ServiceNow Security Architect, DoD IL4/IL5, RMF/ATO

Contracting Resources Group, Inc.; San Diego (CA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) plan

Medical Insurance

Dental Insurance

PTO & Holidays

Job summary

Contracting Resources Group, Inc. seeks two IT Cybersecurity Specialists to architect and implement ServiceNow-specific security controls for the DCMA Blue List program, including RBAC, ACLs, data policies, and edge encryption.

You will own platform security engineering and the system's ATO, developing SSP and RMF artifacts and enforcing data segregation between IL4 and IL5 environments. The ideal candidate will have direct experience securing a ServiceNow instance in FedRAMP High/DoD IL4-IL5

Qualifications

• Bachelor's degree in a related technical field.
• Minimum five years of practical security experience.
• Experience applying federal security directives and RMF.
• Experience securing ServiceNow in FedRAMP High/DoD IL4/IL5 environments.
• U.S. citizen with favorable Tier 3 investigation on file.

Responsibilities

• Architect and implement ServiceNow security controls to align with DoD Zero Trust and IL4/IL5 data segregation.
• Create and maintain an RBAC matrix detailing roles, groups, ACLs and data rules.
• Develop SSP and RMF artifacts mapping to NIST and DoD controls to achieve ATO.
• Track and remediate POA&M within suspense dates, using ServiceNow GRC/IRM where possible.
• Conduct continuous monitoring and document SARs prior to code promotion.
• Ensure personnel meet DoD 8140.03 qualifications and provide certifications on request.

Skills

ServiceNow security

RBAC

ACLs

Data Policies

Edge Encryption

NIST SP 800-53

RMF

ATO management

Vulnerability assessment

Education

Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering

Tools

ServiceNow

GRC/IRM

CAC authentication integration

Job description

Contracting Resources Group, Inc. seeks two IT Cybersecurity Specialists to architect and implement ServiceNow-specific security controls for the DCMA Blue List program, including RBAC, ACLs, data policies, and edge encryption.

You will own platform security engineering and the system's ATO, developing SSP and RMF artifacts and enforcing data segregation between IL4 and IL5 environments. The ideal candidate will have direct experience securing a ServiceNow instance in FedRAMP High/DoD IL4-IL5