Security/ATO Automation Engineer.

Accountabilities:

• Analyze existing authorization workflows, evidence requirements, assessment activities, security control data, approvals, and recurring manual processes to identify opportunities for automation.

• Design and implement automated capabilities for evidence collection, validation, normalization, routing, status tracking, and reporting using customer-approved technologies.

• Integrate ATO automation solutions with security scanning tools, Software Bill of Materials (SBOM) and Software Composition Analysis (SCA) data, vulnerability management systems, workflow platforms, repositories, and systems of record.

• Develop rules and policy checks that promote consistency across security assessment and authorization workflows while preserving government decision-making authority.

• Create dashboards and decision-support tools that provide visibility into evidence status, security findings, dependencies, exceptions, and authorization readiness.

• Collaborate with cybersecurity, software development, platform engineering, integration, data, and government stakeholders to validate automation logic and maintain end-to-end traceability.

• Develop and maintain automated tests, configuration documentation, operational runbooks, Architecture Decision Records (ADRs), change documentation, and release artifacts.

• Support continuous improvement of authorization processes by identifying opportunities to reduce manual effort, strengthen evidence quality, and improve workflow efficiency.

Requirements:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Engineering, or a related technical field, with at least 10 years of professional experience.

• Senior industry-level professional certification, such as CISSP or an equivalent credential.

• Experience with Risk Management Framework (RMF) and ATO processes, security assessments and evidence management, governance, risk and compliance (GRC) workflows, or comparable security authorization activities.

• Demonstrated ability to automate workflows, evidence collection, data processing, reporting, or compliance activities using software development, scripting, APIs, or approved technology platforms.

• Working knowledge of security controls, assessment evidence, vulnerability findings, traceability requirements, and government authorization processes.

• Understanding of NIST RMF principles and NIST Special Publication 800-53 security and privacy controls.

• Experience with ATO and security evidence automation or GRC and assessment workflow platforms is preferred.

• Familiarity with Python or comparable scripting languages, REST APIs, security scanning tools, and SBOM data is an advantage.

• Experience using tools such as Jira, Confluence, GitLab, and AWS is preferred.

• Strong analytical and problem-solving skills, with the ability to translate complex security and compliance requirements into practical automation solutions.

• Excellent communication and collaboration skills, with the ability to work effectively across technical teams and government stakeholders.

• Ability to obtain a 6c Public Trust clearance; an active Secret clearance is highly preferred.

• U.S. citizenship is required.

• Must be able to meet applicable federal background investigation and security requirements.

Benefits:

• Competitive salary, with the range to be determined. Compensation will depend on location, education, skills, qualifications, experience, work schedule, and contract-related considerations.

• Multiple medical insurance options, including HMO and high-deductible health plans.

• Health Savings Accounts (HSAs) and Flexible Spending Accounts (FSAs).

• Comprehensive dental and vision coverage.

• Short-term and long-term disability insurance.

• Life insurance.

• 401(k) plan with employer matching.

• Paid time off (PTO) and floating federal holiday options.

• Flexible work environment and remote working arrangements.

• Certification incentive program that recognizes and rewards professional certifications aligned with business needs.

• Opportunities for professional development and continued learning.

• Collaborative team culture focused on accountability, innovation, employee recognition, and work-life balance.