Federal Security & ATO Engineer — Remote

ICF; Reston (VA); Remote; USD 99,000 - 168,000; Full time

Job summary

ICF seeks a security-focused professional to translate requirements into engineering tasks and coordinate control evidence for federal programs. You will partner with DevSecOps to remediate vulnerabilities and manage authorization artifacts.

Role requires U.S. citizenship, 5+ years in federal security activities, and ability to work from the U.S. within Eastern Time hours. Remote work is authorized nationwide.

Qualifications

• U.S. citizenship is required by the federal government for this position.
• Minimum five years of experience supporting federal information-system security, assessment, or authorization activities.
• Reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S.
• Pass a successful Public Trust background check.
• Experience documenting and tracking security controls, evidence, findings, and remediation actions.

Responsibilities

• Translate applicable security requirements into actionable engineering and documentation tasks.
• Coordinate security controls evidence, assessment activities, findings, and remediation tracking.
• Review architecture, configurations, code-quality output, and test evidence for security concerns.
• Partner with developers and DevSecOps personnel to address vulnerabilities and secure delivery pipelines.
• Maintain security risks, issues, decisions, and authorization artifacts.
• Support client reviews, status reporting, and authorization-readiness activities.

Skills

U.S. citizenship

Public Trust background check

Federal information-system security

Security assessment experience

Authorization activities

Education

Bachelor's degree in cybersecurity

Job description

ICF seeks a security-focused professional to translate requirements into engineering tasks and coordinate control evidence for federal programs. You will partner with DevSecOps to remediate vulnerabilities and manage authorization artifacts.

Role requires U.S. citizenship, 5+ years in federal security activities, and ability to work from the U.S. within Eastern Time hours. Remote work is authorized nationwide.