Systems Administrator (Linux & Windows) with Security Clearance

Five Stones Research Corporation; Sierra Vista (AZ); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

401(k) Matching

Dental Insurance

Health Insurance

Life Insurance

Paid Time Off

Parental Leave

Performance Incentives

Tuition Reimbursement

Vision Insurance

Job summary

Five Stones Research Corporation is seeking a Systems Administrator (Linux & Windows) to administer MECM/SCCM, deploy OS images, and manage software updates across the DoD lab environment at Fort Huachuca, AZ. The role requires DoD Secret/DoD-level access and DoD 8570/8140 IAT II baseline certification.

Responsibilities include developing compliance baselines, PKI/CAC handling, and secure remote protocols, with strong emphasis on STIG adherence and log analysis through SIEM tools.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related STEM field (or equivalent experience).
• 3–5+ years of hands-on systems administration across Linux (RHEL) and Windows environments.
• 2+ years of MECM/SCCM administration in enterprise or lab settings.
• Active DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CCNA Security, CySA+, GSEC).
• CE/vendor training in Windows Server/MECM or RHEL, or ability to complete within 6 months.

Responsibilities

• Serve as the primary MECM/SCCM administrator for infrastructure health, site systems, and client health.
• Develop and maintain OSD task sequences and baseline images for Windows deployments.
• Package, test, and automate software installations and updates across lab/workstations and servers.
• Manage software update distribution using WSUS integrated with SCCM.
• Create and deploy compliance baselines and STIG configurations.
• Develop MECM queries, collections, and SSRS reports for inventory and compliance auditing.
• Handle PKI certificates, CAC authentication, and secure remote access.

Skills

Linux administration

Windows administration

MECM/SCCM administration

PowerShell scripting

Bash scripting

AD/Group Policy management

Security best practices

Education

Bachelor's degree in Computer Science / IT / Cybersecurity or related STEM

Tools

MECM/SCCM

WSUS

PKI / CAC

Tenable Nessus / ACAS

STIG/SCAP

LogRhythm / SIEM

Job description

Systems Administrator (Linux & Windows) Position Overview Type: Full-Time Location: Fort Huachuca, AZ Travel: None expected Clearance: Department of Defense (DoD) Secret security clearance. Work Authorization: U.S. Citizenship required Summary/Objective Five Stones Research Corporation (5SRC) is seeking energetic candidates to join our established and growing Huntsville-headquartered team.

Essential Functions

• Serve as the primary administrator for Microsoft Endpoint Configuration Manager (MECM / SCCM), managing infrastructure health, site systems, distribution points, and client agent health across all connected enclaves.
• Engineer, test, deploy, and maintain standardized Windows Operating System Deployment (OSD) task sequences and baseline golden images.
• Package, test, distribute, and automate application installations, scripts, and software updates across heterogeneous lab and hosting workstations and servers.
• Manage and orchestrate enterprise-wide software update distribution using Software Update Points (SUP) integrated with Windows Server Update Services (WSUS).
• Create and deploy custom compliance baselines and configuration items (CIs) to enforce security settings, STIG configurations, registry keys, and audit controls.
• Develop custom MECM queries, device collections, and reports (SSRS) to provide real-time hardware/software inventory, asset discovery, and compliance auditing.
• Issue, configure, and troubleshoot Public Key Infrastructure (PKI) certificates, CAC authentication, and secure remote protocols across all client and server endpoints.

Cybersecurity, Vulnerability Management & Compliance

• Maintain strict system security posture in compliance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Execute, review, and analyze weekly Assured Compliance Assessment Solution (ACAS / Tenable Nessus) vulnerability scans and monthly STIG evaluations.
• Rapidly remediate identified CVEs, IAVM alerts, CTO/DTO directives, and vendor patches across both Windows and Linux fleets.
• Draft, track, and update Plans of Action and Milestones (POA&Ms) for items requiring architectural mitigations or extended test schedules.
• Maintain endpoint security agents across all hosts, including Trellix/ePO agents, endpoint detection and response (EDR), and application whitelisting tools (e.g., fapolicyd).
• Monitor and analyze system, security, and application logs using SIEM and centralized log management tools (e.g., LogRhythm, Elastic Fleet).

Required Qualifications:

• Minimum of a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related STEM discipline (equivalent relevant professional experience may be substituted in lieu of degree).
• Minimum of 3-5+ years of hands-on systems administration experience across mixed Linux (RHEL) and Windows enterprise server/workstation environments.
• Minimum of 2+ years of dedicated, hands-on administration of Microsoft Endpoint Configuration Manager (MECM / SCCM) in an enterprise or lab environment.
• Active DoD 8570/8140 IAT Level II Baseline Certification (e.g., CompTIA Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP).
• Relevant computing environment (CE) / vendor training or certification in Microsoft Windows Server/MECM or Red Hat Enterprise Linux (or ability to complete within 6 months of hire).

Preferred Qualifications:

• Demonstrable proficiency configuring, operating, and troubleshooting MECM/SCCM (OSD, application packaging, software update deployments, collection management).
• Strong working knowledge of Linux administration, specifically Red Hat Enterprise Linux (RHEL), CLI troubleshooting, package management, daemon tuning, and SELinux enforcement.
• Solid experience with Windows Server (2019/2022) administration, Active Directory, GPO authoring/troubleshooting, and DNS.
• Experience with DoD vulnerability and compliance tooling: ACAS (Tenable/Nessus), SCAP Compliance Checker (SCC), and STIG Viewer (.ckl generation).
• Understanding of enterprise backup technologies, bare-metal server recovery, and hypervisor virtualization (Nutanix AHV, VMware).
• Excellent written communication skills for authoring Standard Operating Procedures (SOPs), weekly status reports, and technical troubleshooting documentation.
• Prior experience administering systems within DoD enterprise testing facilities, operational lab environments, or defense staging enclaves.
• Proficiency with PowerShell scripting and Linux Shell (Bash) scripting to automate routine administration, reporting, and deployment tasks.
• Hands-on experience managing and troubleshooting enterprise backup appliances (e.g., Cohesity) and application whitelisting tools (e.g., fapolicyd).
• Familiarity with Elastic Agent/Fleet management, LogRhythm, or enterprise SIEM architectures.
• Basic understanding of perimeter network components (firewalls, VPNs, F5 BIG-IP load balancers) and cloud hosting environments (AWS GovCloud).

What We Offer:

• 401(k) Matching
• Company Events
• Dental Insurance
• Employee Recognition Programs
• Health Insurance
• Life Insurance
• Paid Time Off
• Parental Leave
• Performance Incentives
• Student Loan Repayment
• Tuition Reimbursement
• Vision Insurance

This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted