Cybersecurity Tools & Infrastructure Administrator

Nakupuna Companies • Charleston, SC

1d

About The Position

The Cybersecurity Tools & Infrastructure Administrator supports Navy ERP’s core cybersecurity tools across Test and Production environments. The role maintains system health, applies patches, and manages configurations across Red Hat Enterprise Linux, Ubuntu Linux, and Windows Server infrastructure. The administrator works with Security Operations Center (SOC) analysts and system owners to onboard data sources, maintain agent health, and support effective alerting.

The position includes administering Splunk and Tripwire Enterprise platforms, monitoring infrastructure health, performing application and operating-system patching, maintaining DoD STIG compliance, configuring tools and data sources, troubleshooting issues, coordinating with vendors, and maintaining operational documentation. The position requires a Public Trust and U.S. citizenship.

Requirements

• At least 4 years administering enterprise cybersecurity applications within DoD or federal IT environments.
• Strong Linux system administration skills, including RHEL and Ubuntu CLI, services, systemd, and package management.
• Working knowledge of Windows Server administration and Active Directory/RBAC concepts.
• Hands-on administration experience with at least one of the following: Splunk Enterprise, including distributed indexers, search heads, and heavy/universal forwarders; or Tripwire Enterprise, including console management, agent deployments, and FIM policies.
• DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CCNA Security, CySA+, or equivalent.
• Must be a U.S. Citizen.
• Must meet the stated physical requirements, with or without reasonable accommodation: perform repetitive motions with the hands, wrists, and fingers; engage in and follow audible communications in emergency situations; and sit for prolonged periods at a desk and work on a computer.

Nice To Haves

• Splunk Enterprise Certified Admin or Power User certification.
• Relevant operating-system certifications, such as Red Hat RHCSA/RHCE, Linux+, or Microsoft Windows Server.
• Scripting capability for automation and maintenance using Bash, PowerShell, or Python.

Responsibilities

• Maintain operational readiness, performance, and uptime across test and production environments for Splunk on Linux RHEL 8/9 and Tripwire Enterprise on Windows Server 2022.
• Monitor host-level services, disk storage, and resource utilization.
• Execute application-level patching, hotfixes, and software upgrades.
• Support OS-level patching, kernel updates, and hardening alongside host system administrators.
• Maintain system compliance with DoD Security Technical Implementation Guides (STIGs) for cyber team servers.
• Onboard new data sources into Splunk and troubleshoot log ingestion, forwarder issues, and parsing rules.
• Configure the Tripwire Enterprise console, user RBAC, baseline integrity policies, and automated alerts.
• Assist analysts with Splunk data models, dashboards, and automated report generation.
• Diagnose and resolve application crashes, synchronization failures, and connectivity issues.
• Coordinate with Splunk and Tripwire commercial vendor support teams for advanced bug resolution.
• Author, update, and maintain Standard Operating Procedures (SOPs) and system administration runbooks.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed