Security/ATO Automation Engineer
Core
Design and implement automation solutions to streamline security authorization and Authority to Operate (ATO) processes for federal government systems, transforming manual compliance activities into efficient workflows.
Role type
Senior Security/ATO Automation Engineer
Builds
Automated capabilities for evidence collection, validation, normalization, routing, status tracking, and reporting; dashboards and decision-support tools.
Domain
Federal government cybersecurity, privacy, and Risk Management Framework (RMF)
Required skills
Automation of security workflows and evidence management, Risk Management Framework (RMF) and ATO processes, GRC workflows, Software Bill of Materials (SBOM) and Software Composition Analysis (SCA) integration, Vulnerability management systems integration, Workflow platform integration, Security scanning tools integration, Policy check development, Dashboard and decision-support tool creation, Technical scripting and API development
Preferred skills
ATO and security evidence automation platforms, GRC and assessment workflow platforms, Python or comparable scripting languages, REST APIs, Jira, Confluence, GitLab, AWS, Active Secret clearance
Technologies
Python, REST APIs, Jira, Confluence, GitLab, AWS, Security scanning tools, SBOM tools, SCA tools, Vulnerability management systems, Workflow platforms
Responsibilities
Analyze existing authorization workflows to identify automation opportunities, Design and implement automated capabilities for evidence collection and reporting, Integrate ATO solutions with security scanning and vulnerability management systems, Develop rules and policy checks for security assessment workflows, Create dashboards and decision-support tools for authorization readiness, Collaborate with cybersecurity, development, and government stakeholders to validate automation logic, Develop and maintain automated tests, documentation, and release artifacts
Seniority
Senior, hands-on IC
