Job Description

The National Security Agency (NSA) currently has opportunities for highly motivated Industrial Control System (ICS) Specialists/Engineers to provide expertise in the design, construction, commissioning, and operation of new and renovated electrical and mechanical infrastructure. This position has two areas of focus, one within Design and Engineering (D&E) and the other with Operations and Maintenance (O&M).
As an ICS Specialist/Engineer within D&E, you will work closely with multidisciplinary teams encompassing project managers, stakeholders, and contractors throughout the entirety of the project life-cycle, including close coordination with O&M. You will also be responsible for the development and review of designs, specifications, technical reports, and cost estimates for power monitoring and control of electrical and mechanical infrastructure, energy management monitoring, and ICS cybersecurity.
As an ICS Specialist/Engineer within O&M, you will work closely with ICS Specialists who support many facets of the Industrial Control Systems in the Facilities Control Center (FCC), which is a 24/7 operations center where facilities systems can be effectively monitored and maintained. The ICS team supports power monitoring and control, energy management monitoring and control, the transport network and various Information Technology (IT) and Operational Technology (OT) hardware, components, software, and applications to ensure a robust secure operation of the overall system.


Job Summary


NSA is in need of skilled/experienced Industrial Control System (ICS) Specialists/Engineers to ensure the proper operation and cybersecurity of NSA's and Department of Defense (DoD) ICS, from concept to operation.


Qualifications


The qualifications listed are the minimum acceptable to be considered for the position.
Degree must be in Computer Science, Engineering, Information Technology, or a related STEM field (for example, Building Automation Systems, Control Systems, Information Systems, Cybersecurity, Computer Security).
Relevant experience must be in one or more of the following: industrial or commercial control systems; information technology or information systems; or in the operation, maintenance, design, or modification of facilities-related control systems.
ENTRY/DEVELOPMENTAL
Entry is with an Associate's degree plus 2 years of relevant experience, or a Bachelor's degree and no experience.
FULL PERFORMANCE
Entry is with an Associate's degree plus 5 years of relevant experience, or a Bachelor's degree plus 3 years of relevant experience, or a Master's degree plus 1 year of relevant experience, or a Doctoral degree and no experience.
SENIOR
Entry is with an Associate's degree plus 10 years of relevant experience, or a Bachelor's degree plus 8 years of relevant experience, or a Master's degree plus 6 years of relevant experience, or a Doctoral degree plus 2 years of relevant experience.


