The role serves as an on-site cybersecurity authority for federal facility-related control systems, including building automation, utility, and metering environments. The position leads daily OT cybersecurity operations, supports RMF compliance and ATO efforts, and coordinates with a remote government cybersecurity organization to maintain audit readiness.
Role Overview
Lead Cyber Systems Administrator responsible for overseeing cybersecurity operations within OT environments. Serve as the primary point of contact on-site for alignment between the facility team, OEM vendors, and a remote government cybersecurity organization, with a focus on compliance, ATO support, and program execution during ramp-up and transition activities.
Key Responsibilities
- Lead daily cybersecurity operations for facility and control systems, including patching, hardening, monitoring, and compliance.
- Supervise and mentor two RMF Specialists, including work review and development of technical capabilities.
- Function as the on-site liaison between the facility team, OEM vendors, and the government’s remote cybersecurity team to ensure alignment with enterprise security requirements.
- Run vulnerability scans, analyze findings, and drive remediation through completion.
- Oversee creation of RMF documentation and security artifacts, ensuring accuracy and audit-readiness.
- Support system categorization and risk assessment by translating local technical information for stakeholders working off-site.
- Build and maintain an accurate, reliable inventory of systems, software, and documentation.
- Enforce cybersecurity best practices and separation of duties across the team.
- Represent on-site readiness during recurring customer meetings, workshops, and program reviews.
- Lead cyber phase-in and transition activities during ramp-up, ensuring smooth collaboration with the broader government cyber organization.
Required Qualifications
- Bachelor’s degree preferred; equivalent experience, technical training, military service, or relevant industry certifications will be considered.
- Hands-on cybersecurity or systems administration experience in a federal, DoD, or similarly complex technical environment.
- Experience supporting the Risk Management Framework (RMF) process, from initiation through assessment, authorization support, and ongoing monitoring.
- Experience leading or mentoring cybersecurity personnel.
- Working knowledge of federal cybersecurity frameworks, including FIPS 199/200, NIST SP 800-53, NIST SP 800-82, and CNSSI 1253.
- Must meet DoD 8140.03 certification requirements for the assigned role (identified as IAM Level I), such as CompTIA Security+ CE.
- Must obtain the applicable role-based computing environment certification before privileged access, within 180 days of the first day of employment.
- Experience using DoD cybersecurity tools for vulnerability scanning, compliance checking, and endpoint security.
- Strong vulnerability management skills, including scanning, triage, remediation, and tracking.
- Ability to produce clear, accurate, and audit-ready technical documentation.
- Ability to coordinate with program managers, security personnel, engineers, vendors, and remote cybersecurity stakeholders.
Technologies
- Risk Management Framework (RMF)
- FIPS 199/200
- NIST SP 800-53
- NIST SP 800-82
- CNSSI 1253
- DoD 8140.03
- IAM Level I
- CompTIA Security+ CE
- DoD cybersecurity tools
- Privileged access
- Linux administration
Preferred Skills
- DoD 8140 IAM Level II certification.
- Experience with OT/ICS/SCADA or facility-related control systems, such as building automation and advanced metering.
- Knowledge of the Purdue Enterprise Reference Architecture.
- Experience supporting ATO or ATC efforts.
- Familiarity with FedRAMP and Zero Trust principles.
- Linux administration experience.
- Prior DLA customer experience.
Security Clearance
- Must be a US Citizen with the ability to obtain and maintain a Secret security clearance.
Location
Columbus, OH (onsite)