IT Cybersecurity Specialist (Fort Lee)

West 4th Strategy; Fort Lee (NJ); Hybrid; USD 115,000 - 170,000; Full time

Job summary

West 4th Strategy seeks an IT Cybersecurity Specialist to secure the Defense Contract Management Agency's ServiceNow platform, implementing security controls and RMF artifacts to support ATO processes.

You will work with government stakeholders, map configurations to NIST controls, maintain SSP, manage POA&M in GRC, and ensure DoD 8140.03 qualifications are met.

This is a full-time role with remote work options and potential on-site duties at Fort Lee, VA, plus comprehensive benefits.

Qualifications

• Bachelor's degree in Cybersecurity, CS, or related field.
• Minimum of five years of practical experience.
• Active qualification aligning with DoDM 8140.03 DCWF for Security Architecture.

Responsibilities

• Architects and implements ServiceNow security controls, including RBAC, ACLs, Data Policies, and Edge Encryption.
• Enforces data segregation between IL4 and IL5 environments.
• Creates and maintains a detailed RBAC matrix and data segregation rules.
• Coordinates with Government IT PM and AO to ensure cybersecurity protocols are followed.
• Develops SSP and RMF artifacts mapping ServiceNow configurations to NIST controls.
• Tracks POA&M in ServiceNow GRC/IRM to remediate vulnerabilities.
• Performs continuous monitoring and security assessment reporting before code promotion.
• Ensures personnel meet DoD 8140.03 qualifications; documents certifications on request.

Skills

ServiceNow Security

FedRAMP High

NIST SP 800-53

RMF Artifacts

DoD IL4/IL5

RBAC/ACLs

GRC/IRM

DoD 8140.03

Education

Bachelor's degree in Cybersecurity

Tools

ServiceNow

RMF tooling

Job description

IT Cybersecurity Specialist

We need an experienced IT Cybersecurity Specialist at the Defense Contract Management Agency (DCMA). This role secures the ServiceNow platform that underpins the Blue UAS Cleared List, the program responsible for vetting commercial drone systems for security risk before they are approved for military and government use. In this role, you will architect and implement ServiceNow specific security controls, develop and maintain the System Security Plan and RMF artifacts, and track the POA&M to remediate identified vulnerabilities and maintain the system's Authority to Operate. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.

RESPONSIBILITIES

• Architects and implements ServiceNow specific security controls, including RBAC, ACLs, Data Policies, and Edge Encryption, aligned to the DoD Zero Trust Strategy
• Enforces strict data segregation between IL4 (Public) and IL5 (CAC Authenticated) environments
• Creates and maintains a detailed schema and RBAC matrix outlining all roles, groups, ACLs, and data segregation rules
• Coordinates with the Government's IT Program Manager and Authorizing Official (AO) to ensure required cybersecurity protocols are maintained and followed
• Develops and continuously updates a comprehensive System Security Plan (SSP) and all required RMF artifacts, mapping ServiceNow configurations to NIST SP 800-53 and NIST SP 800-171/172
• Actively tracks, manages, and updates the Plan of Action and Milestones (POA&M) within ServiceNow GRC/IRM to document, report, and remediate identified vulnerabilities within Government provided suspense dates
• Conducts continuous monitoring and provides ongoing Security Assessment Reports (SAR) documenting vulnerability scans, penetration test reviews, and compliance checks prior to code promotion
• Ensures all personnel meet applicable qualifications and certification requirements outlined in DoDM 8140.03
• Provides documentation of personnel certifications and qualifications upon request by the CO or COR

BACKGROUND/REQUIRED EXPERIENCE

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
• Minimum of five (5) years of practical experience
• Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels (Foundational and Residential) appropriate for Security Architecture and Engineering (e.g., Security Architect, DCWF 651)
• Demonstrated expertise applying NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO)
• Demonstrated experience securing ServiceNow instances in a FedRAMP High and DoD IL4/IL5 environment, including configuring ACLs, Client Scripts, Data Policies, and integrating DoW E-ICAM/CAC authentication
• Experience with ServiceNow GRC/IRM or SecOps modules highly preferred

LOCATION

• Remote work is available initially, with a future transition to onsite support at the DCMA facility in Fort Lee, VA.

CLEARANCE

• Active or interim DoW security clearance; favorably adjudicated Tier 3 background investigation required
• Must be a US Citizen

CLIENT

• Defense Contract Management Agency (DCMA), Unmanned Systems-Experimental (US-X) command

HOURS

• 40 hours per week
• 8 hours per day

EMPLOYMENT CLASSIFICATION

• Employment Classification Eligibility – W2

RELOCATION

• Not eligible for relocation benefits

COMPENSATION

• Salary range: $115,000 – $170,000
• Benefits: Benefits package includes options for health, dental, and vision insurance coverage; 401k contribution options. Full benefits brochure available for review.

Equal Opportunity Statement

West 4th Strategy is an Equal Opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, gender, sexual orientation, ancestry, national origin, age, marital status, mental disability, physical disability, medical condition, pregnancy, political affiliation, military or veteran status, or any other basis prohibited by federal or state law.

Other Considerations

This position is W-2 only; no Corp-to-Corp or 1099 candidates. Relocation will not be offered. This position requires access to Department of Justice facilities and systems. As a condition of employment, selected candidates must complete and receive favorable adjudication from a federal government background investigation as required by the U.S. Department of Justice. Individual’s primary workstation is located in an office area. The noise level in this environment is low to moderate. Regularly required to sit for extended periods up to 80% of the time; frequently required to move about to access file cabinets and use office equipment such as PC, copier, fax, telephone, cell phone, etc. Occasionally required to reach overhead, bend, and lift objects of up to 10 lbs. Specific vision abilities required by this job include the use of computer monitor screens up to 80% of the time.