ICS/OT Systems Administrator (FRCS/ICS) - Davis-Monthan AFB

ICS/OT Systems Administrator

Field-based industrial control systems role. 355th Civil Engineer Squadron, Davis-Monthan AFB, Tucson, Arizona. Fully onsite.

What this job actually is

You are the single CyberMyte employee on this contract. The 355th Civil Engineer Squadron runs Facility Related Control Systems across Davis-Monthan: water systems, fire alarms, airfield lighting and energy management. You keep those systems running, secure and documented.

Roughly, and it varies week to week:

• About half your time is field work. Walking facilities, tracing faults, pulling and terminating cable, swapping hardware, standing at a panel with a laptop.
• About a third is systems and network administration. HMI workstations, SCADA servers, switches, segmentation, backups, patching, STIG hardening, account controls.
• The rest is documentation and coordination. Tickets, monthly reporting, inventory, and working across 355 CES and the 355th Communications Squadron to unblock things.

This job is a good fit if

• You like OT and industrial control work, and you are comfortable being the only technical person in the room.
• You can run your own day from a standing task list without someone assigning you work each morning.
• You write things down without being asked.

This job is not a good fit if

• You want remote or hybrid. Telework is not authorized on this contract, and we cannot make an exception.
• You want a pure server or cloud administration role.
• You want a large team around you. One of you is onsite, with company leadership by phone.

About the contract

CyberMyte was awarded this prime contract in September 2024 and is performing through Option Year 1. Work completed so far includes remediating 100 of 130 identified EMCS outages in coordination with the 355th Communications Squadron, replacing the SCADA network hardware stack, deploying automated logout across all SCADA HMI systems to meet DISA requirements, and implementing PLC logic for well systems with power supply monitoring.

Responsibilities

SCADA, EMCS and field operations

• Maintain, monitor and troubleshoot SCADA, PLC and Energy Monitoring and Control Systems across the installation.
• Diagnose and remediate EMCS outages, coordinating with 355 CES and the 355th Communications Squadron for access, repair and verification.
• Conduct periodic physical walkthroughs and health checks of controlled facilities and equipment rooms.
• Track remediation status across all open outages and report accurate status in monthly reporting.
• Document every work action in the Government work order system with the trouble description, actions taken, parts used and verification steps.

HMI and PLC administration

• Administer Windows-based HMI workstations running SCADA software, including OS maintenance, updates and configuration management.
• Develop, modify and maintain PLC ladder logic for facility systems including well systems, utility controls and environmental monitoring.
• Maintain automated logout and session management across all SCADA HMI systems per DISA requirements.
• Document all PLC configurations, I/O mappings and program changes.
• Test every logic change in a controlled manner before deploying to production control systems.

Network and server administration

• Maintain the SCADA network infrastructure including managed switches, cabling and network segmentation.
• Administer assigned FRCS/ICS servers and workstations, including builds, patching and backup verification.
• Maintain and document segmentation between SCADA and enterprise networks.
• Support hardware replacement projects: procure, stage, configure and deploy.
• Coordinate with the 355th Communications Squadron on changes that cross organizational boundaries.

Security and compliance

• Maintain systems in compliance with DISA Security Technical Implementation Guides applicable to ICS and SCADA.
• Conduct risk analyses and security tests and evaluations for each FRCS/ICS system on at least a quarterly basis.
• Track and install required security patching on servers and client workstations, and document completion.
• Maintain configuration baselines and document deviations.
• Report suspected cybersecurity incidents immediately, and report unauthorized hardware or software to the ISSM upon detection.

Documentation and reporting

• Produce the technical content of the monthly progress report: work performed, equipment touched, ticket numbers and criticality, outages remediated and upcoming work.
• Maintain a current inventory of all SCADA, EMCS, PLC, HMI and network components.
• Write and maintain system operating and administration procedures so someone else can continue the work.
• Maintain disaster recovery procedures and support quarterly recovery testing.

Required qualifications

Citizenship, clearance and certification

• United States citizen. No exceptions for on-installation federal contract work.
• Active Secret clearance. Required at time of hire under the contract.
• Favorable Tier 1 investigation or higher, required before a Restricted Area Badge can be issued.
• IAT Level II certification, held on your first day. Qualifying certifications include CompTIA Security+ CE, CySA+, GICSP, GSEC, SSCP, CCNA-Security and CND. Security+ CE is the most common route. Any approved IAT Level II certification in DoDM 8140.03 is acceptable. 

