Description
SUVI Global Services is looking for a ServiceNow Security Architect to support the DoD OIG. To join our team of outstanding professionals, apply today!
This position will serve as a senior security architecture Subject Matter Expert (SME), supporting the secure implementation, integration, and authorization of the Software as a Service (SaaS) platform.
The Architect will collaborate with the ServiceNow Platform Architect, ServiceNow CSDM/CMDB Architect, and the cybersecurity team. They will combine ServiceNow platform experience with cybersecurity, practical understanding of the Cybersecurity Risk Management Construct (CSRMC), continuous monitoring, automation, control inheritance, reciprocity, POA&M resolution, and mission-focused cyber risk management knowledge to ensure new capabilities, modules, and integrations are securely designed, appropriately assessed, and aligned with DoD OIG authorization requirements.
Responsibilities
- Collaborate with the architect team to define technical architecture, security guidance, and risk management for ServiceNow implementations, configurations, applications, modules, workflows, integrations, and platform modernization, with emphasis on security, scalability, and operational support.
- Evaluate ServiceNow solutions for security risks involving identity and access management, privileged access, data protection, encryption, APIs, network connectivity, logging, and cloud security boundaries.
- Support the ServiceNow authorization strategy, including security control implementation, authorization boundaries, control inheritance, shared responsibilities, continuous monitoring, and maintenance of ATO/POA&M documentation.
- Assess security and authorization impacts of new ServiceNow modules, applications, data models, integrations, and architectural changes, then recommend appropriate security reviews, risk mitigation, authorization updates, and government approvals before production deployment.
- Evaluate data sharing and integrations between ServiceNow, other OIG systems, cloud services, and external providers. Identify security requirements, trust boundaries, interconnection risks and mitigations, and control responsibilities.
- Apply Cybersecurity Risk Management Construct (CSRMC) principles, Zero Trust, and Azure specific cloud security practices to improve risk management, security assessments, control inheritance, and authorization efficiency.
- Collaborate with the OIG ServiceNow PM, CISO, Cybersecurity team, and Enterprise Architecture Review Secretariat to establish practical security architecture review and approval processes integrated with ServiceNow development, change management, and release activities.
- Maintain ServiceNow security architecture diagrams, risk assessments, authorization documentation, and technical recommendations.
- Advise government IT and cybersecurity leadership on ServiceNow security architecture, authorization requirements, residual risks, and recommended mitigation strategies. Support briefings and decisions by cybersecurity leadership to the Authorizing Official (OIG CIO).
Qualifications
- Active Secret security clearance.
- Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related technical field. Significant equivalent professional experience may be considered.
- 10+ years of relevant experience in enterprise IT architecture, cybersecurity engineering, cloud architecture, or related technical disciplines.
- Demonstrated ServiceNow architecture experience, including enterprise implementations, platform security, application configuration, integrations, and production environments.
- At least 5 years of experience supporting DoD RMF, information assurance, security engineering, or ATO activities within federal/DoD environments.
- Strong knowledge of DoDI 8510.01, NIST RMF, security controls, authorization boundaries, control inheritance, continuous monitoring, and POA&M management.
- Understanding of DoD SaaS security, FedRAMP, DoD Cloud Computing Security Requirements Guide (SRG), shared-responsibility models, and cloud authorization requirements.
- Experience evaluating secure integration architectures, data protection, identity management, APIs, and system interconnections.
- Familiarity with DoD CSRMC, Zero Trust, DevSecOps, automated security assessments, reciprocity, and continuous authorization practices.
- Strong technical communication skills, including the ability to explain cybersecurity risk and architecture decisions to senior government IT and cybersecurity leadership.
Preferred Qualifications:
- CISSP or CISM certification.
- Experience with ServiceNow ITSM, ITOM, CMDB, Discovery, MID Servers, IntegrationHub, and regulated government cloud environments.
- Experience securing and supporting authorization of federal/DoD SaaS solutions, including ServiceNow, Azure Government, or Microsoft Power Platform.
- Advanced cybersecurity or cloud security credentials such as CISSP-ISSEP, ISC2 CGRC, CCSP, or Microsoft Azure security certifications.
- Experience establishing SaaS security architecture standards, authorization-change processes, and reusable RMF documentation for new capabilities and integrations.
Any clearance requirements for this position are established by the government contract.
This hybrid position requires candidates to reside within a reasonable commuting distance of the office.
Benefits InformationRegular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.
Pay Range$205,000 - $220,000
Job ID2026-27222
Work TypeHybrid
