Facility Controls Cybersecurity Specialist (FRCS / RMF)

Facility Controls Cybersecurity Specialist (FRCS / RMF)

This position bridges facility control systems, operational technology (OT), and cybersecurity compliance. The specialist will support cybersecurity authorization and system lifecycle activities for facility-related control systems, including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility systems and equipment.

The position works closely with cybersecurity personnel, facility stakeholders, system owners, contractors, controls integrators, and equipment vendors to support Risk Management Framework (RMF), Authority to Operate (ATO), Plans of Action and Milestones (POA&Ms), security documentation, technical configuration reviews, and system authorization and reauthorization activities.

Key Responsibilities

• Provide technical and cybersecurity support for Facility-Related Control Systems (FRCS), Operational Technology (OT), and associated systems supporting existing facilities and facility projects.
• Support systems including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility-related controls and equipment.
• Assist Information System Security personnel with maintaining the confidentiality, integrity, and availability of assigned facility information systems.
• Support the securing, managing, reviewing, and auditing of technical system settings necessary to maintain applicable cybersecurity and system authorization requirements.
• Develop, maintain, and track POA&Ms associated with cybersecurity deficiencies, system authorization, and lifecycle activities.
• Support RMF authorization and reauthorization activities when security-impacting system changes occur.
• Support the development, maintenance, and submission of new and existing RMF authorization packages.
• Coordinate with system owners, facility personnel, contractors, controls integrators, equipment manufacturers, and vendors to collect, review, validate, and submit required technical and cybersecurity information.
• Support cybersecurity requirements associated with modifications, upgrades, replacements, and new projects involving facility control systems.
• Maintain accurate system lifecycle, configuration, authorization, audit, and supporting technical documentation.
• Participate in meetings and conduct required site visits.
• Prepare detailed weekly status reports covering ongoing facility control systems and cybersecurity activities.

Notice $105,000-$115,000 Skills & Requirements
Required Experience and Qualifications

• Experience supporting facility-related control systems, Operational Technology (OT), Industrial Control Systems (ICS), Building Automation Systems (BAS), or comparable control environments.
• Working knowledge of Risk Management Framework (RMF) processes and cybersecurity requirements applicable to facility or operational technology systems.
• Experience supporting system authorization, cybersecurity documentation, system lifecycle activities, configuration management, security controls, or technical security reviews.
• Experience or demonstrated ability to support ATO maintenance, RMF authorization/reauthorization, and POA&M development and tracking.
• Ability to coordinate technical and cybersecurity requirements among system owners, engineers, facility personnel, controls contractors, equipment vendors, and cybersecurity personnel.
• Ability to develop and maintain accurate technical documentation, authorization artifacts, project documentation, and status reporting.
• Strong written and verbal communication, organization, documentation, and issue-tracking skills.
• Experience or demonstrated ability to perform facility control system cybersecurity activities in accordance with applicable standards and guidance.
• Ability to support onsite activities, meetings, and facility site visits as required.
• Ability to satisfy applicable Government personnel-security, credentialing, site-access, and system-access requirements.

Preferred Experience and Education

• Experience supporting federal, DoD, healthcare, medical, institutional, or other mission-critical facility environments.
• Direct experience supporting Facility-Related Control Systems (FRCS), Operational Technology (OT), or Industrial Control Systems (ICS) cybersecurity.
• Hands-on experience with eMASS or comparable RMF/authorization workflow tools.
• Experience supporting or developing:
  • RMF authorization packages
  • ATO documentation and maintenance
  • POA&Ms
  • Security control documentation
  • Configuration-management documentation
  • Audit evidence
  • System lifecycle documentation
  • Cybersecurity authorization artifacts
• Experience with Building Automation Systems (BAS), Building Management Systems (BMS), access control, fire alarm, elevator controls, or related building control technologies.
• Experience coordinating cybersecurity activities with ISSM, ISSO, ISSE, system owners, controls integrators, or cybersecurity organizations.
• Familiarity with Controlled Unclassified Information (CUI) safeguarding requirements and NIST SP 800-171.
• Knowledge of the interfaces among facility operations, construction, commissioning, controls integration, cybersecurity, and system lifecycle management.
• Bachelor's degree in Engineering, Cybersecurity, Information Systems, Facilities Management, Building Automation, Construction Management, or a related technical discipline preferred.
• An equivalent combination of directly applicable technical experience, education, training, and certifications may be considered.

Qualifications
*Salary offered will be commensurate with the candidate's experience, qualifications, and certifications.

*Our positions may require a background screening and clearance directly from the Government.

*Please note that telework arrangements are subject to change based on customer requirements.

ADDITIONAL INFORMATION

Competitive benefits for eligible employees include:

• Medical & Rx
• Dental
• Vision
• Flexible Spending Accounts
• 401(k) Retirement Plan
• Life Insurance/AD&D
• Long Term Disability and Short-Term Disability
• Paid Time Off
• Holiday Pay

All positions require a background check after acceptance of our offer. The selected candidate will be eligible to begin employment before the background check has been finalized. However, continued employment will be contingent upon the results of your reference/background check from The Building People, LLC. Your position may require special credentialing, clearance, and access as a condition of employment. In the event the government or client does not sponsor or approve your clearance, it may result in termination of your employment.

If you need a reasonable accommodation for any part of the employment process, please contact us by email at [redacted] and let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this e-mail address.