Security/ATO Automation Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security/ATO Automation Engineer based in the United States.

As a Security/ATO Automation Engineer, you will design and implement automation solutions that streamline security authorization and Authority to Operate (ATO) processes for federal government systems. Supporting a major federal cybersecurity and privacy program, you will help transform complex, manual compliance activities into efficient, traceable, and reliable workflows. You will integrate security evidence, assessment results, vulnerability data, and approval processes to improve visibility and support informed authorization decisions. Working closely with cybersecurity, software development, platform, data, and government stakeholders, you will ensure automation solutions align with security requirements and operational needs. This remote opportunity is suited to an experienced security professional who combines strong technical skills with an understanding of federal risk management and governance processes. Please note that the position is contingent upon the successful award of the underlying contract.

• Analyze existing authorization workflows, evidence requirements, assessment activities, security control data, approvals, and recurring manual processes to identify opportunities for automation.

• Design and implement automated capabilities for evidence collection, validation, normalization, routing, status tracking, and reporting using customer-approved technologies.

• Integrate ATO automation solutions with security scanning tools, Software Bill of Materials (SBOM) and Software Composition Analysis (SCA) data, vulnerability management systems, workflow platforms, repositories, and systems of record.

• Develop rules and policy checks that promote consistency across security assessment and authorization workflows while preserving government decision-making authority.

• Create dashboards and decision-support tools that provide visibility into evidence status, security findings, dependencies, exceptions, and authorization readiness.

• Collaborate with cybersecurity, software development, platform engineering, integration, data, and government stakeholders to validate automation logic and maintain end-to-end traceability.

• Develop and maintain automated tests, configuration documentation, operational runbooks, Architecture Decision Records (ADRs), change documentation, and release artifacts.

• Support continuous improvement of authorization processes by identifying opportunities to reduce manual effort, strengthen evidence quality, and improve workflow efficiency.

Requirements:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Engineering, or a related technical field, with at least 10 years of professional experience.

• Senior industry-level professional certification, such as CISSP or an equivalent credential.

• Experience with Risk Management Framework (RMF) and ATO processes, security assessments and evidence management, governance, risk and compliance (GRC) workflows, or comparable security authorization activities.

• Demonstrated ability to automate workflows, evidence collection, data processing, reporting, or compliance activities using software development, scripting, APIs, or approved technology platforms.

• Working knowledge of security controls, assessment evidence, vulnerability findings, traceability requirements, and government authorization processes.

• Understanding of NIST RMF principles and NIST Special Publication 800-53 security and privacy controls.

• Experience with ATO and security evidence automation or GRC and assessment workflow platforms is preferred.

• Familiarity with Python or comparable scripting languages, REST APIs, security scanning tools, and SBOM data is an advantage.

• Experience using tools such as Jira, Confluence, GitLab, and AWS is preferred.

• Strong analytical and problem-solving skills, with the ability to translate complex security and compliance requirements into practical automation solutions.

• Excellent communication and collaboration skills, with the ability to work effectively across technical teams and government stakeholders.

• Ability to obtain a 6c Public Trust clearance; an active Secret clearance is highly preferred.

• U.S. citizenship is required.

• Must be able to meet applicable federal background investigation and security requirements.

Benefits:

• Competitive salary, with the range to be determined. Compensation will depend on location, education, skills, qualifications, experience, work schedule, and contract-related considerations.

• Multiple medical insurance options, including HMO and high-deductible health plans.

• Health Savings Accounts (HSAs) and Flexible Spending Accounts (FSAs).

• Comprehensive dental and vision coverage.

• Short-term and long-term disability insurance.

• Life insurance.

• 401(k) plan with employer matching.

• Paid time off (PTO) and floating federal holiday options.

• Flexible work environment and remote working arrangements.

• Certification incentive program that recognizes and rewards professional certifications aligned with business needs.

• Opportunities for professional development and continued learning.

• Collaborative team culture focused on accountability, innovation, employee recognition, and work-life balance.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1