Cloud and RMF Cyber Lead

SAIC is seeking a Cyber Lead to provide technical leadership and customer-facing support for secure cloud and on-prem environments, with a focus on Microsoft Azure and DoD missions. This role combines hands-on cyber engineering, RMF/ATO leadership, and direct engagement with senior stakeholders. The Cyber Lead will guide a small team, drive security strategy and execution, and present status, risks, and recommendations to our government customers.

This position will be onsite at the Mark Center in Alexandria, Virginia.

Key Responsibilities:

• Serve as the primary cyber point of contact for the customer, providing clear, confident, and professional communication in meetings, briefings, and working sessions.
• Lead a cybersecurity team responsible for RMF, ATO packages, POA&M management, and continuous monitoring for on-prem and cloud-hosted systems.
• Design, implement, and maintain secure cloud architectures in Microsoft Azure, with emphasis on DoD IL4/5/6 environments and related security/compliance requirements.
• Lead or support the design and implementation of Zero Trust-aligned solutions, including identity-centric security, network segmentation, data protection, and continuous monitoring.
• Oversee integration and operation of cybersecurity toolsets across cloud and on-prem environments (e.g., SIEM, EDR, CSPM/CIEM, vulnerability management, logging/monitoring, SOAR).
• Ensure high-quality RMF and ATO documentation (SSPs, SARs, PCIAs, etc.) and strong POA&M lifecycle management to support timely authorization and sustainment.
• Guide the development and execution of a cloud/cybersecurity roadmap to mature security posture over time.
• Provide technical direction and mentoring to team members on policies, RMF, monitoring tools, and cloud security best practices.
• Support and lead customer presentations and briefings on security status, risks, mitigations, and recommendations, tailoring content for both technical and non-technical audiences.
• Coordinate with architecture, operations, and DevSecOps teams to ensure security-by-design and consistent implementation of standards and reference architectures.

Required Education:

• Bachelors and fourteen (14) years or more experience; Masters and twelve (12) years or more experience; PhD or JD and nine (9) years or more experience.

Required Qualifications:

• Minimum 14 years of hands-on cybersecurity experience.
• Demonstrated experience leading cyber or cloud security efforts and/or small technical teams.
• Strong customer-facing skills, including:
• Experience presenting to government stakeholders and senior leadership.
• Ability to clearly communicate complex security topics and trade-offs.
• Deep understanding of DoD/Federal cybersecurity policy and RMF (NIST 800-53, DoD RMF); proven experience supporting or leading ATO efforts and managing POA&Ms.
• Experience with cloud security, particularly Microsoft Azure, including:
• Azure security and monitoring tools (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, Defender for Endpoint).
• Azure networking, identity (Azure AD / Entra ID), policies, and logging/monitoring.
• Hands-on experience with multiple cybersecurity tools such as SIEM, EDR, vulnerability management, and other monitoring platforms.
• Familiarity with Zero Trust principles and reference architectures.
• Strong written and verbal communication skills, including briefing materials and technical documentation.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday-Friday.

Clearance:

• Active DoD Secret security clearance.