Secure Configuration Management (SCM) Subject-Matter Expert/Technical Lead

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

IT Infrastructure and Operations

Job Qualifications:

Skills:

Cybersecurity Operations, Group Policy Management, NIST Standards

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

Yes

Job Description:

CONFIGURATION ANALYST SME

General Dynamics Information Technology (GDIT) is seeking an experienced and knowledgeable Secure Configuration Management (SCM) Subject-Matter Expert/Technical Lead to support one of our federal customers on an enterprise cyber program in the DC metropolitan area. This hybrid position offers a combination of remote work and periodic on-site support and customer meetings. The ideal candidate will have extensive experience in enterprise configuration standards, compliance frameworks, and secure baseline development.

HOW YOU WILL MAKE AN IMPACT

• Assess foundational standards, federal regulations, compulsory directives, and agency policies to develop agency-specific secure configuration baselines.
• Develop implementation resources such as Group Policy Objects (GPOs) and BigFix fixlets.
• Establish and maintain secure baselines across multiple operating systems (Windows, Linux, macOS) and enterprise services, applications, and platforms such as Microsoft 365, Cloud Service Provider Environments (AWS, GCP, Azure), web browsers, and databases.
• Manage GPOs, mobile device management (MDM) tools (e.g., Jamf, BigFix, Intune), configuration automation, and track baseline deviations.
• Utilize enterprise scanning tools (e.g., Tenable.SC, Nessus, SCAP) for compliance validation.
• Create and maintain technical control sets such as baseline compliance scanning policies.
• Write professional technical documentation including business justifications, risk assessment/management documentation, technical and programmatic guidance, executive summaries, and standard operating procedures.
• Lead collaboration forums with broad stakeholder groups, including cybersecurity and IT operations community participants.
• Develop configuration baseline standards that align with mission and business requirements.
• Guide stakeholders in implementing secure configuration standards and ensuring enterprise-wide consistency.

WHAT YOU'LL NEED TO SUCCEED

REQUIRED QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 10 years of experience in IT, including 5 years of experience supporting a  cybersecurity program.
• Demonstrable credentials reflecting knowledge, skills, and experience in enterprise configuration standards and compliance frameworks including CIS Benchmarks, NIST SP 800-53 rev 5, NIST Baseline Checklist Repository, and CISA BOD 25-01 SCuBA Secure Configuration Baselines.
• Proficiency in GPO management, MDM tools (e.g., Jamf, BigFix, Intune), configuration automation, and baseline deviation tracking.
• Familiarity with enterprise scanning tools (e.g., Tenable.SC, Nessus, SCAP) for compliance validation.
• Ability to create and maintain technical control sets such as baseline compliance scanning policies.
• Professional technical writing skills for business justifications, risk assessment/management documentation, technical and programmatic guidance, executive summaries, and standard operating procedures.
• Experience leading collaboration forums with diverse stakeholder groups.
• Demonstrated ability to develop and enforce configuration baseline standards aligned with mission and business requirements.
• Proven ability to serve as a technical lead and guide stakeholders in implementing secure configuration standards.

DESIRED QUALIFICATIONS

• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar.
• Familiarity with federal security regulations and compliance standards.
• Experience in cloud-based configuration management practices and tools.
• Strong problem-solving and analytical skills.
• Excellent communication and collaboration skills to engage with cross-functional teams and stakeholders.

GDIT IS YOUR PLACE: 

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility t