Principal Cyber Fraud Analytics Manager; IRS | Lanham, MD Security Clearance

Position Title

Principal Cyber Fraud Analytics Manager

Strategic Technology Institute, Inc. (STi)

Lanham, MD / New Carrollton Federal Building — Primarily on-site client support

01 October 2026

Ability to complete U.S. Federal Government background investigation, fingerprinting, and IRS staff-like access requirements

IRS Cybersecurity Fraud Analytics and Monitoring (CFAM) Support Services

Senior Principal/Manager EMPLOYMENT NOTE

• Full‑time position contingent upon contract award and customer approval. STi is actively identifying highly qualified candidates for proposal submission and rapid post‑award onboarding.
• Period of Performance: 01 October 2026 – 30 September 2031
• Primary work location is on‑site at the New Carrollton Federal Building, 5000 Ellin Road, Lanham, MD 20706.
• Standard business hours are generally 8:30 AM–5:00 PM ET, Monday–Friday, unless otherwise approved by the Government.
• No travel is currently anticipated for this role.

Strategic Technology Institute, Inc. (STi) supports national security missions across MRO, Logistics, IT & Cybersecurity, Program Control. STi is a minority‑owned Small Disadvantaged Business (SDB) focused on delivering flexible, mission‑driven solutions that help Federal customers solve complex operational challenges.

STi is seeking a Principal Cyber Fraud Analytics Manager to support the IRS Cybersecurity Fraud Analytics and Monitoring (CFAM) program. This role will provide senior technical leadership across predictive analytics, forensic analytics, model governance, data architecture, ETL, SIEM/log analysis, platform advisory, and integration of new applications and credential service providers into the IRS fraud analytics ecosystem. The ideal candidate combines advanced analytics, cybersecurity data science, fraud detection, data engineering, and senior advisory experience in a sensitive Federal, financial services, intelligence, law enforcement, or high‑volume digital services environment.

This role is especially suited for a senior technical leader who can interpret complex data, guide model and indicator development, advise Government stakeholders, mentor analytics teams, and communicate findings clearly to both technical and executive audiences. This position maps to the Senior Principal/Manager key personnel labor category and requires the ability to serve as a principal technical spokesperson, anticipate technical needs, advise clients on analytical developments, and solve complex problems involving both technical and operational variables.

• Provide senior technical leadership across predictive analytics, forensic analytics, data mining, model governance, data architecture, ETL, SIEM/log analysis, platform advisory, and SADI/CSP/application integration activities.
• Guide development and customization of analytical algorithms used to detect anomalous, malicious, and fraudulent activity across IRS online applications and protected digital services.
• Advise on model and fraud indicator selection, feature engineering, validation methods, threshold logic, drift review, explainability, false‑positive/false‑negative analysis, and technical documentation.
• Review data‑source completeness, schema quality, lineage, normalization, retention assumptions, query performance, ingestion logic, and analytical fitness for CFAM use cases.
• Support development of ETL processes, data ingestion models, analytical data sets, data dictionaries, model documentation, governance artifacts, and repeatable technical standards.
• Advise on integration of data mining results with existing IRS systems, dashboards, reports, analytical environments, and stakeholder decision processes.
• Lead technical resolution of ambiguous findings, data‑quality problems, model performance concerns, emerging fraud patterns, and cross‑system analytical issues.
• Support analysis of structured and unstructured data, application logs, transaction data, identity‑related data, and user behavior patterns to identify anomalous or fraudulent activity.
• Prepare and…