DevSecOps Cybersecurity Engineer - ATO & Compliance

Zaden Technologies, Inc.; Denver (CO); On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Paid holidays

Flexible PTO

Employer 401k contributions

Health insurance for dependents

Growth opportunities

Job summary

Zaden Technologies in Aurora, CO is seeking a Cybersecurity Engineer to bring a DevSecOps mindset to ATO, wiring evidence collection directly into the CI/CD pipeline so authorization keeps pace with continuous deployment.

You will own SSPs, RMF/ATO artifacts, SBOMs, and container security tooling, and coordinate with government security stakeholders to automate evidence generation and remediation within a modern delivery system.

Qualifications

• Active TS/SCI clearance, or current TS/SCI eligibility, and U.S. citizenship.
• 4+ years in cybersecurity for DoD or federal systems with direct RMF/A&A package experience (SSP, POA&M, ATO artifacts).
• DoD 8140/8570 baseline certification (Security+ CE or equivalent minimum).
• Working knowledge of container security: image scanning, SBOMs, and static/dynamic analysis tooling.
• Comfort working inside a CI/CD pipeline and automating evidence generation rather than assembling it manually.

Responsibilities

• Prepare and maintain security packages for containerized deployments, including SSP, ATO artifacts, and supporting RMF documentation.
• Build automated evidence collection into the CI/CD pipeline so SBOMs, scan outputs, and compliance artifacts generate continuously rather than at release time.
• Own static/dynamic analysis tooling (SonarQube or similar) and container image scanning as part of the delivery pipeline.
• Coordinate package submission and remediation with government security stakeholders, keeping pace with an evidence-as-code approach to ATO.
• Partner with the DevSecOps team to treat authorization gates like any other pipeline gate: automated, repeatable, and continuously validated.
• Flex into DevSecOps tasks as workload allows.

Skills

DevSecOps

CI/CD automation

Container security

RMF/A&A familiarity

Scripting

Education

Security+ CE or equivalent

DoD 8140/8570 baseline certification

Tools

SonarQube

Kubernetes

SBOM tooling

Job description

Zaden Technologies in Aurora, CO is seeking a Cybersecurity Engineer to bring a DevSecOps mindset to ATO, wiring evidence collection directly into the CI/CD pipeline so authorization keeps pace with continuous deployment.

You will own SSPs, RMF/ATO artifacts, SBOMs, and container security tooling, and coordinate with government security stakeholders to automate evidence generation and remediation within a modern delivery system.