Our client, a leading Government Systems Integrator, is in need of a Security Authorization Lead for an initial 12 contract. This is a hybrid schedule consisting of 3 days onsite and 2 days remote with candidates being located in either Gaithersburg, MD, Egg Township, NJ or Eagan, MN. The Security Authorization Lead will own the security authorization lifecycle for the customer, leading the formal processes required to authorize customer workloads to connect to and operate within a government cloud environment. They will serve as the primary technical interface with the customers security and authorizing official teams, lead the government network connection and RMF / ATO authorization process for workloads on government provided cloud infrastructure (security assessments, architecture reviews, control evidence, assessor coordination), own and maintain the customers security authorization package (architecture briefings, data flow / security boundary diagrams, SBOMs, vulnerability / CVE dispositions), maintain the authorization boundary as architecture evolves, support FedRAMP and agency-specific authorization requirements, etc.
Required Skills:
- At least 6 years of experience within the cybersecurity, compliance and / or security authorization space with a bachelor's degree.
- Hands on experience with OAuth 2.0 and OpenID Connect, including token validation, introspection and claims mapping.
- Experience with enterprise identity providers and federation preferrable with Keycloak, Okta, Ping, Microsoft Entra ID or a similar tool.
- Experience implementing RBAC and / or ABAC within distributed applications.
- Knowledge of PKI, certificate lifecycle management, mutual TLS (mTLS) and / or service mesh identity.
- Understanding of Zero Trust principles, including per-session authorization and default-deny service communication.
- Experience implementing audit logging for access and authorization events.
- Proficiency in Java, Python, Go or a similar scripting language.
- Prior experience with Kubernetes and containerized service deployments.
Desired Skills:
- Security + CE, CySA+ or equivalent DOD 8570 IAT Level II certification.
- Federal ICAM / FICAM experience, including PIV / CAC or agency ICAM integration experience.
- Experience with SAML 2.0, SCIM provisioning, Kubernetes RBAC, workload identity (SPIFFE / SPIRE) and / or service mesh (Istio, Linkerd).
ClearBridge Technology Group is an Equal Opportunity Employer.
We offer excellent benefits and compensation packages.
The expected hourly rate range for this role is $61 - 89 / hr.
The posted range is an estimate. The actual compensation offer will be based on the candidate's experience, skills, qualifications and will be in line with internal equity.
