Configuration and Cybersecurity Specialist

Fortress Information Security, LLC; Maryland; Hybrid; USD 110,228 - 170,241; Full time

Benefits offered by this job

Remote/hybrid options

Competitive pay

Medical/dental/vision

401(k) match

Paid time off

Parental leave

Job summary

Fortress Information Security, LLC seeks a Configuration and Cybersecurity Specialist to support operational security, configuration control, and ATO compliance for government-supported systems. This hands-on role emphasizes secure baselines, STIG remediation, patch management, and controlled deployments.

You will collaborate with engineering and government stakeholders, maintain traceable change records, and contribute to a DoD-aligned security posture while working in a hybrid environment with

Qualifications

• Minimum of three (3) years of general experience, with at least one (1) year of hands-on experience in configuration management, cybersecurity operations, or system administration within a government or regulated environment.
• Experience implementing and remediating STIGs and supporting vulnerability management activities.
• Experience applying system patches, updates, and configuration changes in controlled environments.
• Working knowledge of AWS and/or Azure cloud environments.
• Experience working in Linux environments and comfort using command-line/terminal interfaces.
• Ability to use scripting tools such as PowerShell or equivalent to support system administration activities.
• Experience supporting systems operating under an Authority to Operate (ATO) framework.
• Must meet DoD 8570 / 8140 IAT Level II requirements at time of hire (e.g., Security+, CySA+, SSCP, or equivalent).
• Must be local to the DMV area and commutable to Pax River, DC.

Responsibilities

• Execute and maintain secure configuration baselines across supported systems in accordance with DoD and government standards.
• Implement, validate, and remediate STIG checklist findings to maintain required compliance thresholds.
• Perform system hardening activities across cloud and operating system environments, including Linux-based platforms.
• Monitor systems daily to ensure security posture, availability, and compliance alignment.
• Apply patches, updates, and software releases to maintain secure and current system configurations.
• Support vulnerability remediation activities and track resolution of findings to closure within required timelines.
• Execute deployments of Fortress SaaS solutions and support production releases in controlled environments.
• Maintain Authority to Operate (ATO) posture by supporting required documentation, control validation, and compliance updates.
• Submit required change documentation and DADMs requests for new software versions and configuration updates.
• Support audit activities by providing technical artifacts, remediation evidence, and system status reporting.
• Collaborate with engineering, cybersecurity, and government stakeholders to resolve configuration and security discrepancies.
• Maintain accurate configuration records and ensure traceability of system changes through established control processes.
• Perform other duties and responsibilities as assigned.

Skills

Configuration management

Cybersecurity operations

Linux

PowerShell scripting

Independent worker

ATO / DoD frameworks

Vulnerability management

Cloud (AWS/Azure)

Education

Bachelor’s degree in information technology, Computer Science, Cybersecurity, or related discipline

Tools

AWS

Azure

Looker

Tableau

Power BI

Job description

Position: Configuration and Cybersecurity Specialist

Location: District of Columbia, Maryland, and Virginia - Onsite, DC

Pay Range: $110,228 - $170,241 per year

Employment Type: Full‑time

Clearance Required: Active Secret clearance at time of hire

Hybrid – Ability to travel to Patuxent River, MD, and work onsite 3x a week. Candidates must be located in or willing to commute within the DMV area.

Overview As a Configuration and Cybersecurity Specialist, you will support the operational security, configuration control, and ongoing authorization posture of government‑supported systems. This role is hands‑on and execution‑focused, responsible for maintaining secure system baselines, performing STIG implementation and remediation, supporting patch management, executing deployments of Fortress SaaS capabilities, and sustaining Authority to Operate (ATO) compliance in alignment with DoD standards.

Responsibilities

• Execute and maintain secure configuration baselines across supported systems in accordance with DoD and government standards.
• Implement, validate, and remediate STIG checklist findings to maintain required compliance thresholds.
• Perform system hardening activities across cloud and operating system environments, including Linux‑based platforms.
• Monitor systems daily to ensure security posture, availability, and compliance alignment.
• Apply patches, updates, and software releases to maintain secure and current system configurations.
• Support vulnerability remediation activities and track resolution of findings to closure within required timelines.
• Execute deployments of Fortress SaaS solutions and support production releases in controlled environments.
• Maintain Authority to Operate (ATO) posture by supporting required documentation, control validation, and compliance updates.
• Submit required change documentation and DADMs requests for new software versions and configuration updates.
• Support audit activities by providing technical artifacts, remediation evidence, and system status reporting.
• Collaborate with engineering, cybersecurity, and government stakeholders to resolve configuration and security discrepancies.
• Maintain accurate configuration records and ensure traceability of system changes through established control processes.
• Perform other duties and responsibilities as assigned.

Minimum Qualifications

• Minimum of three (3) years of general experience, with at least one (1) year of hands‑on experience in configuration management, cybersecurity operations, or system administration within a government or regulated environment.
• Experience implementing and remediating STIGs and supporting vulnerability management activities.
• Experience applying system patches, updates, and configuration changes in controlled environments.
• Working knowledge of AWS and/or Azure cloud environments.
• Experience working in Linux environments and comfort using command‑line/terminal interfaces.
• Ability to use scripting tools such as PowerShell or equivalent to support system administration activities.
• Experience supporting systems operating under an Authority to Operate (ATO) framework.
• Ability to work independently and execute technical tasks with limited oversight.
• Active Secret clearance required at time of hire.
• Must meet DoD 8570 / 8140 IAT Level II requirements at time of hire (e.g., Security+, CySA+, SSCP, or equivalent).
• Must be local to the DMV area and commutable to one or more preferred federal work depots, including Naval Air Station Patuxent River (Pax River), MD and Washington Navy Yard, DC.

Preferred Skills

• Experience supporting DoW environments.
• Experience supporting SaaS deployments in regulated or government environments.
• AWS, Linux+, or other relevant operating system/cloud certifications (may be obtained after hire).
• Experience preparing and submitting configuration change documentation in government systems.
• Experience participating in compliance reviews, audits, or control assessments.
• Experience using reporting and dashboard tools such as Looker, Tableau, Power BI, or similar platforms.
• Experience in configuring reports and working with data to support business or customer needs.
• Ability to independently use and refine AI‑driven prompts to enhance the quality, efficiency, and insight of regular work processes.

Education

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or related discipline is required.

Employee Benefits

• Remote and Hybrid working environment
• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90 % with highly progressive options for dependents and families
• Company paid life, short‑ and long‑term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• Parental Leave

Employment Perks

• Professional growth opportunities through succession planning, up‑skilling, and certifications
• Tuition and certification reimbursement
• Employee Referral Programs
• Company Sponsored Events

Equal Opportunity & E‑Verify Statement

Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security participates in the E‑Verify process for all new hires. For positions located in the US, a drug test will be required for conditional offers. The essential functions of this job may or may not have been described; all reasonable accommodation requests will be reviewed and evaluated on a case‑by‑case basis.