CyberSecurity/SysAdmin

Linux-focused System Administrator (Level 2)ALEX is seeking an experienced Linux-focused System Administrator (Level 2) to support a mission-critical program within the Intelligence Community at Fort Meade, MD. This is an on-site position in a Sensitive Compartmented Information Facility (SCIF) environment. The successful candidate will be responsible for the day-to-day administration, security compliance, and operational health of complex Linux-based infrastructure spanning virtualized environments, container platforms, and classified networked systems.The SA Level 2 operates with a high degree of independence and serves as a technical authority on Linux systems engineering, PKI/cryptographic policy enforcement, storage management, IP networking, and security compliance. This role carries significant responsibility for System Security Plan (SSP) maintenance, STIG implementation, and supporting Secure Telephone Equipment/Network (STE/STN) infrastructure within a heavily regulated RMF/NIST framework.Key ResponsibilitiesAdminister, configure, harden, and maintain Red Hat Enterprise Linux (RHEL), Rocky Linux, and/or CentOS Stream server environments.Apply and maintain DISA STIG configurations using OpenSCAP and other SCAP-compliant tooling; Manage system performance tuning, patch management (yum/dnf), software package management, and OS lifecycle operations.Configure and manage system services, daemons, scheduled tasks, logging (rsyslog/journald), and audit frameworks (auditd)Provide Tier 1 and Tier 2 application support and general troubleshooting across all Linux-based systems.Conduct and document Risk Management Framework (RMF) activities including control implementation statements, POA&M tracking, and continuous monitoring.Maintain system authorization boundaries, support A&A activities, and coordinate with the ISSO/ISSM.Enforce DoD crypto policies including FIPS 140-2/140-3 mode configuration.STE/STN SupportInstall, configure, and maintain Secure Telephone Equipment (STE) and Secure Telephone Network (STN) infrastructure.Maintain accurate inventory and documentation for all STE/STN endpoints.PKI, TLS, and Cryptographic ManagementManage DoD PKI operations including certificate issuance, renewal, revocation, and trust store management.Configure and maintain TLS/SSL for system services and applications.Administer hardware security modules (HSMs) and software-based key management systems where deployed.Apply and enforce system crypto policies to ensure FIPS compliance across all managed systems.Containers and Cloud EnvironmentsDeploy, operate, and maintain containerized workloads using Docker and/or Podman.Manage container image pipelines including base image hardening, vulnerability scanning, and approved image registries.Support lifecycle management of containerized applications.VirtualizationAdminister VMware vSphere/vCenter environments including ESXi host management.Manage KVM/QEMU-based virtual environments on Linux hosts.Coordinate capacity planning and resource optimization across virtualized infrastructure.Configure and manage LVM, RAID arrays, and filesystem operations.Implement and verify data-at-rest encryption requirements.IP Networking and Firewall ManagementConfigure and manage host-based firewalls (firewalld, iptables/nftables) on Linux systems.Troubleshoot TCP/IP networking issues including routing, DNS, DHCP, VLAN segmentation.Interface with network engineers on firewall rule changes and ACLs.Required Skills and Qualifications:Deep hands-on Linux proficiency across RHEL, Rocky Linux, and/or CentOSDemonstrated experience with DISA STIGs and SCAP compliance scanningWorking knowledge of NIST SP 800-53 controls and RMF processExperience with SSP development and A&A/ATO activitiesHands-on STE/STN installation, configuration, and support experienceSolid understanding of PKI/TLS/cryptographic standards including DoD PKI and FIPS enforcementStrong IP networking fundamentals and host-based firewall managementExperience with container platforms (Docker, Podman, Kubernetes, or OpenShift)Experience with virtualization platforms (VMware vSphere, KVM/QEMU)Storage management experience with NAS, SAN, LVM, and/or distributed storageDoD 8140 IAT Level II compliance (Security+, CASP+, or equivalent)Desired SkillsExperience with Ansible, Puppet, SaltStack, or ChefProficiency in Bash and Python scriptingOpenShift Container Platform experience in classified deploymentsExperience with cross-domain solutions (CDS)Familiarity with DoD cloud environments (AWS GovCloud, C2S)Red Hat RHCSA or RHCE certificationExperience5+ years of system administration experience in classified or secure DoD/IC environments.EducationBachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field. Founded in 1987 and headquartered in Marshall, VA, ALEX - Alternative Experts, LLC (ALEX) is an ISO 9001:2015-certified Women Owned Small Business that's changing the way government does business by delivering a powerful, industry-leading array of core services to help its clients achieve mission-critical objectives. ALEX provides a variety of benefits designed to help meet the needs of our employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, protected veteran status, or disability. Multiple factors are taken into account with any offer of employment by ALEX, including experience, education, and skills.