Trusted Internet Connection Engineering Manager

GDIT has an opportunity for a Trusted Internet Connection (TIC) Engineering Manager to support the Department of Veterans Affairs (VA). The TIC Engineering Manager will identify, evaluate, architect, and recommend technology solutions aligned with architecture standards and best practices. This role interfaces with customers and internal stakeholders to gather requirements, deliver solutions, and support incremental revenue opportunities. The position oversees infrastructure and network architecture functions to ensure timely, efficient, and high‑quality designs.

HOW THE TIC ENGINEERING MANAGER WILL MAKE AN IMPACT:

• Partner with internal teams and customer groups to define strategy, design solutions, and advise implementation during deployments.

• Build and maintain technical relationships with organizational leaders and technology providers, ensuring solutions align with customer needs.

• Communicate project status, trends, and impacts to managers, team members, stakeholders, and clients.

• Research and evaluate new technologies; document findings, conduct pilots, assess vendors, and provide recommendations and business cases.

• Resolve escalations by assessing issues, recommending actions, and implementing solutions.

• Mentor and train staff on key technologies, processes, and soft skills.

• Develop and implement test plans.

• Establish project timelines and coordinate delivery.

• Support budgeting and understand financial impacts of technology decisions.

• Write functional requirements and specifications.

• Stay current with infrastructure technology trends.

• Assess competitors’ technologies.

• Guide selection, implementation, and deployment of new technologies.

WHAT YOU’LL NEED TO SUCCEED:

Education: Bachelor's Degree or 4+ years of additional experience in lieu of a degree.

Required Experience:

• 10+ years in cloud/platform engineering or architecture with enterprise scale delivery; 3+ years leading hybrid/multi cloud (AWS/Azure) in regulated or federal environments.

• Previous experience supporting large-scale U.S. government agencies / customers

  Be willing and able to support 24×7×365 TIC operations, including critical incident bridge participation.

• Lead TIC 3.0 policy enforcement, DNS filtering, SSL decryption, and IPS/IDS signature deployment.

• Manage DHS Cyber Hygiene, ED 19 01, and BOD 18 01 / 19 02 compliance and remediation actions.

• Oversee external connections (BPE/S2S VPN) approval, audits, and configuration lifecycle.

• Deliver required weekly TIC reports, vulnerability rollups, and compliance status updates.

• Lead TIC technical refresh, architecture redesign, and next generation gateway modernization.

• Experience designing secure landing zones, network/identity patterns, and CI/CD/IaC pipelines; proven improvements in MTTR, change failure rate, and cost efficiency.

• Knowledge of NIST 800 53/RMF, Zero Trust/TIC 3.0, FedRAMP services, ATO sustainment, and audit/compliance processes.

• Experience delivering container platforms (Kubernetes/OpenShift) and platform services with DR/RTO/RPO requirements.

• Leadership in multi vendor/SIAM environments with shared KPIs, cross domain change coordination, and incident response.

TECHNICAL SKILLS:

• Cloud Platforms: AWS and Azure expertise (GCP/OCI a plus); IAM/Entra ID, landing zones, networking, key management, security, monitoring.

• Networking & Identity: VPC/VNet design, hub and spoke, SD WAN, DNS, NAT, firewalls, service mesh, SSO, PIV/FIDO2, privileged access.

• Automation & Delivery: Terraform, CloudFormation/Bicep, Ansible, Packer, Helm; GitOps; policy as code; progressive delivery.

• Containers & Platform Engineering: Kubernetes/OpenShift operations, cluster lifecycle, security, supply chain controls.

• Observability & SRE: OpenTelemetry, Prometheus/Grafana, SIEM/log analytics, SLOs/error budgets, synthetic/RUM monitoring.

• Data & Storage: Managed databases, backup/restore, immutability, replication, lifecycle management.

• Security & Compliance: CIS/STIGs, patch/vulnerability orchestration, encryption, secrets management, RMF continuous monitoring.

• Cost & Performance: FinOps fundamentals, autoscaling, right sizing, storage tiering, app/network/data performance tuning.

PREFERRED CERTIFICATIONS:

• AWS Solutions Architect – Professional

• Microsoft Azure Solutions Architect Expert

• VMware Certified Professional / Advanced Professional

• CKA/CKAD or OpenShift Administrator

• HashiCorp Terraform Associate / Authoring and Operations Professional

LOCATION: Hybrid, based out of Martinsburg, WV with occasional travel to other locations.

CLEARANCE: Must be able to obtain and maintain a Public Trust clearance.

Visa sponsorship will not be provided for this position.

GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
● Growth: AI-powered career tool that identifies career steps and learning opportunities
● Support: An internal mobility team focused on helping you achieve your career goals
● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
● Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.