Job OverviewWe are seeking a Senior Systems Administrator for assigned classified authorization boundaries-facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, SAP carve-outs) and supporting lab/product systems. This person will own secure build, hardening, operations, account administration, and technical evidence the ISSO needs for ATO and continuous monitoring. Lanes are distinct; work is expected to overlap on TACLANE, CDS, COMSEC handling, and platform integration.
Responsibilities- Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.
- Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control.
- Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections.
- Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates.
- Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed.
- Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.
- Provide authorized hands-on support for TACLANE/Type-1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes.
- Handle CCI/COMSEC-associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed.
- Maintain as-builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection-ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.
- Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload-adjacent hosts when assigned.
Qualifications- Required
- U.S. citizen. Active TS with SCI eligibility.
- 5+ years systems/infrastructure administration, including classified DoD, IC, SAP, or equivalent environments.
- Hands-on Windows and/or Linux administration; AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management.
- STIG/SRG hardening, patching, ACAS/SCAP (or equivalent), and RMF evidence production for NIST SP 800-53 / CNSSI 1253 technical controls.
- Working TCP/IP, VLAN, routing/switching, and firewall literacy sufficient to troubleshoot with Network Engineering.
- Familiarity with COMSEC, CCI, Type-1 encryption, and TACLANE employment; direct TACLANE or CDS experience strongly valued.
- DoD 8140 qualification appropriate to Systems Administrator / privileged access (Security+ CE or approved equivalent).
- Able to work independently in SCIFs and field sites
- Travel: 30-40% of time on short notices
- Preferred
- SIPR, JWICS, SAP, PIT/platform IT, unmanned/autonomous systems, or GFI/GFE administration.
- Navy/NAVWAR/FLTCYBERCOM, DCSA DAAG, SOCOM, CSfC, ICD 705/TEMPEST, GDMS TACLANE training, CDSE COMSEC/CDS coursework.
- Prior partnership with a COMSEC Account Manager or prior Custodian appointment.
Physical Demands- Prolonged periods of sitting at a desk and working on a computer
- Occasional standing and walking within the office
- Manual dexterity to operate a computer keyboard, mouse, and other office equipment
- Visual acuity to read screens, documents, and reports
- Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies
- Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)
BenefitsMedical Insurance: Comprehensive health insurance plans covering a range of services
Saronic pays 100% of the premium for employees and 80% for dependents
Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
Time Off: Generous PTO and Holidays
Parental Leave: Paid maternity and paternity leave to support new parents
Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
Retirement Plan: 401(k) plan with company match
Stock Options: Equity options to give employees a stake in the company's success
Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office
