IT Security SME / EHR Cybersecurity & ATO Lead

The position supports the ICE EHR Program, whose mission will modernize clinical operations through the implementation of a secure, integrated, and interoperable enterprise EHR supporting healthcare delivery across IHSC facilities nationwide. The program spans the full transformation lifecycle, including solution configuration, systems integration, data migration, cybersecurity, testing, training and change management, deployment, go-live, and ongoing application support and sustainment.

The IT Security SME / EHR Cybersecurity & ATO Lead provides cybersecurity expertise supporting security controls, access management, vulnerability management, compliance, authorization activities, and protection of sensitive health information.

Primary Responsibilities
• Plan and perform research, design assessment, integration, security engineering, and other assignments in cybersecurity.
• Lead implementation, assessment, and sustainment of security controls, access management, vulnerability management, compliance, and authorization activities.
• Assess complex technical solutions for security risk and support remediation, continuous monitoring, evidence development, and security documentation.
• Support protection of sensitive health information and other protected or mission-sensitive data throughout the system lifecycle.
• Provide technical leadership for highly complex cybersecurity and engineering areas and coordinate security activities across systems engineering and delivery teams.
• Supervise or provide technical direction to a broad team of systems engineers, as assigned.
• Perform other duties, as assigned.

Basic Qualifications
• Master’s degree and 15 years of relevant experience required.
• Education and experience may be substituted for each other, but may not be double-counted. Each year of relevant experience may be substituted for one year of education, and vice versa, consistent with the applicable labor-category equivalency requirements.
• Experience leading cybersecurity engineering, security controls, vulnerability management, access management, compliance, and authorization activities in complex enterprise environments.
• Experience assessing technical solutions, documenting security evidence, managing remediation, and supporting continuous monitoring.
• Experience providing technical leadership for complex security or systems engineering efforts.

Preferred Qualifications
• Experience securing healthcare systems or environments that process sensitive health information.
• Experience supporting federal security authorization and compliance activities in regulated environments.

Please be advised that during the interview, you will be required to keep your camera on, and your interviewer will be taking your picture for identification purposes if an offer letter is extended to you.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.