Classified Systems Administrator

Saronic Technologies Inc.; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental and Vision Insurance

Time Off

Parental Leave

Competitive Salary

401(k) plan with company match

Stock Options

Life and Disability Insurance

Pet Insurance

Free lunch and unlimited drinks

Job summary

Saronic Technologies is seeking a Senior Systems Administrator to secure classified enclave environments (SIPR/JWICS/CWAN) and support lab and product systems, with focus on build, hardening, and continuous monitoring. You will manage accounts, enforce least privilege, configure audit logs, and coordinate with COMSEC personnel while ensuring red/black separation.

Travel 30–40% to sites and shipyards as required.

Qualifications

• U.S. citizen; Active TS with SCI eligibility.
• 5+ years in DoD/IC classified infrastructure.
• Windows and/or Linux admin; AD, GPO, DNS, DHCP, PKI, privileged access, logging.
• STIG/SRG hardening; RMF evidence production for NIST SP 800-53 / CNSSI 1253.
• Travel 30–40% on short notice; able to work in SCIFs.

Responsibilities

• Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.
• Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control.
• Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections.
• Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates.
• Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed.
• Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.
• Provide authorized hands‑on support for TACLANE/Type‑1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes.
• Handle CCI/COMSEC‑associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed.
• Maintain as‑builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection‑ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.
• Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload‑adjacent hosts when assigned.

Skills

U.S. citizen

TS/SCI eligibility

5+ years infra

Windows admin

Linux admin

AD/GPO/DNS/DHCP

PKI/privileged access

STIG/SRG hardening

RMF evidence

SCIFs/field sites

TACLANE/CDS experience

DoD 8140 qualified

Tools

SCAP/ACAS tooling

Stig Viewer

CNSSI 1253 controls

RMF artifacts tooling

Job description

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

Job Overview

We are seeking a Senior Systems Administrator for assigned classified authorization boundaries—facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, SAP carve-outs) and supporting lab/product systems. This person will owner secure build, hardening, operations, account administration, and technical evidence the ISSO needs for ATO and continuous monitoring. Lanes are distinct; work is expected to overlap on TACLANE, CDS, COMSEC handling, and platform integration.

Responsibilities

• Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.

• Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control.

• Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections.

• Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates.

• Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed.

• Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.

• Provide authorized hands‑on support for TACLANE/Type‑1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes.

• Handle CCI/COMSEC‑associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed.

• Maintain as‑builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection‑ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.

• Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload‑adjacent hosts when assigned.

Qualifications

• Required

  • U.S. citizen. Active TS with SCI eligibility.

  • 5+ years systems/infrastructure administration, including classified DoD, IC, SAP, or equivalent environments.

  • Hands‑on Windows and/or Linux administration; AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management.

  • STIG/SRG hardening, patching, ACAS/SCAP (or equivalent), and RMF evidence production for NIST SP 800-53 / CNSSI 1253 technical controls.

  • Working TCP/IP, VLAN, routing/switching, and firewall literacy sufficient to troubleshoot with Network Engineering.

  • Familiarity with COMSEC, CCI, Type‑1 encryption, and TACLANE employment; direct TACLANE or CDS experience strongly valued.

  • DoD 8140 qualification appropriate to Systems Administrator / privileged access (Security+ CE or approved equivalent).

  • Able to work independently in SCIFs and field sites

  • Travel: 30–40% of time on short notices

• Preferred

  • SIPR, JWICS, SAP, PIT/platform IT, unmanned/autonomous systems, or GFI/GFE administration.

  • Navy/NAVWAR/FLTCYBERCOM, DCSA DAAG, SOCOM, CSfC, ICD 705/TEMPEST, GDMS TACLANE training, CDSE COMSEC/CDS coursework.

  • Prior partnership with a COMSEC Account Manager or prior Custodian appointment.

Physical Demands

• Prolonged periods of sitting at a desk and working on a computer

• Occasional standing and walking within the office

• Manual dexterity to operate a computer keyboard, mouse, and other office equipment

• Visual acuity to read screens, documents, and reports

• Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies

• Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)

Benefits

Medical Insurance: Comprehensive health insurance plans covering a range of services

Saronic pays 100% of the premium for employees and 80% for dependents

Dental and Vision Insurance: Coverage for routine dental check‑ups, orthodontics, and vision care

Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents

Time Off: Generous PTO and Holidays

Parental Leave: Paid maternity and paternity leave to support new parents

Competitive Salary: Industry‑standard salaries with opportunities for performance‑based bonuses

Retirement Plan: 401(k) plan with company match

Stock Options: Equity options to give employees a stake in the company’s success

Life and Disability Insurance: Basic life insurance and short‑and‑long‑term disability coverage

Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline

Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office

Saronic CCAA Notice for Candidates and California Employees

If this role is based in the United States, it requires access to export‑controlled information or items that require "U.S. Person" status. As defined by U.S. law, individuals who are any one of the following are considered to be a "U.S. Person": (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).

Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.

We are also committed to providing reasonable accommodations for qualified individuals with disabilities.