York Space Systems is seeking a System Administrator whose responsibilities include ensuring compliance with government requirements pertaining to computer systems processing classified information. The selected candidate will support classified system efforts and will perform tasks that include hardware/software configuration management (to include baseline configuration), risk assessments/vulnerability assessments, testing and documenting security controls, and ensuring overall cybersecurity compliance. The ideal candidate will have experience spanning an array of different platforms/systems and will take initiative in collaboration between cross-functional teams. The candidate must be comfortable collaborating with stakeholders to meet system requirements.
Responsibilities:
- Providetechnical inputs as needed for ground assetsin support of classified systems
- Assistwith thedeploymentand configuration ofcollection services and tools
- Collaborate with stakeholders to integrate cyber requirements into space assets throughout production and operation phases
- Continuously evaluate/maintainsystembaseline incompliancewith accreditationrequirement
- Maintain system boundary security configurations to include patch management, vulnerability remediation, implementing STIGs, and anyadditionalsystem security configurations as needed
- Implement systems administration tasks associated withcybersecurity controlin accordance withapplicable regulatory guidance and contractual requirements
- Assistwithvalidation and remediation validation of network servers, routers, and switches to ensure theycomply withsecurity policy, procedures, and technical requirements
- Assistwith the establishment ofsecured host baseline (SHB) imagesto be applied to multiple operating systems and DISA STIGs
- Perform vulnerability testing using system test tools (i.e., ACAS/Nessus, Security Content Automation Protocol (SCAP), and/or Security Technical Implementation Guides (STIGs)) and remediate flaws within directedtimeframe
- Perform backups and configuration of backuprepositoryIAW system monitoring plans
- Identifyand develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories
- Ensure that hardware, software, data, and facility resources are archived, sanitized, or disposed of in a manner consistent with system security plans and requirements
- Participate in the change management process, and assess systemimpact of proposed changes
- Reportall security-related concerns and changes that may affect the system
- Provideproactivesystem administrationsupport
- Other duties asdeemedappropriate forthis position
RequiredQualifications:
- Bachelor’sDegree in Information Technology, Information Systems Security, Cybersecurity, or related fieldor5years ofdirectlyrelatedexperience
- Minimum2years' experience in a systems administrationposition for theU. Sgovernment ora U.S.government contractor
- Security+ certification or equivalent
- CurrentlypossessaTop Secretclearance or higher
- Proficientin Microsoft Windows and Linux operatingsystems
- Experience using DISA Security Technical Implementation Guides (STIGs), Security Requirements Guide (SRGs)and Security Content Automation Protocol (SCAP) to securely configure network-enabled devices
- Experience with anti-virus, Vulnerability Assessment, HIDS/NIDS, McAfee HBSS, Multi Factor Authentication (MFA), and Security Incident and Event Management (SIEM) and centralized auditing tools (Splunk preferred)
- Willingness to work full-time in our Greenwood Village, CO office; this position does not support remote or hybrid work.
Preferred Experience:
- Experience in computer hardware and software operatingsystems and application solutions in both stand-alone and LAN/WAN configurations
- Ability to remediate security vulnerabilities by implementing solutions on networkeddevices and applicationsthrough malware identification, containment, and eradication
- Independentlycapableofidentifyingsystemvulnerabilities
- Experience in conducting software due diligence with COTS and GOTS solutions
- Knowledge of IT security principles and methods (e.g., firewalls,demilitarized zones, encryption)
- Knowledge of PKI, multi-factor authentication, and entitlements management
- Working knowledge of virtualization technologies
- Working knowledge of scripting/programming languages (PowerShell, Python, BASH)
- Operational knowledgeofswitches/routers/firewalls
- Strong communicationand documentation skills
- Positive, self-motivatedindividualwho can complete tasks independently