Data Center Security Lead

Clearance Level Must Currently Possess:

Clearance Level Must Be Able to Obtain:

Job Family:

Job Description:

GDIT is seeking a Data Center Security Lead for the Federal Civilian Division to join our outstanding team! You will support a large‑scale, global Cloud and Data Center Services program for the U.S. Department of State’s Bureau of Diplomatic Technology (DT). You will lead security operations across enterprise data centers and hybrid cloud platforms, ensuring continuous protection, compliance, and resilience of mission‑critical systems. Responsibilities include vulnerability scanning, patch management, endpoint detection and response (EDR), Zero Trust enforcement, ATO lifecycle management, audit preparation, and access control governance, while supporting integration with Security Operations Center (SOC) tooling and processes.

Security Engineering & Vulnerability Management:

• Lead enterprise vulnerability scanning operations, including policy configuration, scan execution, triage, and remediation coordination across all DT-managed systems.
• Oversee patch management cycles for Windows, Linux, network appliances, and hypervisors, ensuring timely compliance with DT security directives.
• Manage vulnerability remediation workflows, POA&Ms, patch exception requests, and risk reporting to DT cybersecurity leadership.

Endpoint Protection, Monitoring & Threat Detection:

• Oversee endpoint security platforms including Cortex XDR, Tripwire (file integrity monitoring), and other EDR solutions, ensuring accurate detection and policy enforcement.
• Integrate alerts, logs, and telemetry into enterprise SIEM platforms for correlation, analytics, and operational response.
• Monitor and tune security controls to reduce false positives and improve visibility across DT data centers and cloud workloads.

Zero Trust (ZT), Access Control & Identity Governance:

• Implement and maintain Zero Trust-aligned security architecture across data center and hybrid cloud environments.
• Oversee access control policies, privileged access workflows, multifactor authentication enforcement, least‑privilege reviews, and secure onboarding/offboarding procedures.
• Ensure accurate and auditable access records across virtualization, storage, network, and cloud platforms.

ATO Lifecycle Management & Compliance:

• Lead ATO readiness and maintenance for DT platforms by managing documentation, security control inheritance, SSP updates, and audit evidence coordination.
• Support NIST RMF activities including categorization, control implementation, control assessments, and continuous monitoring.
• Maintain alignment with federal cybersecurity standards, STIGs, FedRAMP, and DT security policies.

Monitoring, Observability & Reporting:

• Oversee continuous monitoring dashboards, compliance scorecards, vulnerability trend reports, patch compliance metrics, and EDR effectiveness reporting.
• Collaborate with SOC analysts and DT leadership to provide mission‑critical insights on threat posture, gaps, and recommended improvements.
• Support integration and optimization of security telemetry from tools such as Tripwire, Cortex, SIEM platforms, and Archangel (vulnerability and cyber risk management).

Security Incident Coordination:

• Collaborate with the SOC, IR teams, and system owners during incident investigations, containment, eradication, and recovery activities.
• Provide technical leadership for incident RCA, corrective action plans, and long-term control improvements.

Stakeholder Engagement & Collaboration:

• Partner closely with engineering teams, data center operations, cloud service engineers, system owners, and DT cybersecurity leadership to ensure holistic security coverage.
• Produce playbooks, SOPs, hardening guides, user access documentation, and technical training content for Government FTEs and support contractors.
• Lead special security modernization projects, pilots, tool evaluations, and capability uplift initiatives.

Work Location:

Additional Work Locations:

gdit.com/tc.