Latitude IT Solutions | SDVOSB

• Own the Architecture Package deliverable: a comprehensive, VA-approved document capturing platform architecture, integration patterns, and multi-region design • Lead multi-region architecture across AWS GovCloud primary and failover regions; define workload tiers and own the Multi-Region Enablement Plan • Chair the formal Change Control Board: review all architectural changes, assess technical risk, and approve or reject platform modifications • Own the data architecture across all platform data services including cross-region replication strategy, consistency models, and replication latency management • Define technical direction for Istio, EKS cluster architecture, Kubernetes namespace governance, and AWS GovCloud landing zone configuration • Present architecture briefings to VA health leadership; serve as technical spokesperson in all architecture-level discussions with VA stakeholders • Mentor the DevSecOps Director and Maintenance Technical Director on platform engineering decisions

• Own the System Security Plan (SSP), POA&M, and all ATO documentation maintained in eMASS • Manage the full RMF lifecycle under NIST SP 800-37 Rev. 2 and NIST SP 800-53 Rev. 5, including annual control assessments and continuous monitoring • Serve as primary liaison with the VA ISSO, Security Controls Assessor, and Authorizing Official • Maintain HSPD-12/PIV compliance (IAL3/AAL3/FAL3) and VA IAM/MPI integration; ensure all personnel access meets PIV requirements within 10 business days of award • Coordinate FISMA and HIPAA compliance controls across all platform tenant applications; manage control inheritance documentation for sub-authorizations • Lead Fortify, Nessus, and continuous compliance monitoring; partner with DevSecOps Director to enforce ATO controls at the pipeline level • Maintain the Incident Response Plan (IRP) and Disaster Recovery Plan (DRP); lead annual tabletop exercises • Maintain the Policy Change Register; distribute VA policy, NIST guidance, and TRM updates within 24 hours of receipt

• Serve as the primary COR interface; provide regular status updates and lead monthly/quarterly program reviews • Own the Contractor Project Management Plan (CPMP), staff roster, and all program deliverables per the Performance Work Statement schedule • Direct functional leads across platform maintenance, monitoring, DevSecOps, and security disciplines • Manage subcontractor performance and ensure integrated team delivery against all SLA commitments • Lead SAFe PI planning cycles, sprint ceremonies, and TASPL governance cadence per VA VIP Guide 4.0 • Oversee transition execution and enforce gate-based readiness checkpoints for all Key Personnel • Manage escalation paths and incident command for priority incidents within contractual SLA windows • Report monthly on SLA performance, cost actuals, and risk posture

• Own 24×7 observability, alerting, and incident response for a mission-critical VA health IT platform • Architect and operate the Single Pane of Glass monitoring environment • Design, operate, and continuously tune platform monitoring across Dynatrace and Splunk • Own the Single Pane of Glass dashboard: centralized telemetry, build status, compliance flags, and SLA metrics • Lead all P1/P2 incident responses; drive root cause analysis and post-mortem documentation • Manage on-call rotation for relevant Key Personnel; enforce rapid human response SLAs • Track error budget consumption across all SLA tiers; trigger reliability reviews when production error budgets near defined floors • Maintain and improve Master Runbooks; executable, scripted playbooks for all named failure modes • Deliver Monthly Deliverables Reports with SLA measurement, incident summary, and trend analysis • Partner with DevSecOps on alert automation and auto-ticket creation in ServiceNow

• Own and maintain the Platform Dependency List — a living inventory of all platform services, versions, EOL timelines, and integration dependencies • Direct all platform maintenance windows and change requests through ServiceNow CCB • Lead patch prioritization across AWS managed services (RDS, DocumentDB, ElastiCache, MSK) and EC2-based services (MongoDB, Vault, Consul, Atlassian, Nexus) • Track and remediate software components approaching EOL or carrying critical CVEs; coordinate POA&M entries with the RMF/Security Manager • Author and maintain the Maintenance Plan deliverable within the required post-award window • Enforce maintenance SLA windows ensuring maintenance activity does not impact business-hour availability • Partner with the Senior Architect on architecture change reviews

• Own and operate CI/CD pipelines and blue/green/canary deployment frameworks across Production, Staging, and Sandbox EKS clusters • Build and enforce policy-as-code guardrails: automated compliance checks against NIST 800-53, TRM, and VA-specific controls before production deployment • Manage Terraform IaC for all VAEC infrastructure provisioning; ensure all changes are code-reviewed and version-controlled • Lead SRE functions: define SLIs, track SLOs against PWS SLA tiers, manage error budgets, and own reliability reviews • Operate the Istio service mesh: traffic management, mTLS enforcement, and sidecar lifecycle across all EKS namespaces • Lead SAST, DAST, container scanning, and Fortify remediation — maintaining ATO with zero unmitigated critical CVEs • Maintain the onboarding pipeline: IaC-driven runbook bringing new engineers to readiness within contractual timeframes • Support Optional Task surge efforts for DevSecOps/SRE as defined in the Performance Work Statement