Cybersecurity Consultant

Your Opportunity

We are seeking an entry level cybersecurity consultant to support the design, documentation, and compliance review of operational technology (OT) systems for various design projects, including those governed by DoD specifications. This role plays a critical part in delivering secure, resilient designs that meet stringent cybersecurity requirements.

Stantec is a multidisciplinary design, architecture, and engineering firm with staff across the U.S. and internationally. We work on technically complex, mission-driven projects that directly impact corporate security, national security, public infrastructure, and defense operations.

Your Key Responsibilities

Cybersecurity and DoD-Focused Design

• Develop cybersecurity design criteria and specifications aligned with NIST, DoD, and DoD UFC/UFGS standards.
• Participate in pre-coordination meetings, and technical clarifications with stakeholders and contracting officers.
• Ensure design documentation aligns with contract requirements, control system cybersecurity guidance, and RMF/IA controls.
• Support cybersecurity-related submittal reviews including cybersecurity sections of shop drawings, cut sheets, and system specifications.

Technical Design and Documentation

• Prepare cybersecurity design and construction documents for facility-related control systems.
• Support the development of contract drawings and Division 01/25/27/28 specifications for secure and unsecure network environments.
• Contribute to cyber-informed risk assessments, threat modeling, and specification authoring.
• Define, evaluate, and apply NIST security control requirements.

BIM and Modeling

• Utilize design and modeling tools such as Revit, CAD, and Bluebeam Revu to design secure network environments.

Construction Administration

• Conduct on-site inspections, surveys, and cybersecurity-specific submittal review.
• Manage RFIs and submittals with attention to cybersecurity system compliance.
• Evaluate documentation for compliance with cybersecurity governance including Federal Risk and Authorization Management Program, Facility-Related Control Systems Risk Management Framework and others to meet project cybersecurity goals.

Coordination and Communication

• Coordinate closely with architects, engineers, and stakeholders to ensure cyber-related requirements are fully integrated into design and/or proposal documentation.
• Draft and maintain detailed cybersecurity narratives and compliance documentation.

Your Capabilities and Credentials

Technical Experience

• Familiarity with facility-related control systems (FRCS) including building control systems (BCS), utility control systems (UCS).
• Familiarity with network and telecom design, secure equipment rooms, cabling pathways, and control system cybersecurity best practices.
• Experience in DoD project environments, with working knowledge of UFC 4-010-06, UFGS 25 05 11, and RMF frameworks preferred.

Cybersecurity Preferred Certifications

• GSLC (GIAC Security Leadership Certification)
• CISSP (Certified Information Systems Security Professional)
• CAP (Certified Authorization Professional)

Additional Preferred Certifications

• BICSI RCDD
• DoD IAM Level II or III certification equivalents

Other Requirements

• Familiarity with government contracting processes (Design-Bid-Build, Design-Build).
• Willingness to travel (<5%) for site surveys and team coordination meetings.

Education and Experience

• Associate degree (or equivalent) in Engineering Technology, OR
• Minimum of 3+years of relevant cybersecurity-related experience.

This description is not a comprehensive listing of activities, duties or responsibilities that may be required of the employee and other duties, responsibilities and activities may be assigned or may be changed at any time with or without notice.

About Stantec

Stantec is a global leader in sustainable engineering, architecture, and environmental consulting. The diverse perspectives of our partners and interested parties drive us to think beyond what’s previously been done on critical issues like climate change, digital transformation, and future-proofing our cities and infrastructure. We innovate at the intersection of community, creativity, and client relationships to advance communities everywhere, so that together we can redefine what’s possible.