Technology & Security Manager

Company Description

Work with Us. Change the World.

At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations.

There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.

We're one global team driven by our common purpose to deliver a better world. Join us.

Job Description

AECOM is seeking a Technology & Security Manager to be based out of our Arlington, VA office. The candidate will possess a level of expertise necessary to advise others on relevant Federal, DOD, and civil guidance for infrastructure protection and IT/OT security.

• Serves as a subject matter expert security engineering specialist across a broad range of customer projects and government programs.  
• Working with limited direction and supervision, the candidate will plan and perform detailed security engineering projects with a focus on provided scope and budget.
• Assists management in meeting budgetary/cost constraints, deadlines, goals and objectives for the primary area of assignment or project assigned. Serves as a technical consultant and primary point of contact worldwide for his/her area of expertise. It is critical that the candidate be organized, independent, and able to support multiple projects at once to meet fast timelines. Other specific responsibilities include:
• Plans and directs ICS/SCADA system inventories following guidance including, but not limited to Unified Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facility-Related Control Systems. 
• Assist in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process as required
• Work in a team environment alongside other cybersecurity engineers and Risk Management Framework (RMF) analysts.
• Perform all other position related duties as assigned or requested.
• Development of security engineering studies, e.g., studies designed to identify deficiencies related to design & construction standards aligned with performance-based compliances & testing.

Qualifications

Minimum Requirements

• Bachelor's Degree in Information Technology or related field +8 years of related experience or demonstrated equivalency of experience and/or education. 
• Certifications relevant to ICS SCADA systems. (Such as GICSP, GSNA, SANS-ICS, EC Council)
• As a condition of employment, ability to maintain DoD clearance level of TS/SCI.
• Required to travel to CONUS and OCONUS Government and Commercial facilities to support the development and implementation of the DoD Risk Management Framework (RMF) process.
• U.S. Citizenship required, due to the nature of the work.

Preferred Experience:

• Master's degree in Information Technology or related field. 
• 10+ years of relevant experience in the information technology industry, federal and defense agencies, and or government contractor experience with physical and IT security.
• 10+ years of experience working with industry and government agencies on the design of ICS platforms and integrated ICS systems. 
• Demonstrated experience with architectural and engineering firms, construction related projects, and a proven ability to work effectively within a project team environment
• Proficient in IT and industrial control protocols including TCP/IP, SCADA, and building automation controls
• Experience working on government and/commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.). 

• Ability to interpret drawings both mechanical and electrical. 
• Ability to train others with lesser skills. 
• Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility

Additional Information

• This position does not offer relocation assistance.
• Sponsorship for US Employment Au