ato jobs in San Diego

Senior Forward Deployed Engineer responsible for deploying, configuring, and troubleshooting complex cloud-native systems in secure, production Government environments. You will serve as the technical bridge between operational edge teams and core development, translating operational needs into clear requirements while diagnosing complex application, networking, and data synchronization issues.…See more You must hold an active TS/SCI clearance and have 5+ years of platform engineering, DevOps, or SRE experience with demonstrated expertise in AWS GovCloud, container orchestration, CI/CD pipelines, and infrastructure-as-code in FedRAMP-authorized environments at IL4/IL5/IL6. You will lead customer discovery sessions, coordinate escalations with software engineering, and communicate technical constraints and remediation plans to both customers and Program Management.

This role administers and customizes BMC Remedy AR System 9.1 and associated ITSM modules (Smart IT, Digital Workplace, Atrium CMDB) for a government enterprise platform. The engineer will lead upgrades, patches, migrations, develop workflows and integrations using REST/SOAP APIs, automate tasks with Python/PowerShell, maintain compliance with RMF/ATO requirements, and provide Tier 3 support.…See more Requires 5+ years enterprise systems engineering, 3+ years BMC Remedy administration, strong CMDB expertise, SQL/Oracle knowledge, and an active Secret-level security clearance with IAT Level II certification.

This role owns the design, configuration, administration, and operation of BMC Remedy AR System 9.1 and related ITSM modules (Incident, Problem, Change, Request, Asset, Knowledge) for an enterprise government client. The engineer will lead system upgrades and migrations, optimize CMDB data quality and reconciliation, automate service request workflows using Python/PowerShell, manage integrations via REST/SOAP APIs, ensure security compliance (RMF/ATO), and provide Tier 3 support while mentoring junior admins.…See more The position requires 5+ years in systems engineering and 3+ years hands-on BMC Remedy administration, with demonstrated expertise in AR System workflows, database administration (Oracle/SQL Server), and ITIL process implementation.

Design, build, and operate an enterprise ITSM platform centered on BMC Remedy AR System 9.1, managing the full application stack (Incident, Problem, Change, Request, Knowledge, Asset modules) plus Smart IT, Digital Workplace, and CMDB integrations. Lead system upgrades, patches, schema migrations, and maintain security compliance per RMF/ATO requirements.…See more Automate routine tasks and deployments using Python and/or PowerShell, optimize CMDB data quality, and provide Tier 3 support and mentorship to junior administrators.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. The role requires deep expertise in the Risk Management Framework, including designing and tailoring security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing comprehensive A&A documentation (SSP, SAP, SARs).…See more Responsibilities include adherence to eMASS scheduled tasking, quarterly IV&V and STIG checks, annual security reviews, monthly POA&M updates, and managing DISA circuit connections and inheritance workflows. The position requires 10+ years of cybersecurity or incident-response experience and one of several security certifications (CASP+, CAP, CISM, CISSP, or GSLC).

Senior Cyber Systems Engineer responsible for developing and maintaining RMF artifacts (SSPs, SARs, SAPs, POA&Ms), coordinating with Navy Authorizing Officials and Security Control Assessors, and managing cybersecurity authorization packages for ATO/IATT/IATO activities. The role involves vulnerability remediation, STIG compliance, access control policy development, patch management, and server/network infrastructure oversight.…See more Requires mastery of the Risk Management Framework, CI/CD security pipelines, container hardening (Docker/Kubernetes), infrastructure-as-code tools (Terraform, Ansible), and automated security assessment tools (ACAS/Nessus). Serves as Information Systems Security Manager (ISSM) for product ATOs and coordinates with government agencies to ensure DoD and Navy cyber security requirements are met.

Network Engineer III will design, implement, and maintain enterprise network infrastructure for a DoD environment, configuring and troubleshooting routers, switches, firewalls, and security devices. The role requires hands-on expertise in TCP/IP, OSPF, VLANs, IPsec, and network segmentation, with responsibility for vulnerability remediation, STIG compliance, and RMF requirements.…See more The engineer will coordinate cross-functional teams to resolve connectivity and interoperability issues, maintain network documentation and baselines, and support system integrations and upgrades in classified or highly regulated DoD networks. A Secret-level DoD security clearance is required, along with 5–7 years of progressive network engineering experience and Security+ certification.

Cybersecurity Engineer I supporting Assessment & Authorization accreditation efforts under the NIWC PAC contract. Responsibilities include maintaining cybersecurity monitoring operations, conducting vulnerability assessments, performing incident triage, developing A&A documentation (SSP, SAP, SAR), managing POA&Ms, and adhering to Risk Management Framework and eMASS scheduled tasking cycles including STIG checks and ATO/ATC processes.…See more Requires a Bachelor's degree in Cybersecurity, IT, or related field, 1+ years of relevant experience, and IAT II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).

