DoD Control Systems Cybersecurity Subject Matter Expert

Energy Resilience Partners, LLC; Puerto Rico; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Energy Resilience Partners, LLC (ERP) seeks a cybersecurity SME for the Fort Buchanan microgrid project. This role combines remote/hybrid work with on-island validation activities in Puerto Rico to oversee control-system security and RMF/STIG compliance.

You will guide device selection, testing, and evidence packages while protecting CUI and coordinating with ERP security and government stakeholders. Travel to Puerto Rico is required.

Qualifications

• DoD 8570 IAM Level II certification (or government-approved successor).
• 5+ years securing DoD/high-assurance systems with RMF.
• Experience with DISA STIGs/SRGs, vulnerability scanning, device hardening, and control-system cybersecurity.
• Travel to Puerto Rico for field testing and installation-access requirements.

Responsibilities

• Own cybersecurity interpretation and compliance for applicable contract control-system requirements.
• Develop STIG/SRG applicability, interconnection schedules, and protection-of-information discussions.
• Review devices, OS, accounts, services, ports/protocols, logging, backups, configuration, patching, and hardening evidence.
• Coordinate with Controls Lead, network/RCDD teams, OEMs, and Government cybersecurity stakeholders.
• Lead or witness cybersecurity tests, scans, findings correction, retesting, and final evidence packages.
• Ensure authorized handling of CUI and approved use of contractor-owned systems.

Skills

IAM Level II

RMF processes

STIGs/SRGs

Vulnerability scanning

Network hardening

Job description

FBMG-018 | Fort Buchanan Microgrid | Contingent opportunity

WORK LOCATION: REMOTE/HYBRID - remote RMF/STIG documentation; ON ISLAND for device validation, scanning, testing, commissioning, and turnover

REQUISITION FBMG-018

CSS CAM LCAT 640 - Senior Engineer/IT Staff Member (Cybersecurity)

DUTY LOCATION United States remote/hybrid with required Puerto Rico field support

WORK ARRANGEMENT REMOTE/HYBRID - remote RMF/STIG documentation; ON ISLAND for device validation, scanning, testing, commissioning, and turnover

REPORTS TO Project Manager / Controls Lead; coordinates with ERP security and CQC

EMPLOYMENT Full-time or dedicated consultant; contingent

REQUIREMENT BASIS SOLICITATION-MANDATED cybersecurity SME across facility-related control systems

About ERP and the Project

Energy Resilience Partners, LLC (ERP) is a tribally led SBA 8(a) federal contractor advancing energy resilience and mission assurance. ERP is deploying a project team for the Fort Buchanan installation-level microgrid in Puerto Rico. The work includes diesel generation, medium-voltage distribution, microgrid controls, protective relaying, fuel infrastructure, fiber communications, optional BESS, integration of existing renewable generation, and full system commissioning.

Position Summary

Oversee cybersecurity compliance for the microgrid control system and related facility control systems. The SME will guide device selection, network architecture, RMF/STIG implementation, contractor-computer compliance, secure configuration, testing, evidence, backups, inventory, and Government turnover while protecting CUI.

What You Will Do

• Own cybersecurity interpretation and compliance for applicable UFGS control-system requirements across the contract.
• Develop and coordinate STIG/SRG applicability, interconnection schedules, cybersecurity risers, inventories, compliance statements, exception requests, and protection-of-information-at-rest proposals.
• Review devices, operating systems, accounts, services, ports/protocols, logging, backups, configuration, patching, scanning tools, and hardening evidence.
• Coordinate the Controls Lead, network/RCDD team, OEMs, commissioning specialists, Government cybersecurity stakeholders, and ERP CMMC processes.
• Lead or witness cybersecurity test procedures, scans, findings correction, retesting, and final evidence packages.
• Ensure authorized handling of FCI/CUI and approved use of contractor-owned systems.

Minimum Qualifications

• Current certification satisfying DoD 8570 Information Assurance Manager Level II, or a Government-accepted successor mapping, before beginning work.
• At least 5 years securing DoD or other high-assurance systems, including hands-on Risk Management Framework processes and procedures.
• Experience with DISA STIGs/SRGs, vulnerability scanning, network/device hardening, documentation, and control-system cybersecurity.
• Ability to satisfy applicable CUI, system-access, background, and installation-access requirements and travel to Puerto Rico for field testing.

Preferred Qualifications

• DoD facility-related control systems, NIST SP 800-82/800-53/800-171, CMMC Level 2, IC/OT networks, microgrids, PLC/SCADA, and industrial protocol experience.
• CISSP, CISM, CASP+, CGRC, GIAC industrial-control, or comparable credentials.

Field, Travel and Employment Conditions

• This is a contingent opportunity dependent on contract award/NTP, project funding, final staffing authorization, Government acceptance when required, and successful installation-access processing.
• When on site, work may involve tropical heat and humidity, rain, uneven terrain, stairs/ladders, construction noise, required PPE, and extended, weekend, outage, emergency, or alternate-shift hours.
• Candidates must be authorized to work in the United States, follow drug-free workplace and conduct requirements, and protect FCI/CUI using only authorized systems and procedures.
• ERP encourages applications from qualified Native American, Puerto Rican, veteran, military-spouse, disabled, and local candidates. ERP provides equal employment opportunity consistent with applicable law.

Application Materials

• Resume showing month/year dates, employer, role, project scope/value, client, and personal responsibilities.
• Copies of required current licenses/certifications with expiration dates.
• Comparable-project list and references where requested, Puerto Rico availability, earliest mobilization date, and requested employment/consulting arrangement.