ServiceNow Architect – Security Architecture SME for SaaS Authorization; Active Secret) Alexandria, VA Posted
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Consultant, Security Management & Operations
Job Description & How to Apply Below
SUVI Global Services is looking for a Service Now Security Architect to support the DoD OIG.
This position will serve as a senior security architecture Subject Matter Expert (SME), supporting the secure implementation, integration, and authorization of the Software as a Service (SaaS) platform.
The Architect will collaborate with the Service Now Platform Architect, Service Now CSDM/CMDB Architect, and the cybersecurity team. They will combine Service Now platform experience with cybersecurity, practical understanding of the Cybersecurity Risk Management Construct (CSRMC), continuous monitoring, automation, control inheritance, reciprocity, POA&M resolution, and mission-focused cyber risk management knowledge to ensure new capabilities, modules, and integrations are securely designed, appropriately assessed, and aligned with DoD OIG authorization requirements.
ResponsibilitiesCollaborate with the architect team to define technical architecture, security guidance, and risk management for Service Now implementations, configurations, applications, modules, workflows, integrations, and platform modernization, with emphasis on security, scalability, and operational support.
Evaluate Service Now solutions for security risks involving identity and access management, privileged access, data protection, encryption, APIs, network connectivity, logging, and cloud security boundaries.
Support the Service Now authorization strategy, including security control implementation, authorization boundaries, control inheritance, shared responsibilities, continuous monitoring, and maintenance of ATO/POA&M documentation.
Assess security and authorization impacts of new Service Now modules, applications, data models, integrations, and architectural changes, then recommend appropriate security reviews, risk mitigation, authorization updates, and government approvals before production deployment.
Evaluate data sharing and integrations between Service Now, other OIG systems, cloud services, and external providers. Identify security requirements, trust boundaries, interconnection risks and mitigations, and control responsibilities.
Apply Cybersecurity Risk Management Construct (CSRMC) principles, Zero Trust, and Azure specific cloud security practices to improve risk management, security assessments, control inheritance, and authorization efficiency.
Collaborate with the OIG Service Now PM, CISO, Cybersecurity team, and Enterprise Architecture Review Secretariat to establish practical security architecture review and approval processes integrated with Service Now development, change management, and release activities.
Maintain Service Now security architecture diagrams, risk assessments, authorization documentation, and technical recommendations.
Advise government IT and cybersecurity leadership on Service Now security architecture, authorization requirements, residual risks, and recommended mitigation strategies. Support briefings and decisions by cybersecurity leadership to the Authorizing Official (OIG CIO).
Active Secret security clearance.
Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related technical field. Significant equivalent professional experience may be considered.
10+ years of relevant experience in enterprise IT architecture, cybersecurity engineering, cloud architecture, or related technical disciplines.
Demonstrated Service Now architecture experience, including enterprise implementations, platform security, application configuration, integrations, and production environments.
At least 5 years of experience supporting DoD RMF, information assurance, security engineering, or ATO activities within federal/DoD environments.
Strong knowledge of DoDI 8510.01, NIST RMF, security controls, authorization boundaries, control inheritance, continuous monitoring, and POA&M management.
Understanding of DoD SaaS security, FedRAMP, DoD Cloud Computing Security Requirements Guide (SRG), shared-responsibility models, and cloud authorization requirements.
Experience evaluating secure integration architectures, data protection, identity management, APIs, and system interconnections.
Familiarity with DoD CSRMC, Zero Trust, Dev Sec Ops , automated security assessments, reciprocity, and continuous authorization practices.
Strong technical communication skills, including the ability to explain cybersecurity risk and architecture decisions to senior government IT and cybersecurity leadership.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).