Security Subject Matter Expert (SME)
The Security Subject Matter Expert (SME) is the programs security lead for a large, hybrid enterprise (on-prem data centers and multi-cloud). You will architect, implement, and operate a Zero Trust, RMF-aligned security solutions that keep systems reliable, data protected, and the program audit-ready at all times. You will own the end-to-end security operating model, identity and access (including PIV/FIDO and PAM), vulnerability and patch orchestration, logging and SIEM/SOAR, supply-chain integrity (SBOM/provenance), backup/DR resilience, and continuous monitoring.
Timeline:This is a contingent posting, expected to start in August, 2026
HOW the Security SME WILL MAKE AN IMPACT
You will convert compliance into a running capability rather than a paperwork cycle. By embedding controls in automation, policy-as-code in pipelines, signed artifacts with attestations, identity-centric access, and immutable backups, you will raise assurance while reducing toil and mean time to recover. Youll drive continuous compliance with authoritative evidence from VA systems (ITSM/CMDB, SIEM/EDR, vulnerability tools), cut vulnerability aging against CISA KEV targets, and raise control pass rates without slowing delivery. During incidents, you will lead joint swarm response, contain issues quickly, and turn lessons into baseline changes, POA&Ms, and updated playbooks. For executives and non-technical stakeholders, youll translate risk into clear narratives - what happened, what changed, how were safer, and publish trend lines that connect security investments to fewer outages, cleaner audits, and lower total cost of ownership.
WHAT YOULL NEED TO SUCCEED:
GDIT IS YOUR PLACE:
If you are passionate about building secure-by-default, audit-ready operations that scale across data centers and clouds, and you enjoy turning standards into everyday practice for a mission that matters, wed like to meet you.
