Classified Systems Administrator

Saronic Technologies•Austin, TX

12d

About The Position

Saronic Technologies is seeking a Senior Systems Administrator to administer assigned classified authorization boundaries, including facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, and SAP carve-outs) and supporting lab and product systems. The role owns secure system builds, hardening, operations, account administration, and technical evidence needed by the ISSO for authorization to operate (ATO) and continuous monitoring. Responsibilities may overlap across TACLANE, cross-domain solutions (CDS), COMSEC handling, and platform integration. The administrator will maintain classified servers, workstations, virtualization, storage, appliances, and assigned network infrastructure in coordination with Network Engineering. Work includes systems provisioning and sustainment, implementing technical security controls, vulnerability remediation, account and credential management, audit logging, incident response support, documentation, inspection readiness, and authorized support for TACLANE/Type-1 devices and CDS components. The position also supports assessments and may require travel to sites, shipyards, and integration events to install, recover, and sustain classified systems. The role requires U.S. citizenship and an active TS clearance with SCI eligibility. Candidates must have at least five years of systems or infrastructure administration experience, including classified environments, and appropriate DoD 8140 qualification for Systems Administrator or privileged access (Security+ CE or approved equivalent). Travel is 30–40% of the time, sometimes on short notice.

Requirements

U.S. citizen.
Active TS clearance with SCI eligibility.
At least 5 years of systems/infrastructure administration experience, including classified DoD, IC, SAP, or equivalent environments.
Hands-on Windows and/or Linux administration experience.
Experience with AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management.
Experience with STIG/SRG hardening, patching, ACAS/SCAP or equivalent, and RMF evidence production for NIST SP 800-53/CNSSI 1253 technical controls.
Working knowledge of TCP/IP, VLANs, routing and switching, and firewalls sufficient to troubleshoot with Network Engineering.
Familiarity with COMSEC, CCI, Type-1 encryption, and TACLANE employment.
DoD 8140 qualification appropriate to Systems Administrator/privileged access, such as Security+ CE or an approved equivalent.
Ability to work independently in SCIFs and field sites.
Ability to travel 30–40% of the time, including on short notice.

Nice To Haves

Direct TACLANE or CDS experience.
Experience with SIPR, JWICS, SAP, PIT/platform IT, unmanned/autonomous systems, or GFI/GFE administration.
Navy/NAVWAR/FLTCYBERCOM, DCSA DAAG, SOCOM, CSfC, ICD 705/TEMPEST, GDMS TACLANE training, or CDSE COMSEC/CDS coursework.
Prior partnership with a COMSEC Account Manager or prior Custodian appointment.

Responsibilities

Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.
Build and maintain systems according to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines.
Execute provisioning, patching, firmware updates, certificate management, backup and recovery, and configuration changes through change control.
Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements.
Run SCAP, STIG Viewer, ACAS, or equivalent tools; remediate findings within required timelines; and provide evidence for ATO, continuous monitoring, POA&M closure, and inspections.
Administer user, privileged, service, and group accounts based on approved authorization; enforce least privilege and deprovision accounts on required timelines.
Protect administrator credentials, PAWs, tokens, and certificates.
Configure audit logging, time synchronization, retention, and forwarding to the accredited collector or SIEM; support incident response while preserving logs and system state.
Support classified network infrastructure in coordination with the Network Engineer, including management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.
Provide authorized hands-on support for TACLANE/Type-1 devices and CDS components, including configuration backups, firmware, connectivity testing, logging, and restoration.
Coordinate keying, fill, CIK/token, and zeroize activities with appointed COMSEC personnel; do not make unauthorized CDS filter or policy changes.
Handle CCI/COMSEC-associated equipment within training and authorization, maintain accountability of assigned CCI, and immediately report suspected loss, compromise, tampering, or inventory discrepancies.
Maintain as-builts, inventories, IP/hostname records, SOPs, build and hardening guides, and recovery procedures; keep systems inspection-ready.
Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.
Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including assigned support for GFI/GFE and payload-adjacent hosts.

Benefits

Comprehensive medical insurance; Saronic pays 100% of employee premiums and 80% of dependent premiums.
Dental and vision insurance; Saronic pays 100% of the basic-plan employee premium and 80% of dependent premiums.
Generous paid time off and holidays.
Paid maternity and paternity leave.
Competitive salary with opportunities for performance-based bonuses.
401(k) plan with company match.
Stock options.
Basic life insurance and short- and long-term disability coverage.
Discounted pet insurance, including a 24/7 Telehealth helpline.
Free lunch benefit and unlimited free drinks and snacks in the office.