Senior DoD CMDB & Configuration Manager

SHR Consulting Group; Arlington (VA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits package

Paid time off and federal holidays

Job summary

SHR Consulting Group in Arlington, Virginia, is looking for an experienced Configuration Manager to lead the management processes for a complex DoD enterprise environment. The role requires strong knowledge of CMDB tools and automation skills in Python or PowerShell.

The ideal candidate will ensure compliance with governance policies, maintain the Configuration Management Database, and interact seamlessly with IT systems. A Bachelor's degree in a technical field and an active Secret Clearance are required.

Qualifications

• Three (3) or more years of experience in configuration management in a DoD or federal IT environment.
• Hands-on experience administering ServiceNow or BMC CMDB tools at enterprise scale.
• Familiarity with DevSecOps principles and Infrastructure as Code (IaC).

Responsibilities

• Maintain CMDB data and system records in accordance with DISA governance and policy.
• Conduct regular audits of the CMDB against physical floor checks.
• Develop and implement automation scripts for CMDB artifact maintenance.

Skills

BMC and ServiceNow CMDB tools

Configuration management

Automation scripting (Python, PowerShell)

IT service management

DoD STIGs and IAVAs

Technical documentation

Communication skills

Education

Bachelor’s degree in a technical field

Tools

Splunk

SolarWinds

SCOM

Tanium

ACAS

MECM

Job description

SHR is a premier technology integrator solving our nation’s most complex modernization and readiness challenges across the defense, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration, enterprise IT, including cloud services: cyber, software, advanced analytics, and AI. With an intimate understanding of our customers’ challenges and deep expertise in existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions.

We are a rapidly growing organization seeking an experienced Configuration Manager to lead and execute the configuration management processes for a large, complex DoD enterprise environment supporting the DISA Joint Service Provider (JSP). The successful candidate will ensure all hardware, software, services, and documentation are accurately represented in the Configuration Management Database (CMDB) and that all changes are processed through the JSP Enterprise Change Management framework.

Key Responsibilities:

• Maintain CMDB data and system records in accordance with DISA governance and policy; maintain system configuration documentation, baseline records, and change logs in accordance with configuration management processes.

• Oversee the complete Configuration Item (CI) lifecycle from procurement and discovery through deployment, maintenance, and final retirement/decommissioning; build and maintain accurate CI relationships and dependency maps to ensure downstream impact analysis during outages or planned maintenance.

• Ensure systems of record (e.g., DPAS) are provided up-to-date information on IT assets both deployed and not deployed; build automations to enable mass export/import of data across a heterogeneous set of IT systems.

• Conduct regular, scheduled audits of the CMDB against physical floor checks and automated network discovery scans (e.g., Tanium, ACAS, MECM) to identify and resolve discrepancies; track hardware End-of-Life/End-of-Support dates and software license utilization to support capacity planning.

• Maintain a library of automations and scripts (Python, PowerShell) for CMDB artifact maintenance using CMDB OEM best practices for importing, exporting, and data analysis; configure, schedule, and maintain automated network discovery to ensure continuous, real-time asset data.

• Develop and implement auto-remediation scripts to identify, flag, and quarantine orphaned, duplicated, or stale CI records; utilize DevSecOps principles and version control repositories to manage and deploy CMDB configuration changes and scripts (Infrastructure as Code).

• Operate and maintain external system integrations; collaborate with external system owners to provide data analytics support that enriches data both in the CMDB and in connected systems; establish and maintain data workflow architecture across the enterprise.

• Ensure the CMDB seamlessly integrates with Incident, Problem, and Change Management modules so service desk technicians and engineers have accurate asset data during troubleshooting; develop and maintain REST/SOAP API connections to external vendor portals (warranty) and internal monitoring tools (Splunk, SolarWinds, SCOM).

• Establish and enforce data normalization rules across all integrated tools to ensure naming conventions and asset tags remain consistent when flowing into the CMDB.

