Info Assurance Engineer - Cloud & DevSecOps for NGA

CACI; United States; On-site; USD 63,000 - 130,000; Full time

Job summary

CACI is seeking a Mid Security Information Assurance Engineer to join an Agile program delivering GEOINT capabilities to the National Geospatial-Intelligence Agency (NGA). You will work on-site at a Government facility alongside mission stakeholders.

You will engineer security into cloud-native systems, help achieve and maintain ATO, and integrate security controls into CI/CD pipelines. TS/SCI with polygraph eligibility is required; 4+ years of related experience preferred.

Qualifications

• TS/SCI Security Clearance with ability to obtain Polygraph.
• Bachelor's degree in Cybersecurity, Computer Science, or related technical discipline.

Responsibilities

• Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
• Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
• Perform system hardening, vulnerability assessment, and remediation across development and production environments.
• Support security assessment and authorization activities in coordination with Government ISSMs and assessors.
• Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure.
• Advise development teams on secure design, secure coding, and security architecture decisions.
• Document security engineering artifacts supporting ATO and continuous monitoring.

Skills

Security engineering

RMF implementation

DevSecOps

NIST RMF

Education

Bachelor's degree in Cybersecurity/Computer Science

Tools

STIG hardening

ACAS/Nessus

Job description

CACI is seeking a Mid Security Information Assurance Engineer to join an Agile program delivering GEOINT capabilities to the National Geospatial-Intelligence Agency (NGA). You will work on-site at a Government facility alongside mission stakeholders.

You will engineer security into cloud-native systems, help achieve and maintain ATO, and integrate security controls into CI/CD pipelines. TS/SCI with polygraph eligibility is required; 4+ years of related experience preferred.