Cybersecurity System Administrator

Idaho National Laboratory•Idaho Falls, ID

5d•Onsite

About The Position

The Cybersecurity System Administrator develops, implements, and maintains cybersecurity technical controls and operational systems, helping protect critical cyber defense infrastructure and key resources. The role applies defense-in-depth principles, evaluates compliance with regulations and organizational directives, coordinates threat information with intelligence analysts, and performs technical and operational risk and vulnerability assessments. It may also conduct reviews such as Technical Surveillance Countermeasure (TSCM) and TEMPEST countermeasure reviews. The position builds, installs, configures, and tests dedicated cyber defense hardware; administers specialized cyber defense applications and systems, including antivirus, audit, remediation, and VPN systems; and maintains test beds for evaluating applications, infrastructure, rules, signatures, access controls, and configurations. The administrator manages network access control lists, monitors external threat information sources, coordinates updates to rules and signatures with Cyber Defense Analysts, and identifies conflicts arising from cybersecurity tools. The role follows software and systems engineering life-cycle processes, develops and monitors metrics, and implements and documents RMF/SA&A requirements for dedicated cyber defense systems. This is a multi-level position, with placement based on the depth and breadth of demonstrated experience and skills. The position requires U.S. citizenship and the ability to obtain and maintain a DOE “L” or “Q” clearance; an additional HRP certification and security clearance may also be required. Work is performed in office and laboratory settings, with laboratory field work exposed to variable weather and potential hazards. Periodic travel, safety training, occasional special shifts or weekend work, and shifts longer than eight hours may be required. The position includes information security and privacy responsibilities, including required training and compliance with applicable policies and access agreements.

Requirements

U.S. citizenship.
Ability to obtain and maintain a DOE “L” or “Q” clearance.
May be required to obtain and maintain an additional security clearance and Human Reliability Program certification.
Bachelor’s degree from an accredited institution, or the stated level-specific education and experience combination.
Level 1: High school diploma and 6 years of relevant experience, or a bachelor’s degree; the level definer also lists a bachelor’s degree and 0 years of experience for EX1.
Level 2: High school diploma and 8 years of relevant experience, a bachelor’s degree and 2 years of experience, or a master’s degree; the level definer also lists a master’s degree and 0 years, or a Ph.D. and 0 years, for EX2.
Experience commensurate with the assigned level.
Ability to meet the physical requirements of the position, including occasional lifting or moving of up to 50 pounds without assistance, with reasonable accommodations as applicable.
Ability to work occasional special shifts or weekends, shifts longer than 8 hours per day, and alone when required.

Nice To Haves

Bachelor’s degree in a related technical field, such as computer science or computer engineering.
Experience working with AI.
Security+ certification or experience.
General experience with Splunk.
Direct technical experience working in enhanced security environments.

Responsibilities

Assist in identifying, prioritizing, and coordinating protection of critical cyber defense infrastructure and key resources.
Employ approved defense-in-depth principles and practices.
Develop, implement, and maintain cybersecurity technical controls and operational systems.
Analyze cyber defense policies and configurations and evaluate compliance with regulations and organizational directives.
Coordinate with intelligence analysts to correlate threat assessment data.
Conduct applicable reviews, including TSCM and TEMPEST countermeasure reviews.
Perform technical and nontechnical risk and vulnerability assessments of relevant technology focus areas.
Develop and conduct cybersecurity-related human performance improvement projects.
Build, install, configure, and test dedicated cyber defense hardware.
Administer specialized cyber defense applications and systems or VPN devices, including installation, configuration, maintenance, backup, and restoration.
Administer test beds and test and evaluate applications, hardware infrastructure, rules and signatures, access controls, and platform configurations managed by service providers.
Create, edit, and manage network access control lists on specialized cyber defense systems such as firewalls and intrusion prevention systems.
Identify potential conflicts in implementing cyber defense tools, including through tool and signature testing and optimization.
Monitor external data sources to maintain awareness of cyber defense threat conditions and determine potential enterprise impacts.
Coordinate with Cyber Defense Analysts to manage and administer updates to rules and signatures for specialized cyber defense applications.
Follow software and systems engineering life-cycle standards and processes.
Develop applicable metrics and monitor results.
Implement RMF/SA&A requirements for dedicated cyber defense systems and document and maintain records.
Complete initial and annual role-specific information security and privacy training, sign required access agreements, and comply with applicable policies and procedures.
Perform other duties as assigned.