TS/SCI IA Engineer - Government Cloud & DevSecOps

CACI; Denver (CO); On-site; USD 63,300 - 129,700; Full time

Job summary

CACI is seeking a Mid Security Information Assurance Engineer to embed with an Agile program delivering GEOINT capabilities to NGA. The role requires on-site work at a Government facility, close collaboration with mission stakeholders and system owners, and a focus on building security into cloud-native systems from the ground up.

You will play a direct role in achieving and maintaining system authorizations (ATO) and continuous monitoring, supporting RMF, STIGs, and DevSecOps practices across

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related technical discipline or equivalent experience.
• 4+ years of security engineering or information assurance experience.
• Experience implementing NIST RMF controls on DoD or IC systems.
• Hands-on experience with STIG hardening and vulnerability scanning (ACAS/Nessus).
• DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent).

Responsibilities

• Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
• Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
• Perform system hardening, vulnerability assessment, and remediation across development and production environments.
• Support security assessment and authorization activities with Government ISSMs and assessors.
• Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure.
• Advise development teams on secure design, secure coding, and security architecture decisions.
• Document security engineering artifacts supporting ATO and continuous monitoring.

Skills

Security engineering

DoD/IC security

On-site collaboration

Education

Bachelor's degree in Cybersecurity/CS or related

Tools

ACAS/Nessus

STIG hardening

CI/CD security integration

Job description

CACI is seeking a Mid Security Information Assurance Engineer to embed with an Agile program delivering GEOINT capabilities to NGA. The role requires on-site work at a Government facility, close collaboration with mission stakeholders and system owners, and a focus on building security into cloud-native systems from the ground up.

You will play a direct role in achieving and maintaining system authorizations (ATO) and continuous monitoring, supporting RMF, STIGs, and DevSecOps practices across