Job description

This position requires an ACTIVE DoD Top Secret clearance. Applicants who do not currently hold an active clearance will not be considered. This is a remote position, United States. At PMAT , we work on mission critical systems that directly support the warfighter, designing, building, and securing modern digital capabilities across cloud, data, and software environments. Our teams tackle complex, real-world challenges where delivery matters more than theory, and innovation is driven by curiosity, collaboration, and purpose. In this role, you’ll contribute to secure infrastructure and cybersecurity capabilities in government and defense environments, working alongside engineers and technical stakeholders to deliver resilient, forward-leaning solutions. About the role: PMAT is seeking a CyberSecurity Engineer III to support the design, deployment, security, administration, and sustainment of secure, mission-critical computing environments. In this role, you will work across on-premises infrastructure, virtualization, Linux and Windows systems, network infrastructure, automation, and compliance-driven security architectures. You will collaborate with infrastructure, cybersecurity, and engineering teams to maintain secure and reliable environments, resolve technical challenges, remediate vulnerabilities, and support systems throughout the development, authorization, and operational lifecycle. Responsibilities: Support the design and administration of secure computing infrastructure in on-premises and private cloud environments. Support the design and administration of enterprise VMware ESXi and vSAN virtualization platforms. Deploy, configure, administer, and maintain RHEL and Windows Server systems. Implement and remediate security controls in accordance with NIST SP 800-53 Revision 4 and Revision 5 requirements and DISA Security Technical Implementation Guides. Support the automation of system builds, patching, configuration, and hardening using Ansible, Jenkins, PDQ, WSUS, and related tools. Support vulnerability identification, tracking, and remediation efforts using ACAS, Nessus, Splunk, and other cybersecurity tools to reduce system attack surfaces. Support enterprise services and technologies, including Active Directory, databases, Veeam, Horizon, Atlassian Suite, YUM repositories, and monitoring platforms. Support the design and administration of LAN/WAN and virtualized network infrastructure, including troubleshooting complex routing issues involving OSPF and BGP. Collaborate across engineering, cybersecurity, and technical teams to troubleshoot issues and implement secure infrastructure solutions. Support authorization efforts, including Authority to Operate (ATO) packages, compliance documentation, control validation, and security audits. About Us: PMAT is an innovative small business founded with a passion for developing forward-leaning solutions from exceptional people that increase the mission's capability. We focus on designing and building impactful digital solutions that utilize modern cloud, data, and software concepts. Our passion is working on complex and progressive challenges such as edge platform computing, containerizing legacy platforms, distributed data platforms, or heterogeneous data analysis. We recruit, retain, and foster a team motivated to pursue passions, investigate new ways of doing things, and embody an innovative and entrepreneurial spirit. We believe in being curious about every element of a problem and experiment relentlessly. We foster continuous learning in an environment that encourages positive collaboration and expands our capabilities. We tap into collective intelligence, acknowledging that the most brilliant people may not be in the room. Above all else, we believe that delivering and demonstrating is more potent than a sheet of paper. We are passionate about mission-centric design and delivering effective capabilities to and for the warfighter. Whether you’re an experienced engineer or just beginning your career, you’ll work alongside experts who are committed to solving mission-critical problems. If you’re passionate about using your skills to make a real difference, apply today and become part of a team that’s shaping the future of defense technology! Required Skills and Experience: Five or more years of experience in infrastructure engineering, systems administration, network engineering, or a closely related technical field. Experience administering VMware ESXi and vSAN virtualization environments. Experience deploying, configuring, administering, and maintaining RHEL and Windows Server environments. Experience supporting infrastructure automation using Ansible, Terraform, or related automation and Infrastructure as Code technologies. Experience implementing or remediating security controls in accordance with DISA STIGs and NIST SP 800-53 requirements. Strong understanding of on-premises cloud architectures, enterprise virtualization, and secure infrastructure operations. Experience identifying, tracking, and remediating vulnerability backlogs in regulated or compliance-driven environments. Experience supporting government, defense, or other security-focused technical environments. Ability to work effectively with infrastructure, networking, cybersecurity, and software teams in security-conscious environments. Preferred Skills and Experience: Prior experience supporting government or other highly regulated organizations. Experience supporting LAN/WAN environments, routing, switching, OSPF, or BGP. Experience with ACAS, Splunk, Nessus, Veeam, Horizon, Dell Wyse, or related enterprise infrastructure technologies. Experience serving as a technical lead, mentoring junior engineers, or coordinating technical work across multiple teams. Familiarity with DevSecOps workflows and tools in restricted or compliance-driven environments. Experience supporting ATO packages, security control assessments, compliance documentation, or cybersecurity audits. Experience with Jenkins, PDQ, WSUS, Active Directory, Atlassian Suite, YUM repositories, databases, or enterprise monitoring platforms. Education and Certification Requirements: Bachelor’s or master’s degree in a STEM field. CompTIA Security+ certification or obtain within 12 months from hire. CompTIA Network+ certification or obtain within 12 months from hire. ITIL Foundation certification. Additional DoD 8570 or DoD 8140 certifications are a plus. Citizenship and Clearance requirements: US Citizenship required No dual citizenship Active TS with SCI eligibility Location/Address: Remote United States Travel & Passport: Travel estimated at 20% CONUS travel for customer engagement, technical coordination, system support, or mission requirements Work Environment: PMAT offices as needed. In some cases, work in a government facility may be required. Travel may be required for customer engagement, team coordination, and potentially for business development. PMAT is an equal-opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

