IT Cybersecurity Specialist

Digital Consultants•San Diego, CA

21h•Onsite

About The Position

Digital Consultants is seeking an IT Cybersecurity Specialist to support security architecture, Risk Management Framework (RMF), continuous monitoring, and Authority to Operate (ATO) activities for the DCMA Blue List Program and its ServiceNow environment. The role involves architecting and implementing ServiceNow-specific security controls, creating and maintaining system security plans, and performing technical remediation of vulnerabilities. The specialist will work closely with government IT Program Managers and Authorizing Officials to ensure cybersecurity protocols are maintained and ATOs are achieved and sustained.

Requirements

Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels (Foundational and Residential) appropriate for Security Architecture and Engineering (e.g., Security Architect - DCWF 651).
Demonstrated expertise applying federal security directives, including NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO).
Demonstrated experience securing ServiceNow instances in a FedRAMP High and DoD IL4/IL5 environment, including configuring ServiceNow ACLs, Client Scripts, Data Policies, and integrating DoW Enterprise Identity, Credential, and Access Management (E-ICAM)/CAC authentication.
Minimum of five (5) years of practical experience required.
Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline required.
Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels (Foundational and Residential) appropriate for Security Architecture and Engineering (e.g., Security Architect - DCWF 651) required.
U.S. citizenship required.
Personnel shall meet the Tier Three (T3) investigation equivalent (ADP/IT-II) requirement for access to CUI. A completed/current investigation or an investigation in progress is acceptable before commencing work.
Personnel must obtain a DoW-issued CAC for access to Government spaces and IT systems.

Nice To Haves

Experience utilizing ServiceNow Governance, Risk, and Compliance (GRC) / Integrated Risk Management (IRM) or Security Operations (SecOps) modules is highly preferred.
Experience utilizing ServiceNow GRC/IRM or Security Operations (SecOps) modules.

Responsibilities

Architect and implement ServiceNow-specific security controls, including Role-Based Access Controls (RBAC), Access Control Lists (ACLs), Data Policies, and Edge Encryption, to align with the DoD Zero Trust Strategy and enforce strict data segregation between IL4 and IL5 environments.
Create and maintain a detailed schema and RBAC matrix outlining roles, groups, ACLs, and data segregation rules.
Adhere to local policy and coordinate with the Government office's IT Program Manager and Authorizing Official (AO) to ensure required cybersecurity protocols are maintained and followed.
Develop and continuously update a comprehensive System Security Plan (SSP) and all required RMF artifacts, mapping ServiceNow platform configurations to NIST SP 800-53, NIST SP 800-171/172 for CUI protection, and DoD IL4/IL5 controls to achieve and maintain the system's ATO.
Actively track, manage, and update the Plan of Action and Milestones (POA&M), preferably within ServiceNow GRC/IRM, to document, report, and remediate identified vulnerabilities within Government-provided suspense dates.
Serve as the primary author and developer of the System Security Plan (SSP) and supporting RMF artifacts in direct coordination with the Government IT Program Manager and Authorizing Official (AO) to achieve and maintain the ATO.
Perform technical remediation of ServiceNow configuration-level vulnerabilities within the Specialist’s scope of control; document and track vulnerabilities in third-party custom code/modules in the POA&M while the responsible implementation/development vendor executes code remediation.
Conduct continuous monitoring and provide ongoing Security Assessment Reports (SAR) documenting vulnerability scans, penetration test reviews, and compliance checks prior to code promotion, ensuring the ATO remains valid throughout the system lifecycle.
Provide documentation of personnel certifications and qualifications upon request by the CO or COR.