Remote job
ATO Specialist
Job details
About this role
Role overview
Own the security authorization and compliance lifecycle for a veteran-facing federal conversational system. This role serves as the primary security partner for engineering, program leadership, and government stakeholders, ensuring that controls, documentation, evidence, and ongoing monitoring remain aligned with federal requirements and ready for assessment.
Responsibilities
- Lead initial authorization, reauthorization, and continuous-monitoring activities across the system lifecycle. - Act as the central security point of contact for program stakeholders, coordinating decisions, milestones, evidence requests, and security-related communications. - Create, maintain, and update core authorization and privacy artifacts, including system security plans, plans of action and milestones, security assessment reports, privacy impact assessments, and supporting evidence. - Partner with engineering and program teams to confirm that security controls are implemented, documented, tested, and sustained. - Coordinate control assessments, audit preparation, evidence collection, and responses to findings or remediation requests. - Promote practical security improvements, including the application of Zero Trust principles within a federal environment.
Requirements
- Demonstrated experience leading Authority to Operate processes for federal information systems. - Strong working knowledge of the Risk Management Framework and federal security requirements. - Experience producing and maintaining federal security documentation, including SSPs, POA&Ms, PIAs, and SARs. - Familiarity with Zero Trust Architecture and its application to government systems. - Bachelor’s degree. - U.S. work authorization; depending on contract requirements, U.S. citizenship and the ability to obtain and maintain a federal background investigation or security clearance may be required.
Benefits and work setup
- Fully remote work arrangement. - Annual stipend. - Comprehensive benefits package. - Employer-matched 401(k) plan. - Flexible paid time off and paid holidays.