Facility Controls Cybersecurity Specialist (FRCS / RMF)

The Building People, LLC, has an opening for a Facility Controls Cybersecurity Specialist (FRCS / RMF) to support facility operations, facility-related control systems, and cybersecurity compliance activities. This position bridges facility control systems, operational technology (OT), and cybersecurity compliance . The specialist will support cybersecurity authorization and system lifecycle activities for facility-related control systems, including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility systems and equipment.

The position works closely with cybersecurity personnel, facility stakeholders, system owners, contractors, controls integrators, and equipment vendors to support Risk Management Framework (RMF), Authority to Operate (ATO), Plans of Action and Milestones (POA&Ms), security documentation, technical configuration reviews, and system authorization and reauthorization activities .

Key Responsibilities

Provide technical and cybersecurity support for Facility-Related Control Systems (FRCS) , Operational Technology (OT), and associated systems supporting existing facilities and facility projects. Support systems including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility-related controls and equipment.

Assist Information System Security personnel with maintaining the confidentiality, integrity, and availability of assigned facility information systems. Support the securing, managing, reviewing, and auditing of technical system settings necessary to maintain applicable cybersecurity and system authorization requirements.

Develop, maintain, and track POA&Ms associated with cybersecurity deficiencies, system authorization, and lifecycle activities. Support RMF authorization and reauthorization activities when security-impacting system changes occur. Support the development, maintenance, and submission of new and existing RMF authorization packages .

Coordinate with system owners, facility personnel, contractors, controls integrators, equipment manufacturers, and vendors to collect, review, validate, and submit required technical and cybersecurity information. Support cybersecurity requirements associated with modifications, upgrades, replacements, and new projects involving facility control systems.

Maintain accurate system lifecycle, configuration, authorization, audit, and supporting technical documentation. Participate in meetings and conduct required site visits. Prepare detailed weekly status reports covering ongoing facility control systems and cybersecurity activities.

Required Experience and Qualifications Experience supporting facility-related control systems, Operational Technology (OT), Industrial Control Systems (ICS), Building Automation Systems (BAS), or comparable control environments . Working knowledge of Risk Management Framework (RMF) processes and cybersecurity requirements applicable to facility or operational technology systems.

Experience supporting system authorization, cybersecurity documentation, system lifecycle activities, configuration management, security controls, or technical security reviews. Experience or demonstrated ability to support ATO maintenance, RMF authorization/reauthorization, and POA&M development and tracking . Ability to coordinate technical and cybersecurity requirements among system owners, engineers, facility personnel, controls contractors, equipment vendors, and cybersecurity personnel.

Ability to develop and maintain accurate technical documentation, authorization artifacts, project documentation, and status reporting. Strong written and verbal communication, organization, documentation, and issue-tracking skills. Experience or demonstrated ability to perform facility control system cybersecurity activities in accordance with applicable standards and guidance.

Ability to support onsite activities, meetings, and facility site visits as required. Ability to satisfy applicable Government personnel-security, credentialing, site-access, and system-access requirements. Preferred Experience and Education Experience supporting federal, DoD, healthcare, medical, institutional, or other mission-critical facility environments .

Direct experience supporting Facility-Related Control Systems (FRCS), Operational Technology (OT), or Industrial Control Systems (ICS) cybersecurity. Hands-on experience with eMASS or comparable RMF/authorization workflow tools . Experience supporting or developing: RMF authorization packages ATO documentation and maintenance POA&Ms Security control documentation Configuration-management documentation Audit evidence System lifecycle documentation Cybersecurity authorization artifacts Experience with Building Automation Systems (BAS), Building Management Systems (BMS), access control, fire alarm, elevator controls, or related building control technologies .

Experience coordinating cybersecurity activities with ISSM, ISSO, ISSE, system owners, controls integrators, or cybersecurity organizations . Familiarity with Controlled Unclassified Information (CUI) safeguarding requirements and NIST SP 800-171 . Knowledge of the interfaces among facility operations, construction, commissioning, controls integration, cybersecurity, and system lifecycle management .

Bachelor's degree in Engineering, Cybersecurity, Information Systems, Facilities Management, Building Automation, Construction Management, or a related technical discipline preferred. An equivalent combination of directly applicable technical experience, education, training, and certifications may be considered.