Senior Cyber Systems Admin - TS/SCI, Splunk & Automation

Peraton; Herndon (VA); On-site; USD 112,000 - 179,000; Full time

Benefits offered by this job

25 days PTO accrued annually

Bonus plan

Job summary

Peraton in Herndon, VA is seeking a Cyber Systems Administrator to support an IC customer. The role emphasizes privileged system administration, security tool operations, log analysis, scripting, and audit evidence production in classified environments.

You will develop Splunk searches and dashboards, write SPL queries, automate data collection with PowerShell, Bash, Python, and SQL, and assist with RMF and ATO processes while coordinating with ISSOs and audit SMEs.

Qualifications

• Bachelor's degree with 8+ years of relevant experience; or Master’s with 6+ years; or 4+ years additional experience in lieu of a degree.
• TS/SCI with polygraph or ability to obtain SCI and poly.
• Active Security+ or CISSP/CISA or equivalent (DoD 8570 IAM 2).
• 1 year IC Community experience.
• Experience in systems engineering or system administration in enterprise environments.
• Hands-on Splunk experience (searches, dashboards, or administration).
• Experience with scripting or query languages (PowerShell, Bash, Python, SQL).
• Familiarity with RMF, ATO processes, and federal audit support.
• Ability to operate with privileged system access in classified environments.
• Proven experience with Linux/RedHat 8+ and Windows Server 2019+.
• Experience with Oracle 19C+ or SQL 2019+.
• Experience with DISA STIG and SCAP tools.
• Hands-on security tasks: Splunk, HBSS, ACAS/Nessus.
• Experience creating and validating NIST control evidence.
• Experience with Xacta records management.

Responsibilities

• Perform Systems Administrator activities for Windows and Linux environments, including configuration, hardening, patching, and operational sustainment.
• Maintain and operate systems requiring privileged user access, ensuring least-privilege and auditability.
• Support system lifecycle activities including design changes, upgrades, and performance tuning.
• Troubleshoot complex system issues across infrastructure, applications, and security tooling.
• Develop, maintain, and optimize Splunk searches, dashboards, and alerts for security monitoring and audits.
• Write and refine SPL queries to extract, correlate, and validate log data from multiple sources.
• Ensure log sources are onboarded, retained, and aligned with audit requirements.
• Develop and maintain scripts (PowerShell, Bash, Python, SQL) to automate data collection for audits.
• Assist with automating evidence generation for recurring FISCAM, RMF, and internal audits.
• Provide technical support to Audit SMEs and ISSOs by producing artifacts for audits.
• Support documentation and validation of controls related to logging, config management, access control, and system integrity.
• Assist in responding to audit findings with root cause analysis and remediation.
• Collaborate with ISSOs, ISSEs, auditors, and operations teams to ensure secure and operational systems.
• Translate technical behavior into clear explanations for auditors and assessors.
• Participate in engineering reviews, change control boards, and security assessments.

Skills

Splunk

PowerShell

Bash

Python

SQL

Log analysis

Scripting

Audit support

RMF

ATO processes

Privileged access

Cyber security

Education

Bachelor's degree required

Master's degree preferred

Tools

Splunk

Windows Server

RedHat Linux

Xacta

ACAS/Nessus

HBSS

SCAP tools

Job description

Peraton in Herndon, VA is seeking a Cyber Systems Administrator to support an IC customer. The role emphasizes privileged system administration, security tool operations, log analysis, scripting, and audit evidence production in classified environments.

You will develop Splunk searches and dashboards, write SPL queries, automate data collection with PowerShell, Bash, Python, and SQL, and assist with RMF and ATO processes while coordinating with ISSOs and audit SMEs.