• Ensure all CMDB systems, tools, and automations maintain compliance with DoD STIGs, IAVAs, and applicable Command Cyber Tasking Orders (CCTOs), including static, dynamic, and cyber code scanning of any custom tools or code.

• Support Risk Management Framework (RMF) activities including development and maintenance of system security documentation, POA&Ms, and A&A artifacts; ensure the CMDB ATO system package is updated and maintained according to schedule and that the CMDB reflects the latest state of the enterprise from an ATO boundary IT asset audit perspective.

• Intersect CMDB asset data with ACAS vulnerability scans to help cybersecurity teams prioritize patching based on CI criticality; configure the CMDB to automatically trigger security alerts when unauthorized hardware/software is discovered; provide rapid, accurate system dependency mapping to the DCO team during security incidents.

• Develop, update, and maintain SOPs, Work Instructions, and technical documentation for all supported systems; provide status updates, incident reports, and After Action Reports (AARs) as required.

• Participate in Configuration Change Control Board (CCB) and Change Advisory Board (CAB) processes; act as the authoritative voice on asset impact during CAB meetings, ensuring no changes are approved without verified CMDB dependency checks.

• Develop, customize, and present CMDB health dashboards, KPIs, and compliance metrics to Government stakeholders and program leadership; maintain comprehensive data dictionaries and data models so external system owners understand how to map their data into the CMDB.

Minimum Qualifications:

• Working knowledge of BMC and ServiceNow CMDB tools; hands-on experience administering ServiceNow and/or BMC CMDB tools at enterprise scale.

• Three (3) or more years of experience in configuration management, CMDB administration, or IT service management within a DoD or federal IT environment of similar size and complexity.

• Ability to apply DoD STIGs and IAVAs to maintain system compliance; experience with backup and recovery tools and procedures.

• Practical experience writing automation in Python and/or PowerShell for data import/export, normalization, and analysis against CMDB systems.

• Familiarity with DevSecOps principles, version control, and Infrastructure as Code (IaC) approaches to managing CMDB configuration.

• Experience integrating CMDB with ITSM modules (Incident, Problem, Change) and with monitoring/scanning tools such as Splunk, SolarWinds, SCOM, Tanium, ACAS, and MECM via REST/SOAP APIs.

• Ability to create and maintain technical documentation, SOPs, Work Instructions, and system configuration records.

• Strong oral and written communication skills; ability to brief technical topics to non-technical stakeholders.

• Experience in a DoD, Intelligence Community, or Federal Government IT environment is preferred.

• Familiarity with ITIL service management practices is preferred; ITIL Foundation certification strongly preferred.

• Familiarity with DoD RMF processes, eMASS, A&A documentation, and DoD ICAM frameworks is preferred.

Education Requirement:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Information Systems, Cybersecurity, or a closely related technical field; or equivalent combination of education, training, and directly relevant DoD IT experience.

Clearance Requirement:

• Active Secret Clearance (or higher)

• Must meet DoD 8570.01-M / DoD 8140 IAT Level II baseline certification requirements prior to start (e.g., Security+ CE, CCNA-Security, CySA+, GICSP, GSEC, or equivalent). Computing Environment certification appropriate to the role is also required.

• 100% onsite at a government facility within the National Capital Region (NCR), primarily at the Pentagon, Crystal Gateway, Taylor Building, Mark Center, or other JSP-designated alternate site. Must be local to the DC Metro Area with reliable transportation.

• Must comply with all DoD, DISA, and JSP security and access protocols, including the ability to access NIPRNet and SIPRNet environments.

We Offer:

• Competitive salary based on experience and qualifications
• Comprehensive benefits package including health, dental, and retirement plans with company match
• Paid time off and federal holidays

We are an Equal Opportunity Employer and consider all qualified applicants without regard to protected characteristics under applicable law. EEO/AA Employer/Veteran/Disabled