IT Systems & Compliance Specialist

Socket.dev; Chesapeake (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Waterfront Training Solutions, Inc. (WTS) seeks a versatile Lead IT Specialist to spearhead hardening of internal infrastructure for CMMC Level 2 and FedRAMP.

Hybrid role blending systems engineering with cybersecurity compliance, serving as technical lead for remediation and later Lead Technician for C3PAO services. The role is 100% on-site at the Chesapeake, VA office, focusing on Windows/Linux controls, cloud security, BoE development, and incident readiness.

Qualifications

• 5+ years in IT systems administration with 2+ years in NIST 800-171 or CMMC.
• Hands-on cloud security experience in Azure Gov/AWS GovCloud.
• Active Security+ or CySA+ certification required.

Responsibilities

• Lead remediation across Windows/Linux to meet NIST 800-171 and CMMC Level 2.
• Manage cloud environments including GCC High and Azure Government.
• Develop and maintain evidence for BoE, SSPs, and diagrams.
• Lead DIBCAC assessments and prepare for C3PAO engagements.

Skills

NIST 800-171 compliance

CMMC Level 2

Cloud security (Azure Gov / AWS Gov)

Windows/Linux administration

SIEM/Nessus/OpenVAS

IAM/MFA/encryption

Security+ or CySA+

Education

Bachelor's degree in IT/CS

Tools

Nessus/OpenVAS

SIEM

VPNs/Firewalls

FIPS 140-2 encryption

Job description

Company: Waterfront Training Solutions, Inc. (WTS)

Location: Chesapeake, VA (100% On-site)

Security Clearance:Not needed at this time, howeverCorporate Background Check is needed at start of employment

Citizenship: U.S. Citizenship Required (ITAR/EAR & CUI Compliance)

Job Type: Full Time/ Normal working hours: 9:00 AM - 5:00 PM EST

About Waterfront Training Solutions

Waterfront Training Solutions (WTS) is a specialized provider of workforce development, IT consulting, and mission-critical training solutions for the Department of Defense and civilian agencies. As an SBA-certified Small Disadvantaged Business and Service-Disabled Veteran-Owned Small Business, we pride ourselves on bridging the gap between complex technical requirements and operational readiness.

The Opportunity

We are seeking a versatile, self-motivated, and highly technical Lead IT Specialist to spearhead the hardening of our internal infrastructure in preparation for CMMC Level 2 and FedRAMP certification. This role is a hybrid of Systems Engineering and Cybersecurity Compliance. You will be the technical lead for our CMMC remediation efforts and will eventually transition into a Lead Technician role for our C3PAO (Certified Third-Party Assessment Organization) service arm.

Key Responsibilities

• Technical Remediation: Implement technical controls across Windows/Linux environments to meet NIST 800-171 and CMMC Level 2 requirements.
• Cloud Architecture: Manage and secure Microsoft 365 GCC High and Azure Government environments.
• Evidence Collection: Build and maintain the "Body of Evidence" (BoE), including SSPs, Network Diagrams, and Configuration Management logs.
• Security Operations: Manage SIEM/log management, vulnerability scanning (Nessus/OpenVAS), and incident response protocols.
• C3PAO Growth: Act as the primary SME during DIBCAC assessments and lead external client assessments once C3PAO status is achieved.

Required Qualifications

• Experience: 5+ years in IT Systems Administration with at least 2 years focused on NIST 800-171 or CMMC compliance.
• Cloud Expertise: Hands-on experience with M365 GCC High, Azure Government, or AWS GovCloud.
• Technical Stack: Strong understanding of IAM/MFA, FIPS 140-2 validated encryption, and Network security (Firewalls, VPNs, VLAN segmentation).
• Certifications: Active Security+ or CySA+ (Required). CCP or CCA track preferred.
• Clearance: Must possess an active U.S. Government Secret Security Clearance.

Work Environment & Physical Requirements

• 100% On-site: This position is located at our Chesapeake, VA office. Due to the sensitive nature of the data and hands-on infrastructure management, remote work/telework is not available.

Equal Employment Opportunity (EEO) Statement

Waterfront Training Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Due to the nature of the data handled (ITAR/EAR and CUI), U.S. Citizenship is required.