Security/ATO Automation Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Evaluate authorization workflows, evidence requirements, assessment activities, control data, approvals, and recurring manual processes to pinpoint automation prospects.

• Create automated systems for evidence collection, validation, normalization, routing, status tracking, and reporting using technologies sanctioned by the customer.

• Integrate ATO automation with security scanning, SBOM/SCA, vulnerability, workflow, data, repository, and system-of-record functionalities as per customer approval.

• Establish rules and policy checks that support consistent assessment and authorization workflows while preserving Government decision authority.

• Design dashboards and decision-support views that display evidence status, findings, dependencies, exceptions, and readiness information.

• Work collaboratively with security, development, platform, integration, data, and Government stakeholders to validate automation logic and ensure traceability.

• Produce automated tests, configuration documentation, runbooks, ADRs, change documentation, and release artifacts.

⛳️ Requirements

• A Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Engineering, or a related field, accompanied by 10+ years of experience.

• A senior industry certification such as CISSP.

• Experience with RMF/ATO processes, security assessment/evidence activities, governance-risk-compliance workflows, or similar security authorization functions.

• Proven ability to automate workflows, evidence, data, reporting, or compliance activities through software, scripting, APIs, or authorized platforms.

• Familiarity with security controls, assessment evidence, vulnerability/security findings, traceability, and Government authorization procedures.

• Capability to obtain a 6c Public Trust.

• U.S. Citizenship is mandatory.

• An active Secret clearance is strongly preferred.

• Preferred knowledge of NIST RMF and NIST SP 800-53 concepts.

• Preferred experience in ATO/evidence automation.

• Preferred familiarity with GRC or assessment workflow platforms.

• Preferred skills in Python or similar scripting languages.

• Preferred experience with REST APIs.

• Preferred knowledge of security scanning/SBOM data.

• Preferred experience with Jira/Confluence/GitLab.

• Preferred experience with AWS.

🏝️ Benefits

• Certification incentive program.

• Paid Time Off (PTO).

• Options for floating federal holidays.

• HMO insurance plans.

• High Deductible health plans with Health Savings Accounts (HSAs).

• Flexible Spending Accounts (FSAs).

• Comprehensive dental plans.

• Vision insurance.

• Short-term and long-term disability insurance.

• Life insurance.

• 401(k) matching.

• Flexible work environment.

• Support for professional development through certification incentives.