Requirements

Must-haves

This position requires an ACTIVE DoD Top Secret clearance. Applicants who do not currently hold an active clearance will not be considered.
This is a remote position, United States.
Support the design and administration of secure computing infrastructure in on-premises and private cloud environments.
Support the design and administration of enterprise VMware ESXi and vSAN virtualization platforms.
Deploy, configure, administer, and maintain RHEL and Windows Server systems.
Implement and remediate security controls in accordance with NIST SP 800-53 Revision 4 and Revision 5 requirements and DISA Security Technical Implementation Guides.
Support the automation of system builds, patching, configuration, and hardening using Ansible, Jenkins, PDQ, WSUS, and related tools.
Support vulnerability identification, tracking, and remediation efforts using ACAS, Nessus, Splunk, and other cybersecurity tools to reduce system attack surfaces.
Support enterprise services and technologies, including Active Directory, databases, Veeam, Horizon, Atlassian Suite, YUM repositories, and monitoring platforms.
Support the design and administration of LAN/WAN and virtualized network infrastructure, including troubleshooting complex routing issues involving OSPF and BGP.
Collaborate across engineering, cybersecurity, and technical teams to troubleshoot issues and implement secure infrastructure solutions.
Support authorization efforts, including Authority to Operate (ATO) packages, compliance documentation, control validation, and security audits.
Five or more years of experience in infrastructure engineering, systems administration, network engineering, or a closely related technical field.
Experience administering VMware ESXi and vSAN virtualization environments.
Experience deploying, configuring, administering, and maintaining RHEL and Windows Server environments.
Experience supporting infrastructure automation using Ansible, Terraform, or related automation and Infrastructure as Code technologies.
Experience implementing or remediating security controls in accordance with DISA STIGs and NIST SP 800-53 requirements.
Strong understanding of on-premises cloud architectures, enterprise virtualization, and secure infrastructure operations.
Experience identifying, tracking, and remediating vulnerability backlogs in regulated or compliance-driven environments.
Experience supporting government, defense, or other security-focused technical environments.
Ability to work effectively with infrastructure, networking, cybersecurity, and software teams in security-conscious environments.
Prior experience supporting government or other highly regulated organizations.
Experience supporting LAN/WAN environments, routing, switching, OSPF, or BGP.

Nice-to-haves

Additional DoD 8570 or DoD 8140 certifications are a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: bamboohr
Effort: medium

Benefits

Benefits detected in the listing.

Vision