Project Manager - ATO & Certification Process

<div class="content-intro"><p>At Two Six Technologies, we build, deploy, and implement innovative products that solve the world’s most complex challenges today. Through unrivaled collaboration and unwavering trust, we push the boundaries of what’s possible to empower our team and support our customers in building a safer global future.</p></div><p>&nbsp;</p> <p>Our Product Operations team is looking for a <strong>Project Manager </strong>to join our team. As the Project Manager for <strong>Product Operations</strong> you will be primarily responsible for owning the end-to-end Authority to Operate (ATO) and certification process, including NIAP Common Criteria, CSfC, and FIPS 140-3 validation for our product lines. You will ensure these systems are authorized for deployment on DoD and IC networks and remain in continuous compliance. As a secondary responsibility, you will support the Product Operations Lead on initiatives for the hardware team, including R&amp;D-to-Manufacturing process development, BOM maintenance in Arena, and vendor data accuracy in Ariba.</p> <p>This is a <strong>hybrid position</strong> and you can work from our <strong>Arlington or Herndon, VA </strong>office. Some travel (10-20%) will be required to interface with our customers and employees collaborating on cleared programs.</p> <p><strong>What you will do:</strong></p> <ul> <li>ATO Ownership (End-to-End): Own the end-to-end process for getting authorized for deployment on DoD and IC systems, then manage continuous and ongoing certification, accreditation, risk assessment, and security requirements.</li> <li>NIAP / Common Criteria, CSfC &amp; FIPS 140-3: Serve as the go-to expert on the certification and continuous authorization process across NIAP Common Criteria, CSfC, and FIPS 140-3 validation, ensuring compliance with government requirements and policies.</li> <li>Cross-Functional Requirements &amp; Reciprocity: Work with stakeholders inside and outside the company, including tech leads, product managers, and existing IC/DoW customers, to define a clear list of requirements and actions needed to achieve ATO certification and pursue reciprocal ATOs with existing customers.</li> <li>DevSecOps &amp; Secure SDLC: Steward a DevSecOps approach with product and engineering teams so security is designed in from the start, and create the artifacts needed to support a secure software development lifecycle.</li> <li>Continuous Compliance: Support the ongoing system improvements needed to maintain certification and accreditation status as they evolve, including additional hardware and cybersecurity certification processes (e.g., FIPS 140-3 validation) from a project management perspective.</li> <li>Process &amp; Standards Development: Partner with