Cyber Systems Administrator – Control Systems Cybersecurity

We're looking for a Cyber Systems Administrator (Lead) to be the on-site cybersecurity authority supporting a federal customer's building and facility control systems. These systems power the environment that keeps the installation running, including building automation, utilities, and metering. The position is both hands-on and leadership focused. The role serves as the primary connection between the on-site operations team and the government's broader cybersecurity organization, which works from a separate location. The position involves translating local technical realities into clear updates for remote stakeholders, aligning the site with enterprise cyber standards, and guiding the customer toward maintaining their Authority to Operate (ATO). The role includes leading and mentoring a small team responsible for RMF documentation, security controls, and compliance activities.

Responsibilities

Lead the on-site cybersecurity authority supporting a federal customer's building and facility control systems; Lead daily cybersecurity operations for facility and control systems (patching, hardening, monitoring, and compliance); Supervise and mentor two RMF Specialists, reviewing work and developing their technical capabilities; Act as the on-site liaison between the facility team, OEM vendors, and the government's remote cybersecurity team; Run vulnerability scans, analyze results, and drive remediation to completion; Oversee creation of RMF documentation and security artifacts, ensuring accuracy and audit-readiness; Support system categorization and risk assessment by translating local technical information for off-site stakeholders; Build and maintain a reliable inventory of systems, software, and documentation; Enforce cybersecurity best practices and separation of duties across the team; Represent on-site readiness during recurring customer meetings, workshops, and program reviews; Lead the cyber phase-in and transition efforts during ramp-up, ensuring collaboration with the broader government cyber organization; Guide the customer toward maintaining their Authority to Operate (ATO)

Requirements

US citizen with the ability to obtain and maintain a Secret security clearance; Must meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE; Role-based computing environment certification (to be obtained before privileged access within 180 days of first day); Hands-on cybersecurity or systems administration experience in a federal, DoD, or similarly complex environment; Experience supporting the RMF process end-to-end; Experience leading or mentoring cybersecurity staff; Working knowledge of federal cybersecurity frameworks (FIPS 199/200, NIST 800-53, NIST 800-82, CNSSI 1253); Experience with DoD cybersecurity tools for vulnerability scanning, compliance checking, and endpoint security; Strong vulnerability management capabilities (scanning, triage, remediation, tracking); Clear and audit-ready technical writing; Ability to coordinate with program managers, remote cybersecurity stakeholders, security officers, engineers, and vendors

Nice to have

DoD 8140 IAM Level II certification; Experience with OT/ICS/SCADA or facility-related control systems (e.g., building automation, advanced metering); Knowledge of the Purdue Enterprise Reference Architecture; Experience supporting ATO or ATC efforts; Familiarity with FedRAMP and Zero Trust principles; Linux administration experience; Prior DLA customer experience