Security Assessment & Authorization (SA&A) / Authorization to Operate (ATO) Specialist at Federal Government

Setup: Hybrid
Location: Ottawa, Ontario
Type: Full-time
Posted: Apr 29, 2026

Description

The Security Assessment & Authorization (SA&A)/Authorization to Operate (ATO) Specialist supports a private cloud environment by leading the development and maintenance of high-quality security documentation. The specialist navigates the ATO process within a complex, modern infrastructure, translating technical architectures into clear, compliant, and defensible documentation. This role focuses on interpreting security controls for cloud-native architectures like Kubernetes, working closely with technical teams, and contributing to the overall ATO lifecycle.

Required Skills

cloud-native technologies
security frameworks
Kubernetes
containerized architectures
Threat and Risk Assessments (TRA)
risk assessments
threat and risk analysis
mitigation strategies
security documentation best practices
compliance requirements

Additional Information

Required Previous Experiences: Demonstrated experience producing SA&A and ATO documentation within a Government of Canada department or Crown corporation
Strong understanding of GC security frameworks, policies, and accreditation processes
Experience supporting cloud or private cloud environments
Working knowledge of Kubernetes and containerized architectures (must be able to understand and document, not necessarily build or deploy)
Experience with Threat and Risk Assessments (TRA) and security control documentation
Preferred Qualifications: Experience with modern cloud platforms (e.g., Azure, GCP etc.) in a secure or regulated environment
Familiarity with DevSecOps concepts and container security practices
Previous experience supporting large-scale digital transformation or modernization initiatives