Cyber Systems Administrator

Peraton; Herndon (VA); On-site; USD 112,000 - 179,000; Full time

Benefits offered by this job

25 days PTO accrued annually

Bonus plan

Job summary

Peraton in Herndon, VA is seeking a Cyber Systems Administrator to support an IC customer. The role emphasizes privileged system administration, security tool operations, log analysis, scripting, and audit evidence production in classified environments.

You will develop Splunk searches and dashboards, write SPL queries, automate data collection with PowerShell, Bash, Python, and SQL, and assist with RMF and ATO processes while coordinating with ISSOs and audit SMEs.

Qualifications

• Bachelor's degree with 8+ years of relevant experience; or Master’s with 6+ years; or 4+ years additional experience in lieu of a degree.
• TS/SCI with polygraph or ability to obtain SCI and poly.
• Active Security+ or CISSP/CISA or equivalent (DoD 8570 IAM 2).
• 1 year IC Community experience.
• Experience in systems engineering or system administration in enterprise environments.
• Hands-on Splunk experience (searches, dashboards, or administration).
• Experience with scripting or query languages (PowerShell, Bash, Python, SQL).
• Familiarity with RMF, ATO processes, and federal audit support.
• Ability to operate with privileged system access in classified environments.
• Proven experience with Linux/RedHat 8+ and Windows Server 2019+.
• Experience with Oracle 19C+ or SQL 2019+.
• Experience with DISA STIG and SCAP tools.
• Hands-on security tasks: Splunk, HBSS, ACAS/Nessus.
• Experience creating and validating NIST control evidence.
• Experience with Xacta records management.

Responsibilities

• Perform Systems Administrator activities for Windows and Linux environments, including configuration, hardening, patching, and operational sustainment.
• Maintain and operate systems requiring privileged user access, ensuring least-privilege and auditability.
• Support system lifecycle activities including design changes, upgrades, and performance tuning.
• Troubleshoot complex system issues across infrastructure, applications, and security tooling.
• Develop, maintain, and optimize Splunk searches, dashboards, and alerts for security monitoring and audits.
• Write and refine SPL queries to extract, correlate, and validate log data from multiple sources.
• Ensure log sources are onboarded, retained, and aligned with audit requirements.
• Develop and maintain scripts (PowerShell, Bash, Python, SQL) to automate data collection for audits.
• Assist with automating evidence generation for recurring FISCAM, RMF, and internal audits.
• Provide technical support to Audit SMEs and ISSOs by producing artifacts for audits.
• Support documentation and validation of controls related to logging, config management, access control, and system integrity.
• Assist in responding to audit findings with root cause analysis and remediation.
• Collaborate with ISSOs, ISSEs, auditors, and operations teams to ensure secure and operational systems.
• Translate technical behavior into clear explanations for auditors and assessors.
• Participate in engineering reviews, change control boards, and security assessments.

Skills

Splunk

PowerShell

Bash

Python

SQL

Log analysis

Scripting

Audit support

RMF

ATO processes

Privileged access

Cyber security

Education

Bachelor's degree required

Master's degree preferred

Tools

Splunk

Windows Server

RedHat Linux

Xacta

ACAS/Nessus

HBSS

SCAP tools

Job description

Job Information

Requisition ID: 2026-164038

Position Category: Cyber Security

Clearance: Top Secret/SCI w/Poly

Job Locations: US-VA-Herndon

Responsibilities

Currently seeking a Cyber Systems Administrator to support an Intel Community (IC) customer in the Herndon, Virginia area.

The Systems Administrator provides mid-level operational support for enterprise information systems within classified environments. This role is execution-focused and emphasizes privileged system administration, security tool operations, log analysis, scripting, and audit evidence production. Systems Administrator IV supports ongoing Authorization to Operate (ATO) activities by maintaining system security posture, generating technical artifacts, and implementing approved security controls under the direction of Information System Security Officers (ISSOs), System Engineers, and audit leads or audit SMEs.

This position requires hands-on experience administering Windows and Linux systems, executing Splunk queries, developing operational scripts, and supporting compliance activities through accurate and timely evidence generation.

