SITEC - Endpoint Security Administrator - MacDill AFB

Peraton; Tampa (FL); On-site; USD 100,000 - 120,000; Full time

Job summary

A technology services company is seeking an Endpoint Security Administrator located at MacDill AFB, Florida. The role involves deploying and managing endpoint security, administering device security settings, and ensuring compliance across hybrid environments. Candidates must have a DoD TS/SCI clearance and extensive experience in endpoint security tools. This position supports critical operations for the USSOCOM networks. Strong communication skills and the ability to thrive in a fast-paced environment are essential.

Qualifications

• Min 9 years with HS Diploma, 5 years with BS/BA degree, 3 years with MS/MA.
• A DoD TS/SCI clearance is required.
• Experience managing the complete lifecycle of endpoint security tools.

Responsibilities

• Deploy and manage security baselines across Windows and Linux endpoints.
• Administer device security settings for physical and virtual machines.
• Manage and secure cloud workloads in IaaS/PaaS environments.
• Integrate endpoint security with cloud-native services.
• Act as an escalation point for security incidents.
• Collaborate with IT and security teams to streamline endpoint management.

Skills

Security baseline management

Configuration policy enforcement

Cloud workload protection

Threat hunting operations

Strong written and communication skills

Education

HS Diploma with 9+ years experience or BS/BA degree with 5+ years

Tools

Endpoint security tools

Job description

Job locations: US-FL-MacDill AFB

Overview

SITEC - Endpoint Security Administrator - MacDill AFB. This position is located at MacDill AFB in Florida and supports the SITEC 3 Enterprise Operations and Maintenance (EOM) Task Order to provide Operations and Maintenance services for USSOCOM networks and endpoints.

Responsibilities

• Deploy, manage, and enforce security baselines and configuration policies across all on-premises and cloud-based Windows and Linux endpoints.
• Administer and configure device security settings, including antivirus/antimalware, host firewall, and full-disk encryption for both physical and virtual machines.
• Manage and secure cloud workloads (e.g., VMs, containers) in IaaS/PaaS environments using Cloud Workload Protection Platforms (CWPP).
• Develop and manage application control policies (whitelisting/blacklisting) to prevent unauthorized software execution across the hybrid environment.
• Ensure consistent security policy enforcement and visibility across both on-premises and multi-cloud (e.g., Azure, AWS) infrastructures.
• Continuously monitor the entire hybrid environment for anomalous activity, emerging threats, vulnerabilities, and configuration discrepancies.
• Integrate endpoint security with cloud-native security services and identity providers (e.g., Azure AD/Entra ID) to enforce conditional access and zero-trust principles.
• Act as a point of escalation for the Security Operations Center (SOC) to investigate and respond to security incidents, regardless of where the endpoint resides.
• Support threat-hunting operations by implementing security controls and countermeasures across both on-premises and cloud assets.
• Manage the complete lifecycle of endpoint security tools, ensuring seamless operation and integration within a hybrid architecture.
• Remove or manage local administrative rights on endpoints to reduce the attack surface.
• Ensure the health and compliance of all managed devices, remediating any that are out of compliance.
• Collaborate with IT, Cloud, and other security teams to streamline endpoint management and improve automation across the hybrid estate.
• Assist with end-user troubleshooting efforts related to endpoint security controls.
• Use endpoint security tools to remediate vulnerabilities and misconfigurations identified by security scans.

Qualifications

Required Qualifications:

• Min 9 years with HS Diploma, 7 years AS/AA degree, 5 years with BS/BA degree, 3 years with MS/MA
• A DoD TS/SCI clearance is required
• DoDD 8570.01-M IAT II
• Experience Managing the complete lifecycle of endpoint security tools

Desired Qualifications:

• Strong written and communication skills.
• Ability to thrive in a dynamic, fast-paced environment.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.