[Remote] Security/ATO Engineer

Note: The job is a remote job and is open to candidates in USA. ICF is an information technology and management consulting provider offering strategic technology solutions for public- and private-sector clients. The Security/ATO Engineer will coordinate and document security engineering and authorization activities, track and remediate security requirements and findings, review technical artifacts, and support security controls, DevSecOps, and authorization-readiness activities.

Responsibilities

• Translate applicable security requirements into actionable engineering and documentation tasks
• Coordinate security controls evidence, assessment activities, findings, and remediation tracking
• Review architecture, configurations, code-quality output, and test evidence for security concerns
• Partner with developers and DevSecOps personnel to address vulnerabilities and secure delivery pipelines
• Maintain security risks, issues, decisions, and authorization artifacts
• Support client reviews, status reporting, and authorization-readiness activities

Skills

• Candidate must reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S
• Candidate must have lived in the U.S. for three (3) full years out of the last five (5) years
• Candidate must be able to pass successful Public Trust background check
• Ship is required by the federal government for this position
• Minimum five years of experience supporting federal information-system security, assessment, or authorization activities
• Bachelor's degree in cybersecurity, information systems, or a related field; directly related experience may be considered in place of education
• Experience documenting and tracking security controls, evidence, findings, and remediation actions
• Working knowledge of secure software development, vulnerability management, and security testing
• Ability to communicate security requirements to technical and nontechnical stakeholders
• Ability to work effectively in Agile delivery teams and collaborate with government and contractor stakeholders
• Relevant federal security, cloud, or information-assurance certification
• Experience with Agile modernization programs and CI/CD security controls
• Highly effective analytical, problem-solving, and decision-making capabilities
• Excellent communication and interpersonal skills to work effectively across business, technical, and client teams
• Organized, detail-oriented, and able to prioritize multiple assignments in a delivery-focused environment

Benefits

• Remote work is authorized. Must support US Eastern time zone working hours.

Company Overview