ServiceNow Architect – Security Architecture SME for SaaS Authorization (Active Secret)

SUVI Global Services is looking for a ServiceNow Security Architect to support the DoD OIG. To join our team of outstanding professionals, apply today!

This position will serve as a senior security architecture Subject Matter Expert (SME), supporting the secure implementation, integration, and authorization of the Software as a Service (SaaS) platform.

The Architect will collaborate with the ServiceNow Platform Architect, ServiceNow CSDM/CMDB Architect, and the cybersecurity team. They will combine ServiceNow platform experience with cybersecurity, practical understanding of the Cybersecurity Risk Management Construct (CSRMC), continuous monitoring, automation, control inheritance, reciprocity, POA&M resolution, and mission-focused cyber risk management knowledge to ensure new capabilities, modules, and integrations are securely designed, appropriately assessed, and aligned with DoD OIG authorization requirements.

Responsibilities

• Collaborate with the architect team to define technical architecture, security guidance, and risk management for ServiceNow implementations, configurations, applications, modules, workflows, integrations, and platform modernization, with emphasis on security, scalability, and operational support.

• Evaluate ServiceNow solutions for security risks involving identity and access management, privileged access, data protection, encryption, APIs, network connectivity, logging, and cloud security boundaries.

• Support the ServiceNow authorization strategy, including security control implementation, authorization boundaries, control inheritance, shared responsibilities, continuous monitoring, and maintenance of ATO/POA&M documentation.

• Assess security and authorization impacts of new ServiceNow modules, applications, data models, integrations, and architectural changes, then recommend appropriate security reviews, risk mitigation, authorization updates, and government approvals before production deployment.

• Evaluate data sharing and integrations between ServiceNow, other OIG systems, cloud services, and external providers. Identify security requirements, trust boundaries, interconnection risks and mitigations, and control responsibilities.

• Apply Cybersecurity Risk Management Construct (CSRMC) principles, Zero Trust, and Azure specific cloud security practices to improve risk management, security assessments, control inheritance, and authorization efficiency.

• Collaborate with the OIG ServiceNow PM, CISO, Cybersecurity team, and Enterprise Architecture Review Secretariat to establish practical security architecture review and approval processes integrated with ServiceNow development, change management, and release activities.

• Maintain ServiceNow security architecture diagrams, risk assessments, authorization documentation, and technical recommendations.

• Advise government IT and cybersecurity leadership on ServiceNow security architecture, authorization requirements, residual risks, and recommended mitigation strategies. Support briefings and decisions by cybersecurity leadership to the Authorizing Official (OIG CIO).

Qualifications

• Active Secret security clearance.

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related technical field. Significant equivalent professional experience may be considered.

• 10+ years of relevant experience in enterprise IT architecture, cybersecurity engineering, cloud architecture, or related technical disciplines.

• Demonstrated ServiceNow architecture experience, including enterprise implementations, platform security, application configuration, integrations, and production environments.

• At least 5 years of experience supporting DoD RMF, information assurance, security engineering, or ATO activities within federal/DoD environments.

• Strong knowledge of DoDI 8510.01, NIST RMF, security controls, authorization boundaries, control inheritance, continuous monitoring, and POA&M management.

• Understanding of DoD SaaS security, FedRAMP, DoD Cloud Computing Security Requirements Guide (SRG), shared-responsibility models, and cloud authorization requirements.

• Experience evaluating secure integration architectures, data protection, identity management, APIs, and system interconnections.

• Familiarity with DoD CSRMC, Zero Trust, DevSecOps, automated security assessments, reciprocity, and continuous authorization practices.

• Strong technical communication skills, including the ability to explain cybersecurity risk and architecture decisions to senior government IT and cybersecurity leadership.

Preferred Qualifications:

• CISSP or CISM certification.

• Experience with ServiceNow ITSM, ITOM, CMDB, Discovery, MID Servers, IntegrationHub, and regulated government cloud environments.

• Experience securing and supporting authorization of federal/DoD SaaS solutions, including ServiceNow, Azure Government, or Microsoft Power Platform.

• Advanced cybersecurity or cloud security credentials such as CISSP-ISSEP, ISC2 CGRC, CCSP, or Microsoft Azure security certifications.

• Experience establishing SaaS security architecture standards, authorization-change processes, and reusable RMF documentation for new capabilities and integrations.

Any clearance requirements for this position are established by the government contract.

This hybrid position requires candidates to reside within a reasonable commuting distance of the office.

Job ID

2026-27222

Work Type

Hybrid

Pay Range

$205,000 - $220,000

Benefits

Regular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.

Company Description

Work Where it Matters

Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At Suvi, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders , Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers , Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers’ missions safely, securely, and efficiently.

As a Suvi employee , you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

We are an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. All applicants will receive consideration for employment, without regard to race, color, religion, creed, national origin, gender or gender-identity, age, marital status, sexual orientation, veteran status, disability, pregnancy or parental status, or any other basis prohibited by law. If you are an individual with a disability, or have known limitations related to pregnancy, childbirth, or related medical conditions, and would like to request a reasonable accommodation for any part of the employment process, please contact us at [email protected] or 571-353-7053 (information about job applications status is not available at this contact information).