Security/ATO Automation Engineer

Role overview

Design and build automation that makes security authorization work more traceable, consistent, and efficient. The role connects evidence, assessment findings, workflow progress, and policy checks to support authorization decisions while leaving decision authority with government stakeholders. This is a remote position and is contingent on a contract award.

Responsibilities

- Review authorization workflows, evidence needs, control data, approvals, and manual tasks to identify where automation can help. - Build capabilities to collect, validate, normalize, route, track, and report on security evidence. - Connect approved automation with security scanning, vulnerability, software component, workflow, repository, and system-of-record tools. - Create policy checks and workflow rules that support consistent reviews without making authorization decisions. - Develop dashboards showing evidence progress, findings, dependencies, exceptions, and readiness. - Coordinate with security, development, platform, data, integration, and government stakeholders to validate workflows and preserve traceability. - Produce automated tests, configuration records, runbooks, architecture decision records, change documentation, and release materials.

Requirements

- A relevant bachelor’s degree and at least 10 years of professional experience. - A senior industry certification, such as CISSP. - Experience with RMF/ATO, security assessments and evidence, GRC workflows, or comparable authorization work. - Demonstrated ability to automate workflows, evidence, data, reporting, or compliance tasks using software, scripts, APIs, or approved platforms. - Working knowledge of security controls, assessment evidence, vulnerability findings, traceability, and government authorization processes. - U.S. citizenship and ability to obtain a 6c Public Trust; an active Secret clearance is strongly preferred.

Nice to have

- Familiarity with NIST RMF and SP 800-53, authorization evidence automation, or GRC workflow platforms. - Experience with Python or similar scripting, REST APIs, security scanning or SBOM data, Jira, Confluence, GitLab, or AWS.

Benefits and work setup

The position is remote and contract-award dependent. Listed benefits include health, dental, vision, disability and life coverage, retirement plan matching, paid time off, floating federal holidays, and incentives for relevant certifications.