Facility Controls Cybersecurity Specialist (FRCS / RMF)

The Building People•San Diego, CA

About The Position

The Building People, LLC, is hiring a Facility Controls Cybersecurity Specialist to support facility operations, facility-related control systems, and cybersecurity compliance. The position bridges facility control systems, operational technology (OT), and cybersecurity compliance, supporting authorization and system lifecycle activities for Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility systems and equipment. The specialist works with cybersecurity personnel, facility stakeholders, system owners, contractors, controls integrators, and equipment vendors to support Risk Management Framework (RMF) and Authority to Operate (ATO) activities, Plans of Action and Milestones (POA&Ms), security documentation, technical configuration reviews, and system authorization and reauthorization. The role also involves meetings, required site visits, and detailed weekly status reports covering facility control systems and cybersecurity activities.

Requirements

Experience supporting facility-related control systems, Operational Technology (OT), Industrial Control Systems (ICS), Building Automation Systems (BAS), or comparable control environments.
Working knowledge of Risk Management Framework (RMF) processes and cybersecurity requirements applicable to facility or operational technology systems.
Experience supporting system authorization, cybersecurity documentation, system lifecycle activities, configuration management, security controls, or technical security reviews.
Experience or demonstrated ability to support ATO maintenance, RMF authorization and reauthorization, and POA&M development and tracking.
Ability to coordinate technical and cybersecurity requirements among system owners, engineers, facility personnel, controls contractors, equipment vendors, and cybersecurity personnel.
Ability to develop and maintain accurate technical documentation, authorization artifacts, project documentation, and status reporting.
Strong written and verbal communication, organization, documentation, and issue-tracking skills.
Experience or demonstrated ability to perform facility control system cybersecurity activities in accordance with applicable standards and guidance.
Ability to support onsite activities, meetings, and facility site visits as required.
Ability to satisfy applicable Government personnel-security, credentialing, site-access, and system-access requirements.

Nice To Haves

Experience supporting federal, DoD, healthcare, medical, institutional, or other mission-critical facility environments.
Direct experience supporting cybersecurity for Facility-Related Control Systems (FRCS), Operational Technology (OT), or Industrial Control Systems (ICS).
Hands-on experience with eMASS or comparable RMF and authorization workflow tools.
Experience supporting or developing RMF authorization packages, ATO documentation and maintenance, POA&Ms, security control documentation, configuration-management documentation, audit evidence, system lifecycle documentation, or cybersecurity authorization artifacts.
Experience with Building Automation Systems (BAS), Building Management Systems (BMS), access control, fire alarm, elevator controls, or related building control technologies.
Experience coordinating cybersecurity activities with ISSM, ISSO, ISSE, system owners, controls integrators, or cybersecurity organizations.
Familiarity with Controlled Unclassified Information (CUI) safeguarding requirements and NIST SP 800-171.
Knowledge of the interfaces among facility operations, construction, commissioning, controls integration, cybersecurity, and system lifecycle management.
Bachelor's degree in Engineering, Cybersecurity, Information Systems, Facilities Management, Building Automation, Construction Management, or a related technical discipline; an equivalent combination of directly applicable technical experience, education, training, and certifications may be considered.

Responsibilities

Provide technical and cybersecurity support for Facility-Related Control Systems (FRCS), Operational Technology (OT), and associated systems supporting existing facilities and facility projects.
Support systems including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility-related controls and equipment.
Assist Information System Security personnel with maintaining the confidentiality, integrity, and availability of assigned facility information systems.
Support securing, managing, reviewing, and auditing technical system settings needed to meet applicable cybersecurity and system authorization requirements.
Develop, maintain, and track POA&Ms related to cybersecurity deficiencies, system authorization, and lifecycle activities.
Support RMF authorization and reauthorization when security-impacting system changes occur.
Support development, maintenance, and submission of new and existing RMF authorization packages.
Coordinate with system owners, facility personnel, contractors, controls integrators, equipment manufacturers, and vendors to collect, review, validate, and submit required technical and cybersecurity information.
Support cybersecurity requirements for modifications, upgrades, replacements, and new projects involving facility control systems.
Maintain accurate system lifecycle, configuration, authorization, audit, and supporting technical documentation.
Participate in meetings and conduct required site visits.
Prepare detailed weekly status reports covering ongoing facility control systems and cybersecurity activities.