Systems Administrator (HBSS/MDE Admin)

Sarela Technology Solutions LLC; Fort Belvoir (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Opportunities for technical growth

Collaborative work environment

Job summary

A leading IT services firm in Fort Belvoir, VA is looking for a Senior HBSS Administrator to manage cybersecurity operations for federal clients. The ideal candidate will ensure the security and integrity of IT systems by utilizing tools like Trellix and Microsoft Defender, applying Security Technical Implementation Guides (STIGs) and managing patches. An active DoD TS/SCI Clearance is mandatory. If you’re skilled in incident response and compliance in IT, we want you to join our mission-focused team.

Qualifications

• Experience with Risk Management Framework (RMF), NIST, ICD, CNSS standards.
• Expertise in STIG compliance and vulnerability management in a classified environment.

Responsibilities

• Continuous monitoring and response to security events using Endpoint Security tools.
• Implement and maintain STIG compliance on Endpoint Security tools.
• Manage and deploy operating system and application patches.

Skills

Security Technical Implementation Guides (STIGs)

Endpoint Security tools (Trellix, Microsoft Defender)

Compliance with federal cybersecurity standards

Incident response skills

Effective communication skills

Education

BS bachelor's degree with 8-12 years' experience or 6-10 years of IA experience

Tools

SCAP Compliance Checker

STIG Viewer

Microsoft Windows

Linux

Job description

SarelaTech is seeking a skilled Senior HBSS Administrator in Fort Belvoir, VA to join the I3TS team supporting DTRA. The I3TS program provides enterprise-wide IT support to enable DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA’s internal and external mission partners operating in CONUS and OCONUS locations.

The candidate will be responsible for ensuring the security and integrity of IT systems by running their Endpoint Security with experience in Trellix and Microsoft Defender. Administrator will also be responsible in applying Security Technical Implementation Guides (STIGs), managing system patches, and overseeing vulnerability management processes. This role supports federal clients in maintaining compliance with the Department of Defense (DoD) and other federal cybersecurity standards.

The candidate will be responsible for identifying points of vulnerability, non-compliance with established Information Assurance (IA) guidelines and regulations and recommend mitigation strategies, along with assisting users as needed in a classified computing environment. The selected candidate must be able to work independently as well as with a team of IT analysts, administrators, and engineers. The position requires excellent communications skills, both verbal and written. The candidate must be able to work in a high-energy environment and adapt to shifting priorities.

**Must possess an active DoD Clearance at time of consideration**

Key Responsibilities:

Continuous upkeep, monitoring, analysis, and response to Information System, network and security events using Endpoint Security tools such as Trellix and Microsoft Defender.

STIG Application and Compliance:

Implement and maintain Security Technical Implementation Guides (STIGs) on Endpoint Security Tools.

Conduct regular STIG compliance checks using tools like SCAP Compliance Checker and STIG Viewer.

Document STIG configurations and remediation actions to ensure audit readiness.

Patching and System Updates:

Manage and deploy operating systems and application patches in accordance with federal patch management policies.

Coordinate patch schedules to minimize operational impact while meeting compliance deadlines.

Verify patch deployment success and troubleshoot any issues arising from updates.

Harden systems by applying best practices and federal security guidelines to reduce attack surfaces.

Maintain configuration baselines and ensure systems adhere to DoD and NIST standards.

Participates in internal/external security audits/inspections; performs risk assessments and Continuous Monitoring.

Assist in identifying and responding to security incidents related to vulnerabilities or misconfigurations.

Document incidents and contribute to after-action reports for continuous improvement.

Collaboration and Reporting:

Work closely with system administrators, engineering staff, and compliance teams to ensure cohesive security operations.

Prepare detailed reports and briefings for federal clients on STIG compliance, patching status, and vulnerability management efforts.

Develop, implement and enforce Information Security Policies and Procedures.

Trellix and Microsoft Defender.

Required Qualifications

BS bachelor’s degree with 8-12 years’ experience or 6-10 years of IA experience without a degree. Specific experience, education and training may be considered in lieu of degree.

HBSS 301 Certification

Understanding of the Risk Management Framework (RMF), NIST, ICD, and CNSS standards.

Familiarity with network technologies (LAN & WAN) and best practices within a classified environment to include crypto and key management

STIG compliance, SCC and STIG Viewer experience, and ACAS expertise.

Expert with Microsoft Windows, Linux, and system virtualization in a secure network environment.

Must be able to work in a constantly changing regulatory environment with short-, mid-, and long-term timelines for remediating any non-compliance

Must be able to work well within a team environment and able to adapt quickly to change

Good writing and verbal presentation skills

Must possess an active DoD TS/SCI Clearance at time of consideration.

About us

Sarela Technology Solutions is a Professional Information Technology (IT) Services company specializing in Cybersecurity Operations, Cybersecurity Compliance, Cloud Engineering, Software Engineering, and Program/Project Management. At SarelaTech, you’ll be part of a mission-focused, values-driven team working on meaningful national defense programs. We prioritize integrity, innovation, and continuous improvement in everything we do. If you thrive in a collaborative environment with opportunities for technical growth and leadership, we want to hear from you.

Vision : Deliver innovative IT and cybersecurity solutions that empower our customers to achieve mission success, today and tomorrow.

Mission : To be the trusted technology partner that enables secure, agile, and mission-driven success across every domain we serve.

Values : Honor, integrity, courage, excellence, commitment, and continuous improvement are embedded in our DNA.