Systems Administrator

Applied Research Associates, Inc.; Albuquerque (NM); On-site; USD 90,000 - 130,000; Full time

Job summary

Applied Research Associates, Inc. in Albuquerque seeks a System Administrator to support ISSM/ISSO, manage classified IS under NISPOM and RMF, and maintain ATO readiness.

The role covers patching, STIGs, Windows/Linux admin, change control, documentation, incident reporting, and RMF lifecycle activities.

Candidates should have 2–4 years IT experience, knowledge of NIST SP 800-53, DAAG, and ability to obtain/maintain TS/SCI eligibility.

Qualifications

• Active Top Secret clearance or eligibility
• 2–4 years of IT experience
• Experience with RMF, NIST 800-series publications
• Experience with classified system configuration management
• Ability to work independently and in a team environment

Responsibilities

• Patch management, account management, STIGs/SCAPs, updates and installs
• Follow approved change management for hardware/software changes
• Manage Windows and Linux user accounts, services, storage, backups and recovery
• Monitor classified system health and apply security patches
• Document configuration and security controls; RMF lifecycle support

Skills

Security fundamentals

Troubleshooting

Communication

Team collaboration

Independent work

Education

Bachelor's degree in Cybersecurity

Tools

STIGs/SCAPs

eMASS

SCAP Compliance Tool

SIEM

Vulnerability Scanners

Job description

Description

The System Administrator supports the ISSM/ISSO in the management, operation, and compliance of classified information systems (IS) operating under the National Industrial Security Program (NISP). This role is governed by the requirements of 32 CFR Part 117 (NISPOM Rule) and the DCSA Assessment and Authorization Guide (DAAG), which implements the Risk Management Framework (RMF) for cleared contractor facilities. The SA serves as a hands-on security practitioner responsible for the day-to-day security posture of assigned systems, ensuring continuous compliance with DCSA authorization requirements and maintaining a valid Authority to Operate (ATO).

Responsibilities

• Possessing sufficient experience and technical competence commensurate with the complexity of the systems to include patch management, account management, STIGs/SCAPs, application updates and installs, hardware configuration and troubleshooting
• Ensure all hardware and software additions, removals, and modifications follow approved change management processes
• Responsible for managing Windows and Linux environments user accounts, permissions, system services, storage resources, backups, and recovery operations.
• Monitor the health of the classified systems by applying patches and security updates
• Maintain accurate technical and configuration documentation.
• Maintain configuration management documentation for all hardware and software changes to classified systems
• Implement and validate security controls on classified systems per NIST SP 800-53, CNSSI 1253, and applicable STIGs.
• Report all security-related incidents to the ISSM in accordance with 32 CFR Part 117 requirements
• Assess changes to assigned systems that could affect authorization status and notify the ISSM
• Assist and support the ISSM/ISSO in all the following tasks:
• Executing all phases of the RMF lifecycle: Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor to include decommission
• Development, maintenance, and continuous updating of Information Systems
• Conducting periodic assessments and continuous monitoring of authorized systems and providing the corrective actions for all identified findings and vulnerabilities

Required Qualifications:

• Minimum 2-4 years of experience in information technology,
• Demonstrated working knowledge of 32 CFR Part 117 §18, the DCSA Assessment and Authorization Guide (DAAG), and NIST 800-series publications
• Active (or ability to obtain) Top Secret clearance with SCI eligibility or clearance commensurate with the highest classification level processed on facility systems
• Strong technical knowledge of Windows and/or Linux security hardening, STIG application, network security fundamentals, and audit log management
• Experience with classified system configuration management, media control, and sanitization/destruction procedures
• Ability to work independently and as part of a team
• Excellent troubleshooting and problem-solving skills
• Strong communication and interpersonal skills

Preferred Qualifications:

• Security+ Prior cleared industry experience (DCSA, NSA, or IC)
• Experience with eMASS or equivalent RMF workflow tools, vulnerability scanners, SIEM/Auditing and STIG Viewer / SCAP compliance tool

Core Competencies:

• Technical understanding of classified system security controls, network architecture, and risk management
• Knowledge of NISPOM and related CFRs, DAAG, NIST SPs, CNSSI directive
• Effective collaboration with the ISSM, ISSO, FSO, ITPSO, IT staff, and program managers
• Discretion and integrity in handling classified information and sensitive cybersecurity data
• Commitment to continuous professional development and staying current with evolving cybersecurity threats and DCSA guidance

Company Information:

Who is ARA? (https://www.linkedin.com/company/ara) Learn more about ARA and Our Core Values at WHO WE ARE - ARA (https://www.ara.com/who-we-are/)

Applied Research Associates, Inc. (ARA) is an employee-owned international research and engineering company recognized for providing technically superior solutions to complex and challenging problems in the physical sciences. The company, founded in Albuquerque, NM in 1979, employs over 2200 professionals and continues to grow. ARA offices throughout the United States and Canada provide a broad range of technical expertise in defense technologies, civil technologies, computer software and simulation, systems analysis, environmental technologies, and testing and measurement.

At ARA, employees are our greatest assets. The corporation realizes that employee ownership spawns’ greater creativity and initiative along with higher performance and customer satisfaction levels. ARA gives its employees the tools, training, opportunities and autonomy to take active roles as employee owners. The culture is challenging; innovation and experimentation are the norm. Employees are expected to advance new capabilities to support company’s success, but also their own through the Employee Stock Ownership Plan (ESOP). The core values "Passion, Freedom, Service and Growth" and the motto, "Engineering and Science for Fun and Profit" sum up the ARA experience. For additional information and an opportunity to join this unique workplace, please visit our website at www.ara.com.

Qualifications

Behaviors

Required

• Thought Provoking: Capable of making others think deeply on a subject
• Team Player: Works well as a member of a group
• Detail Oriented: Capable of carrying out a given task with all details necessary to get the task done well
• Dedicated: Devoted to a task or purpose with loyalty or integrity

Motivations

Required

• Self-Starter: Inspired to perform without outside help
• Goal Completion: Inspired to perform well by the completion of tasks
• Ability to Make an Impact: Inspired to perform well by the ability to contribute to the success of a project or the organization

Education

Required

• Bachelors or better in Cybersecurity

Experience

Required

• 2-4 years: Relevant work experience.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws.

For further information, please review the Know Your Rights (https://www.eeoc.gov/poster) notice from the Department of Labor.