The Role
Secures a ServiceNow platform supporting a DoD-cleared drone systems program. Responsibilities include architecting security controls, enforcing IL4/IL5 data segregation, maintaining RBAC and security documentation, developing RMF artifacts and System Security Plans, managing POA&Ms, conducting continuous monitoring, reviewing vulnerabilities and penetration tests, and supporting the Authority to Operate process. The role coordinates with government program and authorization officials and requires compliance with DoD cybersecurity qualifications, NIST controls, FedRAMP High, and DoD security requirements.
Summary Generated by Built In
IT Cybersecurity Specialist
ROLE
We need an experienced IT Cybersecurity Specialist at the Defense Contract Management Agency (DCMA). This role secures the ServiceNow platform that underpins the Blue UAS Cleared List, the program responsible for vetting commercial drone systems for security risk before they are approved for military and government use. In this role, you will architect and implement ServiceNow specific security controls, develop and maintain the System Security Plan and RMF artifacts, and track the POA&M to remediate identified vulnerabilities and maintain the system's Authority to Operate. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.
Apply today!
RESPONSIBILITIES
BACKGROUND/REQUIRED EXPERIENCE
LOCATION
CLEARANCE
CLIENT
HOURS
EMPLOYMENT CLASSIFICATION
RELOCATION
COMPENSATION
West 4th Strategy is an Equal Opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, gender, sexual orientation, ancestry, national origin, age, marital status, mental disability, physical disability, medical condition, pregnancy, political affiliation, military or veteran status, or any other basis prohibited by federal or state law.
Other Considerations: This position is W-2 only; no Corp-to-Corp or 1099 candidates. Relocation will not be offered. This position requires access to Department of Justice facilities and systems. As a condition of employment, selected candidates must complete and receive favorable adjudication from a federal government background investigation as required by the U.S. Department of Justice. Individual’s primary workstation is located in an office area. The noise level in this environment is low to moderate. Regularly required to sit for extended periods up to 80% of the time; frequently required to move about to access file cabinets and use office equipment such as PC, copier, fax, telephone, cell phone, etc. Occasionally required to reach overhead, bend, and lift objects of up to 10 lbs. Specific vision abilities required by this job include the use of computer monitor screens up to 80% of the time.
ROLE
We need an experienced IT Cybersecurity Specialist at the Defense Contract Management Agency (DCMA). This role secures the ServiceNow platform that underpins the Blue UAS Cleared List, the program responsible for vetting commercial drone systems for security risk before they are approved for military and government use. In this role, you will architect and implement ServiceNow specific security controls, develop and maintain the System Security Plan and RMF artifacts, and track the POA&M to remediate identified vulnerabilities and maintain the system's Authority to Operate. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.
Apply today!
RESPONSIBILITIES
- Architects and implements ServiceNow specific security controls, including RBAC, ACLs, Data Policies, and Edge Encryption, aligned to the DoD Zero Trust Strategy
- Enforces strict data segregation between IL4 (Public) and IL5 (CAC Authenticated) environments
- Creates and maintains a detailed schema and RBAC matrix outlining all roles, groups, ACLs, and data segregation rules
- Coordinates with the Government's IT Program Manager and Authorizing Official (AO) to ensure required cybersecurity protocols are maintained and followed
- Develops and continuously updates a comprehensive System Security Plan (SSP) and all required RMF artifacts, mapping ServiceNow configurations to NIST SP 800-53 and NIST SP 800-171/172
- Actively tracks, manages, and updates the Plan of Action and Milestones (POA&M) within ServiceNow GRC/IRM to document, report, and remediate identified vulnerabilities within Government provided suspense dates
- Conducts continuous monitoring and provides ongoing Security Assessment Reports (SAR) documenting vulnerability scans, penetration test reviews, and compliance checks prior to code promotion
- Ensures all personnel meet applicable qualifications and certification requirements outlined in DoDM 8140.03
- Provides documentation of personnel certifications and qualifications upon request by the CO or COR
BACKGROUND/REQUIRED EXPERIENCE
- Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
- Minimum of five (5) years of practical experience
- Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels (Foundational and Residential) appropriate for Security Architecture and Engineering (e.g., Security Architect, DCWF 651)
- Demonstrated expertise applying NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO)
- Demonstrated experience securing ServiceNow instances in a FedRAMP High and DoD IL4/IL5 environment, including configuring ACLs, Client Scripts, Data Policies, and integrating DoW E-ICAM/CAC authentication
- Experience with ServiceNow GRC/IRM or SecOps modules highly preferred
LOCATION
- Remote work is available initially, with a future transition to onsite support at the DCMA facility in Fort Lee, VA.
CLEARANCE
- Active or interim DoW security clearance; favorably adjudicated Tier 3 background investigation required
- Must be a US Citizen
CLIENT
- Defense Contract Management Agency (DCMA), Unmanned Systems-Experimental (US-X) command
HOURS
- 40 hours per week
- 8 hours per day
EMPLOYMENT CLASSIFICATION
- Employment Classification Eligibility – W2
RELOCATION
- Not eligible for relocation benefits
COMPENSATION
- Salary range: $115,000 – $170,000
- Benefits: Benefits package includes options for health, dental, and vision insurance coverage; 401k contribution options. Full benefits brochure available for review.
West 4th Strategy is an Equal Opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, gender, sexual orientation, ancestry, national origin, age, marital status, mental disability, physical disability, medical condition, pregnancy, political affiliation, military or veteran status, or any other basis prohibited by federal or state law.
Other Considerations: This position is W-2 only; no Corp-to-Corp or 1099 candidates. Relocation will not be offered. This position requires access to Department of Justice facilities and systems. As a condition of employment, selected candidates must complete and receive favorable adjudication from a federal government background investigation as required by the U.S. Department of Justice. Individual’s primary workstation is located in an office area. The noise level in this environment is low to moderate. Regularly required to sit for extended periods up to 80% of the time; frequently required to move about to access file cabinets and use office equipment such as PC, copier, fax, telephone, cell phone, etc. Occasionally required to reach overhead, bend, and lift objects of up to 10 lbs. Specific vision abilities required by this job include the use of computer monitor screens up to 80% of the time.
Skills Required
- Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
- Minimum five years of practical experience
- Active qualification aligned with DoDM 8140.03 DCWF work roles and proficiency levels for Security Architecture and Engineering
- Experience applying NIST SP 800-53 controls, NIST SP 800-161, and the DoD Risk Management Framework to achieve an Authority to Operate
- Experience securing ServiceNow instances in FedRAMP High and DoD IL4/IL5 environments
- Experience configuring ServiceNow ACLs, Client Scripts, Data Policies, and DoD E-ICAM/CAC authentication
- Experience with ServiceNow GRC/IRM or SecOps modules
- Active or interim DoD security clearance
- Favorably adjudicated Tier 3 background investigation
- U.S. citizenship
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
West 4th Strategy provides rapid response technology services to civilian, defense, and homeland security customers. We build and mobilize dynamic teams of qualified technologists who embody competence, professionalism, and a commitment to results. We excel at moving fast to find the right people to get the job done. And the best part of our technology teams? They make the government’s mission their mission. Our teams work with a sense of purpose to power the government. West 4th Strategy. Our work defines us.
