Facility Controls Cybersecurity Specialist (FRCS / RMF)

The Building People; San Diego (CA); On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

Medical & Rx

Dental

Vision

401(k) Retirement Plan

Life Insurance/AD&D

Disability insurance

Paid Time Off

Holiday Pay

Job summary

The Building People, LLC is seeking a Facility Controls Cybersecurity Specialist to support facility control systems, OT, and cybersecurity compliance. The role focuses on RMF/ATO activities, risk management, and lifecycle documentation for BAS, monitoring, access control, and related facility systems.

You will collaborate with stakeholders, contractors, and vendors to ensure proper authorization and security controls, while producing weekly status updates and site visit reports.

Qualifications

• Experience supporting facility-related control systems (OT/ICS/BAS).
• Working knowledge of RMF processes and cybersecurity requirements for facility/OT.
• Experience with system lifecycle activities, security controls, and reviews.

Responsibilities

• Provide cybersecurity support for FRCS/OT and BAS equipment.
• Assist in RMF/ATO activities and POA&Ms development.
• Support RMF authorization/reauthorization when changes occur.
• Prepare RMF artifacts and maintain documentation.
• Coordinate with owners, contractors, and vendors for info submission.
• Attend site visits and prepare weekly status reports.

Skills

Facility controls

RMF

BAS

Cybersecurity

POA&Ms

Education

Bachelor's degree in Engineering or related

Tools

eMASS

RMF tooling

Job description

The Building People, LLC, has an opening for a Facility Controls Cybersecurity Specialist (FRCS / RMF) to support facility operations, facility-related control systems, and cybersecurity compliance activities.

This position bridges facility control systems, operational technology (OT), and cybersecurity compliance. The specialist will support cybersecurity authorization and system lifecycle activities for facility-related control systems, including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility systems and equipment.

The position works closely with cybersecurity personnel, facility stakeholders, system owners, contractors, controls integrators, and equipment vendors to support Risk Management Framework (RMF), Authority to Operate (ATO), Plans of Action and Milestones (POA&Ms), security documentation, technical configuration reviews, and system authorization and reauthorization activities.

Key Responsibilities

• Provide technical and cybersecurity support for Facility-Related Control Systems (FRCS), Operational Technology (OT), and associated systems supporting existing facilities and facility projects.
• Support systems including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility-related controls and equipment.
• Assist Information System Security personnel with maintaining the confidentiality, integrity, and availability of assigned facility information systems.
• Support the securing, managing, reviewing, and auditing of technical system settings necessary to maintain applicable cybersecurity and system authorization requirements.
• Develop, maintain, and track POA&Ms associated with cybersecurity deficiencies, system authorization, and lifecycle activities.
• Support RMF authorization and reauthorization activities when security-impacting system changes occur.
• Support the development, maintenance, and submission of new and existing RMF authorization packages.
• Coordinate with system owners, facility personnel, contractors, controls integrators, equipment manufacturers, and vendors to collect, review, validate, and submit required technical and cybersecurity information.
• Support cybersecurity requirements associated with modifications, upgrades, replacements, and new projects involving facility control systems.
• Maintain accurate system lifecycle, configuration, authorization, audit, and supporting technical documentation.
• Participate in meetings and conduct required site visits.
• Prepare detailed weekly status reports covering ongoing facility control systems and cybersecurity activities.

Required Experience and Qualifications

• Experience supporting facility-related control systems, Operational Technology (OT), Industrial Control Systems (ICS), Building Automation Systems (BAS), or comparable control environments.
• Working knowledge of Risk Management Framework (RMF) processes and cybersecurity requirements applicable to facility or operational technology systems.
• Experience supporting system authorization, cybersecurity documentation, system lifecycle activities, configuration management, security controls, or technical security reviews.
• Experience or demonstrated ability to support ATO maintenance, RMF authorization/reauthorization, and POA&Ms development and tracking.
• Ability to coordinate technical and cybersecurity requirements among system owners, engineers, facility personnel, controls contractors, equipment vendors, and cybersecurity personnel.
• Ability to develop and maintain accurate technical documentation, authorization artifacts, project documentation, and status reporting.
• Strong written and verbal communication, organization, documentation, and issue-tracking skills.
• Experience or demonstrated ability to perform facility control system cybersecurity activities in accordance with applicable standards and guidance.
• Ability to support onsite activities, meetings, and facility site visits as required.
• Ability to satisfy applicable Government personnel-security, credentialing, site-access, and system-access requirements.

Preferred Experience and Education

• Experience supporting federal, DoD, healthcare, medical, institutional, or other mission-critical facility environments.
• Direct experience supporting Facility-Related Control Systems (FRCS), Operational Technology (OT), or Industrial Control Systems (ICS) cybersecurity.
• Hands-on experience with eMASS or comparable RMF/authorization workflow tools.
• Experience supporting or developing:
  • RMF authorization packages
  • ATO documentation and maintenance
  • POA&Ms
  • Security control documentation
  • Configuration-management documentation
  • Audit evidence
  • System lifecycle documentation
  • Cybersecurity authorization artifacts
• Experience with Building Automation Systems (BAS), Building Management Systems (BMS), access control, fire alarm, elevator controls, or related building control technologies.
• Experience coordinating cybersecurity activities with ISSM, ISSO, ISSE, system owners, controls integrators, or cybersecurity organizations.
• Familiarity with Controlled Unclassified Information (CUI) safeguarding requirements and NIST SP 800-171.
• Knowledge of the interfaces among facility operations, construction, commissioning, controls integration, cybersecurity, and system lifecycle management.
• Bachelor's degree in Engineering, Cybersecurity, Information Systems, Facilities Management, Building Automation, Construction Management, or a related technical discipline preferred.
• An equivalent combination of directly applicable technical experience, education, training, and certifications may be considered.

*Salary offered will be commensurate with the candidate's experience, qualifications, and certifications.

*Our positions may require a background screening and clearance directly from the Government.

*Please note that telework arrangements are subject to change based on customer requirements.

ADDITIONAL INFORMATION

Competitive benefits for eligible employees include:

• Medical & Rx
• Dental
• Vision
• Flexible Spending Accounts
• 401(k) Retirement Plan
• Life Insurance/AD&D
• Long Term Disability and Short-Term Disability
• Paid Time Off
• Holiday Pay

All positions require a background check after acceptance of our offer. The selected candidate will be eligible to begin employment before the background check has been finalized. However, continued employment will be contingent upon the results of your reference/background check from The Building People, LLC. Your position may require special credentialing, clearance, and access as a condition of employment. In the event the government or client does not sponsor or approve your clearance, it may result in termination of your employment.

If you need a reasonable accommodation for any part of the employment process, please contact us by email at [e-mail] and let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this e-mail address.

For more information, view the EEO is the Law Poster and Pay Transparency Statement.