Linux System Administrator

Linux System Administrator

Are you passionate about shaping secure, IT systems in classified environments?

Do you want to influence system improvements, implementation decisions, and the overall security posture of advanced technology systems?

If so, we're looking for someone like you to join our team at APL!

We are seeking a Linux System Administrator to join the Weapons and Countermeasures group to support secure Analysis Facilities. In this role, you will apply Risk Management Framework (RMF) principles, develop new IT capabilities in secure networks, and provide advanced system administration across complex classified infrastructures, helping drive innovation, security, and operational excellence. A true mix of technical execution, collaboration with peers in the group and wider organization to solve system administration challenges and establishing Linux standards.

As a Linux Systems Administrator you will...

• Plan, build, validate, deploy, maintain, and upgrade computing and networking infrastructure. Specifically, via system administration of Linux-based systems, modern platforms, and grid servers.
• Recommend and implement changes that meet security protocols, the overall mission, and builds on the engineering team capabilities.
• Design, implement, and enforce system security hardening standards (STIG) in accordance with established compliance frameworks (RMF, NIST, etc.)
• Support installation and management of engineering, scientific, and analysis applications in secure, classified environments such as GitLab and MATLAB.
• Solve complex technical issues that impact system availability, performance, or security.
• Conduct routine system patching, upgrades, performance tuning, and security hardening.
• Integrate Linux systems with Windows platforms to support hybrid workflows in simulation environments.
• Manage a mixed operating system environment to validate new applications, configurations, and upgrades before deployment to production systems.
• Establish new user accounts and provide technical briefing to new users. Support facility and resident classified and unclassified IT needs. Manage user accounts, permissions, authentication services and system resources.
• Collaborate with engineers, cybersecurity staff, and program managers to ensure mission success.
• Develop and maintain operational documentation and standard operating procedures for assigned networks.
• Administer and troubleshoot network infrastructure to include switches, firewalls and type I network encryptors. Common technologies include Cisco, Aruba network switches, GD TACLANES, configuration of VLANS, port channels, routing and network security features.
• Work closely with the Information Assurance team to ensure compliance with DoD cybersecurity requirements. Determine necessary computer and software configurations for compliance with security requirements. Provide technical guidance on the mitigation of identified system vulnerability. Prepare for and support periodic security inspections.
• Build and configure new Linux systems and upgrade existing servers and workstations. Plan and execute software maintenance and upgrade tasks for servers, workstation and network software.
• Participate in the planning of facility, computer hardware, and software upgrades (including purchases) in order to support existing and emerging user needs. Work with users to gather system requirements.

You meet our minimum qualifications for the job if you...

• Have a Bachelor's degree in Computer Science, Information Technology, or related field, or have equivalent experience. 6 years of relevant work experience may be considered in lieu of education.
• Possess 5+ years of professional experience as a Linux systems administrator in secure or complex environments.
• Have 1+ years of experience working with DoD Information Systems. Experience should include independent planning, building, deploying, operating, and troubleshooting Linux workstations and servers.
• Familiarity with one or more of the following: Windows Active Directory, Linux Command line, Ansible, Samba, TCP/IP protocols, Storage Area Networks, Logical Volume Manager (LVM), NetApps, SLURM, virtualization.
• Are a strong teammate with a focus on exchanging information and collaboration.
• Are proficient in various operating systems, including some of the following: Linux operating systems (RHEL7, RHEL8, RHEL9)
• Have knowledge of interoperability between Linux and Windows systems.
• Have experience administering systems in classified environments, with an understanding of secure operations, auditing, and following compliance frameworks (RMF, NIST, etc)
• Have excellent written and verbal communication skills with the ability to collaborate across engineering, program, and security teams.
• Are proactive, self-motivated, and comfortable making technical decisions through supported justifications.
• Hold a current DoD 8570 certification (Security+, CASP, CISSP).
• All work will be onsite in secure facilities with limited access to personal owned devices.
• Hold an Interim Secret level security clearance and can ultimately obtain a Top-Secret level clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship.

You'll go above and beyond our minimum requirements if you...

• Have a M.S. degree in Computer Science, Information Technology or related degree.
• Have demonstrated experience working with the following operating systems and technologies: Windows Server 2022, Windows 11, and Red Hat Enterprise Linux 8, 9, and 10 or greater, Active Directory integration and authentication services, and DNS, Group Policy and cross-platform access issues.
• Experience with security auditing and configuration management tools (Ansible, SPLUNK, ACAS, PURIFILE, etc.)
• Have some experience with programming/scripting languages.
• Possess MSCA, RHCE, CCNA or other relevant certifications
• Are willing and able to travel to remote field locations to support test events (less than 5%)
• Possess current TS/SCI clearance

Minimum Rate $105,000 Annually

Maximum Rate $290,000 Annually