HBSS Administrator

Trace Systems Inc.; Tampa (FL); On-site; USD 110,000 - 140,000; Full time

Job summary

Trace Systems, a cybersecurity and IA services provider based in Vienna, VA, is actively seeking an experienced HBSS Administrator to join our on-site team at MacDill AFB, FL.

You will be the primary technical authority for HBSS, performing system administration, ePO upgrades, policy enforcement, STIG compliance, and coordination with IA and DoD workflows. This role requires a TS clearance and DoD IA experience.

Qualifications

• Active, in-scope US Government issued Top Secret clearance.
• US Citizenship is required due to government work.
• Experience with HBSS components (ePO, HIPS, VSE).
• Experience with Windows and Linux environments.
• DoD-8570 IAT Level II baseline certification (e.g., Security+ CE) at start.

Responsibilities

• Serve as the primary technical authority for HBSS and endpoint security.
• Perform HBSS server admin tasks including ePO upgrades and patches.
• Deploy HBSS capabilities across enterprise systems and ensure policy enforcement.
• Maintain HBSS/STIG compliance and coordinate with IA/DoD directives.
• Conduct vulnerability scans and analyze results to support mitigations.
• Provide guidance on HBSS deployments, agent loading, and policy tuning.

Skills

ePO

HIPS

VSE

Windows

Linux

Education

Bachelor's Degree in IT or related field

3+ years HBSS/IA experience in lieu of a degree

Tools

ePO

HIPS

VSE

Job description

Job Overview

Job Title: HBSS (Host-Based Security System) Administrator

Job Location: MacDill AFB, Florida

Job Responsibilities

Trace systems is actively recruiting for an experienced and cleared HBSS Administrator to join our team on-site at MacDill AFB, FL. This position supports the Joint Communications Support Element (JCSE).

The candidate will serve as the primary technical authority for protecting, monitoring, and administering endpoint security solutions. The ideal candidate must possess deep administrative proficiency with both legacy and modern endpoint security suites, alongside hands-on security information and event management (SIEM) experience to support the enterprise's migration to cloud-hosted environments. Duties include by may not be limited to:

• Perform system administration of HBSS servers, including ePolicy Orchestrator upgrades and client product patches.
• Deploy and sustain the full capabilities of HBSS to all enterprise-wide managed systems including, but not limited to, agent deployments, policy enforcement, reporting and compliance.
• Maintain HBSS compliance with DISA, US Cyber Command, and Combatant Command operations orders (OPORDs), Fragmentary orders (FRAGOs), Change Tasking Orders (CTOs), and other DoD configuration compliance requirements.
• Provide guidance in all aspects of HBSS support to include account setups, port enabling, deploying and loading agents, policies, and modules.
• Monitor and ensure Security Technical Implementation Guide (STIG) compliance, security and performance.
• Perform vulnerability scans and troubleshoot / fix issues detected by the scans. Review scan results and provide recommendations to systems administrators and the Information Assurance team.
• Support Information Assurance personnel to ensure security architecture, design, and implementation is in accordance with DoD Regulations and other governing documents.
• Perform vulnerability and risk analysis of computer systems and applications during all phases of the system development life cycle.
• Provide technical support to the IA personnel to develop and maintain command IA processes and procedures regarding computer network defense in-depth protection for the enterprise.
• Perform and support updates to and maintenance of the POA&Ms for the enterprise.
• Support development of RMF Security Plans.
• Document changes to systems and all required checklists for use within the configuration baseline.
• Implement and integrate IA defense postures to command communications systems and architectures when coordinated or immediately upon being directed to secure reported cyber threats from the appropriate level of authority.
• Analyze technical/integration requirements and develop effective technical solutions for review and consideration, then integrate into the network and systems infrastructure.
• Analyze server and workstation applications to identify initial HIPS policy, test policy in available test environment, and deploy HIPS with associated standard policy.
• Provide product-specific knowledge to support unique server and UNIX/LINUX/Windows system requirements.
• Support Customer lead operations team effort with policy refinement to allow necessary application execution while fine tuning and tightening security rules as recommended through best commercial business practices.
• Provide recommendations for policy refinement and best business practices to operation teams for consideration.
• Engage in hands-on lab testing and development for problem resolution, new product reporting, or technical functionality.
• Review application of STIGs and DOD configuration guidance in images for completeness and correctness.

Minimum Qualifications

• Active, in-scope US Government issued Top Secret clearance
• Due to the nature of the work and US Government requirements, US Citizenship is required.
• Experience with ePO, HIPS, and VSE
• Experience with both Windows and Linux environments
• Must possess a DoD-8570 IAT Level II baseline certification (e.g., Security+ CE or equivalent) at the time of start.

Desired Qualification

• Microsoft Azure Cloud certifications
• Windows server certifications
• Microsoft Defender for Endpoint (MDE)

Education

• Bachelors Degree in IT or related field, and 3 years in with HBSS experience; 7 years IA experience with 3 years HBSS experience in lieu of degree.

Trace Systems

Trace Systems, headquartered in Vienna, Virginia, was founded to support and defend our nation's security interests at home and abroad-- whenever and wherever. We provide cybersecurity, intelligence, communications, networking and information technology services, systems, and solutions to the United States Department of Defense, Intelligence Community and Department of Homeland Security.

Trace Systems is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics.