Information Technology Systems Engineer/Administrator

Arcfield; Virginia; On-site; USD 123,000 - 214,000; Full time

Job summary

Arcfield is seeking an experienced IT Systems Engineer/Administrator to support secure classified IT infrastructure within a SCIF. You will administer on-site servers/desktops, manage classified cloud services (C2S) and hybrid environments, and lead Tier II/III engineering support with RMF and ICD-503 compliance.

The role requires DoD IA certifications, AD/GPO mastery, and automation via PowerShell or Python.

Qualifications

• Must possess and be able to maintain a TS/SCI with Poly.
• US Citizenship is required.
• Bachelor's degree and 10-12 years of experience, OR Master's degree and 8-10 years of experience, or PhD and 5-7 years experience, or Associate's degree and 14 years of experience, or HS diploma/GED and 16 years of experience.
• Minimum of 5 years of experience working in the IC and/or DoW.
• Degree in Cybersecurity, Information Technology, Computer Science, OR equivalent technical experience.
• DoD 8570/8140 IAM/IAT Level II OR III certification (e.g., Security+, CISSP, CISM, or CASP+) is required.
• Experience administering ACAS, Nessus, and Splunk vulnerability and logging scanners.
• Deep operational knowledge of the RMF lifecycle and ICD-503 security accreditation procedures.
• Design, provision and maintain secure, resilient, and scalable C2S infrastructure using AWS Well-Architected Framework.
• Proven experience hardening systems utilizing STIGs and CIS benchmarks.
• Advanced management of Active Directory (AD) with secure GPOs.
• PowerShell or Python to automate configuration baseline checks and patch verification.
• Working knowledge of networking functions and configuring C2S components (VPCs, subnets, Route 53, transit gateways, load balancers).

Responsibilities

• Systems Administration: 100% on-site management of secure server & desktop infra in classified space.
• Cloud Infrastructure & Architecture: develop/manage classified C2S infra; ensure high availability.
• Tier II/III advanced support: diagnose/resolve complex infra, server, network issues.
• Tier ITroubleshooting: handle limited desktop/user issues.
• Security & Compliance: enforce security controls per RMF/ICD-503.
• Hybrid Infrastructure Management: sync on-prem with classified cloud env.
• Secure Endpoint Deployment: deploy hardened OS, push security patches.
• Identity & Access Management: enforce MFA with RSA tools.
• Audit & Log Management: configure Splunk for continuous auditing.
• Support user needs: assist with strategic plans and system changes for security/usability.
• Vulnerability Assessment: run scans (Nessus/ACAS), remediate findings.

Skills

TS/SCI with Poly

US Citizenship

RMF/ICD-503

PowerShell or Python

Networking (VPCs, Route 53, subnets)

AWS Well-Architected for C2S

DISA STIGs / CIS Benchmarks

AD GPOs management

ACAS/Nessus/Splunk experience

DoD IAM/IAT Level II/III certs

Security, Compliance & MFA

Education

Bachelor’s degree in Cybersecurity / IT / CS or equivalent

10-12 years of IC/DoW experience or equivalent

DoD 8570/8140 IAM/IAT Level II or III certification

Tools

ACAS

Nessus

Splunk

Job description

Responsibilities

Arcfield is seeking experienced an Information Technology (IT) Systems Engineer/Administrator specializing in cloud services, responsible for applying technical/functional solutions to several projects, leveraging capabilities and sharing/seeking knowledge and information across the organization.

As part of a cross-functional team, the position will optimize and secure classified IT infrastructure(s) supporting customers operating within a Sensitive Compartmented Information Facility (SCIF), ensuring maximum availability, security, and performance for critical communication, deployment, and authentication platforms. The engineer delivers Tier II/III advanced engineering support and handles limited Tier I troubleshooting, escalations as needed, while supporting the maintenance of an active Authorization to Operate (ATO) by aligning all systems with Risk Management Framework (RMF) and ICD-503 compliance standards.

Responsibilities Include:

• Systems Administration: Provide 100% on-site management of secure server & desktop infrastructure within the classified space.
• Cloud Infrastructure and Architecture: Support the development and management of classified Commercial Cloud Services (C2S) infrastructures across several domains, seeking to implement efficiencies and maintain a high availability requirement.
• Tier II/III Advanced Support: Diagnose and resolve complex infrastructure, server, and network failures; handle specialized system outages and configuration changes (mostly in a cloud environment.
• Tier ITroubleshooting: Handle limited, escalated desktop or user issues.
• Security & Compliance Controls: Implement,monitor, and enforce technical security controls mandated by NIST SP 800-53, RMF, and Intelligence Community Directive (ICD) 503.
• Hybrid Infrastructure Management: Administer and synchronize secure on-premises servers with classified cloud environments.
• Secure Endpoint Deployment:Utilize Microsoft tools to enforce secure baselines, deploy hardened operating system images, and push mandatory security patches to multiple endpoints.
• Identity & Access Management: Administer RSA authentication tools to enforce strict Multi-Factor Authentication (MFA) and secure, identity-vetted remote access.
• Audit & Log Management: Configure andmonitorcontinuous auditing systems (such as Splunk) to log and review user and system events for compliance verification.
• Ensure that user needs are met and enhance customer experience:
  • Assist with strategic plans for future technical management and configuration.
  • Assist with design and implement system changes to maintain security and usability posture.
• Vulnerability Assessment: Conduct routine system scans using mandated automation tools (e.g., Nessus, ACAS), analyse findings, and execute remediation actions.

Qualifications

Required Qualifications

• Must possess and be able to maintain a TS/SCI with Poly
• US Citizenship is required.
• Bachelor's degree and 10-12 years of experience, OR Master's degree and 8-10 years of experience, or PhD and 5-7 years experience, or Associate's degree and 14 years of experience, or HS diploma/GED and 16 years of experience.
• Minimum of 5 years of experience working in the IC and/or DoW.
• Degree in Cybersecurity, Information Technology, Computer Science, OR equivalent technical experience.
• DoD 8570/8140 IAM/IAT Level II OR III certification (e.g., Security+, CISSP, CISM, or CASP+) is required.
• Experience administering ACAS, Nessus, and Splunk vulnerability and logging scanners.
• Deep operational knowledge of the Risk Management Framework (RMF) lifecycle and ICD-503 security accreditation procedures.
• Design, provision and maintain secure, resilient, and scalable C2S infrastructure using AWS Well-Architected Framework.
• Proven experience hardening systems utilizing DISA Security Technical Implementation Guides (STIGs) and Center for Internet Security (CIS) benchmarks.
• Advanced management of Active Directory (AD), specifically focused on secure Group Policy Objects (GPOs).
• Knowledge of PowerShell or Python to automate configuration baseline checks and patch verification.
• Working knowledge of networking functions, protocols, and configurations. Configure and manage complex C2S networking components, including VPC's, subnets, Route 53, transit gateways, and load balancers.

Equal Pay Act

This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield invests in its employees beyond just compensation. Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections. Min: $122,788.40 Max: $213,505.20

EEO Statement

We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.