RMF Team Lead - SME

RMF Team Lead - SME

ECS is seeking a RMF Team Lead - SME to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. This position supports Task 3 — Cybersecurity Operations Support, delivering RMF-aligned cybersecurity engineering for Operational Technology (OT) environments within ARNG Defense Critical Infrastructure (DCI). The role designs, implements, and sustains secure OT architectures supporting industrial control systems, SCADA platforms, and mission-critical control networks; coordinates with OT cybersecurity analysts, network engineers, facility personnel, and RMF stakeholders; and helps ensure OT systems remain secure, compliant, and available in support of Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM) across the DoDIN-Army-NG area of responsibility.

This role contributes directly to ARNG's mission to deliver and defend enterprise services for more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories, including support to Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified and unclassified network environments. The RMF Team Lead - SME operates within a technical environment that includes coordination with the NETCOM Global Cyber Center and DISA DCDC, integration with USIEM for monitoring and detection, and alignment with ENOCS cybersecurity activities such as continuous monitoring, vulnerability management, eMASS support, secure baseline configuration, and OT visibility objectives across ARNG infrastructure.

Please Note: This position is contingent upon contract award.

Responsibilities

• Design and sustain secure OT environments supporting Industrial Control Systems (ICS), SCADA platforms, and mission-critical control networks within ARNG Defense Critical Infrastructure environments.
• Engineer OT network segmentation, enclave protection, secure remote access, and monitoring integrations that preserve operational safety, reliability, and availability requirements.
• Lead RMF-focused activities for OT systems by coordinating security compliance, continuous monitoring, artifact updates, and remediation actions aligned with ARNG and DoD cybersecurity policy.
• Apply and maintain secure configuration baselines for OT assets, validate patch compatibility and operational impact, and support remediation of OT-specific vulnerabilities and misconfigurations.
• Coordinate with OT cybersecurity analysts, network engineers, facility personnel, and RMF stakeholders to maintain resilient and compliant OT operations across the ENOCS cybersecurity mission space.
• Support Task 3 deliverables by helping integrate OT visibility and detection capabilities with USIEM and broader cybersecurity operations used to defend ARNG classified and unclassified environments.
• Collaborate with cybersecurity operations teams and external mission partners, including the NETCOM Global Cyber Center and DISA DCDC, to support DCO-IDM objectives across the DoDIN-Army-NG area of responsibility.
• Contribute to continuous compliance validation activities by assessing changes, documenting risk posture impacts, and supporting eMASS updates and related security artifacts for OT systems.
• Support enterprise cyber defense efforts that extend to critical national infrastructure and other networks of interest, as requested by owning organizations, while maintaining alignment with ARNG operational and mission requirements.

Required Qualifications

U.S. Citizenship is required

Security Clearance: Secret Eligible

Required Certifications: DCWF Work Role 462-Control Systems Security Specialist — Intermediate proficiency; must hold ONE OR MORE of the following: DAF 462 (Intermediate) (ICS), or, DAF 462 (Intermediate) (CS3-300)

Experience: 3+ years of experience in cybersecurity

Education: Bachelors degree or higher in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering

• Experience designing, implementing, or sustaining secure OT, ICS, SCADA, or mission-critical control network environments.
• Experience supporting RMF-aligned cybersecurity activities, including continuous monitoring, compliance validation, security documentation, or remediation tracking.
• Experience engineering network segmentation, enclave protection, and secure remote access solutions for operational environments with high availability requirements.
• Experience applying secure configuration baselines and evaluating patching or change impacts in environments where operational continuity and safety must be preserved.
• Ability to coordinate effectively with cybersecurity analysts, network engineers, facility personnel, and other technical stakeholders to resolve OT security issues.
• Experience supporting vulnerability identification, misconfiguration remediation, and security control implementation for operational technology systems.
• Experience producing or maintaining cybersecurity artifacts and updates associated with system authorization or ongoing compliance activities, including eMASS-related support.
• Ability to support cybersecurity operations across classified and unclassified environments in alignment with ARNG mission requirements.