About The Position

Our client is seeking an experienced Security Assessment & Authorization (SA&A) / Authorization to Operate (ATO) Specialist to support a private cloud environment. This role is focused on developing high-quality security documentation and navigating the ATO process within a complex, modern infrastructure that includes Kubernetes-based platforms. This is not a hands-on engineering or deployment role. Instead, the successful candidate will bring a strong understanding of cloud-native technologies and security frameworks, with the ability to translate technical architectures into clear, compliant, and defensible ATO documentation.

Requirements

  • Demonstrated experience producing SA&A and ATO documentation within a Government of Canada department or Crown corporation
  • Strong understanding of GC security frameworks, policies, and accreditation processes
  • Experience supporting cloud or private cloud environments
  • Working knowledge of Kubernetes and containerized architectures (must be able to understand and document, not necessarily build or deploy)
  • Experience with Threat and Risk Assessments (TRA) and security control documentation
  • Ability to engage with both technical and non-technical stakeholders

Nice To Haves

  • Experience with modern cloud platforms (e.g., Azure, GCP etc.) in a secure or regulated environment
  • Familiarity with DevSecOps concepts and container security practices
  • Previous experience supporting large-scale digital transformation or modernization initiatives

Responsibilities

  • Lead the development and maintenance of SA&A and ATO documentation for private cloud environments
  • Interpret and document security controls for cloud-native architectures, including Kubernetes
  • Work closely with technical teams to understand system design, data flows, and security posture
  • Translate technical implementations into clear, structured documentation aligned with Government of Canada security standards
  • Support risk assessments, threat and risk analyses (TRA), and mitigation strategies
  • Contribute to the overall ATO lifecycle, including preparation, review, and audit readiness
  • Provide guidance on security documentation best practices and compliance requirements
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service