Senior Cybersecurity Designer - FRCS

Faith Group, LLC is a leader in providing specialized systems engineering design and consulting services for clients requiring solutions to their toughest facility and infrastructure challenges. The firm approaches this important task by acting as a trusted partner to bring best practices and trends from across the industry to offer its client’s specialty, tailored services that will drive business goals and thoughtfully invest in systems to support future growth. Faith Group is focused on serving the transportation, government, education, and commercial markets, working on some of the largest development programs across the US and internationally. The firm is headquartered in St. Louis, MO with eight regional offices across the country to support its national presence and client base.

Position Description:The candidate will be responsible for Cybersecurity design and consulting on projects including new installations, renovations, and system upgrades. Projects include infrastructure and systems often referred to as Facility Related Control Systems (FRCS), assessing risk and driving IT / OT network security and secure service hosting design. Candidate is expected to meet and maintain IAT / IAM DoD Level 3 requirements (DoD 8570 Baseline) and have proficiency in the development and preparation of formal design deliverables (UFC-aligned) and specifications developed, ideally via SpecsIntact.

The ideal candidate will have experience in client-facing Cybersecurity design consulting, coordinating across multi-discipline teams on combined Operational Technology (OT) and Information Technology (IT) solutions for US Department of Defense projects.

Primary Duties and Responsibilities:Participates in technology and infrastructure projects typically as part of the Designer/Engineer of Record team, providing network and data security design, consulting, and multi-discipline coordination. Ensures new and existing projects involving IT/OT systems are built and designed according to Department of Defense and similar cybersecurity best practices, applicable directives, and industry applicable frameworks and standards. Leads Client and partner workshops for requirements definition, existing conditions gathering, design analysis / alternatives, and similar technical and project related topics. Represents Faith Group on client and partner facing design coordination and similar meetings to provide updates, communicate challenges and potential solutions. Manage the current workload and project responsibilities assigned and report to management any deficiencies or delays early, mitigating project lifecycle impacts. Performs on-site surveys and analysis, including but not limited to existing conditions gathering, observation of system testing, performing vulnerability assessments and audits. Other duties as assigned.

Qualifications:Education: Bachelor’s or Master’s degree in Cybersecurity, Computer Science or Engineering from ABET or similar accredited programs.Experience: 5 or more years of experience designing and consulting within the information security or network security disciplines.Experience: 2 or more years of experience developing specifications and drawing packages for Design-Build or Design-Bid-Build Department of Defense construction projects. This should include the development of design narratives, drawings and specifications for campus or building systems / infrastructure. Diverse knowledge of IT / OT network and service security design patterns, standards, current market products.Experience directly developing deliverable documentation common in Federal and Architecture & Engineering industry (e.g. formal design narratives, specifications & cybersecurity architecture / riser drawings).Clear understanding of the cybersecurity lifecycle and NIST Risk Management Framework (RMF).Knowledge of Operational Technology (OT/SCADA) cybersecurity practices.Experience assessing, designing or consulting related to security controls including NIST 800-53, 800-161, 800-37.Professional certification(s) meeting IAT/IAM Level III (3), for example Certified Information Systems Security Professional (CISSP); see DoD 8570 Baseline.Experience developing Security Technical Implementation Guidelines (STIG) checklists. (Preferred) Knowledge of wireless security concepts and tools. (Preferred) Knowledge of virtual hosting and container orchestration technologies e.g. vSphere, Kubernetes, Hyper-V, etc. (Preferred)

Other Role Notes:This is a full-time position that does require some degree of travel to remote client sites (variable - up to 25-50% of the year).

Benefits:100% employer paid healthcare50% employer paid spouse/domestic partner/dependent healthcareDentalVision401kShort Term Disability100% employer paid Long Term Disability100% employer paid Life/ADD InsuranceAdditional Life/ADD InsuranceFSA