Deploying hypervisor firmware updates, ESXi security patches, and virtual appliance updates to remediate vulnerabilities identified in ACAS/Tenable scans.
Executing direct technical remediation for identified infrastructure vulnerabilities and drafting, documenting, and implementing technical Plans of Action & Milestones (POA&Ms) when immediate remediation is not feasible.
Hardening and isolating virtual networking components, distributed switches, VLAN segmentation, and multi-tenant isolation controls in accordance with DoW security guidelines.
Building, provisioning, configuring, and maintaining secure virtual machine templates, golden images, and virtual appliances compliant with enterprise security standards.
Developing and executing automation scripts using PowerShell and PowerCLI for automated compliance audits, snapshot enforcement, configuration verification, and bulk remediation.
Tracking, prioritizing, and resolving virtual infrastructure compliance findings, maintaining comprehensive audit logs and baseline documentation.
Extracting system configuration state baselines and generating technical artifact packages required for CORA inspection evaluators.
Maintaining up-to-date documentation, standard operating procedures, and technical runbooks for virtualization security configurations.
Additional Responsibilities
Participate in technical working groups and meetings with Operations, Storage, and Cybersecurity personnel (government and contractor) to track and resolve virtualization security findings.
Support engineering and change management reviews by evaluating compliance impacts for virtual infrastructure upgrades and architectural modifications.
Perform other duties as assigned.
What you will need to succeed
Required Education & Certifications
Applicable Intermediate DoW 8140 or DoW 8570 Certification (e.g., Security+ CE, CySA+, or equivalent).
Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline OR Three (3) years of hands-on real-world or military experience in virtualization administration, systems administration, or information assurance.
Desired Education & Certifications
