Cyber Systems Administrator

ECS Tech Inc•MCB Quantico, VA

2d•Onsite

About The Position

Everforth ECS is seeking a highly skilled Linux System Administrator / Cyber Security Administrator to work in our Quantico, VA office. The Linux System Administrator will provide comprehensive IT infrastructure and security support within Department of Defense environments. The selected candidate will be responsible for the administration, maintenance, and security of Linux-based systems hosted within AWS GovCloud and MCCOG environments, while also maintaining enterprise network security infrastructure including F5 Web Application Firewalls, Palo Alto Next Generation Firewalls, and DISA's ACAS vulnerability management platforms. This role requires strong troubleshooting skills, experience with DoD cybersecurity standards, and the ability to support operational and compliance requirements across classified and unclassified networks. The candidate will also provide subject matter expertise in the implementation of Zero Trust in accordance with the DoD Zero Trust Strategy, DoD Zero Trust Reference Architecture, DON Zero Trust Implementation Plan, and supporting USMC direction.

Requirements

Bachelor's degree in IT, Computer Science, or related field (or equivalent experience)
5+ years of Linux system administration (RHEL/CentOS preferred)
5+ years of experience in DoD network/security administration
2+ years hands-on experience with AWS (preferably GovCloud)
CompTIA Security+ CE (required)
Must be a U.S. Citizen
Active DoD Secret security clearance
AWS IAM, VPC, EC2, S3, CloudFormation, CloudWatch
AWS serverless computing services including Lambda, Fargate, and Amazon API Gateway
AWS compliance monitoring tools and practices in GovCloud environments
TCP/IP networking, DNS, DHCP, NFS, SSH, LDAP, VPNs
ACAS/Tenable.sc/Nessus, MDE, and Splunk
F5 BIG-IP (LTM/GTM preferred)
Palo Alto firewalls and Panorama
DISA STIGs and SCAP compliance scanning
RMF/ATO processes
Network segmentation and zero trust concepts
Experience with RAISE 2.0 (Zero Trust) and the ATO Process
Familiarity with Windows and Linux server environments
Experience with configuration management tools such as Ansible, Puppet, or Chef
Experience establishing and maintaining baseline configurations and inventories
Ability to enforce and control security configuration settings
Experience initiating, reviewing, and implementing requests for change
Experience supporting Configuration Management Database (CMDB) to track and document configuration of platform components
Experience implementing Zero Trust architecture principles and strategies in DoD environments
Knowledge of DoD Zero Trust Strategy, DoD Zero Trust Reference Architecture, and DON Zero Trust Implementation Plan
Familiarity with NIST SP 800-204, NIST SP 800-204a-d, NIST SP 800-207, and NIST SP 800-207a
Experience with ISCM planning and implementation
Knowledge of continuous monitoring requirements per DoD policy and regulations

Nice To Haves

Red Hat Certified System Administrator (RHCSA) or RHCE (desired)
CCSP or CASP+ preferred

Responsibilities

Install, configure, maintain, and troubleshoot RHEL/CentOS-based Linux servers within AWS GovCloud and MCCOG infrastructure
Manage EC2 instances, S3, IAM roles/policies, VPCs, security groups, and other AWS services within the GovCloud boundary
Interface with MCCOG teams for provisioning, accreditation, and operational support of cloud-hosted systems
Implement and manage AWS serverless computing services such as Lambda, Fargate, and Amazon API Gateway in AWS GovCloud
Administer, configure, and maintain F5 BIG-IP Advanced Web Application Firewall, Palo Alto Networks Firewall, and ACAS/Tenable SecurityCenter and Nessus scanners
Build and manage virtual servers and policies in BigIP AWAF ASM, LTM, and APM
Implement firewall policies, NAT rules, and application delivery services in Palo Alto NGFW
Provide security architecture, design, and engineering support for new system implementations
Implement and maintain STIG hardening, ACAS/Nessus vulnerability scanning, and ensure compliance with DISA and Marine Corps cybersecurity policies (RMF/ATO)
Conduct vulnerability scans, analyze findings, and coordinate remediation efforts
Support RMF compliance activities and STIG implementation
Support patch management and security hardening initiatives
Conduct Information Systems Continuous Monitoring (ISCM) planning and implementation
Conduct IS environment cyber security assessments as required by DoD policy and regulations
Provide and maintain Risk Analysis and Management
Provide support with Marine Corps Certified Application (MCCA), Operational Directives, Marine Corps Directives (MCD), Marine Forces Cyberspace Command (MFCC) direction, Cyber Protection Team (CPT) support, and ACAS/Microsoft Defender for Endpoint (MDE) support.
Execute scheduled and emergency patching of Linux systems in accordance with IAVM requirements
Configure and maintain system monitoring tools (e.g., CloudWatch, Nagios, Splunk, MDE) to ensure availability and performance SLAs
Develop Bash, Python, or Ansible scripts/playbooks to automate routine administrative tasks
Design and implement disaster recovery (DR) and business continuity solutions for cloud-hosted systems
Manage backup solutions and disaster recovery procedures for Linux systems
Perform capacity management to ensure IT resources are available to satisfy planned needs and are effectively utilized; identify capacity issues and recommend remediation to the COR
Provide ongoing management, monitoring, and optimization of the cloud infrastructure, including compute, storage, and networking resources in AWS GovCloud
Support and maintain MCS and MIP Configuration Management Database (CMDB) to track and document the configuration of platform components
Maintain system documentation including SOPs, network diagrams, and change management records
Maintain and annually revaluate internal Cyber Security Policy and Standard Operating Procedures (SOPs)
Maintain and update change requests in the government's tracking system
Troubleshoot and resolve system outages and security incidents; participate in after-hours support as needed
Participate in incident response and cybersecurity operations
Troubleshoot network connectivity, load balancing, and security-related issues
Work with application teams, database administrators, network engineers, ISSOs, government stakeholders, and the M&RA program office to support mission requirements