DoD Control Systems Cybersecurity Subject Matter Expert
FBMG-018 | Fort Buchanan Microgrid | Contingent opportunity
WORK LOCATION: REMOTE/HYBRID - remote RMF/STIG documentation; ON ISLAND for device validation, scanning, testing, commissioning, and turnover
| REQUISITION | FBMG-018 |
| CSS CAM LCAT | 640 - Senior Engineer/IT Staff Member (Cybersecurity) |
| DUTY LOCATION | United States remote/hybrid with required Puerto Rico field support |
| WORK ARRANGEMENT | REMOTE/HYBRID - remote RMF/STIG documentation; ON ISLAND for device validation, scanning, testing, commissioning, and turnover |
| REPORTS TO | Project Manager / Controls Lead; coordinates with ERP security and CQC |
| EMPLOYMENT | Full-time or dedicated consultant; contingent |
| REQUIREMENT BASIS | SOLICITATION-MANDATED cybersecurity SME across facility-related control systems |
About ERP and the Project
Energy Resilience Partners, LLC (ERP) is a tribally led SBA 8(a) federal contractor advancing energy resilience and mission assurance. ERP is deploying a project team for the Fort Buchanan installation-level microgrid in Puerto Rico. The work includes diesel generation, medium-voltage distribution, microgrid controls, protective relaying, fuel infrastructure, fiber communications, optional BESS, integration of existing renewable generation, and full system commissioning.
Position Summary
Oversee cybersecurity compliance for the microgrid control system and related facility control systems. The SME will guide device selection, network architecture, RMF/STIG implementation, contractor-computer compliance, secure configuration, testing, evidence, backups, inventory, and Government turnover while protecting CUI.
What You Will Do
- Own cybersecurity interpretation and compliance for applicable UFGS control-system requirements across the contract.
- Develop and coordinate STIG/SRG applicability, interconnection schedules, cybersecurity risers, inventories, compliance statements, exception requests, and protection-of-information-at-rest proposals.
- Review devices, operating systems, accounts, services, ports/protocols, logging, backups, configuration, patching, scanning tools, and hardening evidence.
- Coordinate the Controls Lead, network/RCDD team, OEMs, commissioning specialists, Government cybersecurity stakeholders, and ERP CMMC processes.
- Lead or witness cybersecurity test procedures, scans, findings correction, retesting, and final evidence packages.
- Ensure authorized handling of FCI/CUI and approved use of contractor-owned systems.
Minimum Qualifications
- Current certification satisfying DoD 8570 Information Assurance Manager Level II, or a Government-accepted successor mapping, before beginning work.
- At least 5 years securing DoD or other high-assurance systems, including hands-on Risk Management Framework processes and procedures.
- Experience with DISA STIGs/SRGs, vulnerability scanning, network/device hardening, documentation, and control-system cybersecurity.
- Ability to satisfy applicable CUI, system-access, background, and installation-access requirements and travel to Puerto Rico for field testing.
Preferred Qualifications
- DoD facility-related control systems, NIST SP 800-82/800-53/800-171, CMMC Level 2, ICS/OT networks, microgrids, PLC/SCADA, and industrial protocol experience.
- CISSP, CISM, CASP+, CGRC, GIAC industrial-control, or comparable credentials.
Field, Travel and Employment Conditions
- This is a contingent opportunity dependent on contract award/NTP, project funding, final staffing authorization, Government acceptance when required, and successful installation-access processing.
- When on site, work may involve tropical heat and humidity, rain, uneven terrain, stairs/ladders, construction noise, required PPE, and extended, weekend, outage, emergency, or alternate-shift hours.
- Candidates must be authorized to work in the United States, follow drug-free workplace and conduct requirements, and protect FCI/CUI using only authorized systems and procedures.
- ERP encourages applications from qualified Native American, Puerto Rican, veteran, military-spouse, disabled, and local candidates. ERP provides equal employment opportunity consistent with applicable law.
Application Materials
- Resume showing month/year dates, employer, role, project scope/value, client, and personal responsibilities.
- Copies of required current licenses/certifications with expiration dates.
- Comparable-project list and references where requested, Puerto Rico availability, earliest mobilization date, and requested employment/consulting arrangement.