Archived listing. The details below describe a past opening.
Req ID: RQ231270
Type of Requisition: Regular
Clearance Level Must Be Able to Obtain: Top Secret
Public Trust/Other Required: None
Job Family: Cyber and IT Risk Management
Skills:
Cybersecurity Operations,Data Center Security,Hybrid Cloud Security,IT Security Operations
Certifications:
CompTIA Security+ CE | CompTIA - CompTIA, Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2), Certified Information Security Manager (CISM) | Information Systems Audit and Control Association (ISACA) - Information Systems Audit and Control Association (ISACA)
Experience:
8 + years of related experience
US Citizenship Required:
Yes
Job Description:
Data Center Security Lead
GDIT is seeking a Data Center Security Lead for the Federal Civilian Division to join our outstanding team! You will support a large‑scale, global Cloud and Data Center Services program for the U.S. Department of State’s Bureau of Diplomatic Technology (DT). You will lead security operations across enterprise data centers and hybrid cloud platforms, ensuring continuous protection, compliance, and resilience of mission‑critical systems. Responsibilities include vulnerability scanning, patch management, endpoint detection and response (EDR), Zero Trust enforcement, ATO lifecycle management, audit preparation, and access control governance, while supporting integration with Security Operations Center (SOC) tooling and processes.
HOW A DATA CENTER SECURITY LEAD WILL MAKE AN IMPACT
Security Engineering & Vulnerability Management:
- Lead enterprise vulnerability scanning operations, including policy configuration, scan execution, triage, and remediation coordination across all DT-managed systems.
- Oversee patch management cycles for Windows, Linux, network appliances, and hypervisors, ensuring timely compliance with DT security directives.
- Manage vulnerability remediation workflows, POA&Ms, patch exception requests, and risk reporting to DT cybersecurity leadership.
Endpoint Protection, Monitoring & Threat Detection:
- Oversee endpoint security platforms including Cortex XDR, Tripwire (file integrity monitoring), and other EDR solutions, ensuring accurate detection and policy enforcement.
- Integrate alerts, logs, and telemetry into enterprise SIEM platforms for correlation, analytics, and operational response.
- Monitor and tune security controls to reduce false positives and improve visibility across DT data centers and cloud workloads.
Zero Trust (ZT), Access Control & Identity Governance:
- Implement and maintain Zero Trust-aligned security architecture across data center and hybrid cloud environments.
- Oversee access control policies, privileged access workflows, multifactor authentication enforcement, least‑privilege reviews, and secure onboarding/offboarding procedures.
- Ensure accurate and auditable access records across virtualization, storage, network, and cloud platforms.
ATO Lifecycle Management & Compliance:
- Lead ATO readiness and maintenance for DT platforms by managing documentation, security control inheritance, SSP updates, and audit evidence coordination.
- Support NIST RMF activities including categorization, control implementation, control assessments, and continuous monitoring.
- Maintain alignment with federal cybersecurity standards, STIGs, FedRAMP, and DT security policies.
Monitoring, Observability & Reporting:
- Oversee continuous monitoring dashboards, compliance scorecards, vulnerability trend reports, patch compliance metrics, and EDR effectiveness reporting.
- Collaborate with SOC analysts and DT leadership to provide mission‑critical insights on threat posture, gaps, and recommended improvements.
- Support integration and optimization of security telemetry from tools such as Tripwire, Cortex, SIEM platforms, and Archangel (vulnerability and cyber risk management).
Security Incident Coordination:
- Collaborate with the SOC, IR teams, and system owners during incident investigations, containment, eradication, and recovery activities.
- Provide technical leadership for incident RCA, corrective action plans, and long-term control improvements.
Stakeholder Engagement & Collaboration:
- Partner closely with engineering teams, data center operations, cloud service engineers, system owners, and DT cybersecurity leadership to ensure holistic security coverage.
- Produce playbooks, SOPs, hardening guides, user access documentation, and technical training content for Government FTEs and support contractors.
- Lead special security modernization projects, pilots, tool evaluations, and capability uplift initiatives.
WHAT YOU’LL NEED TO SUCCEED
Bring your initiative and drive for innovation to GDIT. The Data Center Security Lead must have:
- Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or Engineering required; Master’s preferred.
- Experience: 8+ years relevant experience supporting enterprise cybersecurity operations, vulnerability management, patching, monitoring, or endpoint protection. Demonstrated work in data center environments with hybrid infrastructure and multi‑platform security responsibilities.
- Certification: CompTIA Security+, Certified Information Systems Security Professional (CISSP) OR Certified Information Security Manager (CISM)
- Technical skills: Strong expertise with Tripwire, Cortex (XDR), SIEM platforms, and Archangel security/risk management. Deep understanding of vulnerability scanning (Tenable/Nessus, Qualys), patch management workflows, endpoint protection technologies, security control baselines, and STIGs. Familiarity with Zero Trust principles, ATO documentation packages, NIST RMF, FedRAMP, and federal cybersecurity requirements. Experience securing hybrid infrastructure: VMware, NetApp, Windows/Linux servers, network devices, and public cloud services.
- Security clearance level: Active Top Secret level clearance
- Location : Hybrid within the National Capital Region with periodic travel to customer and data center sites.
GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
- Growth: AI-powered career tool that identifies career steps and learning opportunities
- Support: An internal mobility team focused on helping you achieve your career goals
- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
- Flexibility: Full-flex work week to own your priorities at work and at home
- Community: Award-winning culture of innovation and a military-friendly workplace
OWN YOUR OPPORTUNITY
Explore a career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your sense of ownership and pride in the meaningful work we do.
The likely salary range for this position is $162,037 - $219,227. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work:
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at https://gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans