Systems Administrator (Linux & Windows)

JOB SUMMARY

Seeking a versatile and mission-driven Systems Administrator (Linux & Windows) with dedicated experience as a Microsoft Endpoint Configuration Manager (MECM / SCCM) administrator. In this role, you will maintain, configure, and secure a heterogeneous enterprise hosting and laboratory testing environment comprising Red Hat Enterprise Linux (RHEL), modern Microsoft Windows Server (2019/2022), and Windows 10/11 endpoints.

You will be responsible for end-to-end endpoint life cycle management, centralized patch orchestration, operating system deployments, system hardening, and continuous cyber-compliance. Working closely with cybersecurity leads and infrastructure engineers, you will ensure high system availability, rapid vulnerability remediation, and rigorous adherence to defense cybersecurity frameworks.

JOB RESPONSIBILITIES

Endpoint Lifecycle Management & MECM/SCCM Administration

• Serve as the primary administrator for Microsoft Endpoint Configuration Manager (MECM / SCCM), managing infrastructure health, site systems, distribution points, and client agent health across all connected enclaves.
• Engineer, test, deploy, and maintain standardized Windows Operating System Deployment (OSD) task sequences and baseline golden images.
• Package, test, distribute, and automate application installations, scripts, and software updates across heterogeneous lab and hosting workstations and servers.
• Manage and orchestrate enterprise-wide software update distribution using Software Update Points (SUP) integrated with Windows Server Update Services (WSUS).
• Create and deploy custom compliance baselines and configuration items (CIs) to enforce security settings, STIG configurations, registry keys, and audit controls.
• Develop custom MECM queries, device collections, and reports (SSRS) to provide real-time hardware/software inventory, asset discovery, and compliance auditing.

Systems Administration (Linux & Windows)

• Administer, build, configure, and maintain physical and virtual Red Hat Enterprise Linux (RHEL) servers, modern Windows Servers (2019/2022), and Windows 10/11 workstations.
• Manage core directory and identity infrastructure, including Active Directory Domain Services (AD DS), Group Policy Objects (GPOs), DNS, DHCP, and role-based access control.
• Troubleshoot and maintain enterprise Linux services, including SE Linux policies/security contexts, daemon services (systemd, chronyd), file systems (/opt, logical volumes), and local package managers.
• Maintain hypervisor and storage infrastructure, including Nutanix, VMware ESXi/vCenter, and enterprise backup/restore solutions (e.g., Cohesity, snapshots).
• Support basic multi-tier database hosting and connectivity for Oracle and Microsoft SQL server backends.
• Process, approve, and maintain user access documentation and account provisioning via DD Form 2875 and identity management systems.
• Issue, configure, and troubleshoot Public Key Infrastructure (PKI) certificates, CAC authentication, and secure remote protocols across all client and server endpoints.

Cybersecurity, Vulnerability Management & Compliance

• Maintain strict system security posture in compliance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Execute, review, and analyze weekly Assured Compliance Assessment Solution (ACAS / Tenable Nessus) vulnerability scans and monthly STIG evaluations.
• Rapidly remediate identified CVEs, IAVM alerts, CTO/DTO directives, and vendor patches across both Windows and Linux fleets.
• Draft, track, and update Plans of Action and Milestones (POA&Ms) for items requiring architectural mitigations or extended test schedules.
• Maintain endpoint security agents across all hosts, including Trellix/ePO agents, endpoint detection and response (EDR), and application whitelisting tools (e.g., fapolicyd).
• Monitor and analyze system, security, and application logs using SIEM and centralized log management tools (e.g., LogRhythm, Elastic Fleet).

QUALIFICATIONS & EDUCATION

Required Certifications

• Active DoD 8570/8140 IAT Level II Baseline Certification (e.g., CompTIA Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP).
• Relevant computing environment (CE) / vendor training or certification in Microsoft Windows Server/MECM or Red Hat Enterprise Linux (or ability to complete within 6 months of hire).

Education

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related STEM discipline (equivalent relevant professional experience may be substituted in lieu of degree).

Years of Experience:

• Minimum of 3–5+ years of hands-on systems administration experience across mixed Linux (RHEL) and Windows enterprise server/workstation environments.
• Minimum of 2+ years of dedicated, hands-on administration of Microsoft Endpoint Configuration Manager (MECM / SCCM) in an enterprise or lab environment.

ADDITIONAL & PREFERRED SKILLS

• Demonstrable proficiency configuring, operating, and troubleshooting MECM/SCCM (OSD, application packaging, software update deployments, collection management).
• Strong working knowledge of Linux administration, specifically Red Hat Enterprise Linux (RHEL), CLI troubleshooting, package management, daemon tuning, and SELinux enforcement.
• Solid experience with Windows Server (2019/2022) administration, Active Directory, GPO authoring/troubleshooting, and DNS.
• Experience with DoD vulnerability and compliance tooling: ACAS (Tenable/Nessus), SCAP Compliance Checker (SCC), and STIG Viewer (.ckl generation).
• Understanding of enterprise backup technologies, bare-metal server recovery, and hypervisor virtualization (Nutanix AHV, VMware).
• Excellent written communication skills for authoring Standard Operating Procedures (SOPs), weekly status reports, and technical troubleshooting documentation.

Preferred Skills

• Prior experience administering systems within DoD enterprise testing facilities, operational lab environments, or defense staging enclaves.
• Proficiency with PowerShell scripting and Linux Shell (Bash) scripting to automate routine administration, reporting, and deployment tasks.
• Hands-on experience managing and troubleshooting enterprise backup appliances (e.g., Cohesity) and application whitelisting tools (e.g., fapolicyd).
• Familiarity with Elastic Agent/Fleet management, LogRhythm, or enterprise SIEM architectures.
• Basic understanding of perimeter network components (firewalls, VPNs, F5 BIG-IP load balancers) and cloud hosting environments (AWS GovCloud).

WORKING ENVIRONMENT

Work is primarily performed within environmentally controlled indoor office and laboratory (enterprise server room / lab floor).Occasional exposure to server room noise, cool temperatures, and standard data center environmental controls.High-tempo technical environment requiring frequent interaction with multi-disciplinary engineering, testing, and cybersecurity teams. 

Strength Demands

• Light to Medium Work: Must be able to exert up to 30–50 pounds of force occasionally, and/or up to 20 pounds of force frequently to lift, carry, push, pull, or otherwise move rack-mounted hardware, server components, workstations, peripherals, and network cabling.

Physical Requirements

• Sitting or standing at computer workstations for extended periods.
• Dexterity of hands and fingers to operate computer keyboards, mice, test equipment, and hand tools (e.g., rack installation tools, screwdrivers).
• Stooping, kneeling, crouching, reaching, and bending required when installing or cabling servers, switches, or workstations in server racks and lab benches.
• Visual acuity to read fine print, computer monitors, wiring labels, and console screens for extended periods.

• Happy-Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
• Helpful -Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
• Honest -Be Trustworthy.Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
• Humble -Be Grounded.Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
• Hungry -Be Eager.Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
• Hustle -Be Driven.Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.