Keep a critical federal health data exchange running and secure around the clock. As the Mission Operations & Cyber Resilience Lead you will lead 24x7 platform operations, vulnerability remediation, and continuous authorization for the Data Exchange Platform, so military health partners can rely on it without disruption. You will own incident response and recovery, and work with the Government’s cybersecurity service provider rather than replacing it. Deep experience operating a mission-critical production system counts, and no SAFe certification is needed.

Location: Reston, VA (onsite preferred). Primarily remote within the US, considered for highly qualified candidates, with frequent travel to Reston.

Security: US citizen able to obtain and maintain an ADP II clearance.

Remote candidates: you will be required to keep your camera on during the interview, and your interviewer will take your picture for identification purposes if an offer letter is extended to you.

This is in anticipation of future work!

What you’ll do

• Lead 24x7 operations, monitoring, and Tier 2/3 incident response for production data exchange services hosted in AWS GovCloud, including root cause analysis and meeting service levels.
• Manage vulnerability and patch remediation (IAVM, STIG, ACAS) and maintain the artifacts needed for RMF and continuous authorization to operate.
• Implement Zero Trust and secure-cloud practices, and build security checks into CI/CD pipelines with the development team.
• Run change control and maintain runbooks, operational procedures, and recovery plans, coordinating with the Government and its cybersecurity service provider.
• Deliver through iterative backlogs, report operational metrics to Government leadership, and act on operational feedback.

What you bring

• Bachelor’s in information technology, computer science, cybersecurity, engineering, or a related field with 8-12yrs. of prior relevant experience.
• 10 years in IT operations, cloud operations, or cybersecurity within a federal or DoD environment, including 3 leading a technical team or operations function. The 10 years need not all be in cybersecurity.
• Have operated and secured at least one mission-critical production system with 24x7 availability requirements, including incident response, vulnerability remediation, change control, and authorization documentation. Monitoring-only or advisory experience does not qualify.
• Hands-on experience with AWS GovCloud or an equivalent government cloud environment, RMF, and DoD/DHA information assurance policies.
• Working knowledge of SAFe and Azure DevOps (certification not required) and experience with Agile delivery: iterative backlogs, testable acceptance criteria, and incorporating operational feedback.
• Ability to meet the applicable Government work-role requirements: DoD 8140 qualification for the applicable work role (for example, Security+, CySA+, CISSP, or CASP+), Government-designated training for HIPAA compliance and information assurance, and the applicable background investigation.
• Knowledge of the MHS/DHA environment.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.