HBSS Administrator

Trace Systems; Tampa (FL); On-site; USD 100,000 - 140,000; Full time

Job summary

Trace Systems is seeking an experienced HBSS Administrator to join on-site at MacDill AFB, FL. The role focuses on protecting, monitoring, and administering endpoint security, with emphasis on HBSS, ePO, and SIEM in a DoD context.

The candidate will implement and sustain HBSS solutions, ensure DISA/STIG compliance, and support Information Assurance activities across Windows and Linux environments. U.S. citizenship and TS clearance are required.

Qualifications

• Active TS clearance required; US citizenship required.
• Experience with HBSS, ePO, HIPS and VSE.
• Experience with Windows and Linux environments.
• IAT Level II certification required.

Responsibilities

• Perform HBSS server administration, including ePolicy Orchestrator upgrades and client patches.
• Deploy HBSS across enterprise systems with agent deployments and policy enforcement.
• Ensure HBSS compliance with DISA/US Cyber Command/OPORDs and DoD configurations.
• Provide guidance on HBSS support including accounts, agents, policies, and modules.
• Monitor STIG compliance and security posture; perform vulnerability scans and remediation.

Skills

HBSS administration

Security clearance awareness

Windows & Linux administration

SIEM experience

Education

Bachelors Degree in IT or related field

IAT Level II certification

Trellix Certification

Tools

ePO

HIPS

VSE

Job description

Trace Systems

HBSS Administrator

Job ID: 2026-7268

# of Openings: 1

Category: Networking

MacDill AFB, Florida

Overview

Job Title: HBSS (Host-Based Security System) Administrator

Job Location: MacDill AFB, Florida

Responsibilities

Trace systems is actively recruiting for an experienced and cleared HBSS Administrator to join our team on-site at MacDill AFB, FL. This position supports the Joint Communications Support Element (JCSE).

The candidate will serve as the primary technical authority for protecting, monitoring, and administering endpoint security solutions. The ideal candidate must possess deep administrative proficiency with both legacy and modern endpoint security suites, alongside hands-on security information and event management (SIEM) experience to support the enterprise's migration to cloud-hosted environments. Duties include by may not be limited to:

• Perform system administration of HBSS servers, including ePolicy Orchestrator upgrades and client product patches.
• Deploy and sustain the full capabilities of HBSS to all enterprise-wide managed systems including, but not limited to, agent deployments, policy enforcement, reporting and compliance.
• Maintain HBSS compliance with DISA, US Cyber Command, andCombatant Commandoperations orders (OPORDs), Fragmentary orders (FRAGOs), Change Tasking Orders (CTOs), and other DoD configuration compliance requirements.
• Provide guidance in all aspects of HBSS support to include account setups, port enabling, deploying and loading agents, policies, and modules.
• Monitor and ensure Security Technical Implementation Guide (STIG) compliance, security and performance.
• Perform vulnerability scans and troubleshoot / fix issues detected by the scans. Review scan results and provide recommendations to systems administrators and the Information Assurance team.
• Support Information Assurance personnel to ensure security architecture, design, and implementation is in accordance with DoD Regulations and other governing documents.
• Perform vulnerability and risk analysis of computer systems and applications during all phases of the system development life cycle.
• Provide technical support to the IApersonnel to develop and maintaincommand IA processes and procedures regarding computer network defense in-depth protection for theenterprise.
• Perform and support updates to and maintenance of the POA&Ms for theenterprise.
• Support development of RMF Security Plans.
• Document changes to systems and all required checklists for use within the configuration baseline.
• Implement and integrate IA defense postures tocommand communications systems and architectures when coordinated or immediately upon being directed to secure reported cyber threats from the appropriate level of authority.
• Analyze technical/integration requirements and develop effective technical solutions for review and consideration, then integrate into the network and systems infrastructure.
• Analyze server and workstation applications to identify initial HIPS policy, test policy in available test environment, and deploy HIPS with associated standard policy.
• Provide product-specific knowledge to support unique server and UNIX/LINUX/Windows system requirements.
• Support Customer lead operations team effort with policy refinement to allow necessary application execution while fine tuning and tightening security rules as recommended through best commercial business practices.
• Provide recommendations for policy refinement and best business practices to operation teams for consideration.
• Engage in hands-on lab testing and development for problem resolution, new product reporting, or technical functionality.
• Review application of STIGs and DOD configuration guidance in images for completeness and correctness.

Qualifications

• Active, in-scope US Government issued Top Secret clearance
• Due to the nature of the work and US Government requirements, US Citizenship is required.
• Trellix Certification
• Experience with ePO, HIPS, and VSE
• Experience with both Windows and Linux environments
• IAT Level II certification

Desired Qualifications

• Microsoft Azure Cloud certifications
• Windows server certifications
• Microsoft Defender for Endpoint (MDE)

Education

• Bachelors Degree in IT or related field, and3 years in with HBSS experience; 7 years IA experience with3 years HBSS experience in lieu of degree.

Trace Systems

Trace Systems, headquartered in Vienna, Virginia, was founded to support and defend our nation's security interests at home and abroadwhenever and wherever. We provide cybersecurity, intelligence, communications, networking and information technology services, systems, and solutions to the United States Department of Defense, Intelligence Community and Department of Homeland Security.

Trace Systems is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics.