Job DescriptionBAE Systems, one of the world's leading defense contractors, is hiring a Senior Industrial Controls/Operational Technology (OT) System Administrator to support the Holston Army Ammunition Plant (HSAAP) in Northeast Tennessee.
We are looking to hire an experienced OT Systems Administrator to help develop, manage, and maintain our company's Operational Technology (Process Controls) systems. The individual will work alongside the Holston control systems support team to support continuous operations and modernization projects for the manufacturing facility. Ability to support a 24/7 operation with after-hour on-call support included. This role requires regular presence in a manufacturing or fabrication environment. The incumbent must be able to access and safely navigate production areas which may include climbing, kneeling, stooping, and working in confined spaces. Must also be able to comply with all requirements including the use of required personal protective equipment (PPE) in accordance with company policy.
OT Systems Administrator Responsibilities:- System Administration: Install, maintain, and troubleshoot Windows/Linux OT computer systems, servers, and software, including the management of custom Windows Applications and the use of PowerShell for automation.
- Network and Infrastructure: Manage Cisco networking equipment and monitoring tools, ensuring the stability of on-premise and air-gapped environments.
- Virtualization and Storage: Administer Hyper-V/VMware (Clients and Hosts) and manage network storage, file transfers, and data backup/restoration using systems such as Veeam/Exagrid.
- Industrial Automation: Support Process Controls and Industrial Automation by utilizing familiarity with Process Automation Protocols (Profinet, Ethernet/IP, Modbus TCP/IP) and Fieldbus Protocols (Profibus, Modbus).
- Application Support: Maintain and administer SQL Server/MS Access databases and support HMI/SCADA development (e.g., PlantPAx, PCS7, Ignition).
- Security and Compliance: Integrate modern security solutions (including MyID/MFA) with existing control systems, assist the Cybersecurity team with incident response, support auditing, and manage patching/upgrading of OT equipment via SCCM and/or WSUS.
- User and Policy Management: Administer Windows Domain policies, user accounts, and Group Policies; provide Help Desk support for common user issues.
- Operational Support: Work closely with manufacturing to maintain continuous operations, identify future needs, and support modernization projects by specifying and designing resilient computer/server solutions.
- Documentation and Standards: Maintain detailed computer/server documentation and stay current on the latest industry standards to drive continuous improvement.
- Physical Requirements: This role requires regular presence in a manufacturing or fabrication environment. The incumbent must be able to access and safely navigate production areas which may include climbing, kneeling, stooping, and working in confined spaces. Must also be able to comply with all requirements including the use of required personal protective equipment (PPE) in accordance with company policy.
Required Skills and Education- Bachelor's Degree in Computer Science or related technical field and 4+ years relative experience or equivalent combination of education and experience.
- Proven experience supporting Windows-based environments and proficiency in Windows Domain Administration (User and Group Policies).
- Experience with virtual computing, data storage, backup systems, and update management.
- Ability to stand up a server from scratch.
- Ability to work independently with strong initiative and minimal supervision.
- Ability to support a 24/7 operation with after-hour on-call support.
- May consider candidates with less experience for a more junior role or additional experience for a more senior role.
Preferred Skills and Education- 8+ years of relative experience.
- Experience working on on-premise networks (onprem).
- Relevant certifications such as CompTIA (A+, Network+, Security+), MCSA, MCSE, Microsoft Server Hybrid Administrator (AZ-800, 801, 802), or VCP.
- Active Secret Clearance. #LI-Onsite #LI-JR1