ServiceNow Security Architect – DoD IL4/IL5, ATO, RMF

Contracting Resources Group, Inc.; Fort Lee (NJ); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

401(k)

Roth retirement plan

Medical, Dental, Vision Insurance

PTO and holidays

Job summary

Contracting Resources Group, Inc. (CRG) seeks two IT Cybersecurity Specialists to architect and implement ServiceNow-specific security controls for the DCMA Blue List Program Support Services contract, aligning with the DoD Zero Trust Strategy across IL4 and IL5 environments.

You will own platform security engineering, SSP and RMF artifacts, and enforce data segregation between IL4 (Public) and IL5 (CAC-Authenticated) environments, with POA&M remediation responsibilities and ATO maintenance.

Qualifications

• Bachelor's degree in a cybersecurity/CS/engineering field.
• 5+ years of practical experience in cybersecurity roles.
• Active qualification aligned with DoDM 8140.03 and DCWF for security architecture/engineering.
• Experience securing ServiceNow in FedRAMP High and DoD IL4/IL5 environments.

Responsibilities

• Architect and implement ServiceNow-specific security controls (RBAC, ACLs, Data Policies, Edge Encryption).
• Develop and maintain SSP and RMF artifacts mapping to NIST SP 800-53/800-171/172 and IL4/IL5 controls.
• Track and remediate POA&M within ServiceNow GRC/IRM against suspense dates.
• Conduct continuous monitoring and document SARs for security posture and compliance.

Skills

Security architecture

RMF/SSP development

NIST 800-53

ServiceNow security

FedRAMP/DoD IL4-IL5

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Tools

ServiceNow

GRC/IRM

Job description

Contracting Resources Group, Inc. (CRG) seeks two IT Cybersecurity Specialists to architect and implement ServiceNow-specific security controls for the DCMA Blue List Program Support Services contract, aligning with the DoD Zero Trust Strategy across IL4 and IL5 environments.

You will own platform security engineering, SSP and RMF artifacts, and enforce data segregation between IL4 (Public) and IL5 (CAC-Authenticated) environments, with POA&M remediation responsibilities and ATO maintenance.