Compliance Systems Administrator with Security Clearance

Compliance Systems Administrator
CCT | USCENTCOM CITS Contract | Tampa, FL Location: Tampa, Florida (USCENTCOM)
Clearance: Active TS/SCI Desired
Travel: Up to 10% (CONUS/OCONUS)
Employment Type: Full-Time / On-Site Role Summary
CCT has an immediate opening for a Compliance Systems Administrator supporting the CITS contract for USCENTCOM, based in Tampa, Florida. The Compliance Systems Administrator plays a critical, hands-on role in strengthening the enterprise security posture by directly implementing and managing cybersecurity compliance controls.

This position is responsible for the technical execution of tasks required to ensure enterprise Information Technology (IT) systems, applications, and Core Services adhere to Department of War (DoW) cybersecurity standards. This role involves regular system maintenance, patching, troubleshooting, and the direct application of security configurations to achieve and maintain compliance for a CORA cyber inspection.

Duties & Responsibilities
We are seeking a highly skilled Compliance Systems Administrator with deep expertise in DISA STIGs and hands-on experience configuring, monitoring, maintaining, and remediating enterprise system compliance. The ideal candidate demonstrates strong technical proficiency, attention to detail, and the ability to communicate effectively with technical and leadership audiences.

Responsibilities include: • Remediating security findings identified through ACAS/Tenable reports, STIG assessments, and other cybersecurity outputs by performing hands-on system maintenance, patching, and troubleshooting on Windows Server 2019/2022 Operating Systems. • Technically implementing and maintaining compliance with security policies and directives, including Security Technical Implementation Guides (STIGs), Cyber Tasking Orders (CTOs), and Operations Orders (OPORDs). • Building, deploying, maintaining, and securing server applications and proprietary software in accordance with security best practices. • Developing, implementing, and documenting mitigation strategies and Plans of Action & Milestones (POA&Ms) for vulnerabilities that cannot be immediately remediated. • Installing, configuring, and maintaining the SecureView environment to support multi-level security, ensuring it adheres to all Public Key Infrastructure (PKI) requirements for secure communication and authentication. • Managing the full lifecycle of security certificates for web servers and secure communication channels. • Tracking, prioritizing, and escalating security vulnerabilities and non-compliant configurations to ensure timely remediation. • Developing and maintaining compliance tracking products such as status reports, briefings, and leadership updates to communicate compliance posture and progress. • Maintaining system documentation and preparing clear process guides for all implemented security configurations and remediation steps. • Using scripting languages (e.g., PowerShell) to automate compliance checks, configuration changes, and reporting.

Additional Responsibilities • Participate in meetings and working groups with Operations and Cybersecurity personnel (government and contractor) to track and ensure cybersecurity compliance. • Support architecture and engineering reviews by providing hands-on compliance-focused implementation feedback on new capabilities, technologies, and infrastructure changes. • Perform other duties as assigned.

Education & Certifications
Required • Applicable Intermediate DoD 8140 or DoD 8570 Certification. • Bachelor's Degree in a related discipline (Cybersecurity or Information Assurance concentration preferred) or Three (3) years of real-world or military experience in information assurance, network security, or systems administration. Desired • Applicable Expert DoD 8140 or DoD 8570 Certification. • Microsoft Windows Hybrid Administrator Certification. • ITIL 4 Foundation Certification. • SecureView Server Admin Training Certification.

Skills & Qualifications
Required Skills • Excellent interpersonal and teamwork qualities, including ownership, curiosity, sound judgment, integrity, flexibility, and strong communication skills. • Demonstrated ability to work both independently with minimal direction and collaboratively within a team, including keeping leadership informed through clear, timely communication. • Strong experience in systems administration, including Windows Server 2019/2022, patching, and troubleshooting. • Strong understanding of vulnerabilities, exploits, and core DoW cybersecurity programs. • Ability to interpret and, most importantly, implement DoW cybersecurity orders, policies, and procedures (STIGs, CTOs, IAVMs). • Strong understanding of POA&Ms, STIGs, CTOs, IAVMs, and related compliance frameworks. • Familiarity with cybersecurity tools such as ACAS/Tenable, RMF, eMASS, Endpoint Security Systems (ESS), Trellix, and Splunk. • Understanding of Certificate Lifecycle Management and PKI authentication. • Ability to apply hands-on system security engineering expertise in one or more technical areas: • Windows Operating Systems (Windows Server 2019/2022) • Active Directory & DNS • Web Servers & Certificate Management • Virtual Infrastructure & SecureView Environment • Endpoint Security Systems (ESS)
Desired Skills • Experience supporting USCENTCOM and familiarity with its mission and IT environment. • Experience briefing leadership (contract and government) on compliance status and remediation. • Knowledge and experience with scripting/automation languages (PowerShell, Ansible) for STIG compliance automation. • Experience with DoD Cyber Defense Command (DCDC) Cyber Operational Risk Assessments (CORA). • Familiarity with STIG automation tools (e.g., EvaluateSTIG, STIG Manager, Maven Smart Systems).