Role: Security Systems IV&V Engineer
Location: Herndon, VA (100% On-site)
Job Type: 48 months Contract
Note: Must be able to obtain an FAA clearance = to a DoW Top Secret Clearance
BizTech Fusion is hiring a Security Systems IV&V (Independent Verification & Validation) Engineer for one of our clients.
We are seeking an experienced Security Systems IV&V Engineer to lead and execute Independent Verification & Validation (IV&V) activities for network and security infrastructure projects. This role is responsible for ensuring that network and security systems meet operational, compliance, security, and performance requirements while aligning with federal, Department of Defense (DoD), and industry best practices.
The ideal candidate will work closely with engineering, operations, and project management teams to assess system integrity, validate compliance requirements, identify risks, and support successful project delivery.
Key Responsibilities
IV&V Leadership
- Lead the planning, coordination, and execution of Independent Verification & Validation (IV&V) activities for network and security infrastructure projects.
- Ensure project deliverables meet established technical, operational, security, and compliance requirements.
- Support quality assurance efforts throughout the project lifecycle.
Process Development
- Develop, maintain, and enhance IV&V methodologies, processes, checklists, and documentation.
- Ensure thorough assessment coverage, traceability, and consistency across validation activities.
System Evaluation & Review
- Review and evaluate system architectures, configurations, and deployments.
- Assess compliance with project requirements, organizational standards, and applicable regulations.
- Validate system readiness, functionality, and operational effectiveness.
Assessment, Audit & Testing
- Conduct assessments, audits, and testing of network and security infrastructure components, including:
- Routers
- Switches
- Firewalls
- Security devices
- Network infrastructure systems
- Validate system security, performance, reliability, and functionality.
- Verify that implemented controls operate as intended.
Risk Assessment & Remediation
- Identify risks, gaps, vulnerabilities, and non-compliance issues.
- Provide actionable recommendations to support remediation efforts and reduce organizational risk.
- Validate corrective actions and confirm resolution of identified findings.
Reporting & Documentation
- Prepare detailed IV&V reports documenting assessment results, findings, risks, and recommendations.
- Present technical findings to project teams, management, and stakeholders in a clear and actionable manner.
- Maintain comprehensive records supporting audit and compliance requirements.
Cross-Functional Collaboration
- Collaborate with engineering, operations, cybersecurity, and project management teams.
- Support issue resolution efforts and ensure timely closure of identified findings.
- Participate in project reviews and validation activities across multiple workstreams.
Continuous Monitoring
- Lead or support continuous monitoring activities for network and security systems.
- Incorporate vulnerability assessment findings into risk analyses and remediation plans.
- Assist in maintaining ongoing system compliance and security posture.
Security & Compliance
- Apply and validate security controls based on NIST SP 800-53 requirements.
- Support and manage activities related to the Risk Management Framework (RMF) lifecycle in accordance with NIST SP 800-37.
- Support compliance efforts related to:
- FedRAMP
- FISMA
- Federal cybersecurity requirements
- Verify the effectiveness of implemented security controls and compliance measures.
Stakeholder Engagement
- Translate complex technical findings, vulnerabilities, and risk information into business-focused recommendations.
- Present risk assessments and mitigation strategies to leadership and executive stakeholders.
- Provide insights that support informed decision-making and mission objectives.
Mentorship & Professional Development
- Mentor junior team members and promote best practices in IV&V, security, and compliance.
- Foster collaboration, continuous improvement, and knowledge sharing.
- Stay current with emerging technologies, security standards, regulatory requirements, and industry best practices.
Required Qualifications
- Experience leading Independent Verification & Validation (IV&V) activities for network and security infrastructure projects.
- Strong understanding of network and security systems architecture, deployment, and operations.
- Experience conducting technical assessments, audits, and validation testing.
- Knowledge of cybersecurity frameworks, controls, and compliance requirements.
- Experience with risk assessment, vulnerability analysis, and remediation planning.
- Familiarity with federal security standards and regulatory compliance programs.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent technical writing, reporting, and presentation skills.
- Ability to collaborate effectively across technical and operational teams.
- Experience presenting technical information to both technical and non-technical stakeholders.
Preferred Qualifications
- Experience supporting federal, DoD, or regulated environments.
- Expertise with NIST SP 800-53 security controls.
- Experience implementing and supporting the NIST Risk Management Framework (RMF).
- Knowledge of FedRAMP and FISMA compliance requirements.
- Experience with continuous monitoring and vulnerability management programs.
- Background in network security, infrastructure security, and compliance validation.
- Experience mentoring junior engineers and security professionals.
Education
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Network Engineering, or a related field, or an equivalent combination of education and relevant experience.
Ideal Candidate Profile
The ideal candidate is a senior-level security and compliance professional with expertise in IV&V, cybersecurity assessments, network security, RMF, NIST 800-53, FedRAMP, FISMA, risk management, vulnerability assessment, compliance validation, and stakeholder engagement, capable of ensuring that critical infrastructure projects meet the highest standards of security, compliance, and operational excellence.
