Security & Compliance Administrator

SOS International LLC; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Job summary

SOSi seeks a Security & Compliance Administrator to support a DoD-focused data platform. The role emphasizes RMF, NIST 800-53, and DoD IL4/IL5 controls across cloud and on-prem environments to enable secure information sharing and mission analytics.

Responsibilities include monitoring Kubernetes deployments, maintaining IAM/RBAC and audit logging, producing SSPs/SARs/POA&Ms, and delivering a Security & Compliance Assessment Report with remediation recommendations.

Qualifications

• Active in scope secret clearance.
• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field, or five (5) years of equivalent security experience.
• Knowledge of security policies, frameworks, and compliance controls across cloud and on-prem environments.
• Proficiency in NIST 800-53, FedRAMP, DoD IL-4/5 security policies and risk assessment methodologies.
• Strong understanding of IAM, security monitoring tools (Splunk, SIEM), zero-trust, and vulnerability assessment frameworks.
• Experience with security audits and incident response processes.

Responsibilities

• Monitor and validate Kubernetes and data lake deployments for RMF/NIST 800-53/DoD IL4/IL5 compliance.
• Maintain continuous monitoring dashboards and conduct vulnerability scans to support ATO and risk posture.
• Prepare and update SSPs, SARs, and POA&Ms reflecting architecture or risk changes.
• Enforce encryption, logging, and IAM/RBAC/audit logging policies across the data layer.
• Submit Security & Compliance Assessment Report with findings and remediation recommendations.

Skills

IAM

Zero-trust architecture

Vulnerability assessment

Security audits

Cloud security

Education

Bachelor's degree in Cybersecurity or related field

5 years equivalent security/compliance experience

Tools

Splunk

SIEM

Vulnerability scanners

Job description

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

Job Description

**This position is contingent upon award of contract**

SOSi is seeking a Security & Compliance Administrator to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.

• The contractor shall monitor and validate Kubernetes and data lake deployments for compliance with RMF, NIST 800-53, and DoD IL4/IL5 requirements, in collaboration with agency cybersecurity teams.
• The contractor shall maintain continuous monitoring dashboards and conduct vulnerability scans of deployed infrastructure and workloads, supporting the agency's ATO process and risk posture.
• The contractor shall prepare and update system security documentation - including SSPs, SARs, POA&Ms to reflect changes to architecture, controls, or risk conditions under other work orders.
• The contractor shall enforce encryption, logging, and identity access policies (IAM, RBAC, audit logging) to maintain traceability and accountability across the Kubernetes-based data layer.
• The contractor shall submit the Security & Compliance Assessment Report, providing a summary of control effectiveness, findings, and recommended remediation actions.

Qualifications

• Active in scope secret clearance.
• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or five (5) years of equivalent experience in security and compliance roles.
• Proposed personnel possess the knowledge and capability to implement, monitor, and enforce security policies, frameworks, and compliance controls across cloud-based and on-premises environments.
• Personnel must be proficient in NIST 800-53, FedRAMP, DoD IL-4/5 security policies, and risk assessment methodologies.
• Strong understanding of identity and access management (IAM), security monitoring tools (Splunk, SIEM solutions), zero-trust architecture, and vulnerability assessment frameworks is required.
• Experience in conducting security audits, assessing system compliance with DoD cybersecurity policies, and implementing security controls in cloud and hybrid environments.
• Experience with security automation, endpoint protection, and incident response processes is required.

Preferred Qualifications:

• Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or AWS Certified Security - Specialty.

Additional Information

Working Conditions

• Remote. Offsite.

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.