Cyber Security System Administrator

Johnson Controls; Alabama; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Benefits from day 1

Job summary

Johnson Controls seeks a Cyber Security System Administrator/Engineer to support DoD/DoDISE cyber requirements on a Huntsville, AL site. You will harden and test BAS/ICS environments, perform vulnerability remediation, and contribute to RMF/IA certification efforts.

The role requires 3+ years in information assurance, DoD experience, DoD security clearance eligibility, and proficiency with STIGs, Nessus/ACAS. Travel up to 50% may be required.

Qualifications

• 3+ years information assurance/cyber security experience.
• Ability to obtain and maintain DoD Secret clearance (background check).
• Proficiency with MS Office and Windows environments.
• Experience with DISA STIGs, SCAP, ACAS/Nessus vulnerability scanners.

Responsibilities

• Supports U.S. Government/DoD cyber requirements and DoD networks.
• Stand up, harden, and test Facility Related Control Systems (FRCS).
• Performs vulnerability remediation and STIG verifications.
• Contributes to information assurance, certifications, and accreditations for BAS/ICS.
• Coordinates IA documentation for submittals and accreditation.
• Performs security scans and risk assessments on secured systems.

Skills

InfoSec

Security+ prep

Communication

Education

Bachelor's degree in CS/Engineering/Cyber Security

Tools

DISA STIGs

SCAP

ACAS/Nessus

RMF

Job description

We are seeking a Cyber Security System Administrator/Engineer to join our federal team. Our cyber security team is on the forefront of the industry, servicing multiple military branches to provide energy management and security solutions while protecting some of the nation’s most critical networks.

At Johnson Controls, we support our nation’s most critical facilities, the people who occupy them, and the missions they enable. Johnson Controls Federal Systems (JCFS) is a specialized team serving as a trusted partner to the federal government. We help modernize U.S. military installations, Department of Defense, and other federal agency facilities to be smarter, more resilient, efficient, sustainable, and secure.

Location: Huntsville, AL.

Benefits: Eligible for benefits on the first day of employment

Vacation: 3 weeks of paid vacation, 5 sick days, 3 floating holidays and 10 standard holidays per calendar year (6.5 weeks in total)

Travel Required: Up to 50%

As a Cyber Security System Administrator / Engineer, you will:

• Supports assignments involving U.S. Government and DoD/DISA cyber requirements and applicable policies and processes, DoD network environments, industry computer/security standards, best practices, and DoD cyber security initiatives.
• Stand up, harden, and functionally test various complex Facility Related Control Systems (FRCS), including vulnerability remediation and STIG compliance verifications
• Utilizes developed approaches to achieve information assurance, certifications, and accreditations for Building Automation Systems (BAS) primarily using Metasys and Tridium Niagara, Electronic Security Systems (ESS), and other Industrial Control Systems (ICS). Uses knowledge of ISSE, RMF, NIST, IA Program, Governance Policy & Directives, and Instructions to complete projects
• Assists in the planning and execution of the defense-in-depth security engineering, relevant technology and process development, implementations of security testing, certification and accreditation processes, intrusion detection policy development, security baseline management as well as IA focused software development
• Coordinates and creates necessary IA documentation and artifacts for submittals and accreditation
• Performs security scans and risk assessment on secured systems
• Assists in performing site-specific training for owner/operator on the accredited system.
• Adherence to safety standards. A high degree of regard for employee safety
• Keeps management and JCI customer informed of job progress and issues
• Communicates and documents technical issues to:
  • A) Highly technical audiences to clarify technical tasks
  • B) Non-technical audiences with varying objectives
  • C) Senior management to aid decision-making.

Required Qualifications:

• 3+ years experience with Information Assurance / Cyber Security required. Experience supporting the Air Force, Navy, Army, or other Department of Defense agency or U.S. Government Agency is highly preferred
• Ability to obtain and maintain a CompTIA Security+ Certification within 90 days of employment
• Proficiency with Microsoft Office Suite (Word, Excel, Outlook, Visio, etc.) and general Windows environment
• Experience with DISA STIGs, STIG automation tools such as EvaluateSTIG or SCAP, and ACAS/Nessus Vulnerability Scanner.
• The ability to obtain and maintain a DoD Secret security clearance (This involves a background/character, criminal history, employment, and credit check.)

Preferred Qualifications:

• Experience working with cyber security for Industrial Control Systems (ICS)
• Proficiency with Metasys, Tridium Niagara, or Electronic Security Systems
• Experience with implementation of Risk Management Framework (RMF)
• Experience briefing and training military leadership or government personnel within a DoD environment
• Proposal development experience in response to cybersecurity requirements
• Experience leading engineering teams comprised of internal and external members
• DoD IAT/8570 level 2 or 3 certifications
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
• Certified Ethical Hacker (CEH) Certification
• Computing Environment Certification preferred
• Ability to travel up to 50%

Preferred Education:

• Bachelor’s Degree in Computer Science, Engineering, Cyber Security or equivalent experience. Graduate school coursework in a cybersecurity-related field preferred

Who We Are

At Johnson Controls (NYSE: JCI), we are One Team working collaboratively to create purposeful solutions that make a difference in the world. We are a Fortune 500 company with more than 100,000 employees worldwide, offering the world`s largest portfolio of building technology products, solutions, and services. As a member of our Federal Systems team, your work matters, and we value and recognize your contributions and want to help you succeed. We invest in our employees, provide opportunities for growth and advancement, and foster a culture of inclusion and respect.

Please check out our Take a Journey video to learn more about who we are and what we do.

Recently, Johnson Controls has been recognized by several organizations for leadership in Environment, Sustainability, and Governance, as well as innovations in smart building platforms:

• Named to FORTUNE’s “Most Admired Companies” List
• Corporate Knights Global 100 Most Sustainable Corporations in the World
• Named to Forbes Net Zero Leaders list
• CDP 2023 Climate Change 'A List'
• Ranked 67 on the Drucker Institute’s list of best-managed companies in America
• Forbes Best Employers for Diversity list.
• Newsweek America’s Greatest Workplaces for Diversity
• Ethisphere 2024 World's Most Ethical Companies list for the 17th time
• Newsweek America’s Greatest Workplaces for Women in 2024
• Named to Newsweek America’s Greatest Workplaces for Veterans 2024 / 2025 listing
• Named to Forbes America’s Best Employers for Veterans 2024
• Named one of the top military friendly employers by military.com

Johnson Controls is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, sexual orientation, gender identity, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit www.johnsoncontrols.com/careers

Division: JCFS (Johnson Controls Federal Systems)