Competencies


Support for Industrial Control Systems requires a variety of skills. The successful candidate shall have knowledge/skills in at least one of the following areas and the drive and passion to master many of these functions:
- ICS Power Control and Operational Technology (OT) devices - Provide support in the area of electrical power control and monitoring systems also known as Supervisory Control and Data Acquisition (SCADA) systems. The candidate should be knowledgeable about or interested in learning about electrical power systems, configuring Schweitzer protective relays, oversight of ICS commissioning, integrating power devices into Real-Time Automation Controllers (RTAC) as well as Programmable Logic Controllers (PLC) programming. Knowledge of the protocols used by these devices, including mirrored bits, Modbus, DNP3, and SNMP, is desired.
- ICS Building Automation - Provide support to a variety of technical areas that include HVAC and chilled water distribution systems, coordination of utility outages that impact the ICS and to minimize disruptions to mission systems and support of the ICS installation and oversight of ICS commissioning. Knowledge or interest in learning about the field of building automation and the variety of components used by such systems is preferred. This includes devices such as Direct Digital Controls (DDC), DDC Logic, seniors, and end devices such as, but not limited to Variable Frequency Drives (VFD), dampers, actuators, and valves.
- Networking Technologies - The candidate should be knowledgeable about or interested in learning about configuring and troubleshooting Cisco switches and routers. Knowledge of and experience in routing protocols, Port Security, Cisco Identity Services Engine (ISE), Domain Authentication, and VLANs is desired. Additionally, knowledge of best security practices is desired.
- Firewalls - The candidate should be knowledgeable about or interested in learning about Cisco firewalls, including Firewall Management Center (FMC) for deployment and management of firewalls.
- Information Technology (IT) Management - The candidate should be knowledgeable about or interested in learning about Microsoft Endpoint Configuration Manager (MECM), Microsoft Active Directory (AD), and similar tools used for managing access controls, patch deployments, configuring policies, troubleshooting application issues, and developing/deploying software images.
- Network Security - The candidate should be knowledgeable about or interested in learning about multiple topics including, but not limited to, System Information and Event Management (SIEM), including creating anomalies alert dashboards; management of Antivirus (AV) and malware protection; access controls to include Identification, Authentication, Authorization, and Accountability (IAAA), as well as Multifactor Authentication (MFA); cybersecurity framework and policies; Network Discovery and asset management; Network Intrusion Prevention and Detection Systems (IPS/IDS); ICS/SCADA network protocol and vulnerability analysis; ICS/SCADA recovery & mitigation and signature development and implementation; and network penetration testing. A working knowledge of assessment and analytic tools and techniques is a plus.
In addition, the candidate shall adapt work methods in response to new information, changing conditions, emergencies or unexpected challenges. Have the ability to articulate viewpoints and answers to customers, peers, and supervisors in an effective manner, both written and orally. Identify and analyze technical issues, report, document, and attend project status briefings. Knowledgeable with calendar scheduling, MS Outlook, MS Word/Excel and office equipment such as copiers, printers and scanners.
The ideal candidate demonstrates the following:
- Problem Solving
- Interpersonal Skills
- Partnering
- Customer Service
- Accountability
- Continual Learning
- Resilience
- Effective Communication
Knowledge and experience in one or more of the following is desired:
- Reliable power distribution design (high voltage, medium voltage, low voltage)
- Substation and generators plant relay protection and control systems
- Codes and standards (NFPA, IEEE, etc.)
- Technical modeling and simulation software packages (AutoCAD, ETAP, SKM, EasyPower, PowerWorld, etc.)
- Cost estimating
- Commissioning: Factory witness testing, functional performance testing, integrated system testing, and ANSI Level 4 and 5 commissioning requirements
- Building Automation System programming control logic
- Creating and modifying Building Automation System graphics
- Third party integration via BACnet/Modbus protocols
- Managing and securing network infrastructure (e.g. port security, certificate management, etc.)
- Applying concepts, principles, and methods for network connectivity (e.g. routing, switching, tunneling, and IP addressing)
- Configuring, maintaining, and troubleshooting firewalls and access control lists.
- Implementing, configuring, and sustaining computer security (e.g. Active Directory, Domain Policies, Patch Deployment, Antivirus, and Allowlisting)
- Employing Secure Technical Implementation Guidance (STIG) and government security standards.
- Configuring and supporting Schweitzer Real Time Automation Controllers (RTAC)
- Evaluating and documenting PLC programs for electrical power control
- Creating and modifying SCADA system graphics and points
- Equipment: Transformers, switchgear, switchboards, panelboards, Uninterruptible Power Supply (UPS) systems, Automatic Transfer Switches (ATS), and Static Transfer Switches (STS)
- Controls and metering: SCADA, power metering, and electrical control systems
- Assisting project teams throughout the project life-cycle
- Configuring firewall rulesets and troubleshooting issues
- Computer network defense and forensic capability awareness and use
- Industrial Control Systems network defense experience a plus
- Red and Blue team activities
- Computer network monitoring and forensic experience


Pay, Benefits, & Work Schedule


Pay: Salary offers are based on candidates' education level and years of experience relevant to the position and also take into account information provided by the hiring manager/organization regarding the work level for the position.
Salary Range: $86,498 - $190,848 (Entry/Developmental, Full Performance, Senior)
Salary range varies by location, work level, and relevant experience to the position.
Training will be provided based on the selectee's needs and experience.
Benefits: NSA offers a comprehensive benefits package.
Work Schedule: This is a full-time position, Monday - Friday, with basic 8hr/day work requirement between 6:00 a.m. and 6:00 p.m. (flexible).
DCIPS Trial Period:
If selected for this position, you will be required to serve a two-year DCIPS trial period, unless you are a veterans' preference-eligible employee, in which case you are required to serve a one-year trial period. This trial period runs concurrently with your commitment to the position, if applicable. Before finalizing your appointment at the conclusion of your trial period, NSA will determine whether your continued employment advances the public interest. This decision will be based on factors such as your performance and conduct; the Agency's needs and interests; whether your continued employment would advance the Agency's organizational goals; and whether your continued employment would advance the efficiency of the Federal service.
Upon completion of your trial period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.
If you do not receive certification for continued employment, you should receive written notice prior to the end of your trial period that your employment will be terminated and the effective date of such termination.


