SkyePoint Decisions, Inc.

Assessor

• Implement security strategies tailored to cloud-based environments, including Amazon AWS, Google Cloud Platform, and Microsoft Azure
• Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure
• Analyze cloud security requirements and recommend improvements
• Analyze vulnerabilities and risks from Cloud Security Posture Management (CSPM) tools to identify ineffective or missing security controls
• Conduct comprehensive cloud assessments of implemented controls and control enhancements to determine their effectiveness
• Prepare security compliance reports containing cloud assessment results and findings
• Complete and execute a cloud Security Controls Test (SCT) plan
• Provide the final cloud analysis report and summarize detailed findings
• Review and analyze cloud system artifacts for accuracy and completeness in support of Authorization to Operate (ATO) requests

Explore AWS Assessor at SkyePoint Decisions, Inc.. Review requirements and application details.

AWS Assessor

Security Engineer

• Support Security Authorization (SA) and Ongoing Security Authorization (OSA) activities in accordance with the Risk Management Framework (RMF)
• Review security documentation and system artifacts for accuracy and completeness in support of Authority to Operate (ATO) packages
• Assist with development, review, and maintenance of ATO packages prior to submission for approval
• Review and provide input on SSPs, PIAs, Risk Assessments, contingency plans, and POA&Ms
• Support continuous monitoring and ongoing authorization activities, including reviewing security controls and assessment documentation
• Track ATO and security authorization renewal dates and coordinate with System Owners, ISSOs, and stakeholders
• Review closed POA&Ms for completeness and compliance
• Maintain assessment and audit documentation within CSAM or other designated GRC tools
• Assist with audit, compliance, and data-call responses by coordinating with stakeholders
• Support development and maintenance of security authorization processes, procedures, and documentation

Explore Security Control Assessor at SkyePoint Decisions, Inc.. Review requirements and application details.

Security Control Assessor

• Provide overall SA/OSA subject matter expertise to the Information System Security and Authorization program
• Provide guidance and technical expertise through standards, policies, procedures, and program oversight
• Review and guide OSA program and continuous monitoring capabilities, PIAs, SSPs, and identity updates
• Review and advise on Privacy Impact Assessments
• Review and advise on Third Party Website and Applications
• Review and analyze system artifacts for accuracy and completeness supporting Authorization to Operate requests
• Review, create, and update RMF ATO packages for customer and external partner systems
• Create or review ATO packages before submission for CISO and CIO approval
• Upload assessment and audit reports to the FISMA Management Tool (CSAM)
• Coordinate data calls and data collection for audit and compliance reporting
• Conduct audits of closed Plans of Actions and Milestones for completeness and compliance
• Support the ongoing security authorization process and continuous monitoring
• Provide document development support for CISO-sponsored events and responses
• Draft document reviews and feedback on security and privacy requirements
• Track security authorization renewal dates and coordinate renewal efforts with stakeholders, SOs, and ISSOs
• Conduct lessons-learned sessions and develop best practices

• Establish and satisfy information assurance and security requirements based on user, policy, regulatory, and resource demands
• Conduct comprehensive assessments of implemented controls and control enhancements
• Schedule and lead System Assessments out-briefs with stakeholders
• Provide SAP, SAR, security recommendations, and system certifications
• Prepare security, privacy, and supply chain assessment reports
• Assess the severity of deficiencies and recommend corrective actions
• Develop and execute Security Controls Test plans, including vulnerability scans and penetration testing aligned with DHS RVA standards
• Produce final analysis reports, executive briefings for the CISO, AO briefing support, findings reports, and POA&M injection templates
• Create or update three-year OSA test plans using NIST SP 800-53 control tests
• Maintain OSA master project schedules using NIST assessment methods and approved OSA procedures
• Create or update program management documentation, including rules of engagement, schedules, annual document reviews, and POA&M and accepted risk review processes
• Ensure vulnerability and penetration tests are scheduled, conducted, analyzed, and presented to system owners and ISSOs
• Meet with ISSOs, systems contractors, and the POAM Team to develop mitigation strategies and evidence criteria
• Populate FSA vulnerability tracking tool injection templates for security deficiencies
• Review and advise on Third Party Website and Applications (TPWA)
• Review and analyze system artifacts supporting Authorization to Operate (ATO) requests
• Submit monthly OSA reports to the CISO covering assessment activities, reviews, audits, configuration management, tests, and residual risks
• Provide enterprise risk ratings, identify trends, and recommend security improvements

Explore Senior Security Control Assessor at SkyePoint Decisions, Inc.. Review requirements and application details.

