Senior IT Analyst- Sustainment, Security & Regulatory Lead

OAS is seeking a highly experienced Senior IT Analyst to serve as the senior technical lead supporting the Federal Aviation Administration (FAA) Database Program. This position provides leadership across system sustainment, software development, cybersecurity, privacy compliance, and regulatory support for a mission-critical airport data management platform and its associated web applications.

The selected candidate will oversee operations and maintenance activities, ensure compliance with FAA and federal cybersecurity requirements, support regulatory and policy development efforts, and coordinate cross-functional teams responsible for maintaining and enhancing airport data systems. This role requires strong technical leadership, federal security expertise, and the ability to manage complex IT and regulatory initiatives simultaneously.

Key Responsibilities

Technical Leadership & System Sustainment

• Provide technical leadership and operational oversight for the program's application portfolio.
• Guide software development and sustainment efforts utilizing Software Development Lifecycle (SDLC) and Agile methodologies.
• Oversee Operations and Maintenance (O&M) activities across development, testing, and production environments.
• Monitor and optimize application performance, system reliability, and operational efficiency.
• Oversee:
  • APIs and web services
  • System integrations
  • Data quality management activities
  • Operational reporting and performance metrics
• Coordinate cross-functional activities between engineering, development, data management, and government stakeholders.
• Ensure program deliverables are completed accurately and submitted on schedule.

Release & Configuration Management

• Support software release planning, testing, deployment, and post-implementation activities.
• Coordinate release readiness reviews with government production support teams.
• Maintain configuration management processes and software repositories.
• Support deployment automation and release management best practices.
• Manage and maintain technical documentation, including:
  • Project Management Plans (PMPs)
  • Functional Requirements Documents (FRDs)
  • System Design Documents (SDDs)
  • Interface Control Documents (ICDs)
  • Installation Guides
  • Release Notes
  • User Guides
• Ensure all documentation is current and maintained within government-approved repositories.

Security & Privacy Compliance

• Lead the development, maintenance, and review of security and privacy documentation, including:
  • System Security Plans (SSPs)
  • Privacy Threshold Analyses (PTAs)
  • Privacy Impact Assessments (PIAs)
  • Security Documentation Artifacts (SDAs)
  • Security Control Documentation (SCDs)
• Support Certification and Accreditation (C&A) activities and ongoing Authority to Operate (ATO) maintenance.
• Manage Plans of Action and Milestones (POA&Ms) within DOT FISMA and CSAM systems.
• Conduct security impact analyses and support security control assessments.
• Coordinate remediation and mitigation activities for identified vulnerabilities and security weaknesses.
• Ensure compliance with:
  • NIST cybersecurity frameworks and controls
  • Federal Information Security Modernization Act (FISMA) requirements
  • FedRAMP guidance, where applicable
  • FAA information security and privacy policies
  • DOT Security Weakness Management requirements
• Support vulnerability management activities in accordance with SI-2 Flaw Remediation guidance.

Advisory & Regulatory Support

• Provide technical and programmatic support for the development and revision of FAA airport guidance documentation.
• Assist in drafting and maintaining:
  • FAA Advisory Circulars (ACs)
  • FAA Orders
  • Engineering Briefs
  • Memorandums and technical guidance documents
• Support regulatory initiatives affecting airport data management, system modernization, and operational processes.
• Provide technical expertise to ensure guidance documents align with evolving FAA policies, standards, and technology requirements.

Required Qualifications

• Bachelor's degree in Information Systems, Business Systems, Management Information Systems (MIS), Information Technology, IT Management, or a related field.
  • Engineering, Mathematics, or Science degrees may be substituted.
• Fifteen (15) years of relevant professional experience.
• Demonstrated experience with:
  • Operations and maintenance of enterprise applications and IT platforms
  • Cloud-connected and hybrid technology environments
  • Federal cybersecurity and privacy compliance programs
  • Authority to Operate (ATO) sustainment activities
  • POA&M development and management
  • NIST and FedRAMP security requirements
  • Technical writing and regulatory documentation development
• Strong knowledge of:
  • SDLC and Agile software development methodologies
  • Configuration management and release management practices
  • Federal software development standards and governance
  • Section 508 accessibility requirements
  • WCAG 2.1 Level AA accessibility standards
  • FAA information security and privacy orders
• Ability to lead technical, operational, security, and regulatory workstreams concurrently.
• Ability to coordinate effectively with government stakeholders and multidisciplinary technical teams.
• Ability to obtain and maintain a Public Trust clearance.
• Ability to obtain and maintain FAA Personal Identity Verification (PIV) credentials and access Sensitive Unclassified Information (SUI).

Preferred Qualifications

• Experience supporting FAA, Department of Transportation (DOT), or other federal aviation programs.
• Knowledge of airport data systems and aviation data management programs.
• Familiarity with Geographic Information Systems (GIS) and geospatial data management.
• Familiarity with FAA airport regulatory guidance, including:
  • FAA Order 5010.4
  • FAA Advisory Circular (AC) 150/5300 Series
• Experience supporting Authority to Operate (ATO) processes within federal environments.
• Relevant professional certifications, such as:
  • Certified Information Systems Security Professional (CISSP)
  • CompTIA Security+
  • ITIL Foundation
  • Certified ScrumMaster (CSM)
  • Other cybersecurity, cloud, or enterprise IT certifications

Education & Experience Equivalencies

The following substitutions may be applied:

• Master's degree in a related discipline may substitute for two (2) years of required experience.
• Ph.D. in a related discipline may substitute for four (4) years of required experience.
• Six (6) years of additional relevant experience beyond the minimum requirement may substitute for a Bachelor's degree.