below marketmost similar roles pay hereabove market
This role pays less than
81%
of similar roles. Most pay
$174,600–$226,575
— the blue band above.
At the midpoint, this role pays about
$162k
versus about
$201k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
629 open roles
on FindRole.
Listed pay typically runs
$117,500–$176,300
across 314 roles with salary data.
The Sr. Principal Software Assessment Engineer (AHT) joins the DAF CLOUDworks program to serve as a Secure Access Enablement Engineer. This role functions as the primary autonomous interface between Department of Defense security authorities, such as the Designated Authorizing Official, and industry partners working under Other Transaction Authority agreements. The engineer ensures that all contracted users, devices, and services are securely provisioned onto classified cloud platforms while maintaining strict compliance with RMF, STIG, and DISA requirements. Key responsibilities include designing and governing large-scale onboarding programs and managing liaison engineers. Required technical expertise includes ACAS, SCAP, eMASS, XACTA, and Zero-Trust/SASE architectures. Candidates must utilize Infrastructure as Code tools like Ansible, Terraform, Bicep, ARM templates, Puppet, and Pulumi, alongside Kubernetes for automated digital infrastructure deployment.
Serve as the primary interface between DoD security authorities and industry partners under OTA agreements.
Provision users, devices, and services onto classified cloud platforms while ensuring RMF, STIG, and DISA compliance.
Design, implement, and govern large-scale onboarding programs for classified cloud environments.
Manage the risk-management posture for the onboarding program and influence DAO-level risk-acceptance decisions.
Author concise risk assessments, POA&M updates, and briefing packages for authorizing officials.
Deploy digital infrastructure using Infrastructure as Code (IaC) tools like Ansible, Terraform, and Pulumi.
Lead a team of liaison engineers and contractors to foster a culture of self-directed execution.
Shape enterprise-wide security policies and escalation procedures for multiple authorizing officials.
What we're looking for
Must have a high school diploma with 12 years of relevant experience, a bachelor's in STEM with 8+ years, a master's in STEM with 6+ years, or a PhD in STEM with 4+ years.
Active Department of Defense Top Secret/Sensitive Compartmented Information security clearance.
U.S. Citizenship is required.
Ability to obtain IAT Level II certification (e.g., CompTIA SecurityX or Security+) within 60 days of start date.
Extensive experience serving as the primary autonomous conduit between government security officials and multiple OTA partners on classified cloud projects.
Deep expertise with RMF, STIG/SRG compliance, ACAS, SCAP, eMASS, XACTA, and Zero-Trust/SASE architectures.
Expertise with Infrastructure as Code (IaC) and languages including Ansible, Terraform, Bicep, ARM templates, Puppet, and Pulumi.
Proven record designing, implementing, and governing large-scale onboarding programs for classified cloud environments while maintaining independent decision authority.
Python
Reverse Engineering
Vulnerability Research
Kernel Development
Embedded Programming
Wireshark
IDA Pro
WinDBG
Ghidra
QEMU
Renode
Git
GitHub
GitLab
Jenkins
CI/CD
Agile
TCP/IP
UDP
Assembly
x86
x64
MIPS
PPC
ARM
Linux
Windows
Android
iOS
SDLC