SB
The Deputy CTO, Infrastructure reports to the CTO and works alongside the other Deputy CTOs and Architecture Review Boards to ensure every program inherits a consistent, defensible security and cloud foundation. This person will representSteerBridge to government security authorizing officials and internal leadership alike, translating infrastructure and compliance decisions into business and mission risk terms.
Key Responsibilities
Lead the design, governance, and continuous improvement of SteerBridge’s cloud architecture across program and corporate environments, including IaaS, PaaS, SaaS, and DoD-hosted IL4/IL5 environments, ensuring scalability, resilience, security, and cost efficiency.
Establish infrastructure governance standards for AI/ML workloads, including LLM/NLP integrations and Medallion Architecture data pipelines, ensuring secure and compliant infrastructure across programs.
Own infrastructure security and compliance, including RMF/ATO packages, continuous monitoring, risk management, and remediation of findings across program and corporate systems.
Lead corporate network and IT architecture and operations, including connectivity, segmentation, identity and access management, endpoint protection, and secure edge-device provisioning and management across distributed and DDIL environments.
Provide technical leadership to government authorizing officials, auditors, and executive stakeholders, translating complex infrastructure, security, and technology decisions into mission and business risks and recommendations.
Lead architecture and technical risk governance, including Architecture Review Boards and the Technical Risk Committee, to ensure infrastructure, security, AI/ML, and LLM-related decisions are consistent, aligned, and auditable across programs.
Mentor infrastructure, network, and security engineers and support career development, technical growth, and organizational engineering standards.
Manage infrastructure and security strategy and delivery across programs, including vendor and tooling evaluations, requirements prioritization, sprint and release planning, and communication of progress, risks, dependencies, and cost considerations to leadership.
Eligibility requirements: U.S. citizenship is required for this position under applicable federal contract requirements. Candidate must also be able to obtain and maintain the security clearance required for the role.
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
12+ years of experience in IT infrastructure, cloud architecture, or security engineering, including at least 5 years supporting federal or highly regulated environments.
Proven ability to design and lead cloud-native infrastructure across AWS, Azure, or GCP in support of FedRAMP, RMF, and ATO requirements, including DoD Cloud Computing SRG, DISA STIGs, and IL4/IL5 accreditation boundaries.
Experience governing AI/ML infrastructure across IaaS, PaaS, and SaaS service models, including infrastructure supporting Medallion Architecture (bronze/silver/gold) data platforms.
Deep understanding of enterprise network architecture, corporate IT operations, identity and access management, endpoint security, NIST SP 800-53 controls, continuous monitoring, vulnerability management, and the federal ATO lifecycle.
Demonstrated leadership of cross-functional infrastructure, network, and security teams across multiple concurrent programs, with strong communication, documentation, and executive stakeholder engagement skills.
Advanced degree in Computer Science, Information Technology, Engineering, or a related field.
Active professional certification such as CISSP, CISM, CCSP, AWS Certified Solutions Architect, or Azure Solutions Architect Expert.
Experience operating within VA Enterprise Cloud (VAEC), DoD IL4/IL5, or similar federal accreditation environments, with familiarity with DoD frameworks including the DoD 8500 series, CNSSI publications, and DoD 8140/NIST NICE workforce alignment.
Experience managing security compliance across multiple concurrent ATO packages and program boundaries, including vulnerability scanning and compliance tools such as Tenable.sc/Nessus, SIEM platforms, Zero Trust architecture, SOC operations, and incident response planning.
Experience governing LLM/NLP integrations within regulated or DoD environments, including model inference infrastructure, training data, retrieval-augmented pipelines, and associated security and privacy reviews.
Experience managing edge-device provisioning, security patching, and update pipelines in disconnected, denied, intermittent, or limited-bandwidth (DDIL) environments; experience with the Joint Warfighting Cloud Capability (JWCC) or equivalent DoD enterprise cloud environments is a plus.