ServiceNow Security Architect – DoD RMF & CSRMC

NANA Corp; Alexandria (VA); Hybrid; USD 205,000 - 220,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k)

Job summary

SUVI Global Services seeks a ServiceNow Security Architect to support the DoD OIG in a hybrid role focused on secure implementation, integration, and authorization of the ServiceNow SaaS platform. Collaboration with platform architects and cybersecurity teams ensures secure design, assessment, and authorization in line with DoD requirements.

The selected candidate will apply CSRMC, Zero Trust, and DoD RMF concepts to secure new modules and integrations, drive risk assessments, data protection,

Qualifications

• Active Secret security clearance.
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or related field; significant equivalent experience accepted.
• 10+ years in enterprise IT architecture, cybersecurity engineering, cloud architecture, or related fields.
• Demonstrated ServiceNow architecture experience, including enterprise implementations, platform security, configuration, integrations, and production environments.
• At least 5 years of experience supporting DoD RMF, information assurance, security engineering, or ATO activities within federal/DoD environments.
• Strong knowledge of DoDI 8510.01, NIST RMF, security controls, authorization boundaries, control inheritance, continuous monitoring, and POA&M management.
• Understanding of DoD SaaS security, FedRAMP, DoD SRG, shared-responsibility models, and cloud authorization requirements.
• Experience evaluating secure integration architectures, data protection, identity management, APIs, and system interconnections.
• Familiarity with DoD CSRMC, Zero Trust, DevSecOps, automated security assessments, reciprocity, and continuous authorization practices.
• Strong technical communication skills, including the ability to explain cybersecurity risk and architecture decisions to senior government IT and cybersecurity leadership.

Responsibilities

• Collaborate with the architect team to define technical architecture, security guidance, and risk management for ServiceNow implementations, configurations, applications, modules, workflows, integrations, and platform modernization, with emphasis on security, scalability, and operational support.
• Evaluate ServiceNow solutions for security risks involving identity and access management, privileged access, data protection, encryption, APIs, network connectivity, logging, and cloud security boundaries.
• Support the ServiceNow authorization strategy, including security control implementation, authorization boundaries, control inheritance, shared responsibilities, continuous monitoring, and maintenance of ATO/POA&M documentation.
• Assess security and authorization impacts of new ServiceNow modules, applications, data models, integrations, and architectural changes, then recommend appropriate security reviews, risk mitigation, authorization updates, and government approvals before production deployment.
• Evaluate data sharing and integrations between ServiceNow, other OIG systems, cloud services, and external providers. Identify security requirements, trust boundaries, interconnection risks and mitigations, and control responsibilities.
• Apply Cybersecurity Risk Management Construct (CSRMC) principles, Zero Trust, and Azure specific cloud security practices to improve risk management, security assessments, control inheritance, and authorization efficiency.
• Collaborate with the OIG ServiceNow PM, CISO, Cybersecurity team, and Enterprise Architecture Review Secretariat to establish practical security architecture review and approval processes integrated with ServiceNow development, change management, and release activities.
• Maintain ServiceNow security architecture diagrams, risk assessments, authorization documentation, and technical recommendations.
• Advise government IT and cybersecurity leadership on ServiceNow security architecture, authorization requirements, residual risks, and recommended mitigation strategies. Support briefings and decisions by cybersecurity leadership to the Authorizing Official (OIG CIO).

Skills

Active Secret clearance

ServiceNow architecture

Enterprise IT architecture

Cybersecurity engineering

DoD RMF

Zero Trust

CSRMC

Cloud security (Azure Government)

Strong communication

DevSecOps

Education

Bachelor's degree in cybersecurity, information technology, computer science, engineering, or related technical field

Significant equivalent professional experience may be considered

Tools

ServiceNow

Azure Government

Job description

SUVI Global Services seeks a ServiceNow Security Architect to support the DoD OIG in a hybrid role focused on secure implementation, integration, and authorization of the ServiceNow SaaS platform. Collaboration with platform architects and cybersecurity teams ensures secure design, assessment, and authorization in line with DoD requirements.

The selected candidate will apply CSRMC, Zero Trust, and DoD RMF concepts to secure new modules and integrations, drive risk assessments, data protection,