Systems Administrator responsibilities for conducting information system activities for new or existing system(s) may include, but not limited to, the following:

• Perform Systems Administrator activities for Windows and Linux environments, including configuration, hardening, patching, and operational sustainment.
• Maintain and operate systems requiring privileged user access, ensuring least-privilege enforcement and auditability.
• Support system lifecycle activities including design changes, re-engineering efforts, upgrades, and performance tuning.
• Troubleshoot complex system issues across infrastructure, applications, and security tooling.
• Develop, maintain, and optimize Splunk searches, dashboards, and alerts to support, Security monitoring, audit evidence collection, and operational troubleshooting
• Write and refine Search Processing Language (SPL) queries to extract, correlate, and validate log data across multiple data sources.
• Ensure log sources are properly onboarded, retained, and aligned with audit and compliance requirements.
• Develop and maintain scripts (e.g., PowerShell, Bash, Python, SQL) to automate data collection for audits, validate system configurations, and support continuous monitoring activities
• Assist with automating evidence generation for recurring FISCAM, RMF, and internal audits.
• Provide technical support to Audit SMEs and ISSOs by producing, validating, and explaining system-level artifacts required for FISCAM audits and RMF assessments.
• Support documentation and validation of technical controls related to logging and monitoring, configuration management, access control, system integrity
• Assist in responding to audit findings, including root cause analysis and technical remediation.
• Work closely with ISSOs, ISSEs, auditors, and operations teams to ensure systems are both secure and operationally effective.
• Translate technical system behavior into clear, defensible explanations for auditors and assessors.
• Participate in engineering reviews, change control boards, and security assessments as needed.

Qualifications

Required Qualifications:

• Bachelor's degree in an area relevant to the position and 8+ years of relevant experience; Master's degree in an area to the position and 6+ years of relevant experience; or 4+ additional years of experience in lieu of a degree.
• TS/SCI with polygraph clearance adjudication or ability to obtain SCI and pass a poly
• Hold active Security+, CISSP, CISA, or equivalent certifications (DoD 8570 IAM 2 equivalent)
• One (1) year of experience with IC Community
• Experience in systems engineering or system administration in enterprise environments.
• Hands-on experience with Splunk (searches, dashboards, or administration).
• Experience using scripting or query languages (PowerShell, Bash, Python, SQL).
• Familiarity with RMF, ATO processes, and audit support in federal environments.
• Ability to operate with privileged system access in classified environments.
• Proven experience with Linux/RedHat 8 or higher, Windows Server 2019 or higher and/or Networking Appliances in Virtualized/Cloud platforms (VMSphere or AWS)
• Proven experience with Oracle 19C or higher or SQL 2019 or higher database systems
• Proven experience with DISA Security Technical Implementation Guide (STIG) implementation and Security Content Automation Protocol (SCAP) tool usage
• Hands on experience performing Systems Security tasks including: Security Information and Event Monitoring (Splunk); Endpoint security (HBSS); Compliance and vulnerability scanning (ACAS / Nessus)
• Demonstrated experience with creating and validating evidence for NIST security controls.
• Experience using and maintaining records in Xacta

Desired Qualifications:

• Skilled in implementing mitigation strategies and how to resolve problems, and to re-test/ re-evaluate systems
• Experience with IT general controls (ITGC), Financial Information System Control Audit Manual (FISCAM), and National Institute of Standards and Technology Special Publication (NIST) 800-53v4
• Experience with performing Security Control Assessment in compliance with NIST SP 800- 37, NIST SP 800-53, NIST SP 800-53A, and other NIST 800 guide series
• IT audit advisory experience
• Experience with effective policy, instruction, and development for Federal or DoD Information Security Programs
• Experience with risk analysis and assessment determinations incorporating system/mission owner, and unique operational constraints
• Possess a working knowledge of administrating servers, system and application security threats and vulnerabilities
• Experience extending existing applications in areas such as security, monitoring, task automation, continuous integration, deployment, and performance optimization

• Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligible to participate in an attractive bonus plan

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.