authority-to-operate-ato jobs in San Diego

CompQsoft seeks a System Administrator to maintain operational readiness and security of critical DoD information systems, with primary focus on cybersecurity compliance and specialized lab environment sustainment. The role requires leading DISA STIG application, executing patching and vulnerability scanning (ACAS/Nessus), managing ATO packages and Plans of Action & Milestones (POAM), and maintaining baseline configurations across Development, Test, and Pre-Production environments.…See more Responsibilities include RMF documentation, eMASS artifact updates, network coordination with NOC, change management adherence, and help desk support. The candidate must have 4+ years of hands-on system administration in enterprise environments, 2+ years with DoD/Federal systems, Windows Server expertise, and an active DoD Secret clearance with CompTIA Security+ certification.

As an Information System Security Officer (ISSO), you will support Information Assurance and cybersecurity activities for cloud-based and classified DoD systems, with primary focus on Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes to achieve Authority to Operate (ATO) approvals. You will prepare and maintain cybersecurity documentation, evaluate security solutions for compliance with DoD requirements, support security control implementation and assessment, and monitor operational security posture.…See more You will collaborate across engineering, cybersecurity, test & evaluation, and customer teams to resolve security issues and maintain authorization requirements. The role requires 3+ years of industry experience, working knowledge of RMF/DIACAP, IAT/IAM Level I certification (such as Security+), and an active DoD Secret Clearance with ability to obtain TS/SCI.

A DevOps engineer will bridge Plasma Control Systems (PCS) developers and infrastructure operations at a fusion research facility, managing high-availability Proxmox VE virtualization clusters, architecting Ansible-based Infrastructure-as-Code templates, administering CI/CD pipelines, and executing rapid-response patch management and security deployments to meet DOE 48-hour SLAs. The role requires 9+ years of experience with Linux system administration (including real-time OS variants), containerization (Docker), configuration management (Ansible), CI/CD tooling (Jenkins, Travis CI, Circle CI), and scripting (Bash, Python, JavaScript), plus familiarity with DOE/NIST cybersecurity frameworks and ATO compliance in regulated research environments.See more

This role manages continuous software sustainment and operational support for production systems in secure, multi-domain defense environments. You will perform tier 2/3 technical support, proactive vulnerability management, and technical debt remediation while executing zero-downtime deployments using Agile methodologies (Scrum, Kanban, SAFe).…See more You must maintain DISA STIG compliance, implement Risk Management Framework controls, and support Authority to Operate (ATO) activities. The position requires hands-on expertise with Linux and Windows Server administration, shell scripting (Bash/Python/Ansible), virtualization, SIEM/security monitoring, and DoD 8140 cyber workforce certifications.

This role supports cybersecurity and compliance efforts across the Risk Management Framework (RMF) process for DoD programs. Responsibilities include developing and maintaining system security documentation, Plans of Action and Milestones (POA&Ms), assessing security controls, conducting vulnerability scanning and audits, and ensuring continuous monitoring of systems compliance.…See more The position requires IAM Level I certification (DoD 8570.1M), 4+ years of information security or cybersecurity experience, and hands-on proficiency with compliance and vulnerability scanning tools such as Nessus, SCAP, ACAS, and SCC on Windows, Linux, and network devices.

The Cybersecurity Analyst will serve as a technical subject matter expert evaluating the cybersecurity posture of drone systems and components submitted to the Blue UAS Cleared List Program. You will review assessment reports, identify vulnerabilities and residual risks, validate remediation plans, and provide technical recommendations on compliance with NIST frameworks and DoD Risk Management Framework requirements.…See more The role requires expertise in embedded systems security, firmware analysis, wireless communications, encryption, authentication, and supply chain security. You must hold an active DoD 8570/8140 IAM or IAT Level II/III certification (CISSP, CISM, or Security+) and demonstrate proficiency with NIST SP 800-53 and NIST SP 800-161.

The IT Cybersecurity Specialist will architect and implement ServiceNow security controls aligned with DoD cybersecurity requirements, including Role-Based Access Controls, Data Policies, and Edge Encryption. The role requires developing and maintaining RMF/ATO documentation, mapping configurations to NIST SP 800-53/800-171/172 and DoD IL4/IL5 controls, and managing Plans of Action and Milestones for vulnerability remediation.…See more The candidate will conduct continuous monitoring activities, compliance checks, and security assessments to maintain the Blue List platform's Authority to Operate and ensure alignment with DoD Zero Trust Strategy and CUI protection requirements.