Senior DoD Classified Systems Administrator

Saronic Technologies Inc.

Austin (TX)

On-site

USD 120,000 - 180,000

Full time

8 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical Insurance

Dental and Vision Insurance

Time Off

Parental Leave

Competitive Salary

401(k) plan with company match

Stock Options

Life and Disability Insurance

Pet Insurance

Free lunch and unlimited drinks

Job summary

Saronic Technologies is seeking a Senior Systems Administrator to secure classified enclave environments (SIPR/JWICS/CWAN) and support lab and product systems, with focus on build, hardening, and continuous monitoring. You will manage accounts, enforce least privilege, configure audit logs, and coordinate with COMSEC personnel while ensuring red/black separation.

Travel 30–40% to sites and shipyards as required.

Qualifications

U.S. citizen; Active TS with SCI eligibility.
5+ years in DoD/IC classified infrastructure.
Windows and/or Linux admin; AD, GPO, DNS, DHCP, PKI, privileged access, logging.
STIG/SRG hardening; RMF evidence production for NIST SP 800-53 / CNSSI 1253.
Travel 30–40% on short notice; able to work in SCIFs.

Responsibilities

Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.
Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control.
Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections.
Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates.
Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed.
Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.
Provide authorized hands‑on support for TACLANE/Type‑1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes.
Handle CCI/COMSEC‑associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed.
Maintain as‑builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection‑ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.
Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload‑adjacent hosts when assigned.