SITEC - Zero Trust Systems Architect - MacDill AFB

Required Qualifications Min 16 years with HS Diploma, 14 years with AS/AA degree, 12 years with BS/BA degree, 10 years with a MS/MA degree, 7 years with PhD DoD 8570 IAT II Certification DoD TS/SCI clearance Demonstrated experience designing, implementing, and sustaining Zero Trust Architecture (ZTA) capabilities within enterprise or mission environments in alignment with DoD Zero Trust Strategy and National Institute of Standards and Technology SP 800-207 guidance. Experience supporting cybersecurity operations, vulnerability management, endpoint security, continuous monitoring, and compliance validation activities within classified and unclassified environments. Desired Qualifications Current industry certifications such as CISSP, CCSP, CASP+, Security+, GIAC certifications, CCNP/CCIE, AWS Solutions Architect, Azure Solutions Architect Expert, VMware VCP/VCAP, Certified Kubernetes Administrator (CKA), or ZT-related certifications. Experience supporting United States Special Operations Command, Joint Staff, Combatant Commands, TSOCs, or other mission-focused DoD operational environments. Experience designing or implementing enterprise Zero Trust maturity initiatives across users, devices, networks, applications, data, and automation/orchestration pillars. Peraton requires Systems Architects to support the United States Special Operations Command Special Operations Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill Air Force Base. The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, Theater Special Operations Commands (TSOCs), and globally deployed forces with secure Operations and Maintenance (O&M) services that sustain resilient, mission-ready, and Zero Trust-aligned Network Operations (NetOps). Support includes maintaining enterprise systems and network infrastructure; delivering identity-aware end-user and common device support; enabling secure configuration, change, license, and asset management; conducting cybersecurity operations and compliance activities; supporting training initiatives; and performing Install, Move, Add, Change (IMAC) services across distributed environments operating 24x7x365. The responsibilities and tasks associated with this role are critical to advancing USSOCOM CIO/J6 modernization priorities, including Zero Trust Architecture (ZTA), cyber resiliency, secure mobility, and continuous monitoring capabilities that support globally distributed mission operations. Responsibilities Provides technical leadership for the operations, sustainment, and security of enterprise networking technologies and system administration services in accordance with Zero Trust principles, including least privilege access, continuous authentication/authorization, microsegmentation, and policy-based access enforcement. Supports trusted agent (TA) operations, identity and access management (IAM), privileged access management (PAM), end-user support, asset and device lifecycle management, and cybersecurity operations for classified and unclassified environments. Administers and secures controlled cryptographic item (CCI), Bring Your Own Approved Device (BYOAD/BES), and Commercial Solutions for Classified (CSfC) capabilities in compliance with DoD cybersecurity and Zero Trust guidance. Designs and maintains infrastructure supporting cloud-native and virtualized resources hosted on hyperconverged and edge-based deployed systems (e.g., VMware, Azure Stack, AWS Outposts), with emphasis on secure access, workload isolation, resiliency, and continuous compliance validation. Designs, configures, and supports hosted resources including virtual machines (VMs), containerized and serverless compute services, virtualized storage, software-defined networking, and secure platform services across hybrid and multi-cloud environments. Collaborates with network engineers, cybersecurity engineers, architects, and mission stakeholders to implement emerging technologies, technical refresh initiatives, and Zero Trust capabilities including device posture validation, identity federation, secure remote access, and continuous diagnostics and mitigation (CDM). Implements and maintains security controls aligned with DoD Zero Trust Strategy, NIST 800-207, RMF, DISA STIGs, and enterprise cybersecurity policies to ensure operational integrity and mission assurance. Monitors, analyzes, and reports on deployed system performance, cyber posture, utilization, compliance, and operational risk metrics to Government IT leadership, supporting data-driven decision making and continuous improvement initiatives. #J-18808-Ljbffr