Principal Software Assessment Engineer (AHT)

Description

Relocation assistance may be available for this role.

Start requires an active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility.

Travel is about 10% of the time.

The company is the company Defense Systems (NGDS), which is hiring a Secure Access Enablement Engineer for the DAF CLOUDworks program at the Air Force Research Laboratory (AFRL).

You will work on your own as the direct link between DoD security authorities, including the Designated Authorizing Official (DAO) and other Authorizing Officials (AOs), and industry partners working under Other Transaction Authority (OTA) agreements.

Your goal is to make sure every OTA-contracted user, device and service is securely provisioned onto classified cloud platforms while fully meeting RMF, STIG and DISA requirements.

DAF CLOUDworks is a fast-growing secure cloud program with more than 10 teams covering information security, infrastructure development and cloud migration. Beyond operations and sustainment, the work includes changing and improving offerings to add new requirements, boost functionality, gain efficiency or reduce operating and deployment costs.

The team needs someone who communicates well, solves problems and builds lasting working relationships with internal and external stakeholders.

The company is a long-standing aerospace and defense employer working on systems that affect people worldwide.

Responsibilities

• Act as the senior, self-directed point of contact for multiple AOs and the DAO, and shape policy and escalation procedures across the enterprise.
• Oversee the full OTA onboarding portfolio, set the standards and make sure each partner follows the same independent, auditable process.
• Own the risk management posture for the whole onboarding program and influence DAO-level risk acceptance decisions.
• Write concise risk assessments, POA&M updates and DAO/AO briefing packages.
• Produce executive-level briefings, clear compliance documents and independent risk assessments.

Requirements

• Hold one of the following: a high school diploma with 9 years of relevant experience, a bachelor's degree with 5+ years of relevant experience, a master's degree with 3+ years of relevant experience, or a PhD with 1+ years of relevant experience.
• Hold an active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility.
• Be able to obtain IAT Level II certification under DoD 8570.01, such as CompTIA Security+ (formerly CASP+) or CompTIA Security+, within 60 days of your start date.
• Have directly interfaced with DoD security officials, including the Designated Authorizing Official.
• Have a strong working knowledge of RMF, DISA STIG/SRG, ACAS/Tenable Nessus, SCAP and eMASS/XACTA processes.
• Be familiar with Infrastructure as Code (IaC) and languages such as Ansible, Terraform, Bicep, ARM templates, Puppet and Pulumi, among others.
• Have working knowledge of Cloud Service Providers (CSP) operating on government networks.

Conditions

Travel is about 10% of the time.

The application period is estimated at 20 days from the posting date, and may be shortened or extended based on business needs and candidate availability.

Requisition code: CWI2026.

Benefits

• Primary level base salary range is $103,600.00 to $155,400.00. Final pay depends on scope, responsibilities, experience, education, skills and market conditions.
• Depending on the position, you may be eligible for overtime, shift differential and a discretionary annual bonus. Vice President and Director roles may also be eligible for Long Term Incentives.
• Benefits include health insurance, life and disability insurance, a savings plan, company-paid holidays and paid time off (PTO) for vacation and personal business.