Technical experience

• Three or more years of hands-on experience with industrial control systems, SCADA platforms or building automation in an operational environment.
• Direct PLC programming experience (Allen-Bradley, Siemens or equivalent) including ladder logic development and modification.
• Experience administering Windows-based HMI workstations running SCADA software such as Wonderware, FactoryTalk, Ignition or equivalent.
• Working knowledge of industrial network architecture: segmentation, managed switches, and serial protocols such as Modbus, DNP3 or BACnet.
• Windows Server administration, including domain controllers, user accounts and permissions.
• Experience in federal, military or similarly regulated operational environments preferred.

Work style

• Able to work onsite with limited direct supervision and set your own daily priorities from a standing task list.
• Comfortable coordinating across Air Force organizations with different chains of command and access procedures.
• Documentation habits that do not require reminders.
• Able to lift and carry up to 50 pounds, work in confined spaces, climb ladders, and perform manual cable and hardware installation.

Preferred qualifications

• Prior Air Force or DoD installation experience and familiarity with base access, OPSEC and facility coordination.
• Experience with EMCS, Direct Digital Controls or Building Automation Systems in a federal facility.
• Experience with utility systems including wells, pump controls and environmental monitoring.
• Applied experience with DISA STIG requirements for ICS and SCADA systems.
• Active Top Secret clearance.

How CyberMyte supports this role

We are making these commitments in writing because we learned they matter. We arrange everything below before your first day, not after.

• A written standing task list on day one. You will never sit waiting for someone to tell you what to do. The contract defines roughly forty recurring responsibilities, and you will have all of them in writing, with priorities.
• Government orientation and system familiarization. The contract obligates the Government to provide workplace orientation, mission and system familiarization, and standard operating procedure training at the site. We will make sure you get it.
• A weekly check-in with company leadership. CyberMyte is small. You will have a direct line to the CEO, not three layers of management.
• Certifications paid, including renewals, and a $5,000 annual training stipend you direct yourself.

Schedule, environment and conditions

Duty hours are 7:30 a.m. to 4:30 p.m. Mountain Time, Monday through Friday, eight hours per day and forty hours per week, onsite. Federal holidays are observed. Telework is not authorized on this contract, and we have no discretion to change that.

After-hours work is occasional and arranged with the Government in advance. This contract authorizes no overtime, so after-hours work is offset with flexed hours in the same week rather than paid at a premium.

The work spans control rooms and offices as well as industrial spaces: mechanical rooms, equipment vaults and outdoor utility areas. Tucson summers are extreme, and much of the work is outdoors or in spaces without climate control. Reliable personal transportation to the installation is required. CyberMyte coordinates base access processing before your start date.

Compensation and benefits

• Salary: $78,000 to $83,000 annually, based on experience and clearance status.
• Health: Individual Coverage Health Reimbursement Arrangement. CyberMyte funds a monthly tax-free allowance you direct toward the individual medical, dental and vision plan that fits your family.
• Retirement: 401(k) accepting employee contributions. An employer match is under evaluation for a future plan year and is not offered today.
• Bonus: Annual performance bonus based on individual contribution and company performance.
• Training: $5,000 annual stipend, directed by you. All job-related certifications and renewals reimbursed.
• Time off: Paid time off plus federal holidays.

This position is covered by the Service Contract Labor Standards and the applicable Department of Labor wage determination. Compensation will meet or exceed the required wage and fringe benefit floor.

CyberMyte, LLC is an Equal Opportunity Employer and a Service-Disabled Veteran-Owned Small Business. Veterans and transitioning service members are strongly encouraged to apply.

How to apply

Apply through this posting, or email job@cybermyte.io with the subject line "355 CES ICS/OT Systems Administrator Application." In your message, tell us three things:

• Your current clearance level and status.
• Which IAT Level II certification you hold and its expiration date.
• Your earliest realistic start date.

A cover letter is welcome but not required. We would rather read about one control system you fixed than a page of adjectives. We contact candidates selected for interview within five business days.

Please do not send clearance documentation yet. CyberMyte processes its own personnel security actions through DISS. Do not send clearance paperwork, investigation records or personal identifiers until CyberMyte requests them after a conditional offer.