Staff-level hands-on security engineer responsible for designing and implementing platform security across Crucible, cloud infrastructure, and edge deployments. You will write code, harden Kubernetes and Linux systems, build identity and access controls, secure the software supply chain, and automate security into CI/CD workflows.…See more The role requires 8+ years of security engineering experience, strong software engineering skills, deep cloud and container security expertise, and the ability to support accreditation processes like ATO.

This role focuses on integrating unmanned systems and sensors into the Minotaur C4I platform and related targeting software. You'll develop and maintain CI/CD pipelines, implement security compliance (STIGs, ATO, CDS), author technical documentation and SOPs, and serve as the technical liaison across NSW commands and industry partners.…See more The position requires strong proficiency in virtualization (Docker, Kubernetes, Linux), hands-on experience with mission-command software (Minotaur, Compass, uADSI), and demonstrated ability to troubleshoot complex systems and train operators. Regular travel within CONUS is required for training, testing, and coordination.

A Software Integration Engineer at SAIC will design, develop, and deploy a hybrid container/virtualization platform supporting enterprise-scale workloads across on-prem and cloud environments. The role encompasses infrastructure-as-code automation, Kubernetes cluster configuration, DevSecOps practices, and integration of core platform services (identity/SSO, PKI, DNS, logging/SIEM, monitoring, secrets management).…See more Responsibilities include automating verification/validation, establishing CI/CD pipelines and standard operating procedures, supporting GPU-enabled AI/ML workloads, and mentoring junior engineers on cloud-native best practices. The position requires 7–9+ years of experience with cloud platforms (AWS, Azure, GCP), containerization (Kubernetes, Docker), virtualization (VMware, Hyper-V, KVM), infrastructure-as-code tools (Terraform, Ansible, Puppet), and DevSecOps toolchains (ArgoCD, GitLab, Jenkins).

As an Information System Security Manager, you will oversee cybersecurity and operations of multiple classified systems, managing personnel and developing enterprise-wide RMF-based information security policies, standards, and procedures. You will maintain compliance with federal and DoD security standards, create and maintain System Security Plans, conduct continuous monitoring, perform risk assessments, and investigate security incidents.…See more You will coordinate with ISSEs, ISAs, and other security roles to design, procure, build, and accredit complex networks and systems across multiple classification levels. Required: Bachelor's degree in Information Security/IT or equivalent with 10+ years experience, DoD 8570.01-M IAM level III certification (CISSP, CISM, GSLC, or CCISO), RMF and NIST 800-53 expertise, and an active TS/SCI clearance.

A senior DevSecOps engineer will design and operate an automated compliance and AI-driven security platform for DoD and federal healthcare environments. The role demands expertise in DISA STIG automation, container security, RMF/FedRAMP workflows, and SIEM/SOAR integration, with responsibilities spanning secure CI/CD pipeline development, Wazuh and Elastic Stack deployment, OpenRMF automation, and LLM-assisted security operations.…See more The engineer will build hardened base images, maintain compliance pipelines, develop Tines SOAR workflows, and mentor others on architecture decisions.

This role performs continuous security monitoring, compliance assessments, and authorization documentation for Department of Defense information systems. The analyst will use tools like ACAS, SCAP, and eMASS to execute Risk Management Framework processes, conduct security audits, manage Plans of Action and Milestones (POA&Ms), and coordinate STIG remediation with system engineers and administrators.…See more The position requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+), and deep knowledge of RMF, system security plans, and automated compliance scanning. The analyst must be able to work independently, manage competing priorities, and be appointed Information System Security Officer (ISSO) within six months.

This role combines risk management governance with specialty systems engineering (reliability, availability, radiation effects, cybersecurity) and model-based systems engineering (MBSE). The engineer will develop risk policies and mitigation strategies, conduct or facilitate reliability/availability/radiation/cybersecurity analyses, and translate these findings into SysML models in Cameo Systems Modeler for traceability and trade-study analysis.…See more The position requires cross-functional collaboration with program management, design engineering, and logistics to integrate specialty drivers into program baselines and compliance with standards like MIL-STD-785 and NIST RMF.

The Cybersecurity Engineer will coordinate cybersecurity activities including preparation and maintenance of Risk Management Framework (RMF) artifacts, risk and vulnerability assessments across network/system/application domains, and day-to-day cyber operations. The role requires performing compliance testing, implementing security controls and policies, working with tools like eMASS and ACAS, and developing security documentation for DoD/government systems up to TS/SCI classification.…See more The candidate must work independently, identify risks and devise mitigation solutions, and communicate findings to both technical and non-technical stakeholders. A bachelor's degree and DoD 8140 qualification (equivalent to former DoD 8570 IAT II) are required, along with 3+ years in cybersecurity, T&E, or Authorization & Accreditation roles.

