ServiceNow Architect – Security Architecture SME for SaaS Authorization; Active Secret

Position: ServiceNow Architect – Security Architecture SME for SaaS Authorization (Active Secret)
Responsibilities

• Collaborate with the architect team to define technical architecture, security guidance, and risk management for Service Now implementations, configurations, applications, modules, workflows, integrations, and platform modernization, with emphasis on security, scalability, and operational support.
• Evaluate Service Now solutions for security risks involving identity and access management, privileged access, data protection, encryption, APIs, network connectivity, logging, and cloud security boundaries.
• Support the Service Now authorization strategy, including security control implementation, authorization boundaries, control inheritance, shared responsibilities, continuous monitoring, and maintenance of ATO&M documentation.
• Assess security and authorization impacts of new Service Now modules, applications, data models, integrations, and architectural changes, then recommend appropriate security reviews, risk mitigation, authorization updates, and government approvals before production deployment.
• Evaluate data sharing and integrations between Service Now, other OIG systems, cloud services, and external providers. Identify security requirements, trust boundaries, interconnection risks and mitigations, and control responsibilities.
• Apply Cybersecurity Risk Management Construct (CSRMC) principles, Zero Trust, and Azure specific cloud security practices to improve risk management, security assessments, control inheritance, and authorization efficiency.
• Collaborate with the OIG Service Now PM, CISO, Cybersecurity team, and Enterprise Architecture Review Secretariat to establish practical security architecture review and approval processes integrated with Service Now development, change management, and release activities.
• Maintain Service Now security architecture diagrams, risk assessments, authorization documentation, and technical recommendations.
• Advise government IT and cybersecurity leadership on Service Now security architecture, authorization requirements, residual risks, and recommended mitigation strategies. Support briefings and decisions by cybersecurity leadership to the Authorizing Official (OIG CIO).

Qualifications

• Active Secret security clearance.
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related technical field. Significant equivalent professional experience may be considered.
• 10+ years of relevant experience in enterprise IT architecture, cybersecurity engineering, cloud architecture, or related technical disciplines.
• Demonstrated Service Now architecture experience, including enterprise implementations, platform security, application configuration, integrations, and production environments.
• At least 5 years of experience supporting DoD RMF, information assurance, security engineering, or ATO activities within federal/DoD environments.
• Strong knowledge of DoDI 8510.01, NIST RMF, security controls, authorization boundaries, control inheritance, continuous monitoring, and POA&M management.
• Understanding of DoD SaaS security, FedRAMP, DoD Cloud Computing Security Requirements Guide (SRG), shared-responsibility models, and cloud authorization requirements.
• Experience evaluating secure integration architectures, data protection, identity management, APIs, and system interconnections.
• Familiarity with DoD CSRMC, Zero Trust, Dev Sec Ops , automated security assessments, reciprocity, and continuous authorization practices.
• Strong technical communication skills, including the ability to explain cybersecurity risk and architecture decisions to senior government IT and cybersecurity leadership.

Preferred Qualifications

• CISSP or CISM certification.
• Experience with Service Now ITSM, ITOM, CMDB, Discovery, MID Servers, Integration Hub, and regulated government cloud environments.
• Experience securing and supporting authorization of federal/DoD SaaS solutions, including Service Now, Azure Government, or Microsoft Power Platform.
• Advanced cybersecurity or cloud security credentials such as CISSP-ISSEP, ISC2 CGRC, CCSP, or Microsoft Azure security certifications.
• Experience establishing SaaS security architecture standards, authorization-change processes, and reusable RMF documentation for new capabilities and integrations.

Any clearance requirements for this position are established by the government contract.

This hybrid position requires candidates to reside within a reasonable commuting distance of the office.

Job

Work Type

Hybrid

Pay Range

$205,000 - $220,000

Benefits

Regular -…