IT Systems & Compliance Specialist

Company: Waterfront Training Solutions, Inc. (WTS)

Location: Chesapeake, VA (100% On-site)

Security Clearance: Not needed at this time, however Corporate Background Check is needed at start of employment

Citizenship: U.S. Citizenship Required (ITAR/EAR & CUI Compliance)

Job Type: Full Time/ Normal working hours: 9:00 AM - 5:00 PM EST

About Waterfront Training Solutions

Waterfront Training Solutions (WTS) is a specialized provider of workforce development, IT consulting, and mission-critical training solutions for the Department of Defense and civilian agencies. As an SBA-certified Small Disadvantaged Business and Service-Disabled Veteran-Owned Small Business, we pride ourselves on bridging the gap between complex technical requirements and operational readiness.

The Opportunity

We are seeking a versatile, self-motivated, and highly technical Lead IT Specialist to spearhead the hardening of our internal infrastructure in preparation for CMMC Level 2 and FedRAMP certification. This role is a hybrid of Systems Engineering and Cybersecurity Compliance. You will be the technical lead for our CMMC remediation efforts and will eventually transition into a Lead Technician role for our C3PAO (Certified Third-Party Assessment Organization) service arm.

Key Responsibilities

• Technical Remediation: Implement technical controls across Windows/Linux environments to meet NIST 800-171 and CMMC Level 2 requirements.
• Cloud Architecture: Manage and secure Microsoft 365 GCC High and Azure Government environments.
• Evidence Collection: Build and maintain the "Body of Evidence" (BoE), including SSPs, Network Diagrams, and Configuration Management logs.
• Security Operations: Manage SIEM/log management, vulnerability scanning (Nessus/OpenVAS), and incident response protocols.
• C3PAO Growth: Act as the primary SME during DIBCAC assessments and lead external client assessments once C3PAO status is achieved.

Required Qualifications

• Experience: 5+ years in IT Systems Administration with at least 2 years focused on NIST 800-171 or CMMC compliance.
• Cloud Expertise: Hands-on experience with M365 GCC High, Azure Government, or AWS GovCloud.
• Technical Stack: Strong understanding of IAM/MFA, FIPS 140-2 validated encryption, and Network security (Firewalls, VPNs, VLAN segmentation).
• Certifications: Active Security+ or CySA+ (Required). CCP or CCA track preferred.
• Clearance: Must possess an active U.S. Government Secret Security Clearance.

Work Environment & Physical Requirements

• 100% On-site: This position is located at our Chesapeake, VA office. Due to the sensitive nature of the data and hands-on infrastructure management, remote work/telework is not available.

Equal Employment Opportunity (EEO) Statement

Waterfront Training Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Due to the nature of the data handled (ITAR/EAR and CUI), U.S. Citizenship is required.