Qualifications

• 5-7 years of experience in Security Assessment & Authorization (SA&A) and Authorization to Operate (ATO) documentation particularly within Government of Canada contexts.
• Strong grasp of Government of Canada security frameworks, policies, and accreditation processes.
• Experience in cloud or private cloud environments, specifically with modern technology stacks.
• Familiarity with Kubernetes and containerized architectures; should be able to document and interpret, but not necessarily build.
• Experience conducting Threat and Risk Assessments (TRA) and creating security control documentation.
• Ability to communicate effectively with both technical and non-technical teams.

Responsibilities

• Lead the creation and upkeep of SA&A and ATO documentation specific to private cloud platforms.
• Document and interpret security controls tailored for cloud-native architectures including Kubernetes.
• Collaborate with technical teams to grasp system designs, data flows, and overall security posture.
• Transform technical setups into structured documentation that meets Government of Canada security standards.
• Assist with risk assessments, threat analyses, and develop mitigation strategies.
• Engage in the entire ATO lifecycle, ensuring documentation is prepared and audit-ready.
• Advise on best practices for security documentation and compliance necessities.

Benefits

• Hybrid work model with on-site requirements as necessary.
• Opportunity to work within a Federal Government project.
• Engage in a complex and dynamic technological environment.
• Chance to influence security practices at a government level.
• Support for professional development in the realm of security assessment and cloud technologies.