Medical Device Management IT ExecutiveAnonymous
Job Summary
The VA operates one of the largest integrated health systems in the world — 170+ medical centers, 1,000+ outpatient sites, and hundreds of thousands of connected medical devices. Many are aging, inconsistently inventoried, poorly segmented, and underpatched. This executive will build the enterprise capability to change that — across clinical operations, cybersecurity, infrastructure, biomedical engineering, and field support — with patient safety as the north star.
Responsibilities
Device visibility & inventory
Enterprise asset inventory across all networked medical devices
Passive discovery tooling and active reconciliation processes
Integration with CMDB, ITSM, and biomedical systems of record
Device cybersecurity
Risk stratification and vulnerability management for OT/IoMT devices
Network segmentation and VLAN policy for clinical environments
Patching strategy accounting for FDA and OEM constraints
Lifecycle management
End-of-life and end-of-support tracking and replacement planning
Procurement standards and onboarding requirements for new devices
Disposition and decommissioning policy across VA medical centers
Connectivity & integration
Device-to-EHR connectivity (Oracle Health/Cerner and legacy VistA)
Interoperability standards: HL7, FHIR, DICOM, HL7 MDC
Network architecture requirements for connected clinical devices
Qualifications
Demonstrated experience navigating healthcare regulatory environments, including familiarity with HIPAA, FDA guidelines, or similar compliance frameworks Proven track record in a senior leadership role managing cross-functional teams within a clinical or healthcare IT setting Strong ability to communicate complex technical concepts to non-technical clinical stakeholders and executive leadership
Requirements
- IT leadership in healthcare technology environments•14+ years
- Senior director or executive level in a large, multi-site health system•5+ years
- Executive communication skills: the ability to explain device risk, patient safety implications, and investment tradeoffs clearly to clinical leadership, OIT executives, and OMB•Weak - Strong
- Fluency in relevant standards and frameworks: NIST SP 800-82, NIST SP 800-30, HIPAA Security Rule, FDA medical device cybersecurity guidance (2023), and HHS HC3 advisories•Weak - Strong
- Experience developing and executing enterprise standards for device onboarding, procurement requirements, network segmentation, and EOL/EOS planning across a geographically distributed health system•Weak - Strong
- Proven ability to build effective partnerships with clinical operations, biomedical engineering, and cybersecurity teams — and to navigate conflicts between patient care continuity and technology risk management•Weak - Strong
- Direct operational experience managing medical device IT programs — including connected device inventory, clinical network segmentation, and OT/IoMT security — at enterprise scale
- Demonstrated understanding of the regulatory and clinical constraints on medical device patching, configuration, and lifecycle management (FDA 510(k), OEM support agreements, patient safety implications)
Nice to Have
- Relevant certifications: CISSP, CISM, CHCIO, or clinical informatics credentials valued but not required
- Experience driving standardization across a federated or decentralized health system where local medical centers have historically operated with significant autonomy
- Familiarity with FDA post-market cybersecurity guidance and coordinated vulnerability disclosure processes involving medical device OEMs
- Background in or strong working relationship with biomedical engineering — understanding what BMET teams manage, where IT responsibility begins, and how to build a shared accountability model
- Direct experience integrating medical devices with EHR platforms, specifically Oracle Health (Cerner) or VA's VistA — including device data feeds, alarm management, and clinical workflow dependencies
- Hands-on familiarity with medical device discovery and security platforms (Claroty, Medigate/Claroty, Axonius, Ordr, or equivalent passive IoMT discovery tools)
- Prior federal health system experience — VA, DoD/MHS, Indian Health Service, or equivalent large national health enterprise
About Us
The Department of Veterans Affairs (VA) is a federal agency dedicated to serving those who have served our country. As one of the largest employers in the United States, the VA offers careers across a wide range of fields, including health care, technology, administration, and more. Working at the VA means contributing to a mission-driven organization focused on delivering benefits and care to veterans across the nation. If you are looking for meaningful work with a lasting impact, the Department of Veterans Affairs provides opportunities to make a real difference every day.
