Systems Administrator

The System Administrator supports the ISSM/ISSO in the management, operation, and compliance of classified information systems (IS) operating under the National Industrial Security Program (NISP).

This role is governed by the requirements of 32 CFR Part 117 (NISPOM Rule) and the DCSA Assessment and Authorization Guide (DAAG), which implements the Risk Management Framework (RMF) for cleared contractor facilities.

The SA serves as a hands-on security practitioner responsible for the day-to-day security posture of assigned systems, ensuring continuous compliance with DCSA authorization requirements and maintaining a valid Authority to Operate (ATO).

Responsibilities:


* Possessing sufficient experience and technical competence commensurate with the complexity of the systems to include patch management, account management, STIGs/SCAPs, application updates and installs, hardware configuration and troubleshooting


* Ensure all hardware and software additions, removals, and modifications follow approved change management processes


* Responsible for managing Windows and Linux environments user accounts, permissions, system services, storage resources, backups, and recovery operations.


* Monitor the health of the classified systems by applying patches and security updates


* Maintain accurate technical and configuration documentation.


* Maintain configuration management documentation for all hardware and software changes to classified systems


* Implement and validate security controls on classified systems per NIST SP 800-53, CNSSI 1253, and applicable STIGs.


* Report all security-related incidents to the ISSM in accordance with 32 CFR Part 117 requirements


* Assess changes to assigned systems that could affect authorization status and notify the ISSM


* Assist and support the ISSM/ISSO in all the following tasks:


* Executing all phases of the RMF lifecycle: Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor to include decommission


* Development, maintenance, and continuous updating of Information Systems


* Conducting periodic assessments and continuous monitoring of authorized systems and providing the corrective actions for all identified findings and vulnerabilities

 Required Qualifications:


* Minimum 2-4 years of experience in information technology,


* Demonstrated working knowledge of 32 CFR Part 117 §18, the DCSA Assessment and Authorization Guide (DAAG), and NIST 800-series publications


* Active (or ability to obtain) Top Secret clearance with SCI eligibility or clearance commensurate with the highest classification level processed on facility systems


* Strong technical knowledge of Windows and/or Linux security hardening, STIG application, network security fundamentals, and audit log management


* Experience with classified system configuration management, media control, and sanitization/destruction procedures


* Ability to work inde...