ATO Automation Engineer

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely.

We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon contract win.

SkyePoint Decisions is seeking an ATO Automation Engineer to join our team supporting a federal customer. This position is contingent on contract win.

This person designs and implements automation that supports customer authorization activities by integrating security evidence, assessment results, workflow status, policy checks, and decision-support information into traceable ATO processes.

This is a remote position.

Responsibilities:

• Analyze authorization workflows, evidence requirements, assessment activities, control data, approvals, and recurring manual steps to identify automation opportunities.
• Develop automated evidence collection, validation, normalization, routing, status tracking, and reporting capabilities using customer-approved technologies.
• Integrate ATO automation with security scanning, SBOM/SCA, vulnerability, workflow, data, repository, and system-of-record capabilities as approved by the customer.
• Implement rules and policy checks that support consistent assessment and authorization workflows without replacing Government decision authority.
• Develop dashboards and decision-support views that expose evidence status, findings, dependencies, exceptions, and readiness information.
• Collaborate with security, development, platform, integration, data, and Government stakeholders to validate automation logic and maintain traceability.
• Develop automated tests, configuration documentation, runbooks, ADRs, change documentation, and release artifacts.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Engineering, or related field; with 5-8+ years of experience.
• Experience with RMF/ATO processes, security assessment/evidence activities, governance-risk-compliance workflows, or comparable security authorization functions.
• Demonstrated ability to automate workflow, evidence, data, reporting, or compliance activities through software, scripting, APIs, or approved platforms.
• Working knowledge of security controls, assessment evidence, vulnerability/security findings, traceability, and Government authorization processes.
• Ability to obtain a 6c Public Trust. At least an active Secret clearance is highly preferred.
• U.S. Citizenship is required.

Preferred Qualifications:

• NIST RMF and NIST SP 800-53 concepts
• GRC or assessment workflow platforms
• Python or comparable scripting
• REST APIs
• Security scanning/SBOM data
• Jira/Confluence/Git Lab
• AWS

Compensation:

Salary Range: TBD

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal…