Security/ATO Automation Engineer

SkyePoint Decisions

5d•Remote

About The Position

SkyePoint Decisions is seeking a Security/ATO Automation Engineer to support a federal customer. This position is contingent upon a contract win and is remote. The engineer designs and implements automation to support customer authorization activities by integrating security evidence, assessment results, workflow status, policy checks, and decision-support information into traceable ATO processes. The role focuses on identifying and automating recurring authorization activities, integrating approved security and workflow capabilities, and providing reliable evidence and decision-support views. The engineer collaborates with technical and Government stakeholders to validate automation and preserve traceability. Automation supports authorization processes without replacing Government decision authority.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Engineering, or a related field, with 10+ years of experience.
Senior industry professional certification such as CISSP.
Experience with RMF/ATO processes, security assessment/evidence activities, governance-risk-compliance workflows, or comparable security authorization functions.
Demonstrated ability to automate workflow, evidence, data, reporting, or compliance activities through software, scripting, APIs, or approved platforms.
Working knowledge of security controls, assessment evidence, vulnerability/security findings, traceability, and Government authorization processes.
Ability to obtain a 6c Public Trust.
U.S. citizenship required.

Nice To Haves

At least an active Secret clearance is highly preferred.
Knowledge of NIST RMF and NIST SP 800-53 concepts.
ATO/evidence automation experience.
Experience with GRC or assessment workflow platforms.
Python or comparable scripting experience.
REST API experience.
Experience with security scanning/SBOM data.
Experience with Jira, Confluence, or GitLab.
AWS experience.

Responsibilities

Analyze authorization workflows, evidence requirements, assessment activities, control data, approvals, and recurring manual steps to identify automation opportunities.
Develop automated evidence collection, validation, normalization, routing, status tracking, and reporting capabilities using customer-approved technologies.
Integrate ATO automation with customer-approved security scanning, SBOM/SCA, vulnerability, workflow, data, repository, and system-of-record capabilities.
Implement rules and policy checks to support consistent assessment and authorization workflows without replacing Government decision authority.
Develop dashboards and decision-support views showing evidence status, findings, dependencies, exceptions, and readiness information.
Collaborate with security, development, platform, integration, data, and Government stakeholders to validate automation logic and maintain traceability.
Develop automated tests, configuration documentation, runbooks, ADRs, change documentation, and release artifacts.

Benefits

Certification incentive program.
Paid time off (PTO).
Floating federal holiday options.
Several insurance options, including HMO and High Deductible plans with Health Savings Accounts (HSAs).
Flexible Spending Accounts (FSAs).
Dental insurance.
Vision insurance.
Short- and long-term disability insurance.
Life insurance.
401(k) with matching.
Flexible work environment.
Flexible scheduling to help balance work and personal life.