IT Cybersecurity Specialist - Contingent

Contracting Resources Group, Inc.; San Diego (CA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) plan

Medical Insurance

Dental Insurance

PTO & Holidays

Job summary

Contracting Resources Group, Inc. seeks two IT Cybersecurity Specialists to architect and implement ServiceNow-specific security controls for the DCMA Blue List program, including RBAC, ACLs, data policies, and edge encryption.

You will own platform security engineering and the system's ATO, developing SSP and RMF artifacts and enforcing data segregation between IL4 and IL5 environments. The ideal candidate will have direct experience securing a ServiceNow instance in FedRAMP High/DoD IL4-IL5

Qualifications

• Bachelor's degree in a related technical field.
• Minimum five years of practical security experience.
• Experience applying federal security directives and RMF.
• Experience securing ServiceNow in FedRAMP High/DoD IL4/IL5 environments.
• U.S. citizen with favorable Tier 3 investigation on file.

Responsibilities

• Architect and implement ServiceNow security controls to align with DoD Zero Trust and IL4/IL5 data segregation.
• Create and maintain an RBAC matrix detailing roles, groups, ACLs and data rules.
• Develop SSP and RMF artifacts mapping to NIST and DoD controls to achieve ATO.
• Track and remediate POA&M within suspense dates, using ServiceNow GRC/IRM where possible.
• Conduct continuous monitoring and document SARs prior to code promotion.
• Ensure personnel meet DoD 8140.03 qualifications and provide certifications on request.

Skills

ServiceNow security

RBAC

ACLs

Data Policies

Edge Encryption

NIST SP 800-53

RMF

ATO management

Vulnerability assessment

Education

Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering

Tools

ServiceNow

GRC/IRM

CAC authentication integration

Job description

Description: CRG is seeking two IT Cybersecurity Specialists to architect and implement ServiceNow-specific security controls for the DCMA Blue List Program Support Services contract, including Role-Based Access Controls (RBAC), Access Control Lists (ACLs), Data Policies, and Edge Encryption, aligned to the DoD Zero Trust Strategy.

This role owns platform security engineering and the system's Authority to Operate (ATO), developing and maintaining the System Security Plan (SSP) and RMF artifacts, and enforcing strict data segregation between IL4 (Public) and IL5 (CAC-Authenticated) environments.

The ideal candidate will have direct experience securing a ServiceNow instance in a FedRAMP High / DoD IL4-IL5 environment and be comfortable owning POA&M remediation against Government suspense dates.

Responsibilities:

Platform Security Architecture

• Architect and implement ServiceNow-specific security controls — including RBAC, ACLs, Data Policies, and Edge Encryption — to align with the DoD Zero Trust Strategy and enforce strict data segregation between IL4 (Public) and IL5 (CAC-Authenticated) environments
• Create and maintain a detailed schema and RBAC matrix outlining all roles, groups, ACLs, and data segregation rules
• Adhere to local policy and coordinate with the Government office's IT Program Manager and Authorizing Official (AO) to ensure required cybersecurity protocols are maintained and followed

RMF & ATO Management

• Develop and continuously update a comprehensive System Security Plan (SSP) and all required RMF artifacts, mapping ServiceNow platform configurations to NIST SP 800-53, NIST SP 800-171/172 (CUI protection), and DoD IL4/IL5 controls to achieve and maintain the system's Authority to Operate (ATO)
• Actively track, manage, and update the Plan of Action and Milestones (POA&M), preferably within ServiceNow GRC/IRM, to document, report, and remediate identified vulnerabilities within Government-provided suspense dates

Continuous Monitoring & Compliance

• Conduct continuous monitoring and provide ongoing Security Assessment Reports (SAR) documenting vulnerability scans, penetration test reviews, and compliance checks prior to code promotion, ensuring the ATO remains valid throughout the system's lifecycle
• Ensure all personnel performing tasks under the PWS meet applicable qualification and certification requirements per DoDM 8140.03, and provide documentation of personnel certifications and qualifications upon request by the CO or COR

Required Qualifications:

• Bachelor's degree required in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
• Minimum of five (5) years of practical experience
• Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels (Foundational and Residential) appropriate for Security Architecture and Engineering (e.g., Security Architect - DCWF 651)
• Demonstrated expertise applying federal security directives, including NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO)
• Demonstrated experience securing ServiceNow instances in a FedRAMP High and DoD IL4/IL5 environment, including configuring ServiceNow ACLs, Client Scripts, Data Policies, and integrating DoW Enterprise Identity, Credential, and Access Management (E-ICAM)/CAC authentication
• Must be a U.S. citizen with a favorably adjudicated Tier 3 (ADP/IT-II) investigation on file in DISS at the time of offer

Desired Qualifications:

• Experience utilizing ServiceNow Governance, Risk, and Compliance (GRC) / Integrated Risk Management (IRM) or Security Operations (SecOps) modules

Benefits

Full-time employees are eligible for 401(k) and Roth retirement plans, Medical, Dental, and Vision Insurance (for employees and families), Supplemental Insurance, 11 Federal Holidays, and at least three weeks of Paid Time Off (PTO), including sick and personal leave.

CRG is an equal opportunity employer. We make employment decisions based on merit, qualifications, and business need. All qualified applicants receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other state or federally protected category.