How to apply


The following four narrative questions provide an opportunity for you to highlight your dedication to public service for the hiring manager and agency leadership (or designee(s)). While your responses are not required and will not be scored, we encourage you to thoughtfully address each question. Please provide a response of 200 words or less to each question. You will be asked to certify that you are using your own words and did not use a consultant or artificial intelligence (AI) such as a large language model (LLM) like ChatGPT or Copilot. (Please attach in application)
1. How has your commitment to the Constitution and the founding principles of the United States inspired you to pursue this role within the Federal government? Provide a concrete example from professional, academic, or personal experience.
2. In this role, how would you use your skills and experience to improve government efficiency and effectiveness? Provide specific examples where you improved processes, reduced costs, or improved outcomes.
3. How would you help advance the President's Executive Orders and policy priorities in this role? Identify one or two relevant Executive Orders or policy initiatives that are significant to you, and explain how you would help implement them if hired.
4. How has a strong work ethic contributed to your professional, academic or personal achievements? Provide one or two specific examples, and explain how those qualities would enable you to serve effectively in this position.

Apply soonest, as job postings can close earlier than stated end dates due to changes in requirements. It is important to review and note the minimum qualifications, as only those applicants who meet the required qualifications will be contacted to continue the employment process. Please populate the resume tool to showcase any relevant work experience and education related to the position and answer any applicable screening questions. Information collected will be used to determine eligibility, and failure to provide accurate information may result in disqualification for this position.
A confirmation email will be sent after submission of the first application and also after any future updates to submitted applications. Due to time sensitive communications regarding applications, please ensure your spam filters are configured to accept email from noreply@intelligencecareers.gov. For job vacancies that include stated testing requirements, also include the following: @uwe.nsa.gov, @nsa.gov, and @pearson.com
U.S. Citizenship is required for all applicants. NSA is an equal opportunity employer and abides by applicable employment laws and regulations. All applicants and employees are subject to random drug testing in accordance with Executive Order 12564. Employment is contingent upon successful completion of a security background investigation and polygraph. Reasonable accommodations may be provided to applicants with disabilities during the application and hiring process where appropriate.


DCIPS Disclaimer


VETERANS AND TRANSITIONING SERVICE MEMBERS
Thank you for your service! The National Security Agency (NSA) is part of the Defense Civilian Intelligence Personnel System (DCIPS). All positions at NSA are in the Excepted Service under Title 10, United States Codes (U.S.C.), Section 1601 appointment authority.
Veterans' Preference
In accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005, "DoD Civilian Personnel Management System: Defense Civilian Intelligence Personnel System Employment and Placement," NSA applies veterans' preference, as defined by Section 2108 of Title 5, U.S.C., to eligible candidates. If you are claiming veterans' preference, you are required to provide acceptable documentation of your preference eligibility upon application.
Acceptable documentation includes:
- DD-214: "Certificate of Release or Discharge from Active Duty," which shows dates of service and discharge under honorable conditions (Copy 4); OR
- Certification of Service:
A written document on letterhead from the appropriate branch of the armed forces that certifies the service member is expected to be discharged or released from active duty service in the armed forces under honorable conditions not later than 120 days after the date the certification is signed. The certification should include the military service dates, including the expected discharge or release date; AND
- Standard Form 15 (SF-15)
Application for 10-point Veteran Preference (http://www.opm.gov/forms/pdf_fill/sf15.pdf).
If you are claiming a service-connected disability of 30 percent or more, the documentation you provide must specifically demonstrate this level of disability; AND
- VA Letter of Disability (for 10pt and Sole Survivorship rating)
You may obtain a letter from the Department of Veterans Affairs reflecting your level of disability for preference eligibility by visiting a VA Regional Office, contacting a VA call center, or online (https://www.ebenefits.va.gov/).
Failure to provide sufficient documentation of veterans' preference eligibility may preclude NSA from identifying you as a preference eligible candidate during the hiring selection process.