ServiceNow Architect SME – GRC/Cyber

New River Systems Corporation; Chantilly (VA); Hybrid; USD 185,000 - 275,000; Full time

Job summary

New River Systems Corporation in Chantilly, VA, seeks a GRC Solution Architect to lead the design of a continuous-authorization posture for DIA’s CAM/RMF implementation, replacing Xacta-based processes. This is a complex ServiceNow GRC program with a focus on target architecture, integration design, and migration boundaries.

You will define CAM/RMF operating model, perform fit-gap analysis, and design CMDB, Vulnerability Response, ITSM, and monitoring integrations, guiding the team through Crawl

Qualifications

• Deep hands-on experience architecting ServiceNow GRC (CAM/RMF) or comparable Risk Management Framework implementations.
• Working knowledge of NIST SP 800-37 and 800-137, ICD 503 and DoD RMF.
• Experience leading fit-gap analysis and target-state architecture for complex, regulated authorization workflows.
• Ability to design integration architecture spanning CMDB, Vulnerability Response and ITSM.

Responsibilities

• Own the target CAM/RMF solution architecture and integration design for the initial authorization enclave.
• Lead out-of-the-box fit-gap analysis against DIA’s current Xacta-based authorization process.
• Define the initial enclave and authorization boundary in partnership with DIA CIO4 stakeholders.
• Design the CMDB, Vulnerability Response, ITSM and monitoring integration set.
• Establish the migration boundary, security, testing and cutover strategy for the Government-approved set of active ATO packages and open POA&Ms.
• Partner with the RMF/CAM Functional SME and development team through Crawl and Walk to ensure delivered configuration matches the approved architecture.
• Support Government acceptance milestones, including IOC go-live and the Xacta retirement-readiness recommendation.

Skills

ServiceNow GRC

CAM RMF

Integration design

Xacta replacement

Government-approved documentation

Education

High School Diploma/ GED

Associates Degree

Bachelors Degree

Masters Degree

PhD

Tools

ServiceNow

CMDB

Vulnerability Response

ITSM

Job description

Location:

Chantilly, VA (Government/Contractor SCIF) 100% on-site

Clearance:

Active Top Secret Clearance/TS SCI Preferred

We are seeking a GRC Solution Architect to lead the design of a continuous-authorization posture for DIA’s ServiceNow Continuous Authorization and Monitoring (CAM) / Risk Management Framework (RMF) implementation, replacing the Agency’s existing Xacta-based authorization process. This is among the most complex ServiceNow GRC implementations in the Intelligence Community, and this role owns the target solution architecture, integration design and migration boundary that make the effort achievable within the funding identified.

You will define the target CAM/RMF operating model, perform out-of-the-box fit-gap analysis against the current Xacta process, and design the CMDB, Vulnerability Response, ITSM and monitoring integration set that the delivery team builds against through Crawl and Walk.

What We’re Looking For

• Deep hands-on experience architecting ServiceNow GRC (CAM/RMF) or comparable Risk Management Framework implementations.
• Working knowledge of NIST SP 800-37 and 800-137, ICD 503 and DoD RMF.
• Experience leading fit-gap analysis and target-state architecture for complex, regulated authorization workflows.
• Ability to design integration architecture spanning CMDB, Vulnerability Response and ITSM.
• Proven ability to produce Government-approved architecture, requirements traceability and migration-boundary documentation.
• Comfortable operating as design authority in a classified, structured, or air-gapped environment.

Key Responsibilities

• Own the target CAM/RMF solution architecture and integration design for the initial authorization enclave.
• Lead out-of-the-box fit-gap analysis against DIA’s current Xacta-based authorization process.
• Define the initial enclave and authorization boundary in partnership with DIA CIO4 stakeholders.
• Design the CMDB, Vulnerability Response, ITSM and monitoring integration set.
• Establish the migration boundary, security, testing and cutover strategy for the Government-approved set of active ATO packages and open POA&Ms.
• Partner with the RMF/CAM Functional SME and development team through Crawl and Walk to ensure delivered configuration matches the approved architecture.
• Support Government acceptance milestones, including IOC go-live and the Xacta retirement-readiness recommendation.

Minimum Experience

To be successful in this role, you’ll need:

Success in this role is measured by your ability to architect a defensible, Government-approved continuous-authorization solution and to keep the delivery team building against it through IOC and Walk. You proactively identify integration and migration risk and translate compliance requirements into workable ServiceNow design.

Must meet degree and years of experience criteria below:

High School Diploma/ GED

16

Associates Degree

14

Bachelors Degree

12

Masters Degree

10

PhD

8

Required Certifications

• DoD 8570 IAT II (e.g., Security+)
• ServiceNow Certified System Administrator (CSA)
• ServiceNow Certified Implementation Specialist – GRC

Desired Certifications

• CISSP or CAP (Certified Authorization Professional)
• ServiceNow Certified Technical Architect (CTA)
• ITIL 4 Foundation

Salary Range: $185-275k. The final offered salary will be based on several factors, including but not limited to the candidate’s depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position

New River Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, nation origin, disability, protected veteran status or any other factor protected by law.