Industrial Control System (ICS) Cybersecurity Engineer

ASRC Federal; Albuquerque, Northern (NM, KY); Hybrid; USD 110,000 - 155,000; Full time

Job summary

ASRC Federal Netcentric Technologies, LLC seeks an Industrial Control System (ICS) Cybersecurity Engineer to lead cybersecurity efforts for KEOS at Kirtland AFB in Albuquerque, NM. The role emphasizes IS information security, RMF implementation, and control system hardening.

You will guide design and maintenance of control networks, perform RMF activities, and ensure compliance with DoD policies. A minimum of three years in cybersecurity and DoD familiarity are highly valued for success in this

Qualifications

• At least three years of experience in cybersecurity or related fields.
• Familiarity with US Air Force cybersecurity guidance, rules and regulations is preferred.
• Bachelor’s degree or military-equivalent training in engineering, cybersecurity, IT, or related field.
• DoD 8570 (or 8140) IAT Level II certification or ability to obtain within six months.
• Strong knowledge of computer security architectures and security controls.

Responsibilities

• Lead design, installation, commissioning, and maintenance of control systems upgrades and new installations.
• Serve as ISSO supporting Kirtland AFB control systems and RMF activities.
• Produce and maintain SOPs and work instructions per DoD/USA procedures.
• Perform vulnerability assessments and remediation guidance for security controls.
• Coordinate with PM, ISSM, and OSR to ensure security posture and ATO readiness.

Skills

Cybersecurity

RMF / A&A

Communication skills

IAT II knowledge

Education

Bachelor’s degree in engineering / cybersecurity / IT

Tools

eMASS

HBSS

Niagara Workbench

BACnet

EMCS

Job description

ASRC Federal Netcentric Technologies, LLC is seeking an Industrial Control System (ICS) Cybersecurity Engineer to support ongoing activities on the Kirtland AFB Engineering Operations Services (KEOS) contract in Albuquerque, New Mexico. KEOS is a base maintenance/operations support-type contract, also known as BMC or BOS.

Job Summary

Technical lead for the design, installation, commissioning, and maintenance of control systems upgrades, new installations, and modifications in a variety of industrial process settings.Serves as Information System Security Officer (ISSO) in support ofKAFB’sowned and operated control systems, ensuring the confidentiality, integrity, and availability of systems, applications, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of cybersecurity programs, policies, procedures, and tools.

Duties and Responsibilities

• Support the implementation and maintenance of cyber security requirements within the control networks.
• Provide technical guidance and direction for the standardization of control systems and operational technology network architecture throughout the enterprise.
• Performs the specificationofandassists in theprocurement of control systems, instrumentation, and supporting equipment.
• Provide RMF support required to obtain and maintain Authority to Operate (ATO) approvals for multiple networks.
• Create and maintain documentation and artifacts in Enterprise Mission Assurance Support Services (eMASS)in support of Risk Management Framework (RMF)activities.
• Perform software assurance and risk assessments for the development of several software packages.
• Conduct and review vulnerability and compliance scans of information systems hardware and software and provide guidance for remediation of detected security flaws and configuration issues.
• Review and monitor audit records of information systems.
• Develop and maintain required Standard Operating Procedures (SOP) and Work Instructions in accordance with Department of Defense and United States Air Force Policies and Procedures.
• Oversee all communications with Program Management,Information System SecurityManager (ISSM),andOn-Site Representative (OSR).
• Directs remediation actions on security controls based on the findings and recommendations of the security assessment report and works with Security Control Accessor (SCA) to remediate controls for compliance.
• Administrates mitigation for all identified POA&M weaknesses and ensures closurein a timely manneraccording to the mitigation plan. Ensuresappropriate stepsare taken to reduce oreliminateidentified weaknesses, then coordinates security authorization package to SCA for assessment.
• Support configuration management processes and documentation to ensure all proposed changes are analyzed,testedand approved prior to implementation.
• Develop and test contingency plans and disaster recovery plans.
• Create and manage system Plans of Action and Milestones (POA&M) for all identified weaknesses and vulnerabilities.
• Oversees access control requirements, including privileged users, and ensure all personnel receive the requisite cybersecurity training.

Requirements

Experience

• At least three years' experience working in cybersecurity or a related field such as information technology or control systems management.
• Prefer candidate to have worked in a military environment and particularly, to have familiarity with US Air Force cybersecurity guidance, rules, and regulations.

Required Qualifications

• Bachelor’s degree or military-equivalent training inmechanical or electrical engineering,cybersecurity, information technology, or a closely related field.
• Have or be able to obtain within six months, DoD 8570 (or 8140) IAT Level II certification.
• Possessa working knowledgeof computer security architectures and implementation of security controls.
• Capable ofworking independentlywith minimal supervision.
• Possess excellent verbal and written communication skills.
• Must be able to pass a drug screen.
• Must be a US citizen and currentlypossessor be able to obtain/maintaina U.S. government-issued security clearance.
• Be proficientinusingMicrosoftOffice 365 software suite and Adobe Acrobat Pro.
• Mustmaintaina valid US driver's license.
• Have ability to perform repetitive physical tasks involving lifting at least50 lbs.
• Be committed to providing for andmaintaininga safe working environment.

Desired Qualifications

• Experienceworkingin amilitary environment andparticularly, tohavefamiliarity withUSAirForcecybersecurityguidance, rules, and regulations.
• Possess expertise in advanced process control (APC), distributed control systems (DCS), programmable logic controllers (PLC) and supervisory control and data acquisition (SCADA).
• Working knowledge of RMF package creationand maintenance.
• Experience witheMASSfor managing RMF Assessment and Authorization (A&A) activities.
• Knowledge ofEnergy Management Control Systems(EMCS),Fire Alarm Reporting Systems(FARS),Utility Monitoring Control Systems(UMCS)utilizing BACnet protocols.
• Familiarity withDoD RMF andeMASSEssentials.
• Knowledge of Host Based Security System (HBSS).
• Knowledge of Niagara Workbench software.
• Familiarity or experience performingfacility assessments and Real Property Inventory Equipment (RPIE) condition assessments using Sustainment Management System (SMS) BUILDER and BUILDER Remote Entry Database (BRED) software.
• Experience working with data from geospatial databases.
• Knowledge of construction management software, project closeout procedures, preventive maintenance,andconstruction and repair terminology and processes.