Systems Administrator (Compliance)

General Dynamics Information Technology

21h • $89,250 - $120,750 • Onsite

About The Position

GDIT has an immediate opening for a Compliance Systems Administrator supporting the CITS contract for USCENTCOM, based in Tampa, Florida. The Compliance Systems Administrator plays a critical, hands-on role in strengthening the enterprise security posture by directly implementing and managing cybersecurity compliance controls. This position is responsible for the technical execution of tasks required to ensure enterprise Information Technology (IT) systems, applications, and Core Services adhere to Department of War (DoW) cybersecurity standards. This role involves regular system maintenance, patching, troubleshooting, and the direct application of security configurations to achieve and maintain compliance for a CORA cyber inspection.

Requirements

• Applicable Intermediate DoW 8140 or DoW 8570 Certification.
• Bachelor's Degree in a related discipline (Cybersecurity or Information Assurance concentration preferred) or Three (3) years of real-world or military experience in information assurance, network security, or systems administration.
• Excellent interpersonal and teamwork qualities, including ownership, curiosity, sound judgment, integrity, flexibility, and strong communication skills.
• Demonstrated ability to work both independently with minimal direction and collaboratively within a team, including keeping leadership informed through clear, timely communication.
• Strong experience in systems administration, including Windows Server 2019/2022, patching, and troubleshooting.
• Strong understanding of vulnerabilities, exploits, and core DoW cybersecurity programs.
• Ability to interpret and, most importantly, implement DoW cybersecurity orders, policies, and procedures (STIGs, CTOs, IAVMs).
• Strong understanding of POA&Ms, STIGs, CTOs, IAVMs, and related compliance frameworks.
• Familiarity with cybersecurity tools such as ACAS/Tenable, RMF, eMASS, Endpoint Security Systems (ESS), Trellix, and Splunk.
• Understanding of Certificate Lifecycle Management and PKI authentication.
• Ability to apply hands-on system security engineering expertise in one or more technical areas: Windows Operating Systems (Windows Server 2019/2022), Active Directory & DNS, Web Servers & Certificate Management, Virtual Infrastructure & SecureView Environment, Endpoint Security Systems (ESS).
• Active Secret Clearance.

Nice To Haves

• Applicable Expert DoW 8140 or DoW 8570 Certification.
• Microsoft Windows Hybrid Administrator Certification.
• ITIL 4 Foundation Certification.
• SecureView Server Admin Training Certification.
• Experience supporting USCENTCOM and familiarity with its mission and IT environment.
• Experience briefing leadership (contract and government) on compliance status and remediation.
• Knowledge and experience with scripting/automation languages (PowerShell, Ansible) for STIG compliance automation.
• Experience with DoD Cyber Defense Command (DCDC) Cyber Operational Risk Assessments (CORA).
• Familiarity with STIG automation tools (e.g., EvaluateSTIG, STIG Manager, Maven Smart Systems).

Responsibilities

• Remediating security findings identified through ACAS/Tenable reports, STIG assessments, and other cybersecurity outputs by performing hands-on system maintenance, patching, and troubleshooting on Windows Server 2019/2022 Operating Systems.
• Technically implementing and maintaining compliance with security policies and directives, including Security Technical Implementation Guides (STIGs), Cyber Tasking Orders (CTOs), and Operations Orders (OPORDs).
• Building, deploying, maintaining, and securing server applications and proprietary software in accordance with security best practices.
• Developing, implementing, and documenting mitigation strategies and Plans of Action & Milestones (POA&Ms) for vulnerabilities that cannot be immediately remediated.
• Installing, configuring, and maintaining the SecureView environment to support multi-level security, ensuring it adheres to all Public Key Infrastructure (PKI) requirements for secure communication and authentication.
• Managing the full lifecycle of security certificates for web servers and secure communication channels.
• Tracking, prioritizing, and escalating security vulnerabilities and non-compliant configurations to ensure timely remediation.
• Developing and maintaining compliance tracking products such as status reports, briefings, and leadership updates to communicate compliance posture and progress.
• Maintaining system documentation and preparing clear process guides for all implemented security configurations and remediation steps.
• Using scripting languages (e.g., PowerShell) to automate compliance checks, configuration changes, and reporting.
• Participate in meetings and working groups with Operations and Cybersecurity personnel (government and contractor) to track and ensure cybersecurity compliance.
• Support architecture and engineering reviews by providing hands-on compliance-focused implementation feedback on new capabilities, technologies, and infrastructure changes.
• Perform other duties as assigned.

Benefits

• Variety of medical plan options, some with Health Savings Accounts
• Dental plan options
• Vision plan
• 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
• Full flex work weeks where possible
• Variety of paid time off plans, including vacation, sick and personal time, holidays
• Paid parental, military, bereavement and jury duty leave
• Short and long-term disability benefits
• Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level