SQL Database Administrator (Compliance)

Description

The company supports the CITS contract for USCENTCOM and has an immediate opening for a compliance SQL database administrator based in Tampa, Florida.

The role is hands-on and centres on securing database servers. You will manage, secure and tune enterprise database systems to meet Department of War (DoW) cybersecurity standards, handling routine administration, maintenance, patching and troubleshooting, and applying security configurations to reach and keep compliance for a CORA cyber inspection.

The ideal candidate is a highly skilled SQL database administrator with deep knowledge of DISA STIGs and hands-on experience installing, monitoring, maintaining, scripting and remediating to enterprise compliance standards. You bring technical depth, attention to detail, and the ability to explain technical matters clearly to technical staff and leadership.

Responsibilities

• Install, configure, administer, maintain, troubleshoot and secure relational database management systems, mainly Microsoft SQL Server 2019 and 2022 along with SSAS, SSIS and SSRS.
• Apply sound principles of relational DBMS design, architecture, operations, performance, availability and security across enterprise database environments.
• Write, tune, test and secure SQL database objects and code, such as DML statements, stored procedures, triggers, functions and T-SQL scripts.
• Fix database security findings from ACAS/Tenable scans, STIG assessments, vulnerability assessments and other compliance outputs.
• Keep databases compliant with DoW regulations, security policies, Database STIGs, Cyber Tasking Orders (CTOs), Operations Orders (OPORDs) and other applicable directives.
• Carry out patching, maintenance, upgrades, configuration hardening and troubleshooting to close vulnerabilities and keep operations secure and reliable.
• Build, run and document software test and evaluation plans for major database releases, security patches, upgrades, integrations and hardware changes.
• Apply software design, testing, integration and SDLC practices within Agile/Scrum teams.
• Write mitigation strategies and Plans of Action and Milestones (POA&Ms) for database vulnerabilities or non-compliant configurations that cannot be fixed right away.
• Track, rank, escalate and manage database vulnerabilities and compliance gaps so they are resolved on time and risk falls.
• Create and maintain database documentation, including schema designs, security baselines, remediation procedures, process guides and operational runbooks.
• Produce compliance reports, dashboards, briefings and leadership updates that show database security posture, remediation progress and operational risk.
• Use PowerShell and T-SQL to automate compliance checks, configuration changes, vulnerability fixes and reporting.
• Work with cybersecurity staff, system administrators, developers, program managers and stakeholders to support database security, availability and mission needs.
• Present technical material and compliance status clearly, in writing and verbally, to senior DoW and non-DoW officials.
• Balance competing priorities and make sound calls in a fast-moving operational setting.
• Take part in meetings and working groups with operations, database and cybersecurity staff, both government and contractor, to track and maintain database cybersecurity compliance.
• Give hands-on, compliance-focused implementation feedback during database architecture and engineering reviews of new capabilities, technologies and infrastructure changes.
• Perform other duties as assigned.

Requirements

• Experience with ACAS, DBMS, DISA STIGs and SQL database administration.
• Three or more years of related experience.
• Required: a CompTIA Security+ CE or equivalent intermediate DoW 8140 or DoW 8570 certification.
• Required: a bachelor's degree in a related discipline (computer science, cybersecurity or information assurance preferred), or three years of real-world or military experience in database administration, information assurance or systems administration.
• Desired: an expert-level DoW 8140 or DoW 8570 certification.
• Desired: Microsoft Certified Azure Database Administrator Associate (DP-300) or equivalent legacy SQL Server certifications.
• Desired: ITIL 4 Foundation certification.
• Ownership, curiosity, sound judgment, integrity, flexibility and clear communication.
• Ability to work independently with minimal direction and also as part of a team, keeping leadership updated with clear, timely communication.
• Strong hands-on experience administering MS SQL Server 2019 and 2022, SSAS, SSIS and SSRS.
• Strong grasp of relational DBMS concepts, design, architecture and operations.
• Ability to read DoW database cybersecurity orders, policies and procedures (Database STIGs, CTOs, IAVMs) and, above all, put them into practice.
• Strong understanding of POA&Ms, STIGs, CTOs, IAVMs and related compliance frameworks.
• Familiarity with ACAS/Tenable, RMF, eMASS and Splunk.
• Understanding of SDLC and Agile/Scrum methods.
• Hands-on database security engineering skill in at least one of: SQL Server administration and security hardening; SQL development (DML, stored procedures, triggers, functions); backup, recovery and high availability (AlwaysOn); or patching and vulnerability remediation.
• Desired: experience supporting USCENTCOM and understanding of its mission and IT environment.
• Desired: experience briefing contract and government leadership on database compliance status and remediation.
• Desired: experience with PowerShell and T-SQL scripting for database STIG compliance automation.
• Desired: experience with DoW Cyber Defense Command (DCDC) Cyber Operational Risk Assessments (CORA).
• Desired: familiarity with STIG automation tools such as EvaluateSTIG, STIG Viewer and STIG Manager.

Conditions

Active Secret clearance is required, and you must be able to obtain Top Secret/SCI. Clearance level is Secret, with no public trust or other requirement.

Full-time, 40 scheduled hours per week, onsite.

Travel of less than 10%, CONUS and OCONUS.

Based at MacDill AFB, Florida.

The role is a regular position. Only US citizens are eligible.

The likely salary range is $93,500 to $126,500. Actual pay depends on experience, location and possibly contract terms, and may fall outside this range.

Identity verification using biometrics and AI is part of hiring, and you must be on camera for virtual interviews.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plans, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre- and post-tax contributions up to IRS limits and a company match.
• Full flex work weeks where possible, and paid vacation, sick and personal time, holidays, parental, military, bereavement and jury duty leave.
• Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness and business travel accident insurance, provided or available.
• Career tools that suggest next steps and learning, plus an internal mobility team.
• Competitive pay and an award-winning, military-friendly culture.