Industrial Control System (ICS) Cybersecurity Engineer

ASRC Federal•Albuquerque, NM

4d•Onsite

About The Position

ASRC Federal Netcentric Technologies, LLC is seeking an Industrial Control System (ICS) Cybersecurity Engineer to support ongoing activities on the Kirtland AFB Engineering Operations Services (KEOS) contract in Albuquerque, New Mexico. KEOS is a base maintenance/operations support-type contract, also known as BMC or BOS. This role serves as the Technical lead for the design, installation, commissioning, and maintenance of control systems upgrades, new installations, and modifications in a variety of industrial process settings. The engineer will also serve as the Information System Security Officer (ISSO) in support of KAFB’s owned and operated control systems, ensuring the confidentiality, integrity, and availability of systems, applications, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of cybersecurity programs, policies, procedures, and tools.

Requirements

At least three years' experience working in cybersecurity or a related field such as information technology or control systems management.
Bachelor’s degree or military-equivalent training in mechanical or electrical engineering, cybersecurity, information technology, or a closely related field.
Have or be able to obtain within six months, DoD 8570 (or 8140) IAT Level II certification.
Possess a working knowledge of computer security architectures and implementation of security controls.
Capable of working independently with minimal supervision.
Possess excellent verbal and written communication skills.
Must be able to pass a drug screen.
Must be a US citizen and currently possess or be able to obtain/maintain a U.S. government-issued security clearance.
Be proficient in using Microsoft Office 365 software suite and Adobe Acrobat Pro.
Must maintain a valid US driver's license.
Have ability to perform repetitive physical tasks involving lifting at least 50 lbs.
Be committed to providing for and maintaining a safe working environment.

Nice To Haves

Experience working in a military environment and particularly, to have familiarity with US Air Force cybersecurity guidance, rules, and regulations.
Possess expertise in advanced process control (APC), distributed control systems (DCS), programmable logic controllers (PLC) and supervisory control and data acquisition (SCADA).
Working knowledge of RMF package creation and maintenance.
Experience with eMASS for managing RMF Assessment and Authorization (A&A) activities.
Knowledge of Energy Management Control Systems (EMCS), Fire Alarm Reporting Systems (FARS), Utility Monitoring Control Systems (UMCS) utilizing BACnet protocols.
Familiarity with DoD RMF and eMASS Essentials.
Knowledge of Host Based Security System (HBSS).
Knowledge of Niagara Workbench software.
Familiarity or experience performing facility assessments and Real Property Inventory Equipment (RPIE) condition assessments using Sustainment Management System (SMS) BUILDER and BUILDER Remote Entry Database (BRED) software.
Experience working with data from geospatial databases.
Knowledge of construction management software, project closeout procedures, preventive maintenance, and construction and repair terminology and processes.

Responsibilities

Support the implementation and maintenance of cyber security requirements within the control networks.
Provide technical guidance and direction for the standardization of control systems and operational technology network architecture throughout the enterprise.
Perform the specification of and assist in the procurement of control systems, instrumentation, and supporting equipment.
Provide RMF support required to obtain and maintain Authority to Operate (ATO) approvals for multiple networks.
Create and maintain documentation and artifacts in Enterprise Mission Assurance Support Services (eMASS) in support of Risk Management Framework (RMF) activities.
Perform software assurance and risk assessments for the development of several software packages.
Conduct and review vulnerability and compliance scans of information systems hardware and software and provide guidance for remediation of detected security flaws and configuration issues.
Review and monitor audit records of information systems.
Develop and maintain required Standard Operating Procedures (SOP) and Work Instructions in accordance with Department of Defense and United States Air Force Policies and Procedures.
Oversee all communications with Program Management, Information System Security Manager (ISSM), and On-Site Representative (OSR).
Direct remediation actions on security controls based on the findings and recommendations of the security assessment report and work with Security Control Accessor (SCA) to remediate controls for compliance.
Administer mitigation for all identified POA&M weaknesses and ensure closure in a timely manner according to the mitigation plan.
Ensure appropriate steps are taken to reduce or eliminate identified weaknesses, then coordinate security authorization package to SCA for assessment.
Support configuration management processes and documentation to ensure all proposed changes are analyzed, tested and approved prior to implementation.
Develop and test contingency plans and disaster recovery plans.
Create and manage system Plans of Action and Milestones (POA&M) for all identified weaknesses and vulnerabilities.
Oversee access control requirements, including privileged users, and ensure all personnel receive the requisite cybersecurity training.