This is a senior infrastructure and cybersecurity engineering role requiring 10+ years of experience designing, administering, and securing hybrid/cloud infrastructure across Linux, Windows Server, containerized, and private cloud environments. The engineer will implement security controls aligned with NIST SP 800-53, DISA STIGs, RMF, and Zero Trust principles, support DevSecOps pipelines and CI/CD automation, and use scripting, configuration management, and Infrastructure as Code to streamline builds, patching, hardening, and compliance.…See more The role demands collaboration across cybersecurity, software, infrastructure, and mission teams to troubleshoot complex issues, improve security practices, and communicate technical risks and recommendations.

Design, develop, and deploy a hybrid container/virtualization platform supporting enterprise-scale workloads across on-prem and cloud environments. Own infrastructure automation, CI/CD integration, monitoring, security compliance, and platform service integration (identity, PKI, logging, secrets management).…See more Collaborate with cross-functional teams on incident response, vulnerability remediation, and mentorship of junior engineers in cloud-native and containerization best practices.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation such as System Security Plans (SSP) and Security Assessment Reports (SARs).…See more The role requires in-depth knowledge of the Risk Management Framework, eMASS workflow, DISA compliance, and security categorization overlays. A minimum of 10+ years of cybersecurity or incident response experience is required, along with security certifications such as CISSP, CASP, CISM, CAP, or GSLC.

This role supports cybersecurity engineering and infrastructure security for enterprise, cloud, and classified environments. The engineer will manage vulnerability assessment, system hardening, patching, secure configuration, and DevSecOps pipeline integration across Linux and Windows Server platforms.…See more Responsibilities include compliance support (RMF, ATO, NIST SP 800-53, DISA STIGs), CI/CD security automation, containerized environment hardening, and infrastructure-as-code implementation. Strong technical depth in cloud platforms (AWS/AWS GovCloud), container orchestration, security tooling, and the ability to communicate complex technical and compliance issues to engineering and mission stakeholders are required.

The Information System Security Officer (ISSO) serves as a steward of classified and high-side information systems, ensuring security compliance and operational resilience in accordance with DoD and DCSA standards. The role involves executing Risk Management Framework (RMF) activities, pursuing Authorization to Operate (ATO) via eMASS, conducting vulnerability scanning with tools like Nessus, and maintaining compliance with NISP and federal requirements.…See more Responsibilities include hands-on system administration, security monitoring, patch management, data transfer operations, and collaborative work with industrial security teams to integrate technical and administrative controls. Success requires proven experience processing ATO packages, system administration skills, security compliance knowledge, and the ability to balance rigorous security controls with operational effectiveness.

Senior Systems Engineer responsible for full-lifecycle systems and network engineering for enterprise infrastructure, including design, implementation, integration, upgrade, sustainment, and security. Develops and maintains engineering documentation, assembles test plans and specifications, and supports cybersecurity and Risk Management Framework (RMF) documentation for system accreditation.…See more Conducts site surveys and assessments to recommend optimal configurations, and integrates emerging capabilities including AI, automation tools, and data visualization into enterprise workflows.

Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.…See more Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.

This Platform Engineer III role owns the full lifecycle of infrastructure automation, CI/CD pipelines, and system deployment in a DoD environment. You will manage Git-based repositories, design and execute deployment automation workflows, and support casualty reporting and operational response.…See more Responsibilities include Linux/Windows system configuration, virtualization (VMware, Hyper-V, Docker, Kubernetes), scripting/automation (Python, PowerShell, Bash, Ansible, Terraform), network troubleshooting, cybersecurity compliance (STIGs, RMF, ATO), and root-cause analysis across complex integrated systems. The role requires 6+ years of progressively responsible platform engineering, systems integration, or DevOps experience in DoD, enterprise, or test environments, plus a Secret-level security clearance.

Platform Engineer III will manage and automate software delivery using Git-based repositories, CI/CD pipelines, and configuration version control. The role involves supporting system integration, hardware/software troubleshooting, root cause analysis, and technical documentation across complex DoD and enterprise environments.…See more Requires 6+ years of hands-on experience with Linux, Windows, virtualization (VMware, Hyper-V, Docker, Kubernetes), scripting/automation tools, and network infrastructure. Must develop automation and repeatable processes using Python, PowerShell, Bash, Ansible, Terraform, and similar technologies, while maintaining compliance with cybersecurity standards and STIG requirements.