, support, and empowerment.