System Administrator (Clearance Required)

Location: Fort Meade, MDClearance Required: Top Secret/SCI with Active Full Scope PolygraphWe are seeking an experienced Linux-focused System Administrator (Level 2) to support a mission-critical program within the Intelligence Community at Fort Meade, MD. This is an on-site position in a Sensitive Compartmented Information Facility (SCIF) environment requiring a TS/SCI clearance with an active Full Scope Polygraph prior to consideration. The successful candidate will be responsible for the day-to-day administration, security compliance, and operational health of complex Linux-based infrastructure spanning virtualized environments, container platforms, and classified networked systems.The SA Level 2 operates with a high degree of independence and serves as a technical authority on Linux systems engineering, PKI/cryptographic policy enforcement, storage management, IP networking, and security compliance. This role carries significant responsibility for System Security Plan (SSP) maintenance, STIG implementation, and supporting Secure Telephone Equipment/Network (STE/STN) infrastructure within a heavily regulated RMF/NIST framework.Key Responsibilities:Linux Systems AdministrationAdminister, configure, harden, and maintain Red Hat Enterprise Linux (RHEL), Rocky Linux, and/or CentOS Stream server environmentsApply and maintain DISA STIG configurations using OpenSCAP and other SCAP-compliant tooling; remediate findings from automated scansManage system performance tuning, patch management (yum/dnf), software package management, and OS lifecycle operationsConfigure and manage system services, daemons, scheduled tasks, logging (rsyslog/journald), and audit frameworks (auditd)Provide Tier 1 and Tier 2 application support and general troubleshooting across all Linux-based systemsSecurity Compliance - SSP, RMF, and STIGSupport ongoing System Security Plan (SSP) development, maintenance, and compliance activities in accordance with NIST SP 800-53 Rev 5 controlsConduct and document Risk Management Framework (RMF) activities including control implementation statements, POA&M tracking, and continuous monitoringPerform and respond to vulnerability assessments; coordinate CVE remediation and ensure timely patchingMaintain system authorization boundaries, support A&A activities, and coordinate with the ISSO/ISSMEnforce DoD crypto policies including FIPS 140-2/140-3 mode configurationSTE/STN SupportInstall, configure, and maintain Secure Telephone Equipment (STE) and Secure Telephone Network (STN) infrastructureCoordinate STE/STN provisioning, moves, adds, and changes (MACs) with communications and security personnelTroubleshoot STE/STN connectivity and interoperability issuesMaintain accurate inventory and documentation for all STE/STN endpointsPKI, TLS, and Cryptographic ManagementManage DoD PKI operations including certificate issuance, renewal, revocation, and trust store managementConfigure and maintain TLS/SSL for system services and applicationsAdminister hardware security modules (HSMs) and software-based key management systems where deployedApply and enforce system crypto policies to ensure FIPS compliance across all managed systemsContainers and Cloud EnvironmentsDeploy, operate, and maintain containerized workloads using Docker and/or PodmanAdminister Kubernetes or OpenShift container orchestration clusters within classified/air-gapped environmentsManage container image pipelines including base image hardening, vulnerability scanning, and approved image registriesSupport lifecycle management of containerized applicationsVirtualizationAdminister VMware vSphere/vCenter environments including ESXi host managementManage KVM/QEMU-based virtual environments on Linux hostsCoordinate capacity planning and resource optimization across virtualized infrastructureStorage ManagementAdminister NAS and SAN systems; manage LUN provisioning, zoning, and multipath I/OOperate and maintain Ceph distributed storage clustersConfigure and manage LVM, RAID arrays, and filesystem operationsImplement and verify data-at-rest encryption requirementsIP Networking and Firewall ManagementConfigure and manage host-based firewalls (firewalld, iptables/nftables) on Linux systemsTroubleshoot TCP/IP networking issues including routing, DNS, DHCP, VLAN segmentationInterface with network engineers on firewall rule changes and ACLsQualifications:Education: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field. Equivalent experience may be substituted.Experience: 5+ years of system administration experience in classified or secure DoD/IC environments.Additional Required Qualifications:Active TS/SCI clearance with Full Scope Polygraph - must be active prior to startDeep hands-on Linux proficiency across RHEL, Rocky Linux, and/or CentOSDemonstrated experience with DISA STIGs and SCAP compliance scanningWorking knowledge of NIST SP 800-53 controls and RMF processExperience with SSP development and A&A/ATO activitiesHands-on STE/STN installation, configuration, and support experienceSolid understanding of PKI/TLS/cryptographic standards including DoD PKI and FIPS enforcementStrong IP networking fundamentals and host-based firewall managementExperience with container platforms (Docker, Podman, Kubernetes, or OpenShift)Experience with virtualization platforms (VMware vSphere, KVM/QEMU)Storage management experience with NAS, SAN, LVM, and/or distributed storageDoD 8140 IAT Level II compliance (Security+, CASP+, or equivalent)Desired SkillsExperience with Ansible, Puppet, SaltStack, or ChefProficiency in Bash and Python scriptingOpenShift Container Platform experience in classified deploymentsExperience with cross-domain solutions (CDS)Familiarity with DoD cloud environments (AWS GovCloud, C2S)Red Hat RHCSA or RHCE certificationYour recruiter will be happy to walk you through your U.S.-specific benefits, which include:Healthcare Coverage: Comprehensive medical, dental, and vision plans.Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.Retirement Plans: 401(k) plans with company matching.Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.About Kroll Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. In order to be considered for a position, you must formally apply via careers.kroll.com.We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.The current salary range for this position is $100,000 to $150,000#LI-CN1Full timePosting Date: 2026-06-02