Cloud Security Engineer for ATO & Automation

ASM Research, An Accenture Federal Services Company; Columbus (OH); On-site; USD 120,000 - 132,000; Full time

Job summary

ASM Research is seeking a Security Engineer to join a cross‑functional Agile team in Columbus, OH. You will design, implement, and maintain security controls for cloud and data, work on risk mitigation, and document ATO packages with ongoing audits.

The role requires a bachelor’s degree and 4+ years in security operations (federal experience preferred). Familiarity with RMF, ATO/POA&M, Zero Trust, and Okta is expected. Strong collaboration and communication are essential.

Qualifications

• Bachelor's degree and 4+ years in compliance, identity management, networking, systems or cloud security.
• At least 2 years federal work experience on security operations with ATO/change-control/release‑approval.
• Knowledge of NIST 800-53 RMF and A&A/ATO processes including POA&M management.
• Familiarity with FIPS/FISMA and Zero Trust Architecture; Okta exposure; MITRE ATT&CK.
• Hands-on with artifact repositories such as CSAM, Xacta, eMASS, CFACTS.
• Strong communication, documentation, and stakeholder liaison skills.

Responsibilities

• Design, implement, and maintain security solutions, controls, and architecture for cloud, apps, and data.
• Identify and mitigate risks through threat modeling, code reviews, and vulnerability analysis.
• Document audit and security requirements; conduct walkthroughs; perform control self‑assessments.
• Develop and maintain A&A documentation and assemble ATO packages; support third‑party audits.
• Develop POA&Ms; monitor policy compliance; mitigate non‑compliant controls.
• Automate security workflows including API keys, storage, rotation, certs, and access management.
• Evaluate risk with monitoring tools; support scanning and rapid incident response.
• Perform data classification and security assessments; research threats and technologies.
• Mature security/privacy program; coordinate with client CISO and Security Leadership.
• Use Jira to manage tasks and report status to client/executives; collaborate with teams.
• Participate in Agile/SAFe activities; backlog refinement and sprint planning.
• Follow CMS security, accessibility, docs, CM, and SDLC requirements.
• Provide technical guidance and knowledge sharing to the team.

Skills

Security engineering

Threat modeling

Vulnerability analysis

NIST RMF

A&A/ATO processes

Okta

MITRE ATT&CK

Zero Trust Architecture

Jira

Scripting

Penetration testing

Security certifications

Education

Bachelor's degree

Tools

Jira

CSAM

Xacta

eMASS

CFACTS

Job description

ASM Research is seeking a Security Engineer to join a cross‑functional Agile team in Columbus, OH. You will design, implement, and maintain security controls for cloud and data, work on risk mitigation, and document ATO packages with ongoing audits.

The role requires a bachelor’s degree and 4+ years in security operations (federal experience preferred). Familiarity with RMF, ATO/POA&M, Zero Trust, and Okta is expected. Strong collaboration and communication are essential.