He can put in anyone in the department that has gone through a congressional approval process. This person could act with all the positions powers until he gets someone else through the process, however long that will take.
Whitaker was confirmed by Senate as U.S. Attorney in 2004. Does that count?