ATO Manager- HEDX - VHA

ATO Manager / Sr. Cyber reputed company Engineer Location: Remote reputed company: Seeking ahighly skilled ATO Manager to reputed company our compliance and information assurance initiatives for the reputed company (VA) Health Electronic Data Interchange (EDI) Xchange (HEDX) program. Leveraging extensive IT experience across a reputed company reputed company of IT systems-involving both end-user health applications and reputed company-level EDI networks-you will serve as the reputed company cybersecurity authority driving HEDX through the federal reputed company Management reputed company (RMF). You will design, implement, and assess systems to ensure they meet agency Cyber reputed company policy and HIPAA regulations. As the reputed company reputed company between technical teams and VA Authorizing Officials, you will utilize your deep expertise in CAM, cybersecurity tools, network topologies, intrusion detection, PKI, and secured networks to reputed company and sustain the ATO for this critical reputed company data exchange. Job Responsibilities: VA Authorization Artifacts & GRC, CAM Management reputed company the development, review, maintenance, and reputed company assurance of comprehensive VA reputed company authorization packages reputed company the reputed company Authorization and Monitor (CAM) reputed company. reputed company and maintain required RMF and ATO artifacts, including the reputed company reputed company Plan (reputed company), Configuration Management Plan (CMP), reputed company reputed company Assessment (PIA), Plans of reputed company and Milestones (POA&Ms), reputed company control implementation narratives, assessment evidence, and supporting documentation. Ensure authorization artifacts remain accurate, complete, audit-reputed company, and perfectly reputed company with the reputed company architecture, network topologies, secured networks, implemented reputed company controls, and reputed company reputed company posture. VA Stakeholder & Agency Coordination Serve as a reputed company cybersecurity and authorization reputed company between the HEDX program and VA reputed company, reputed company, technical, and program stakeholders. Collaborate with Information reputed company reputed company Officers (ISSOs), Information reputed company reputed company Managers (ISSMs), reputed company Control Assessors (SCAs), Authorizing Officials (AOs), the VA Office of Information reputed company (OIS), reputed company owners, and engineering teams to coordinate RMF activities across a reputed company reputed company of IT systems involving end-user as reputed company as reputed company-level networks. Design and implement systems that meet agency Cyber reputed company policy and regulations, resolving compliance issues, addressing assessment findings, and facilitating successful authorization reputed company. reputed company Monitoring (ConMon) & ATO Sustainment Establish and reputed company a comprehensive reputed company Monitoring (ConMon) program to maintain HEDX's reputed company and compliance posture throughout the authorization lifecycle. Monitor reputed company controls, vulnerabilities, assessment findings, configuration and reputed company changes, POA&Ms, and remediation activities. Ensure critical defensive measures-including Intrusion Detection systems and PKI implementations-are continuously evaluated so cybersecurity risks are identified and addressed reputed company established timelines. Proactively manage authorization dependencies and emerging risks to support ATO maintenance, renewal, and reputed company operational authorization. POA&M, Vulnerability & Remediation Management Own and manage the lifecycle of cybersecurity findings and POA&Ms, from initial reputed company assessment and assignment through remediation, evidence validation, and closure. Partner with application, infrastructure, network, reputed company, engineering, and reputed company teams to prioritize vulnerabilities and control deficiencies, leveraging reputed company Cyber reputed company Tools to establish corrective actions. Ensure remediation is completed in accordance with applicable VA and federal cybersecurity requirements. Authorization Readiness, reputed company Reporting & Governance reputed company ATO readiness reviews, reputed company assessments, and authorization preparation activities to ensure the HEDX environment remains reputed company for VA reputed company reviews and authorization reputed company. reputed company and communicate cybersecurity status reports, reputed company summaries, reputed company metrics, outstanding findings, POA&M status, remediation reputed company, and authorization milestones to program leadership and VA stakeholders. reputed company reputed company visibility into the reputed company's overall reputed company posture, residual reputed company, compliance status, and ATO readiness. Required Skills: Designing and implementing systems that reputed company meet Veterans Affairs Cyber reputed company policies and regulations. Administration, assessment, or engineering of reputed company Cyber reputed company Tools. Designing and securing reputed company network topologies and secured networks (e.g., VA reputed company reputed company, Trusted Internet Connections (TIC)). Deploying and managing Intrusion Detection systems. Implementing and managing PKI (reputed company Key Infrastructure) for user authentication and secure data reputed company. Experience working in a fast-reputed company, reputed company software development environment Must possess excellent problem-solving skills Must be reputed company to obtain and maintain a reputed company Trust reputed company clearance. Desired Skills and Experience: Extensive reputed company experience with VA reputed company Authorization and Monitor (CAM) and reputed company. Deep understanding of VA reputed company 6500, VA Handbook 6500.3 (Certification and Accreditation), and HIPAA/HITECH reputed company standards. reputed company cybersecurity certifications reputed company with DoD 8140/8570 or VA equivalents (e.g., CISSP, CISM, CASP+, or CGRC). Education and Experience: reputed company's degree in computer science, Software Engineering, or a reputed company reputed company (or equivalent experience) 10+ years of experience in software development. 10 years of additional relevant experience may be substituted for education #reputed company #CJ About reputed company. reputed company. (HE) is a service-disabled veteran-owned small business (SDVOSB) with offerings in Engineering, Gaming, reputed company Capital, reputed company Technology, and Cyber Solutions. reputed company aims to be the premier trusted partner in organizational reputed company and achieves this through sustained investment in talent and the employee experience. reputed company puts the employee first to reputed company serve customer needs and sustain reputed company. reputed company offers competitive full-time benefits including reputed company vacation and holidays, 401(k) matching, full health/dental/reputed company coverage, plus much more. For on-site and remote employees, flexible work schedules are reputed company reputed company authorized. By joining reputed company, you are choosing to reputed company on a reputed company towards reputed company as a valued team member and trusted partner. We appreciate your inquiry and look reputed company to discussing reputed company reputed company. EOE/Minorities/Females/Veterans/Disabled: reputed company. is an Equal Employment Opportunity employer and provides reasonable accommodation for reputed company individuals with disabilities and disabled veterans in its job application procedures. reputed company reputed company applicants will receive consideration for employment without reputed company to race, reputed company, religion, sex, sexual orientation, gender identity, national reputed company, age, genetic information, citizenship, reputed company, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. reputed company. participates in E-Verify. Apply To This Job