Classified Systems Administrator

Saronic Technologies•Austin, TX

13d

About The Position

Saronic Technologies is seeking a Senior Systems Administrator to support assigned classified authorization boundaries, including facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, and SAP carve-outs) and supporting lab and product systems. The administrator will own secure builds, hardening, operations, account administration, and technical evidence needed by the ISSO for ATO and continuous monitoring. Workstreams are distinct but overlap in TACLANE, CDS, COMSEC handling, and platform integration. The role supports classified environments and requires independent work in SCIFs and field sites, with travel to sites, shipyards, and integration events to install, recover, and sustain classified systems. The position may support GFI/GFE and payload-adjacent hosts when assigned. Travel is 30–40% of the time, sometimes on short notice.

Requirements

U.S. citizen.
Active TS clearance with SCI eligibility.
At least 5 years of systems/infrastructure administration experience, including classified DoD, IC, SAP, or equivalent environments.
Hands-on Windows and/or Linux administration experience, including AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management.
Experience with STIG/SRG hardening, patching, ACAS/SCAP or equivalent, and RMF evidence production for NIST SP 800-53/CNSSI 1253 technical controls.
Working knowledge of TCP/IP, VLANs, routing/switching, and firewalls sufficient to troubleshoot with Network Engineering.
Familiarity with COMSEC, CCI, Type-1 encryption, and TACLANE employment.
DoD 8140 qualification appropriate to Systems Administrator/privileged access, such as Security+ CE or an approved equivalent.
Ability to work independently in SCIFs and field sites.
Ability to travel 30–40% of the time, including on short notice.

Nice To Haves

Direct TACLANE or CDS experience.
Experience with SIPR, JWICS, SAP, PIT/platform IT, unmanned/autonomous systems, or GFI/GFE administration.
Navy/NAVWAR/FLTCYBERCOM, DCSA DAAG, SOCOM, CSfC, ICD 705/TEMPEST, GDMS TACLANE training, or CDSE COMSEC/CDS coursework.
Prior partnership with a COMSEC Account Manager or prior Custodian appointment.

Responsibilities

Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.
Build and maintain systems according to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines; perform provisioning, patching, firmware, certificates, backup and recovery, and configuration changes through change control.
Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements; run SCAP/STIG Viewer/ACAS or equivalent, remediate findings, and provide evidence for ATO, continuous monitoring, POA&M closure, and inspections.
Administer user, privileged, service, and group accounts based on approved authorization; enforce least privilege and timely deprovisioning; protect administrative credentials, PAWs, tokens, and certificates.
Configure audit logging, time synchronization, retention, and forwarding to the accredited collector/SIEM; support incident response by preserving logs and system state.
Support classified network infrastructure in coordination with the Network Engineer, including management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.
Provide authorized hands-on support for TACLANE/Type-1 devices and CDS components, including configuration backups, firmware, connectivity testing, logging, and restoration.
Coordinate keying, fill, CIK/token, and zeroization with appointed COMSEC personnel; do not make unauthorized CDS filter or policy changes.
Handle CCI/COMSEC-associated equipment within training and authorization; maintain accountability of assigned CCI and immediately report suspected loss, compromise, tampering, or inventory discrepancies.
Maintain as-builts, inventories, IP/hostname records, SOPs, build and hardening guides, and recovery procedures; keep systems inspection-ready.
Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.
Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including assigned support to GFI/GFE and payload-adjacent hosts.

Benefits

Comprehensive medical insurance; Saronic pays 100% of the employee premium and 80% of dependent premiums.
Dental and vision coverage; Saronic pays 100% of the basic-plan employee premium and 80% of dependent premiums.
Generous PTO and holidays.
Paid maternity and paternity leave.
Competitive salary and opportunities for performance-based bonuses.
401(k) plan with company match.
Stock options.
Basic life insurance and short- and long-term disability coverage.
Discounted pet insurance options, including a 24/7 telehealth helpline.
Free lunch benefit and unlimited free drinks and snacks in the office.