Compliance Systems Administrator (Virtualization)

General Dynamics Information Technology • USA FL MacDill AFB - 7115 S Boundary Blvd (FLC096), FL

21h • $89,250 - $120,750 • Onsite

About The Position

GDIT has an immediate opening for a Compliance Systems Administrator (Virtualization) supporting the CITS contract for USCENTCOM, based in Tampa, Florida. The Compliance Systems Administrator (Virtualization) plays a critical, hands-on role in strengthening enterprise security posture by directly implementing, maintaining, and remediating cybersecurity compliance controls across enterprise virtualization platforms (VMware ESXi, vCenter Server, Hyper-V, and software-defined infrastructure). This position executes direct technical hardening, patching, configuration management, and audit verification to ensure hypervisors, management appliances, and virtual infrastructure adhere strictly to Department of War (DoW) cybersecurity standards and CORA inspection requirements.

Requirements

• Applicable Intermediate DoW 8140 or DoW 8570 Certification (e.g., Security+ CE, CySA+, or equivalent).
• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline OR Three (3) years of hands-on real-world or military experience in virtualization administration, systems administration, or information assurance.
• Hands-on experience in virtualization administration with VMware vSphere 7.x/8.x (ESXi, vCenter Server, VMFS/vSAN, and virtual distributed networking).
• Practical experience applying DISA STIGs and hardening baselines to hypervisors and virtual management appliances.
• Strong understanding of ACAS/Tenable vulnerability scan results, CVE remediation, and DoW cybersecurity requirements.
• Proficiency in basic scripting and automation using PowerShell and VMware PowerCLI for administrative and compliance tasks.
• Strong understanding of POA&Ms, CTOs, IAVMs, and virtual environment isolation principles.
• Excellent problem-solving, communication, and collaboration skills with the ability to work independently and keep leadership informed.
• Active Secret Clearance

Nice To Haves

• VMware Certified Professional (VCP – Data Center Virtualization).
• Nutanix Certified Professional (NCP) or equivalent hyperconverged infrastructure certification.
• ITIL 4 Foundation Certification.
• Experience supporting USCENTCOM and familiarity with its operational mission and enterprise IT architecture.
• Direct experience participating in or preparing virtualization infrastructure for DoW Cyber Operational Risk Assessments (CORA) or CCRI inspections.
• Familiarity with automation tools such as VMware STIG Tools Appliance, STIG Manager, and Ansible.
• Experience with hyperconverged infrastructure (Nutanix/AHV, Dell VxRail) and multi-level secure virtualization environments.

Responsibilities

• Applying, validating, and remediating DISA STIG benchmarks directly across VMware ESXi hosts, VMware vCenter Server Appliances (VCSA), virtual switches, and hypervisor management infrastructure.
• Deploying hypervisor firmware updates, ESXi security patches, and virtual appliance updates to remediate vulnerabilities identified in ACAS/Tenable scans.
• Executing direct technical remediation for identified infrastructure vulnerabilities and drafting, documenting, and implementing technical Plans of Action & Milestones (POA&Ms) when immediate remediation is not feasible.
• Hardening and isolating virtual networking components, distributed switches, VLAN segmentation, and multi-tenant isolation controls in accordance with DoW security guidelines.
• Building, provisioning, configuring, and maintaining secure virtual machine templates, golden images, and virtual appliances compliant with enterprise security standards.
• Developing and executing automation scripts using PowerShell and PowerCLI for automated compliance audits, snapshot enforcement, configuration verification, and bulk remediation.
• Tracking, prioritizing, and resolving virtual infrastructure compliance findings, maintaining comprehensive audit logs and baseline documentation.
• Extracting system configuration state baselines and generating technical artifact packages required for CORA inspection evaluators.
• Maintaining up-to-date documentation, standard operating procedures, and technical runbooks for virtualization security configurations.
• Participate in technical working groups and meetings with Operations, Storage, and Cybersecurity personnel (government and contractor) to track and resolve virtualization security findings.
• Support engineering and change management reviews by evaluating compliance impacts for virtual infrastructure upgrades and architectural modifications.
• Perform other duties as assigned.

Benefits

• 401K with company match
• Full flex work weeks where possible
• Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short and long-term disability benefits
• Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
• Variety of medical plan options, some with Health Savings Accounts
• Dental plan options
• Vision plan

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level