Technical Program Manager

Location: Greater Washington, D.C. Metro Area (Hybrid/Remote flexibility) Clearance: Ability to obtain and maintain a U.S. Security Clearance (Active Public Trust preferred) Citizenship: US Citizen Required About Purple Jay Purple Jay is a veteran-owned IT and InfoSec company dedicated to empowering government and private organizations. We believe effective cybersecurity goes beyond protecting data—it must align with your mission to enable progress. Our cross-functional teams leverage proprietary digital solutions to reduce organizational risk and maximize ROI. We are looking for intellectually curious problem-solvers who value collaboration, continuous learning, and clear communication to join our positively charged culture. Job Summary We are seeking an experienced Technical Program Manager with a deep understanding in one or more of the following, SOC/NOC, Enterprise Services, and Supply Chain Risk Management (SCRM) experience to lead our team in delivering exceptional, highly available information security services to US Federal agencies. The successful candidate will own complex enterprise launches across multiple domains and diverse user demographics, driving end‑to‑end delivery from initial strategy and roadmap through tactical execution, operational readiness, SCRM controls implementation, and post‑launch optimization. This role requires managing cross‑functional program delivery, balancing technical, operational, supply‑chain, and regulatory requirements, and communicating effectively from frontline operations through senior executive stakeholders. Key Responsibilities Program & Launch Management: Develop and execute comprehensive program and launch plans, timelines, and resource allocations to ensure successful delivery of SOC/NOC and enterprise security services across multiple business domains and user groups. Enterprise Launch Ownership : Lead large‑scale, multi‑phase enterprise launches (e.g., new SOC capabilities, NOC tooling, enterprise monitoring platforms, security service rollouts) from planning and design through pilot, full deployment, and hypercare, ensuring readiness of people, process, technology, and supply‑chain dependencies. Cross‑Functional Execution: Coordinate work across engineering, SOC, NOC, networking, infrastructure, enterprise services, SCRM, compliance, procurement, and vendor teams, using industry best‑practice program management frameworks (e.g., PMI, Agile/SAFe) to deliver on scope, schedule, and budget. Supply Chain Risk Management : Drive implementation and continuous improvement of SCRM practices across hardware, software, cloud services, and third‑party providers; ensure supplier risk assessments, onboarding due diligence, contract language, and ongoing monitoring align with federal SCRM requirements and agency policies. Third‑Party & Vendor Governance: Partner with procurement, legal, and security teams to define and track security and availability requirements for suppliers, manage risk exceptions, and oversee remediation plans for identified supply‑chain vulnerabilities. Operational Excellence: Partner closely with SOC and NOC managers to translate strategic objectives into actionable operational plans, define SLAs/SLOs, and implement KPIs and dashboards for service performance, availability, incident response quality, and vendor performance. Risk & Incident Management: Drive ongoing risk assessments, operational readiness reviews, and incident post‑mortems; identify risks and issues early (including supply‑chain and third‑party issues), lead mitigation planning, and ensure lessons learned inform continuous improvement. Strategic Roadmapping: Collaborate with security architecture, enterprise services, and SCRM stakeholders to build and maintain multi‑year roadmaps for SOC/NOC capabilities, zero trust initiatives, observability, automation, and supply‑chain resilience. Stakeholder Communication: Develop and deliver clear, concise communications tailored to diverse audiences—from technical teams to executive leaders—covering program health, key decisions, trade‑offs, and business impact, with transparent articulation of supply‑chain and vendor risks. Continuous Improvement: Implement best practices in change, release, incident, and SCRM processes (e.g., ITIL, NIST SCRM guidance), standardize runbooks and playbooks, and drive automation and process optimization within SOC/NOC, enterprise services, and supplier management. Required Qualifications 10+ years of experience in cybersecurity, enterprise IT operations, or related fields, with at least 5 years leading programs directly supporting SOC, NOC, or enterprise services environments. Demonstrated experience planning and executing at least one large‑scale enterprise launch or migration that spanned multiple technology domains and user demographics (e.g., large federal agency, nationwide user base, or multi‑site environment). Proven ability to operate at both strategic and tactical levels: defining vision and roadmap while simultaneously managing detailed work plans, risks, dependencies, and day‑to‑day delivery. Hands‑on experience working with, or closely alongside, SOC/NOC teams, including familiarity with incident management, on‑call operations, monitoring/alerting, and operational runbooks. Direct experience with Supply Chain Risk Management for IT and security services, including supplier risk assessments, third‑party due diligence, and ongoing monitoring of critical vendors and technologies. Strong understanding of federal and enterprise cybersecurity frameworks and controls (e.g., NIST 800‑53, Zero Trust Architecture (ZTA), FISMA), and relevant federal SCRM and third‑party risk management guidance. Must be eligible for a Public Trust clearance, with the ability to obtain a Secret or Top Secret clearance depending on the nature of the information being protected. Demonstrated ability to influence and engage senior executives through data‑driven recommendations, clear trade‑off discussions, and well‑structured decision forums. Strong leadership, interpersonal, and communication skills, with experience navigating complex organizational structures and leading cross‑functional and matrixed teams. Preferred Qualifications CISSP, CISM, PMP, SAFe, ITIL, or similar technical and program management certifications. Experience leading security, enterprise services, or SCRM initiatives in government, defense, healthcare, financial services, or other regulated industries. Background in advisory, consulting, or high‑level security/IT program management roles where influence, SCRM, and strategy were key responsibilities. Familiarity with modern SOC/NOC and SCRM tooling (e.g., SIEM, SOAR, observability platforms, ITSM, vendor‑risk platforms, SBOM/asset‑tracking tools) and secure cloud transformation initiatives. Why Purple Jay? We are all about the benefits! We offer an empowering culture that values your voice, alongside: Medical, Dental & Vision benefits, plus company-paid Life & Disability Insurance. Optional 401k, additional Disability, Life, and Voluntary AD&D plans. Paid Federal holidays and up to two weeks of accrued PTO. Career growth opportunities with sponsored training and boot camps. All required technical equipment provided by Purple Jay. Purple Jay, LLC is an Equal Opportunity Employer. All applicants are considered without regard to race, color, ancestry, national origin, gender/gender identity, sexual orientation, marital and family status, religion and religious belief, age, disability, results of genetic information, and service in the military. #J-18808-Ljbffr