Facility Controls Cybersecurity Specialist (FRCS RMF)

This position bridges facility control systems operational technology (OT) and cybersecurity compliance. The specialist will support cybersecurity authorization and system lifecycle activities for facility-related control systems including Building Automation Systems (BAS) monitoring systems access control systems fire alarm systems elevator controls and other facility systems and equipment.

The position works closely with cybersecurity personnel facility stakeholders system owners contractors controls integrators and equipment vendors to support Risk Management Framework (RMF) Authority to Operate (ATO) Plans of Action and Milestones (POA&Ms) security documentation technical configuration reviews and system authorization and reauthorization activities.

• Provide technical and cybersecurity support for Facility-Related Control Systems (FRCS) Operational Technology (OT) and associated systems supporting existing facilities and facility projects.
• Support systems including Building Automation Systems (BAS) monitoring systems access control systems fire alarm systems elevator controls and other facility-related controls and equipment.
• Assist Information System Security personnel with maintaining the confidentiality integrity and availability of assigned facility information systems.
• Support the securing managing reviewing and auditing of technical system settings necessary to maintain applicable cybersecurity and system authorization requirements.
• Develop maintain and track POA&Ms associated with cybersecurity deficiencies system authorization and lifecycle activities.
• Support RMF authorization and reauthorization activities when security-impacting system changes occur.
• Support the development maintenance and submission of new and existing RMF authorization packages.
• Coordinate with system owners facility personnel contractors controls integrators equipment manufacturers and vendors to collect review validate and submit required technical and cybersecurity information.
• Support cybersecurity requirements associated with modifications upgrades replacements and new projects involving facility control systems.
• Maintain accurate system lifecycle configuration authorization audit and supporting technical documentation.
• Participate in meetings and conduct required site visits.
• Prepare detailed weekly status reports covering ongoing facility control systems and cybersecurity activities.

• Experience supporting facility-related control systems Operational Technology (OT) Industrial Control Systems (ICS) Building Automation Systems (BAS) or comparable control environments.
• Working knowledge of Risk Management Framework (RMF) processes and cybersecurity requirements applicable to facility or operational technology systems.
• Experience supporting system authorization cybersecurity documentation system lifecycle activities configuration management security controls or technical security reviews.
• Experience or demonstrated ability to support ATO maintenance RMF authorization/reauthorization and POA&M development and tracking.
• Ability to coordinate technical and cybersecurity requirements among system owners engineers facility personnel controls contractors equipment vendors and cybersecurity personnel.
• Ability to develop and maintain accurate technical documentation authorization artifacts project documentation and status reporting.
• Strong written and verbal communication organization documentation and issue-tracking skills.
• Experience or demonstrated ability to perform facility control system cybersecurity activities in accordance with applicable standards and guidance.
• Ability to support onsite activities meetings and facility site visits as required.
• Ability to satisfy applicable Government personnel-security credentialing site-access and system-access requirements.

• Experience supporting federal DoD healthcare medical institutional or other mission-critical facility environments.
• Direct experience supporting Facility-Related Control Systems (FRCS) Operational Technology (OT) or Industrial Control Systems (ICS) cybersecurity.
• Hands-on experience with eMASS or comparable RMF/authorization workflow tools.
• Experience supporting or developing:
  • RMF authorization packages
  • ATO documentation and maintenance
  • POA&Ms
  • Security control documentation
  • Configuration-management documentation
  • Audit evidence
  • System lifecycle documentation
  • Cybersecurity authorization artifacts
• Experience with Building Automation Systems (BAS) Building Management Systems (BMS) access control fire alarm elevator controls or related building control technologies.
• Experience coordinating cybersecurity activities with ISSM ISSO ISSE system owners controls integrators or cybersecurity organizations.
• Familiarity with Controlled Unclassified Information (CUI) safeguarding requirements and NIST SP 800-171.
• Knowledge of the interfaces among facility operations construction commissioning controls integration cybersecurity and system lifecycle management.
• Bachelors degree in Engineering Cybersecurity Information Systems Facilities Management Building Automation Construction Management or a related technical discipline preferred.
• An equivalent combination of directly applicable technical experience education training and certifications may be considered.

Required Experience:

IC