Tool Administrator and Lab Manager

STOPSO; Winston-Salem (NC); On-site; USD 90,000 - 130,000; Full time

Job summary

STOPSO is seeking a Tool Administrator and Lab Manager to sustain cyber defense sensors, SIEM infrastructure, logging pipelines, and approved test environments at Fort Bragg, NC. The role ensures reliable configurations and safe testing of cyber tools within a Government-approved lab.

Ideal candidates have 3+ years in sensor/SIEM sustainment, DoD qualification, and proficiency with DCWF 521 options; active SECRET clearance is required for access and continuity of mission support.

Qualifications

• Minimum 3 years of relevant experience in cyber defense tooling, SIEM sustainment, and lab operations.
• DoD Cyber Workforce Framework (DCWF) 521, Cyber Defense Infrastructure Support Specialist, Intermediate proficiency.

Responsibilities

• Administer SIEMs, sensors, log collection, data onboarding, parsing, and platform health monitoring.
• Coordinate maintenance, patches, configuration baselines, and change documentation.
• Manage tool authorization records, STIG/SRG implementation, upgrades, testing, rollback, and lifecycle planning.
• Maintain Government-approved DCO lab with controlled access, inventory, backup, and procedures.
• Support malware-analysis and OSINT tooling in labs within approved network boundaries.
• Coordinate with Blue Team, CTI, and Government platform owners on outages and risks.

Job description

Position Summary

Strategic Operational Solutions (STOPSO) is seeking a Tool Administrator and Lab Manager to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Sustain cyber defense sensors, SIEM infrastructure, logging pipelines, and approved test environments. The Tool Administrator and Lab Manager maintains reliable, documented configurations and supports safe testing of cyber tools.

• Administer SIEM, sensors, log collection, data-source onboarding, parsing, and platform health monitoring.
• Troubleshoot faults, coordinate maintenance, apply approved patches and configuration baselines, and document changes.
• Manage tool authorization records, STIG or SRG implementation, upgrade testing, rollback, and lifecycle planning.
• Maintain an isolated Government-approved DCO lab with documented access, separation, inventory, backup, and operating procedures.
• Support authorized malware-analysis and OSINT tooling in the lab without crossing approved network boundaries.
• Coordinate with Blue Team, CTI, and Government platform owners on outages, enhancements, and technical risks.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Position Summary

Strategic Operational Solutions (STOPSO) is seeking a Tool Administrator and Lab Manager to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Sustain cyber defense sensors, SIEM infrastructure, logging pipelines, and approved test environments. The Tool Administrator and Lab Manager maintains reliable, documented configurations and supports safe testing of cyber tools.

• Administer SIEM, sensors, log collection, data-source onboarding, parsing, and platform health monitoring.
• Troubleshoot faults, coordinate maintenance, apply approved patches and configuration baselines, and document changes.
• Manage tool authorization records, STIG or SRG implementation, upgrade testing, rollback, and lifecycle planning.
• Maintain an isolated Government-approved DCO lab with documented access, separation, inventory, backup, and operating procedures.
• Support authorized malware-analysis and OSINT tooling in the lab without crossing approved network boundaries.
• Coordinate with Blue Team, CTI, and Government platform owners on outages, enhancements, and technical risks.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Essential Duties And Responsibilities

• Administer SIEM, sensors, log collection, data-source onboarding, parsing, and platform health monitoring.
• Troubleshoot faults, coordinate maintenance, apply approved patches and configuration baselines, and document changes.
• Manage tool authorization records, STIG or SRG implementation, upgrade testing, rollback, and lifecycle planning.
• Maintain an isolated Government-approved DCO lab with documented access, separation, inventory, backup, and operating procedures.
• Support authorized malware-analysis and OSINT tooling in the lab without crossing approved network boundaries.
• Coordinate with Blue Team, CTI, and Government platform owners on outages, enhancements, and technical risks.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Education and Experience

• Minimum 3 years of documented relevant experience. Relevant sensor and SIEM sustainment, systems administration, cyber tooling, configuration management, and test lab experience.
• DoD Cyber Workforce Framework (DCWF) 521, Cyber Defense Infrastructure Support Specialist, Intermediate proficiency.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work. Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.
• Current matrix-listed certification options for 521 Intermediate: CEH, Cloud+, CySA+, GMON, GRID, GSEC, PenTest+, SSCP, Security+.

Knowledge, Skills And Abilities

• Demonstrated knowledge of Cyber defense infrastructure, SIEM and sensor sustainment, configuration management, logging, secure lab operations, and change control.
• Proficiency with SIEM and sensor platforms, operating systems, virtualization, logging pipelines, STIG tools, and lab management systems appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.

Preferred Qualifications

• Experience with isolated cyber labs, tool authorization, and upgrade rollback.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Security Clearance

Active SECRET clearance and ability to maintain assigned system access. U.S. citizenship is required.

Supervisory Responsibilities

No formal supervisory responsibilities; coordinates technical work and lab access within assigned authority.

Work Environment And Physical Requirements

Work is primarily performed on site in a secure Government facility using computer systems and standard office equipment. The employee must be able to perform sustained computer-based analysis or coordination, communicate effectively, and support operational activities outside standard business hours when assigned. Mission-essential watch roles may include shifts, weekends, and holidays.

Travel

Occasional local, CONUS, or OCONUS travel may be required for authorized mission activities, exercises, assessments, or conferences.

Equal Employment Opportunity

STOPSO is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law.