S

Sayari

Counterparty and supply chain risk intelligence

Technical Program Manager - Federal Deployment and Authorization, DHS/CBP

Program ManagementConfirmed live in the last 24 hours
Full-timeWashington, DC, USA

About the Job

Requirements

  • At least 7 years delivering technology programs for U.S. federal customers, including personally taking at least one system through federal security authorization (ATO) to a signed letter.
  • Working knowledge of FISMA, the NIST Risk Management Framework, NIST SP 800-53, and authorization package artifacts; ability to read a Security Requirements Traceability Matrix and assign ownership across engineering, security, and government teams.
  • Experience with at least one federal deployment model: vendor-operated government cloud (AWS GovCloud or Azure Government), agency-provisioned cloud tenancy, or an on-premises secure environment.
  • Program management fundamentals, including integrated master schedules, critical path analysis, risk registers, action and decision logs, and executive and customer reporting.
  • Experience coordinating personnel security, including background investigations, badging, and system access, for a contractor team.
  • Technical fluency in architecture, authorization boundaries, data flows, infrastructure-as-code, and change control; writing code is not required.
  • A record of holding government stakeholders outside the candidate's management chain to commitments, with patience and documentation.
  • U.S. citizenship and ability to obtain and maintain the DHS/CBP background investigation required for the role (Tier 4 or Tier 5); lawful permanent resident status does not meet DHS requirements.

Responsibilities

  • Build and maintain the integrated master schedule for deployment and authorization, including work breakdown, critical path, dependencies, and allowances for each government-side gate.
  • Own scope, schedule, contractual milestones, deliverables, key personnel requirements, and reporting obligations from award through go-live.
  • Lead analysis of hosting and boundary options with Sayari Security, Infrastructure, and the Forward Deployed Engineering team; present tradeoffs to CBP and Sayari leadership and drive a decision.
  • Own Sayari's side of the NIST Risk Management Framework process under DHS policy from kickoff through the ATO letter, sequencing and tracking package artifacts from categorization and System Security Plan through Security Assessment Report and Plans of Action and Milestones.
  • Coordinate with the Sayari Security team, which owns control implementation and package content, and with Infrastructure and Forward Deployed Engineers, who build the environment described by the package.
  • Contract and manage the independent third-party assessor; schedule a readiness review before formal fieldwork, close remediation before submission, and keep the government's Security Control Assessor engaged throughout.
  • Coordinate with the CBP System Owner, Information System Security Officer, Information System Security Manager, Chief Information Security Officer, Privacy Office, and Authorizing Official through document review and the authorization decision.
  • After the ATO, establish continuous monitoring, change control, Plans of Action and Milestones, and annual assessment cadence, then hand the work to a steady-state owner.
  • Coordinate Privacy Threshold Analysis, Privacy Impact Assessment, and System of Records Notice determinations, and deliver technical content on data elements, flows, retention, and retrieval paths for government completion.
  • Manage Section 508 conformance, including Trusted Tester coverage, test plan and results, remediation, and the Accessibility Conformance Report.
  • Coordinate operational obligations, including security operations and monitoring arrangements, incident reporting timelines, supply chain and software attestations, and government-furnished information handling.
  • Own pre-screening, background investigation tracking, reciprocity, badging, and system access for every Sayari and subcontractor program participant; plan work around personnel clearance and environment access dates.
  • Build working relationships across CBP program, technical, security, privacy, contracting, and cloud governance offices; run the recurring cadence, maintain a shared action log, follow up on government-side actions, and document schedule impacts of delays.
  • Maintain the plan, risk register, dependency map, decision log, and status reporting as the single source of truth for Sayari leadership and the government.
  • Map CBP mission workflows to platform capabilities with the Forward Deployed Engineering team, then scope and sequence engineering work.
  • Turn contract obligations into a plan and the plan into weekly accountability for Sayari, subcontractors, and the government; convert open questions in CBP working sessions into written decisions with an owner and date.

Desired Qualifications

  • Current DHS or CBP background investigation, suitability determination, or clearance.
  • Prior DHS or CBP program delivery, including DHS 4300A policy, the DHS security authorization process, and the DHS Trusted Tester methodology.
  • Federal privacy compliance experience with Privacy Threshold Analysis, Privacy Impact Assessment, or System of Records Notice, and Section 508 experience.
  • Familiarity with CBP trade and customs workflows or import and export risk analysis.
  • Familiarity with agentic AI platforms, large language models, or graph analytics.
  • PMP, PgMP, CGRC, or CISSP certification.
  • Experience at a high-growth government or defense technology company.

About the Company

Sayari

Counterparty and supply chain risk intelligence

Sayari provides risk intelligence for counterparty and supply chain risk. It helps businesses and analysts understand and monitor the relationships between corporate entities and their stakeholders, such as shareholders, subsidiaries, customers, and suppliers. The product works by integrating trade data from 65 reporting countries with global corporate ownership data to create a unified view of cross-border networks. Through a subscription platform, users can perform batch supplier screening, risk identification, and generate detailed reports to support regulatory, ESG, and compliance decisions. Sayari differentiates itself by offering a comprehensive, globally sourced data integration that reveals hidden risks in supply chains and corporate networks, enabling more complete risk assessments than with fragmented data. The company's goal is to promote transparency and reduce risk in global commerce by helping clients identify regulatory, reputational, and business continuity risks.

Company size
201-500
Company stage
Debt Financing
Total funding
$134.7M
Headquarters
Washington DC, District of Columbia
Founded
2015

Recently Posted Jobs

Explore more opportunities at Sayari

See more jobs