Security/ATO Engineer

ICF is a global advisory and technology services provider that combines expertise and technology to help clients solve complex challenges. The Security/ATO Engineer will coordinate and document security engineering and authorization activities for a government modernization effort, including tracking security requirements, evidence, findings, and remediation. The role will review technical artifacts, partner with developers and DevSecOps personnel, and support client reviews and authorization-readiness activities.

Responsibilities:

• Translate applicable security requirements into actionable engineering and documentation tasks
• Coordinate security controls evidence, assessment activities, findings, and remediation tracking
• Review architecture, configurations, code-quality output, and test evidence for security concerns
• Partner with developers and DevSecOps personnel to address vulnerabilities and secure delivery pipelines
• Maintain security risks, issues, decisions, and authorization artifacts
• Support client reviews, status reporting, and authorization-readiness activities

Requirements:

• Candidate must reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S
• Candidate must have lived in the U.S. for three (3) full years out of the last five (5) years
• Candidate must be able to pass successful Public Trust background check
• US Citizenship is required by the federal government for this position
• Minimum five years of experience supporting federal information-system security, assessment, or authorization activities
• Bachelor's degree in cybersecurity, information systems, or a related field; directly related experience may be considered in place of education
• Experience documenting and tracking security controls, evidence, findings, and remediation actions
• Working knowledge of secure software development, vulnerability management, and security testing
• Ability to communicate security requirements to technical and nontechnical stakeholders
• Ability to work effectively in Agile delivery teams and collaborate with government and contractor stakeholders
• Relevant federal security, cloud, or information-assurance certification
• Experience with Agile modernization programs and CI/CD security controls
• Highly effective analytical, problem-solving, and decision-making capabilities
• Excellent communication and interpersonal skills to work effectively across business, technical, and client teams
• Organized, detail-oriented, and able to prioritize multiple assignments in a delivery-focused environment