ServiceNow Security Architect—DoD IL4/IL5 ATO

Contracting Resources Group; San Diego (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

401(k) plan

Roth retirement

Medical, Dental & Vision insurance

Supplemental Insurance

11 Federal Holidays

PTO

Job summary

Contracting Resources Group seeks two IT Cybersecurity Specialists to architect and implement ServiceNow security controls for the DCMA Blue List contract, including RBAC, ACLs, Data Policies, and Edge Encryption, ensuring IL4/IL5 data segregation.

The role owns platform security engineering and the Authority to Operate (ATO), developing SSP and RMF artifacts and enforcing data segregation between IL4 and IL5 environments while aligning to FedRAMP High and DoD IL4/IL5 requirements.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• Minimum of five (5) years of practical experience.
• Active qualification aligning with DoDM 8140.03 DCWF for Security Architecture/Engineering.
• Experience securing ServiceNow in FedRAMP High/DoD IL4/IL5 environments, including ACLs, Client Scripts and Data Policies.
• U.S. citizen with favorable Tier 3 investigation on file in DISS at time of offer.

Responsibilities

• Architect and implement ServiceNow security controls to align with the DoD Zero Trust Strategy and enforce data segregation between IL4 and IL5 environments.
• Create and maintain an RBAC matrix detailing roles, groups, ACLs, and data segregation rules.
• Develop and maintain the System Security Plan (SSP) and RMF artifacts mapping ServiceNow configurations to NIST and DoD controls.

Skills

RBAC

ACLs

Data Policies

Edge Encryption

RMF

NIST SP 800-53

Education

Bachelor's degree in Cybersecurity / related field

Tools

ServiceNow

GRC/IRM

Job description

Contracting Resources Group seeks two IT Cybersecurity Specialists to architect and implement ServiceNow security controls for the DCMA Blue List contract, including RBAC, ACLs, Data Policies, and Edge Encryption, ensuring IL4/IL5 data segregation.

The role owns platform security engineering and the Authority to Operate (ATO), developing SSP and RMF artifacts and enforcing data segregation between IL4 and IL5 environments while aligning to FedRAMP High and DoD IL4/IL5 requirements.