Cybersecurity Tools & Infrastructure Administrator
About The Position
The Cybersecurity Tools & Infrastructure Administrator supports Navy ERP’s core cybersecurity tools across Test and Production environments. The role maintains system health, applies patches, and manages configurations across Red Hat Enterprise Linux, Ubuntu Linux, and Windows Server infrastructure. The administrator works with Security Operations Center (SOC) analysts and system owners to onboard data sources, maintain agent health, and support effective alerting. The position includes maintaining operational readiness, performance, and uptime for Splunk on Linux RHEL 8/9 and Tripwire Enterprise on Windows 2022; monitoring host services, storage, and resource use; patching and upgrading applications; supporting OS patching and hardening; onboarding data sources and configuring Tripwire; troubleshooting issues and coordinating with vendors; and maintaining SOPs and administration runbooks.
Requirements
- At least 4 years administering enterprise cybersecurity applications within DoD or federal IT environments.
- Strong Linux system administration skills, including RHEL and Ubuntu CLI, services, systemd, and package management.
- Working knowledge of Windows Server administration and Active Directory/RBAC concepts.
- Hands-on administration experience with at least one of Splunk Enterprise (distributed indexers, search heads, heavy/universal forwarders) or Tripwire Enterprise (console management, agent deployments, FIM policies).
- DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CCNA Security, CySA+, or equivalent.
- Must be a U.S. Citizen.
- Ability to perform repetitive motions with the hands, wrists, and fingers.
- Ability to engage in and follow audible communications in emergency situations.
- Ability to sit for prolonged periods at a desk and work on a computer.
Nice To Haves
- Splunk Enterprise Certified Admin or Power User certification.
- Relevant OS certifications, such as Red Hat RHCSA/RHCE, Linux+, or Microsoft Windows Server.
- Scripting capability for automation and maintenance using Bash, PowerShell, or Python.
Responsibilities
- Maintain operational readiness, performance, and uptime across test and production environments for Splunk and Tripwire Enterprise.
- Monitor host-level services, disk storage, and resource utilization.
- Execute application-level patching, hotfixes, and software upgrades.
- Support OS-level patching, kernel updates, and hardening alongside host system administrators.
- Maintain system compliance with DoD Security Technical Implementation Guides (STIGs) for cyber team servers.
- Onboard new data sources into Splunk and troubleshoot log ingestion, forwarder issues, and parsing rules.
- Configure the Tripwire Enterprise console, user RBAC, baseline integrity policies, and automated alerts.
- Assist analysts with Splunk data models, dashboards, and automated report generation.
- Diagnose and resolve application crashes, synchronization failures, and connectivity issues.
- Coordinate with commercial vendor support teams, including Splunk and Tripwire, for advanced bug resolution.
- Author, update, and maintain Standard Operating Procedures (SOPs) and system administration runbooks.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
