Compliance Systems Administrator

General Dynamics Information Technology•USA FL MacDill AFB - 7115 S Boundary Blvd (FLC096), FL

10d•$89,250 - $120,750•Onsite

About The Position

GDIT is hiring a Compliance Systems Administrator to support the CITS contract for USCENTCOM at MacDill Air Force Base in Tampa, Florida. This onsite role strengthens enterprise security by directly implementing and managing cybersecurity compliance controls. The administrator performs the technical work needed to ensure IT systems, applications, and Core Services meet Department of War cybersecurity standards and remain compliant for CORA cyber inspections. The role focuses on hands-on enterprise systems compliance, including DISA STIG implementation, vulnerability remediation, system maintenance, patching, troubleshooting, security configuration, and compliance reporting. It also involves supporting secure communications and multi-level security through SecureView and PKI, documenting remediation and mitigation plans, and communicating compliance status to technical teams and leadership. The position requires an active Secret clearance; Top Secret/SCI is desired. Travel is required up to 10%.

Requirements

At least 3 years of related experience.
An applicable Intermediate DoD 8140 or DoD 8570 certification.
A bachelor's degree in a related discipline, or three years of real-world or military experience in information assurance, network security, or systems administration.
Active Secret clearance; U.S. citizenship is required.
Strong systems administration experience, including Windows Server 2019/2022, patching, and troubleshooting.
Understanding of vulnerabilities, exploits, and core Department of War cybersecurity programs.
Ability to interpret and implement Department of War cybersecurity orders, policies, and procedures, including STIGs, CTOs, and IAVMs.
Strong understanding of POA&Ms, STIGs, CTOs, IAVMs, and related compliance frameworks.
Familiarity with ACAS/Tenable, RMF, eMASS, Endpoint Security Systems (ESS), Trellix, and Splunk.
Understanding of certificate lifecycle management and PKI authentication.
Hands-on system security engineering expertise in at least one of the following areas: Windows Server 2019/2022, Active Directory and DNS, web servers and certificate management, virtual infrastructure and SecureView, or Endpoint Security Systems.
Strong interpersonal, teamwork, communication, ownership, judgment, integrity, curiosity, and flexibility.
Ability to work independently with minimal direction and collaboratively with a team, while keeping leadership informed through clear and timely communication.

Nice To Haves

An applicable Expert DoD 8140 or DoD 8570 certification.
Microsoft Windows Hybrid Administrator Certification.
ITIL 4 Foundation Certification.
SecureView Server Admin Training Certification.
Cybersecurity or Information Assurance concentration in a related bachelor's degree.
Experience supporting USCENTCOM and familiarity with its mission and IT environment.
Experience briefing contract and government leadership on compliance status and remediation.
Experience with scripting or automation languages such as PowerShell or Ansible for STIG compliance automation.
Experience with DoW Cyber Defense Command (DCDC) Cyber Operational Risk Assessments (CORA).
Familiarity with STIG automation tools such as EvaluateSTIG, STIG Manager, or Maven Smart Systems.
Top Secret/SCI clearance.

Responsibilities

Remediate findings from ACAS/Tenable reports, STIG assessments, and other cybersecurity outputs through system maintenance, patching, and troubleshooting of Windows Server 2019/2022.
Implement and maintain compliance with STIGs, Cyber Tasking Orders (CTOs), Operations Orders (OPORDs), and other security policies and directives.
Build, deploy, maintain, and secure server applications and proprietary software according to security best practices.
Develop, implement, and document mitigation strategies and Plans of Action & Milestones (POA&Ms) for vulnerabilities that cannot be immediately remediated.
Install, configure, and maintain the SecureView environment for multi-level security and compliance with PKI requirements.
Manage security certificates for web servers and secure communication channels throughout their lifecycle.
Track, prioritize, and escalate vulnerabilities and non-compliant configurations for timely remediation.
Develop compliance tracking materials, including status reports, briefings, and leadership updates.
Maintain system documentation and prepare process guides for security configurations and remediation steps.
Use scripting languages such as PowerShell to automate compliance checks, configuration changes, and reporting.
Participate in meetings and working groups with government and contractor Operations and Cybersecurity personnel to track and ensure compliance.
Provide hands-on, compliance-focused implementation feedback during architecture and engineering reviews of new capabilities, technologies, and infrastructure changes.
Perform other duties as assigned.

Benefits

Comprehensive benefits and wellness packages.
401(k) with company match.
Competitive pay.
Paid time off, including vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave.
Medical plan options, including some with Health Savings Accounts.
Dental and vision plan options.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Full flex work weeks where possible.
Career growth tools and internal mobility support.