Note: The job is a remote job and is open to candidates in USA. Purple Jay is a veteran-owned IT and InfoSec company dedicated to empowering government and private organizations. They are seeking an experienced Technical Program Manager to lead teams in delivering information security services to US Federal agencies, managing complex enterprise launches and ensuring operational readiness across multiple domains.
Responsibilities
- Program & Launch Management: Develop and execute comprehensive program and launch plans, timelines, and resource allocations to ensure successful delivery of SOC/NOC and enterprise security services across multiple business domains and user groups
- Enterprise Launch Ownership : Lead large‑scale, multi‑phase enterprise launches (e.g., new SOC capabilities, NOC tooling, enterprise monitoring platforms, security service rollouts) from planning and design through pilot, full deployment, and hypercare, ensuring readiness of people, process, technology, and supply‑chain dependencies
- Cross‑Functional Execution: Coordinate work across engineering, SOC, NOC, networking, infrastructure, enterprise services, SCRM, compliance, procurement, and vendor teams, using industry best‑practice program management frameworks (e.g., PMI, Agile/SAFe) to deliver on scope, schedule, and budget
- Supply Chain Risk Management : Drive implementation and continuous improvement of SCRM practices across hardware, software, cloud services, and third‑party providers; ensure supplier risk assessments, onboarding due diligence, contract language, and ongoing monitoring align with federal SCRM requirements and agency policies
- Third‑Party & Vendor Governance: Partner with procurement, legal, and security teams to define and track security and availability requirements for suppliers, manage risk exceptions, and oversee remediation plans for identified supply‑chain vulnerabilities
- Operational Excellence: Partner closely with SOC and NOC managers to translate strategic objectives into actionable operational plans, define SLAs/SLOs, and implement KPIs and dashboards for service performance, availability, incident response quality, and vendor performance
- Risk & Incident Management: Drive ongoing risk assessments, operational readiness reviews, and incident post‑mortems; identify risks and issues early (including supply‑chain and third‑party issues), lead mitigation planning, and ensure lessons learned inform continuous improvement
- Strategic Roadmapping: Collaborate with security architecture, enterprise services, and SCRM stakeholders to build and maintain multi‑year roadmaps for SOC/NOC capabilities, zero trust initiatives, observability, automation, and supply‑chain resilience
- Stakeholder Communication: Develop and deliver clear, concise communications tailored to diverse audiences—from technical teams to executive leaders—covering program health, key decisions, trade‑offs, and business impact, with transparent articulation of supply‑chain and vendor risks
- Continuous Improvement: Implement best practices in change, release, incident, and SCRM processes (e.g., ITIL, NIST SCRM guidance), standardize runbooks and playbooks, and drive automation and process optimization within SOC/NOC, enterprise services, and supplier management
Skills
- 10+ years of experience in cybersecurity, enterprise IT operations, or related fields, with at least 5 years leading programs directly supporting SOC, NOC, or enterprise services environments
- Demonstrated experience planning and executing at least one large-scale enterprise launch or migration that spanned multiple technology domains and user demographics (e.g., large federal agency, nationwide user base, or multi-site environment)
- Proven ability to operate at both strategic and tactical levels: defining vision and roadmap while simultaneously managing detailed work plans, risks, dependencies, and day-to-day delivery
- Hands-on experience working with, or closely alongside, SOC/NOC teams, including familiarity with incident management, on-call operations, monitoring/alerting, and operational runbooks
- Direct experience with Supply Chain Risk Management for IT and security services, including supplier risk assessments, third-party due diligence, and ongoing monitoring of critical vendors and technologies
- Strong understanding of federal and enterprise cybersecurity frameworks and controls (e.g., NIST 800-53, Zero Trust Architecture (ZTA), FISMA), and relevant federal SCRM and third-party risk management guidance
- Must be eligible for a Public Trust clearance, with the ability to obtain a Secret or Top Secret clearance depending on the nature of the information being protected
- Demonstrated ability to influence and engage senior executives through data-driven recommendations, clear trade-off discussions, and well-structured decision forums
- Strong leadership, interpersonal, and communication skills, with experience navigating complex organizational structures and leading cross-functional and matrixed teams
- CISSP, CISM, PMP, SAFe, ITIL, or similar technical and program management certifications
- Experience leading security, enterprise services, or SCRM initiatives in government, defense, healthcare, financial services, or other regulated industries
- Background in advisory, consulting, or high-level security/IT program management roles where influence, SCRM, and strategy were key responsibilities
- Familiarity with modern SOC/NOC and SCRM tooling (e.g., SIEM, SOAR, observability platforms, ITSM, vendor-risk platforms, SBOM/asset-tracking tools) and secure cloud transformation initiatives
Benefits
- Medical, Dental & Vision benefits, plus company-paid Life & Disability Insurance.
- Optional 401k, additional Disability, Life, and Voluntary AD&D plans.
- Paid Federal holidays and up to two weeks of accrued PTO.
- Career growth opportunities with sponsored training and boot camps.
- All required technical equipment provided by Purple Jay.
Company Overview