Senior Security Control Assessor

Full-stack Engineer

• Analyze current processes, user needs, business rules, handoffs, data inputs, decisions, and exception paths to identify automation opportunities
• Design and develop workflow applications, services, scripts, rules, notifications, forms, and integrations using customer-approved technologies
• Automate evidence collection, task routing, status tracking, approvals, policy enforcement, and operational reporting
• Integrate workflows with APIs, data sources, security tools, ATO automation capabilities, and customer repositories
• Develop unit, integration, and end-to-end automated tests and support user/operational validation
• Maintain Launch Pad-aligned documentation, including roadmaps, ADRs, runbooks, README content, change plans, and release notes
• Participate in code reviews, demonstrations, backlog refinement, defect correction, and continuous improvement

Explore Workflow Software Engineer at SkyePoint Decisions, Inc.. Review requirements and application details.

Workflow Software Engineer

QA Automation Engineer

• Design and implement automation supporting customer authorization activities by integrating security evidence, assessment results, workflow status, policy checks, and decision-support information into traceable ATO processes
• Analyze authorization workflows, evidence requirements, assessment activities, control data, approvals, and recurring manual steps to identify automation opportunities
• Develop automated evidence collection, validation, normalization, routing, status tracking, and reporting capabilities using customer-approved technologies
• Integrate ATO automation with security scanning, SBOM/SCA, vulnerability, workflow, data, repository, and system-of-record capabilities
• Implement rules and policy checks supporting consistent assessment and authorization workflows without replacing Government decision authority
• Develop dashboards and decision-support views exposing evidence status, findings, dependencies, exceptions, and readiness information
• Collaborate with security, development, platform, integration, data, and Government stakeholders to validate automation logic and maintain traceability
• Develop automated tests, configuration documentation, runbooks, ADRs, change documentation, and release artifacts

Explore Security/ATO Automation Engineer at SkyePoint Decisions, Inc.. Review requirements and application details.

Security/ATO Automation Engineer

Data Engineer

• Design, develop, test, document, and maintain RESTful APIs, services, interfaces, connectors, and integration components using customer-approved technologies
• Analyze source and target systems, data models, interface requirements, dependencies, and error-handling needs
• Implement secure data exchange, transformation, validation, orchestration, and event-driven integration patterns
• Develop reusable integration services supporting evidence collection, assessment workflows, analytics, policy enforcement, and decision support
• Collaborate with security engineers on authentication, authorization, secrets management, encryption, logging, and secure-coding controls
• Collaborate with data/analytics engineers to define schemas, mappings, data quality checks, lineage, and operational data requirements
• Develop automated unit/integration tests, interface documentation, ADRs, runbooks, README content, and release notes
• Support a federal customer through a contingent position based on contract win

Explore Integration, API, Data Engineer at SkyePoint Decisions, Inc.. Review requirements and application details.

Integration, API, Data Engineer

Platform Engineer

• Engineer CI/CD workflows using the customer's existing Atlassian Cloud, FSA GitLab, and NGDC AWS environment
• Implement pipeline-as-code, reusable templates, automated quality gates, environment provisioning, configuration automation, and release controls
• Integrate unit, integration, end-to-end, security, compliance, and infrastructure testing into delivery workflows
• Implement infrastructure-as-code and cloud deployment patterns supporting portable and severable applications
• Maintain pipeline tool inventories, code standards, reusable libraries, SOPs, runbooks, and technical documentation
• Support compliance with NIST SP 800-218, applicable OMB/CISA guidance, STIGs, and CIS standards
• Provide platform troubleshooting, performance improvement, access support, and technical guidance to development and Government stakeholders

Explore DevSecOps – Platform Engineer at SkyePoint Decisions, Inc.. Review requirements and application details.

DevSecOps – Platform Engineer

Solutions Engineer

Explore Development Lead / Solution Architect at SkyePoint Decisions, Inc.. Review requirements and application details.

Open roles

AWS Assessor

Security Control Assessor

Security Control Assessor

Senior Security Control Assessor

Workflow Software Engineer

Security/ATO Automation Engineer

Integration, API, Data Engineer

DevSecOps – Platform Engineer

Development Lead / Solution Architect