Infrastructure Security & Patch Compliance Analyst

Role Overview

We are seeking an Infrastructure Security & Patch Compliance Analyst to support the VA ICAM IOSS project, which aims to modernize the Department of Veterans Affairs' multi-vendor Identity, Credential, and Access Management (ICAM) environment. The role focuses on validating infrastructure patches before and after deployment, tracking Risk Management Framework (RMF) and Authorization to Operate (ATO) compliance, and coordinating vulnerability remediation with cybersecurity teams.

Required Skills

• Risk management and compliance tracking.
• Vulnerability and patch management.
• Issue management and remediation tracking.
• Technical documentation.
• Requirements management.
• Understanding of infrastructure security and patch validation processes.

Preferred Skills

• Experience with Risk Management Framework (RMF) and Authorization to Operate (ATO) processes.
• Experience coordinating vulnerability remediation with cybersecurity teams.
• Experience supporting enterprise infrastructure security and compliance initiatives.
• Experience maintaining audit-ready documentation and compliance records.

Key Responsibilities

• Validate infrastructure patches before and after deployment to confirm successful implementation and identify potential issues.
• Track RMF and ATO compliance for infrastructure assets.
• Coordinate vulnerability remediation activities with cybersecurity and infrastructure teams.
• Monitor patch compliance, document gaps, and track remediation through closure.
• Manage security-related issues, risks, requirements, and action items.
• Maintain technical documentation, compliance records, and remediation status reports.
• Support compliance reviews and provide evidence of patching and vulnerability management activities.
• Coordinate with technical stakeholders to resolve compliance gaps and reduce infrastructure security risks.

Education Requirement

Bachelor’s degree in Computer Science, Information Technology, Engineering, Business Administration, or a related field is preferred.