Clarification from the agency

See Requirements section of this announcement for information on who may apply. Please be advised that federal retired annuitant candidates may only be considered as a temporary employee if the role can be filled in that capacity.

This position is considered "essential" for the purpose of reporting to work when the facility might otherwise be closed. 

Must have or be able to obtain and maintain a Top Secret/SCI security clearance. 

Develops new policy regarding AOC Operational Technology (OT) cybersecurity for device, equipment, and system-level cybersecurity configuration and day-to-day security operations of control systems, including security monitoring and maintenance along with stakeholder coordination to ensure the system and its interconnections are secure in support of mission operations.

• Incumbent serves as the lead to apply cybersecurity and principles to secure OT, to include Industrial Control Systems (ICS) such as Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and other control system configurations such as Programmable Logic Controllers (PLC), while addressing their unique performance, reliability and safety requirements.
• Serves as the subject matter expert for the AOC's OT cybersecurity, including Industrial Control Systems such as Supervisory Control and Data Acquisition systems, Distributed Control Systems, and other control system configurations such as Programmable Logic Controllers networking concepts and protocols and network security methodologies.
• Customizes communications (e.g., incident updates and after-action reports) to emphasize the most critical information and address anticipated follow-up concerns of specific target audiences. Proposes and maintains a suite of OT cybersecurity tools, to include SIEM and Endpoint Security Tools.
• Manages the AOC OT Cybersecurity Policy Program for all AOC owned and/or operated operational technology systems.
• Creates, maintains, and disseminates system processes, cybersecurity policies, and local procedure documentation including incident response, recovery, and contingency plans. Documents specific tactics, techniques, and procedures to be used when adversarial activity is detected. Tests and reviews plans as needed but not less than annually. Validates all AOC OT cybersecurity-related documentation is current and accessible to properly authorized individuals.
• Continuously monitors the OT environment for security-relevant events, assesses proposed configuration changes for potential impact to the cybersecurity posture, and assesses the quality of security controls implementation against performance indicators such as security incidents, feedback from external inspection agencies, exercises, and operational evaluations. 

The incumbent is responsible for utilizing a thorough knowledge of and compliance with applicable AOC and Office of Congressional Workplace Rights (OCWR) safety rules and regulations to ensure that work progresses in a safe manner and to initiate or take corrective action on unsafe conditions in managed areas. Provides or receives training, either on the job or through classroom training, to ensure that the required Personal Protective Equipment (PPE) is utilized.

As the program develops, may add additional policy development for platform technology cyber security.

Performs other related duties as assigned.

Conditions of employment

“To be employed by the Architect of the Capitol in a paid position, an individual must meet
one of the categories below:

• A citizen of the United States;
• A person who is lawfully admitted for permanent residence and is seeking citizenship as outlined in 8 U.S.C. 1324b(a)(3)(B);
• A person who is admitted as a refugee under 8 U.S.C. 1157 or is granted asylum under 8 U.S.C. 1158 and has filed a declaration of intention to become a lawful permanent resident and then a citizen when eligible;
• A person who owes allegiance to the United States (nationals of American Samoa, Swains Island, and the Northern Mariana Islands, and nationals who meet other requirements described in 8 U.S.C. 1408); or
• A person who is currently an officer or employee of the Government of the United States.”

Qualifications

You must meet the United States Office of Personnel Management's (OPM) qualification requirements (including specialized experience and/or educational requirements) for the advertised position.  You must meet all eligibility and qualifications requirements by the closing date of the job announcement.  Additional information on the qualification requirements is outlined in the OPM Qualifications Standards Handbook of General Schedule Positions.  It is available for your review on the OPM web site at OPM qualification standards
 
Specialized experience is experience that has equipped the applicant with the required competencies to successfully perform the duties of the position that is typically in or related to the position to be filled. To be creditable, candidates must have at least 52 weeks of specialized experience equivalent to the GS-13 grade level in the Federal service OR equivalent level in the private sector, military or other.

Examples of specialized experience include the following: (1) Responsible for Operational Technology security programs and activities involving strategic goals, workforce planning, policies and standards development, budgeting, information architecture planning and modeling and cybersecurity. (2) Overseeing the operations of an Operational Information Security and providing direct supervision to the members of the ISB (i.e., plans, directs, manages, supervises and evaluates programs, activities and staff). (3) Developing and overseeing the implementation and coordination of security protocols to ensure continuous monitoring, continuity of operations, protection against unauthorized access, incident response and restoring systems and services in the event of security incidents.

In addition to meeting the specialized experience stated above, applicants must have IT-related experience demonstrating each of the four competencies listed below:

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Review your resume and responses carefully. Your eligibility for consideration and qualifications for the position will be determined based upon a review of your detailed resume and your responses to job specific self-assessment questions.  

Your resume will be evaluated based on evidence of your ability to demonstrate the competencies for this position, possession of any specialized experience, and how well your background and experience relates to the self-assessment questions in the job announcement. The self-assessment questions relate to the following competencies:

1: Operational Systems and Network Security- Monitor and enforce applicable baselines on various operations systems.

2: Network Management- Ident and analyze vulnerabilities, and recommend countermeasures for the identified vulnerabilities.

3: Project Management- Assist in the development and continued maintenance of applicable IT Security related documentation such as Standard Operating Procedures and Operations Manuals.

4: Cyber Security

Your responses to the self-assessment questions serve as the basis for your initial rating.  You will receive a numerical score based on your responses to these questions.  Next, your responses will be evaluated by a Human Resources Specialist and/or a subject matter expert against the information provided in your resume and optional cover letter. Your resume must support your answers to the self-assessment questions.  Falsifying your background, education, and/or experience is cause for not hiring you or disqualification for further consideration. 

Please note that a complete application is required for consideration. (Please review the “Required Documents” section of this job announcement to see what must be included in a complete application).