Description
GDIT has an immediate opening for a Compliance Systems Administrator (Virtualization) supporting the CITS contract for USCENTCOM, based in Tampa, Florida.
The Compliance Systems Administrator (Virtualization) plays a critical, hands-on role in strengthening enterprise security posture by directly implementing, maintaining, and remediating cybersecurity compliance controls across enterprise virtualization platforms (VMware ESXi, vCenter Server, Hyper-V, and software-defined infrastructure).
Responsibilities:
- Applying, validating, and remediating DISA STIG benchmarks directly across VMware ESXi hosts, VMware vCenter Server Appliances (VCSA), virtual switches, and hypervisor management infrastructure.
- Deploying hypervisor firmware updates, ESXi security patches, and virtual appliance updates to remediate vulnerabilities identified in ACAS/Tenable scans.
- Executing direct technical remediation for identified infrastructure vulnerabilities and drafting, documenting, and implementing technical Plans of Action & Milestones (POA&Ms) when immediate remediation is not feasible.
- Hardening and isolating virtual networking components, distributed switches, VLAN segmentation, and multi-tenant isolation controls in accordance with DoW security guidelines.
- Building, provisioning, configuring, and maintaining secure virtual machine templates, golden images, and virtual appliances compliant with enterprise security standards.
- Developing and executing automation scripts using PowerShell and PowerCLI for automated compliance audits, snapshot enforcement, configuration verification, and bulk remediation.
- Tracking, prioritizing, and resolving virtual infrastructure compliance findings, maintaining comprehensive audit logs and baseline documentation.
- Extracting system configuration state baselines and generating technical artifact packages required for CORA inspection evaluators.
- Maintaining up-to-date documentation, standard operating procedures, and technical runbooks for virtualization security configurations.
Additional Responsibilities:
- Participate in technical working groups and meetings with Operations, Storage, and Cybersecurity personnel (government and contractor) to track and resolve virtualization security findings.
- Support engineering and change management reviews by evaluating compliance impacts for virtual infrastructure upgrades and architectural modifications.
- Perform other duties as assigned.
Requirements:
- Applicable Intermediate DoW 8140 or DoW 8570 Certification (e.g., Security+ CE, CySA+, or equivalent).
- Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline OR Three (3) years of hands-on real-world or military experience in virtualization administration, systems administration, or information assurance.
- Hands-on experience in virtualization administration with VMware vSphere 7.x/8.x (ESXi, vCenter Server, VMFS/vSAN, and virtual distributed networking).
- Practical experience applying DISA STIGs and hardening baselines to hypervisors and virtual management appliances.
- Strong understanding of ACAS/Tenable vulnerability scan results, CVE remediation, and DoW cybersecurity requirements.
- Proficiency in basic scripting and automation using PowerShell and VMware PowerCLI for administrative and compliance tasks.
- Strong understanding of POA&Ms, CTOs, IAVMs, and virtual environment isolation principles.
- Excellent problem-solving, communication, and collaboration skills with the ability to work independently and keep leadership informed.
Benefits:
- Comprehensive benefits and wellness packages
- 401K with company match
- Competitive pay and paid time off
- Full flex work weeks where possible
- Paid parental, military, bereavement, and jury duty leave
- Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance