Peraton is currently seeking to hire a Senior Operational Technologies Advisor to join our DSCM program.  

Location: Arlington, VA 

• Washington, DC area. 
• Hybrid work model with occasional travel required. 

In this role, you will:

• Be focused on work to secure world-wide operations at the State Department by developing guidance and policy for Risk Management in Operational Technologies (OT).
• You will spearhead planning for enhanced protection and collaboration with important community stakeholders.
• The position entails identifying the leading-edge solutions and strategy to protect the Foreign Service mission.
• This role requires expertise in the intersection of technology and national security, with a strong focus on evaluating, protecting, and enhancing the security of OT systems, including industrial control systems (ICS), building automation systems (BAS), and other cyber-physical systems. 

Responsibilities: 

• Lead stakeholder engagements representing the organization’s posture on Change Control Boards (CCB), vulnerability reviews, and customer site engagement activities. 
• Research and evaluate emerging technologies to enhance ICS security and support risk mitigation and analysis. 
• Develop and implement strategic planning initiatives for IoT/OT, ICS, and Supervisory Control and Data Acquisition (SCADA) systems. 
• Conduct vulnerability assessments and develop risk assessments, penetration testing plans, security posture improvement strategies for OT infrastructure and risk analyses for industrial control systems. 
• Provide hands-on technical guidance to address identified vulnerabilities and improve system security.  
• Draft and manage policy documents and baseline control standards. 
• Deliver executive-level briefings and white papers on project status, risks, and recommendations. 
• Collaborate with Federal Government stakeholders to ensure alignment with applicable standards and best practices, including NIST frameworks. 
• Support on-site assessment of cyber security protections as a subject matter expert (SME) for a world-wide team of security experts 
• Support the integration of security policies into Building Management Systems. 
• Ensure adherence to industry standards, National Institute of Standards and Technology (NIST) frameworks, the MITRE ATT&CK framework, and Security Technical Implementation Guides (STIGs). 

#DSCM

Required Qualifications: 

• Bachelor’s degree and a minimum of 14 years’ of relevant experience. An additional 4 years of experience will be substituted in lieu of the degree requirement. 
• Ability to obtain/maintain prior to start date ONE of the following certifications: 
  • CASP+ CE, CCNP Security, CISA, CISSP (or Associate), CISSP-ISSAP, CISSP-ISSEP, GCED, GCIH
• Expertise in IoT/OT, ICS, and SCADA systems. 
• Experience in vulnerability assessments, risk management, and mitigation strategies. 
• Knowledge of NIST standards, including NIST SP 800-53 (Security and Privacy Controls), NIST SP 800-82 (Guide to Operational Technology Security), NIST SP 800-82 (Guide to Industrial Control Systems Security), and NISTIR 8259 (IoT Device Cybersecurity Guidance). 
• Familiarity with the MITRE ATT&CK framework and Security Technical Implementation Guides (STIGs). 
• Strong communication skills, including the ability to present to executives and write white papers. 
• Proficient with performing analysis at all levels of total system product to include concept, design, fabrication, test, installation, operation, maintenance, and disposal. 
• Ability to ensure the logical and systematic conversion of customer or product requirements into total systems solutions within constraints. 
• U.S. citizenship.
• Ability to obtain an interim Secret clearance before start date.
  • Ability to obtain a final Top Secret/SCI clearance.

Preferred Qualifications: 

• Master’s degree in a related field. 
• Experience working in a Federal Government environment. 
• Proven track record of integrating security policies with Building Management Systems. 
• Familiarity with additional standards and best practices for industrial controls beyond NIST. 
• Experience managing hybrid teams and projects. 
• Experience with TEMPEST reviews and compliance requirements.