Compliance Systems Administrator (Virtualization)

Compliance Systems Administrator (Virtualization)GDIT has an immediate opening for a Compliance Systems Administrator (Virtualization) supporting the CITS contract for USCENTCOM, based in Tampa, Florida. The Compliance Systems Administrator (Virtualization) plays a critical, hands-on role in strengthening enterprise security posture by directly implementing, maintaining, and remediating cybersecurity compliance controls across enterprise virtualization platforms (VMware ESXi, vCenter Server, Hyper-V, and software-defined infrastructure). This position executes direct technical hardening, patching, configuration management, and audit verification to ensure hypervisors, management appliances, and virtual infrastructure adhere strictly to Department of War (DoW) cybersecurity standards and CORA inspection requirements.Duties and Responsibilities:Applying, validating, and remediating DISA STIG benchmarks directly across VMware ESXi hosts, VMware vCenter Server Appliances (VCSA), virtual switches, and hypervisor management infrastructure.Deploying hypervisor firmware updates, ESXi security patches, and virtual appliance updates to remediate vulnerabilities identified in ACAS/Tenable scans.Executing direct technical remediation for identified infrastructure vulnerabilities and drafting, documenting, and implementing technical Plans of Action & Milestones (POA&Ms) when immediate remediation is not feasible.Hardening and isolating virtual networking components, distributed switches, VLAN segmentation, and multi-tenant isolation controls in accordance with DoW security guidelines.Building, provisioning, configuring, and maintaining secure virtual machine templates, golden images, and virtual appliances compliant with enterprise security standards.Developing and executing automation scripts using PowerShell and PowerCLI for automated compliance audits, snapshot enforcement, configuration verification, and bulk remediation.Tracking, prioritizing, and resolving virtual infrastructure compliance findings, maintaining comprehensive audit logs and baseline documentation.Extracting system configuration state baselines and generating technical artifact packages required for CORA inspection evaluators.Maintaining up-to-date documentation, standard operating procedures, and technical runbooks for virtualization security configurations.Additional Responsibilities:Participate in technical working groups and meetings with Operations, Storage, and Cybersecurity personnel (government and contractor) to track and resolve virtualization security findings.Support engineering and change management reviews by evaluating compliance impacts for virtual infrastructure upgrades and architectural modifications.Perform other duties as assigned.What you will need to succeed:Applicable Intermediate DoW 8140 or DoW 8570 Certification (e.g., Security+ CE, CySA+, or equivalent).Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline OR Three (3) years of hands-on real-world or military experience in virtualization administration, systems administration, or information assurance.Location: Tampa, Florida (USCENTCOM)Clearance: Active SecretTravel: up to 10% (CONUS/OCONUS)Required Skills:Hands-on experience in virtualization administration with VMware vSphere 7.x/8.x (ESXi, vCenter Server, VMFS/vSAN, and virtual distributed networking).Practical experience applying DISA STIGs and hardening baselines to hypervisors and virtual management appliances.Strong understanding of ACAS/Tenable vulnerability scan results, CVE remediation, and DoW cybersecurity requirements.Proficiency in basic scripting and automation using PowerShell and VMware PowerCLI for administrative and compliance tasks.Strong understanding of POA&Ms, CTOs, IAVMs, and virtual environment isolation principles.Excellent problem-solving, communication, and collaboration skills with the ability to work independently and keep leadership informed.Desired skills:Experience supporting USCENTCOM and familiarity with its operational mission and enterprise IT architecture.Direct experience participating in or preparing virtualization infrastructure for DoW Cyber Operational Risk Assessments (CORA) or CCRI inspections.Familiarity with automation tools such as VMware STIG Tools Appliance, STIG Manager, and Ansible.Experience with hyperconverged infrastructure (Nutanix/AHV, Dell VxRail) and multi-level secure virtualization environments.GDIT is your place:Growth: AI-powered career tool that identifies career steps and learning opportunitiesSupport: An internal mobility team focused on helping you achieve your career goalsRewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time offCommunity: Award-winning culture of innovation and a military-friendly workplace