Cybersecurity Consultant

Stantec is seeking a Cybersecurity Consultant to support the design, documentation, and compliance review of operational technology (OT) systems across design projects, including work governed by DoD specifications. This onsite role in Chicago, IL focuses on creating secure, resilient OT and control system designs that align to cybersecurity requirements and project governance.

What you will do

• Develop cybersecurity design criteria and specifications aligned with NIST, DoD, and DoD UFC/UFGS standards.
• Support pre-coordination meetings and technical clarifications with stakeholders and contracting officers.
• Ensure design documentation meets contract requirements, OT/control system cybersecurity guidance, and RMF/IA controls.
• Contribute to cybersecurity-related submittal reviews, including cybersecurity sections of shop drawings, cut sheets, and system specifications.
• Prepare cybersecurity design and construction documents for facility-related control systems.
• Support development of contract drawings and Division 01/25/27/28 specifications for secure and unsecure network environments.
• Assist with cyber-informed risk assessments, threat modeling, and cybersecurity specification authoring.
• Define, evaluate, and apply NIST security control requirements.
• Use design and modeling tools including Revit, CAD, and Bluebeam Revu to design secure network environments.
• Conduct onsite inspections, surveys, and cybersecurity-specific submittal review.
• Manage RFIs and submittals with attention to cybersecurity system compliance.
• Evaluate documentation for compliance with cybersecurity governance, including Federal Risk and Authorization Management Program and Facility-Related Control Systems Risk Management Framework, to support project cybersecurity goals.
• Coordinate with architects, engineers, and stakeholders to integrate cyber requirements into design and proposal documentation.
• Draft and maintain detailed cybersecurity narratives and compliance documentation.

Requirements

• Familiarity with facility-related control systems (FRCS), including building control systems (BCS) and utility control systems (UCS).
• Familiarity with network and telecom design, secure equipment rooms, cabling pathways, and control system cybersecurity best practices.
• Experience in DoD project environments, with working knowledge of UFC 4-010-06, UFGS 25 05 11, and RMF frameworks preferred.
• Familiarity with government contracting processes, including Design-Bid-Build and Design-Build.
• Willingness to travel less than 5% for site surveys and team coordination meetings.

Technology and frameworks

• NIST, DoD, DoD UFC/UFGS, RMF/IA
• Federal Risk and Authorization Management Program, Facility-Related Control Systems Risk Management Framework
• Revit, CAD, Bluebeam Revu
• UFC 4-010-06, UFGS 25 05 11
• Division 01, Division 25, Division 27, Division 28

Preferred cybersecurity certifications

• GSLC (GIAC Security Leadership Certification)
• CISSP (Certified Information Systems Security Professional)
• CAP (Certified Authorization Professional)

Additional preferred certifications

• BICSI RCDD
• DoD IAM Level II or III certification equivalents

Education and experience

• Associate degree (or equivalent) in Engineering Technology, OR
• Minimum 3+ years of relevant cybersecurity-related experience

Compensation and benefits

The salary range is USD 80,500 - 116,700 per year for this onsite position in Chicago, IL.

• Medical, dental, and vision plans
• Wellness program
• Health saving accounts
• Flexible spending accounts
• 401(k) plan
• Employee stock purchase program
• Life and accidental death & dismemberment (AD&D) insurance
• Short-term/long-term disability plans
• Emergency travel benefits
• Tuition reimbursement
• Professional membership fee coverage
• Paid family leave
• Ten paid holidays in each calendar year
• Accrue vacation between 10 and 20 days per year
• Paid sick leave
• Regular full-time and part-time employees (working at least 20 hours per week) have access to the listed benefits
• Temporary/casual employees have access to 401(k) plans, employee stock purchase program, and paid leave (in accordance with state and local law)