Information Technology Systems Engineer/Administrator

Arcfield; Chantilly (VA); On-site; USD 123,000 - 214,000; Full time

Job summary

Arcfield is seeking an experienced IT Systems Engineer/Administrator specializing in cloud services to support classified SCIF environments. You will optimize and secure on-site and hybrid infrastructures, delivering Tier II/III engineering, and ensuring RMF/ICD-503 compliance for critical communications and authentication platforms.

You will deploy secure endpoints, manage MFA and identity access, and perform vulnerability assessments with Nessus, ACAS, and Splunk.

Qualifications

• Must possess TS/SCI with Poly and be a US citizen.
• Bachelor's degree with 5+ years IC/DoD experience or advanced degrees with experience.
• Experience administering security tools and RMF/ICD-503 compliance.
• Proficient in secure baseline implementation and patch management.
• Experience with classified on-prem and cloud (C2S) infrastructure.

Responsibilities

• Provide 100% on-site management of secure server & desktop infrastructure in classified space.
• Support classified Cloud Infrastructure and Architecture across C2S domains.
• Diagnose and resolve complex infrastructure, server, and network failures (Tier II/III).
• Handle limited Tier I desktop/user issue escalations.
• Implement and enforce security controls per RMF/ICD-503 and NIST SP 800-53.
• Administer hybrid infrastructure, syncing on-prem with cloud environments.
• Deploy secure endpoints, enforce baselines, push patches via Microsoft tools.
• Manage Identity & Access with MFA and remote access.
• Configure and monitor auditing/logging (e.g., Splunk).
• Assist with strategic system design changes to maintain security and usability.

Skills

TS/SCI with Poly

Cloud security

RMF & ICD-503

Active Directory

PowerShell/Python

Networking (VPCs, Route53)

Security compliance

Tier II/III support

Education

Bachelor's degree in Cybersecurity/IT/CS

Master's degree

PhD

Associate's degree

Tools

ACAS

Nessus

Splunk

AWS Well-Architected

PowerShell

Python

Job description

Responsibilities

Arcfield is seeking experienced an Information Technology (IT) Systems Engineer/Administrator specializing in cloud services, responsible for applying technical/functional solutions to several projects, leveraging capabilities and sharing/seeking knowledge and information across the organization.

As part of a cross-functional team, the position will optimize and secure classified IT infrastructure(s) supporting customers operating within a Sensitive Compartmented Information Facility (SCIF), ensuring maximum availability, security, and performance for critical communication, deployment, and authentication platforms. The engineer delivers Tier II/III advanced engineering support and handles limited Tier I troubleshooting, escalations as needed, while supporting the maintenance of an active Authorization to Operate (ATO) by aligning all systems with Risk Management Framework (RMF) and ICD-503 compliance standards.

Responsibilities Include:

• Systems Administration: Provide 100% on-site management of secure server & desktop infrastructure within the classified space.
• Cloud Infrastructure and Architecture: Support the development and management of classified Commercial Cloud Services (C2S) infrastructures across several domains, seeking to implement efficiencies and maintain a high availability requirement.
• Tier II/III Advanced Support: Diagnose and resolve complex infrastructure, server, and network failures; handle specialized system outages and configuration changes (mostly in a cloud environment.
• Tier ITroubleshooting: Handle limited, escalated desktop or user issues.
• Security & Compliance Controls: Implement,monitor, and enforce technical security controls mandated by NIST SP 800-53, RMF, and Intelligence Community Directive (ICD) 503.
• Hybrid Infrastructure Management: Administer and synchronize secure on-premises servers with classified cloud environments.
• Secure Endpoint Deployment:Utilize Microsoft tools to enforce secure baselines, deploy hardened operating system images, and push mandatory security patches to multiple endpoints.
• Identity & Access Management: Administer RSA authentication tools to enforce strict Multi-Factor Authentication (MFA) and secure, identity-vetted remote access.
• Audit & Log Management: Configure andmonitorcontinuous auditing systems (such as Splunk) to log and review user and system events for compliance verification.
• Ensure that user needs are met and enhance customer experience:
  • Assist with strategic plans for future technical management and configuration.
  • Assist with design and implement system changes to maintain security and usability posture.
• Vulnerability Assessment: Conduct routine system scans using mandated automation tools (e.g., Nessus, ACAS), analyse findings, and execute remediation actions.

Qualifications

Required Qualifications

• Must possess and be able to maintain a TS/SCI with Poly
• US Citizenship is required.
• Bachelor's degree and 10-12 years of experience, OR Master's degree and 8-10 years of experience, or PhD and 5-7 years experience, or Associate's degree and 14 years of experience, or HS diploma/GED and 16 years of experience.
• Minimum of 5 years of experience working in the IC and/or DoW.
• Degree in Cybersecurity, Information Technology, Computer Science, OR equivalent technical experience.
• DoD 8570/8140 IAM/IAT Level II OR III certification (e.g., Security+, CISSP, CISM, or CASP+) is required.
• Experience administering ACAS, Nessus, and Splunk vulnerability and logging scanners.
• Deep operational knowledge of the Risk Management Framework (RMF) lifecycle and ICD-503 security accreditation procedures.
• Design, provision and maintain secure, resilient, and scalable C2S infrastructure using AWS Well-Architected Framework.
• Proven experience hardening systems utilizing DISA Security Technical Implementation Guides (STIGs) and Center for Internet Security (CIS) benchmarks.
• Advanced management of Active Directory (AD), specifically focused on secure Group Policy Objects (GPOs).
• Knowledge of PowerShell or Python to automate configuration baseline checks and patch verification.
• Working knowledge of networking functions, protocols, and configurations. Configure and manage complex C2S networking components, including VPC's, subnets, Route 53, transit gateways, and load balancers.

Equal Pay Act

This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield invests in its employees beyond just compensation. Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections. Min: $122,788.40 Max: $213,505.20

EEO Statement

We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.