Compliance Systems Administrator (Virtualization)

gdit; Tampa (FL); On-site; USD 89,000 - 121,000; Full time

Job summary

GDIT is seeking a Compliance Systems Administrator (Virtualization) in Tampa, FL, to strengthen enterprise security posture by implementing and remediating cybersecurity controls across VMware ESXi, vCenter, and related virtualization platforms. The role requires DoW/DI security practice adherence and hands-on vulnerability remediation.

You will build secure VM templates, run STIG-based hardening, and automate audits with PowerShell/PowerCLI while tracking findings for CORA inspections.

Qualifications

• Hands-on experience in virtualization administration with VMware vSphere 7.x/8.x (ESXi, vCenter Server, VMFS/vSAN, and virtual distributed networking).
• Practical experience applying DISA STIGs and hardening baselines to hypervisors and virtual management appliances.
• Strong understanding of ACAS/Tenable vulnerability scan results, CVE remediation, and DoW cybersecurity requirements.

Responsibilities

• Applying, validating, and remediating DISA STIG benchmarks across VMware ESXi hosts and vCenter appliances.
• Deploying hypervisor firmware updates, ESXi patches, and virtual appliance updates to remediate vulnerabilities.
• Developing automation scripts using PowerShell/PowerCLI for automated audits and remediation.
• Maintaining audit logs and baseline documentation for CORA inspections.

Skills

ACAS, DISA STIG, VMware vSphere

VMware vSphere

Education

Bachelor's Degree or 3 years experience in virtualization/IT

Tools

PowerCLI

STIG Tools Appliance

Job description

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Top Secret/SCI

Public Trust/Other Required:

None

Job Family:

IT Infrastructure and Operations

Job Qualifications:

Skills:

ACAS, DISA STIG, VMware vSphere

Certifications:

None

Experience:

3 + years of related experience

US Citizenship Required:

Yes

Job Description:

GDIT has an immediate opening for a Compliance Systems Administrator (Virtualization) supporting the CITS contract for USCENTCOM, based in Tampa, Florida. The Compliance Systems Administrator (Virtualization) plays a critical, hands-on role in strengthening enterprise security posture by directly implementing, maintaining, and remediating cybersecurity compliance controls across enterprise virtualization platforms (VMware ESXi, vCenter Server, Hyper-V, and software-defined infrastructure). This position executes direct technical hardening, patching, configuration management, and audit verification to ensure hypervisors, management appliances, and virtual infrastructure adhere strictly to Department of War (DoW) cybersecurity standards and CORA inspection requirements.

Duties and Responsibilities:

• Applying, validating, and remediating DISA STIG benchmarks directly across VMware ESXi hosts, VMware vCenter Server Appliances (VCSA), virtual switches, and hypervisor management infrastructure.

• Deploying hypervisor firmware updates, ESXi security patches, and virtual appliance updates to remediate vulnerabilities identified in ACAS/Tenable scans.

• Executing direct technical remediation for identified infrastructure vulnerabilities and drafting, documenting, and implementing technical Plans of Action & Milestones (POA&Ms) when immediate remediation is not feasible.

• Hardening and isolating virtual networking components, distributed switches, VLAN segmentation, and multi-tenant isolation controls in accordance with DoW security guidelines.

• Building, provisioning, configuring, and maintaining secure virtual machine templates, golden images, and virtual appliances compliant with enterprise security standards.

• Developing and executing automation scripts using PowerShell and PowerCLI for automated compliance audits, snapshot enforcement, configuration verification, and bulk remediation.

• Tracking, prioritizing, and resolving virtual infrastructure compliance findings, maintaining comprehensive audit logs and baseline documentation.

• Extracting system configuration state baselines and generating technical artifact packages required for CORA inspection evaluators.

• Maintaining up-to-date documentation, standard operating procedures, and technical runbooks for virtualization security configurations.

Additional Responsibilities:

• Participate in technical working groups and meetings with Operations, Storage, and Cybersecurity personnel (government and contractor) to track and resolve virtualization security findings.

• Support engineering and change management reviews by evaluating compliance impacts for virtual infrastructure upgrades and architectural modifications.

• Perform other duties as assigned.

What you will need to succeed:

Required Education & Certifications

• Applicable Intermediate DoW 8140 or DoW 8570 Certification (e.g., Security+ CE, CySA+, or equivalent).

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline OR Three (3) years of hands‑on real-world or military experience in virtualization administration, systems administration, or information assurance.

Desired Education & Certifications:

• VMware Certified Professional (VCP – Data Center Virtualization).

• Nutanix Certified Professional (NCP) or equivalent hyperconverged infrastructure certification.

• ITIL 4 Foundation Certification.

• Applicable Intermediate DoW 8140 or DoW 8570 Certification (e.g., Security+ CE, CySA+, or equivalent).

• Location: Tampa, Florida (USCENTCOM)
• Clearance: Active Secret
• Travel: up to 10% (CONUS/OCONUS)

Required Skills:

• Hands‑on experience in virtualization administration with VMware vSphere 7.x/8.x (ESXi, vCenter Server, VMFS/vSAN, and virtual distributed networking).
• Practical experience applying DISA STIGs and hardening baselines to hypervisors and virtual management appliances.
• Strong understanding of ACAS/Tenable vulnerability scan results, CVE remediation, and DoW cybersecurity requirements.
• Proficiency in basic scripting and automation using PowerShell and VMware PowerCLI for administrative and compliance tasks.
• Strong understanding of POA&Ms, CTOs, IAVMs, and virtual environment isolation principles.
• Excellent problem‑solving, communication, and collaboration skills with the ability to work independently and keep leadership informed.

Desired skills:

• Experience supporting USCENTCOM and familiarity with its operational mission and enterprise IT architecture.
• Direct experience participating in or preparing virtualization infrastructure for DoW Cyber Operational Risk Assessments (CORA) or CCRI inspections.
• Familiarity with automation tools such as VMware STIG Tools Appliance, STIG Manager, and Ansible.
• Experience with hyperconverged infrastructure (Nutanix/AHV, Dell VxRail) and multi‑level secure virtualization environments.

GDIT is your place:

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off

Community: Award‑winning culture of innovation and a military‑friendly workplace

#centcomcits

#gditpriority

#armajobs

The likely salary range for this position is $89,250 - $120,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Onsite

Work Location:

USA FL MacDill AFB

Additional Work Locations:

USA FL MacDill AFB

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post‑tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long‑term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process:

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans