Location: Goodfellow Air Force Base, San Angelo, Texas
Work Arrangement: Primarily On-Site
Clearance Required: Active DoD Secret clearance or higher
Advocate IT, LLC is a Maryland-based, SBA-certified Historically Underutilized Business Zone (HUBZone) small business and Disability-Owned Business Enterprise (DOBE) providing technology, operational, and customer engagement services to federal, state, and commercial clients. Headquartered in Frederick, Maryland, Advocate IT supports mission-critical programs in regulated environments where security, technical excellence, accuracy, and accountability matter.
Advocate IT is seeking a Senior Cybersecurity / Gold Image Engineer to support a U.S. Air Force SIPRNet Thin Client and Network Infrastructure deployment at Goodfellow Air Force Base. This position combines the traditional responsibilities of a Gold Image/Systems Engineer and Cybersecurity/STIG Engineer, providing end-to-end ownership of Windows Master Gold Image engineering, system hardening, DISA STIG implementation, vulnerability scanning, remediation, testing, documentation, and security evidence development.
Learn more at www.advocateitllc.com.
Key Responsibilities
- Develop, configure, harden, test, and maintain Air Force-approved Windows Master Gold Images
- Develop and maintain at least two production-ready Master Gold Images using Government-provided or Government-approved baseline images
- Install and configure operating system components, applications, drivers, endpoint controls, and security configurations
- Apply and validate applicable DISA Security Technical Implementation Guides (STIGs)
- Perform Windows operating system and endpoint security hardening
- Conduct vulnerability and compliance scanning of Master Gold Images
- Analyze scan findings and perform technical remediation
- Support SCAP, ACAS, Tenable/Nessus, or comparable DoD vulnerability and compliance scanning activities
- Configure and validate Windows Group Policy, security baselines, registry settings, and local security policies
- Document security deviations, exceptions, compensating controls, and unresolved findings for Government review
- Support application integration and compatibility testing within the Master Gold Images
- Validate compatibility between Gold Images, VMware Horizon, VDI infrastructure, endpoint devices, and mission applications
- Coordinate closely with the Senior VDI/HCI Lead Engineer during image development and deployment
- Support implementation and validation of Government-provided endpoint security tools
- Perform patching, configuration changes, troubleshooting, and image remediation
- Establish repeatable image build, testing, version-control, and release processes
- Maintain technical and security documentation for production image releases
- Support pilot testing, production rollout, and Government acceptance testing
- Troubleshoot image-related issues identified during thin-client deployment
- Develop security evidence and compliance documentation supporting Government cybersecurity reviews
- Provide hands-on knowledge transfer to Air Force system administrators and cybersecurity personnel
- Participate in Integrated Product Team meetings, technical reviews, and project status discussions
Minimum Qualifications
- Five (5) or more years of relevant cybersecurity, Windows systems engineering, endpoint security, or Gold Image engineering experience
- Strong hands-on experience administering and securing Microsoft Windows enterprise environments
- Experience creating, maintaining, or deploying standardized Windows operating system images
- Demonstrated experience applying and validating DISA STIGs
- Experience performing vulnerability scanning, analysis, remediation, and compliance validation
- Experience with Windows Group Policy, registry configuration, security baselines, and endpoint hardening
- Working knowledge of DoD cybersecurity, system-hardening, and configuration-management practices
- Ability to translate cybersecurity requirements into executable technical configurations
- Strong troubleshooting skills involving Windows operating systems, applications, policies, and security controls
- Experience developing technical, security, testing, and remediation documentation
- Ability to work collaboratively with virtualization, network, cybersecurity, and Government technical personnel
- Ability to perform primarily on-site work at Goodfellow Air Force Base
- Active DoD Secret security clearance or higher
Preferred Qualifications
- Experience supporting SIPRNet, NIPRNet, or other classified DoD environments
- Experience supporting U.S. Air Force cybersecurity environments
- Experience with Windows Standard Desktop Configuration or comparable Government desktop baselines
- Experience using DISA STIG Viewer
- Experience with SCAP compliance scanning
- Experience with ACAS, Tenable, Nessus, or comparable vulnerability scanning tools
- Experience supporting VMware Horizon or other enterprise VDI environments
- Experience engineering Gold Images for virtual desktop environments
- Experience with Active Directory and Group Policy Objects
- Experience with DoD Risk Management Framework processes
- Experience supporting POA&M development, remediation tracking, or security-control evidence
- Security+, CySA+, CASP+, CISSP, or comparable DoD-recognized cybersecurity certification
- Experience conducting technical knowledge transfer to Government personnel
Benefits
Advocate IT offers competitive compensation and a strong benefits package, including:
- Health, dental, and vision insurance options
- Paid time off and holidays
- Professional development and training opportunities
- Cybersecurity certification and technical training support
- Career growth opportunities within a growing HUBZone and Disability-Owned Business Enterprise
Pay: $72,000.00 - $82,000.00 per year
Work Location: In person
