Cybersecurity Consultant

Stantec•Chicago, IL

About The Position

Stantec is seeking an entry-level Cybersecurity Consultant to support the design, documentation, and compliance review of operational technology (OT) systems for design projects, including projects governed by Department of Defense specifications. The role contributes to secure, resilient designs that meet cybersecurity requirements across technically complex projects involving corporate and national security, public infrastructure, and defense operations. The consultant develops cybersecurity design criteria and specifications aligned with NIST and DoD standards; supports design and construction documentation for facility-related control systems; and helps evaluate compliance with contract requirements, cybersecurity guidance, and risk-management frameworks. The role also involves reviewing cybersecurity-related submittals, coordinating with project stakeholders, using design and modeling tools, and supporting construction administration activities such as site inspections, surveys, RFIs, and submittal reviews. Travel of less than 5% is expected for site surveys and team coordination meetings.

Requirements

Associate degree or equivalent in Engineering Technology, or a minimum of 3 years of relevant cybersecurity-related experience.
Familiarity with facility-related control systems, including building control systems and utility control systems.
Familiarity with network and telecom design, secure equipment rooms, cabling pathways, and control system cybersecurity best practices.
Familiarity with government contracting processes, including Design-Bid-Build and Design-Build.
Willingness to travel less than 5% for site surveys and team coordination meetings.

Nice To Haves

Experience in DoD project environments.
Working knowledge of UFC 4-010-06, UFGS 25 05 11, and RMF frameworks.
GSLC (GIAC Security Leadership Certification).
CISSP (Certified Information Systems Security Professional).
CAP (Certified Authorization Professional).
BICSI RCDD certification.
DoD IAM Level II or III certification equivalents.

Responsibilities

Develop cybersecurity design criteria and specifications aligned with NIST, DoD, and DoD UFC/UFGS standards.
Participate in pre-coordination meetings and technical clarifications with stakeholders and contracting officers.
Ensure design documentation aligns with contract requirements, control system cybersecurity guidance, and RMF/IA controls.
Support cybersecurity-related submittal reviews, including cybersecurity sections of shop drawings, cut sheets, and system specifications.
Prepare cybersecurity design and construction documents for facility-related control systems.
Support development of contract drawings and Division 01/25/27/28 specifications for secure and unsecure network environments.
Contribute to cyber-informed risk assessments, threat modeling, and specification authoring.
Define, evaluate, and apply NIST security control requirements.
Use Revit, CAD, and Bluebeam Revu to design secure network environments.
Conduct on-site inspections and surveys, and perform cybersecurity-specific submittal reviews.
Manage RFIs and submittals with attention to cybersecurity system compliance.
Evaluate documentation for compliance with cybersecurity governance, including FedRAMP and the FRCS Risk Management Framework, to meet project cybersecurity goals.
Coordinate with architects, engineers, and stakeholders to integrate cyber-related requirements into design and proposal documentation.
Draft and maintain detailed cybersecurity narratives and compliance documentation.