Engineering System Administrator, Principal

Centrus Global • Oak Ridge, TN

4d • Onsite

About The Position

Systems Engineer / Systems Architect – Operational Technology (OT), Control Systems & DOE Critical Infrastructure. Make an Impact Where It Matters Most. Are you energized by solving complex engineering challenges that directly support national security, energy reliability, and scientific innovation? We’re looking for a Systems Engineer / Systems Architect who thrives in mission‑critical environments and is ready to take on a role where their work truly makes a difference. In this position, you’ll design, secure, and sustain the control systems and OT infrastructures that keep essential DOE and energy‑sector operations running—spanning nuclear facilities, accelerator systems, experimental platforms, and site‑wide operational technologies. You’ll work at the intersection of OT engineering, cybersecurity, facility operations, and research programs to deliver resilient, well‑architected systems aligned with NIST frameworks and DOE requirements. If you enjoy systems engineering with real‑world impact, this is a unique opportunity.

Requirements

• 5–10+ years as a Systems Engineer or Architect, including 3+ years supporting OT/ICS or critical infrastructure.
• Strong experience with Windows/Linux administration, virtualization (VMware, Hyper‑V, KVM), and storage systems.
• Background with SCADA/ICS architectures, HMIs, engineering workstations, and historians.
• Working knowledge of NIST cybersecurity frameworks.
• Hands‑on experience with configuration management, patching, imaging, and lifecycle processes.
• Experience supporting operational environments such as energy, nuclear, accelerator, national lab, or 24/7 mission systems.
• Ability to collaborate seamlessly across engineering, cybersecurity, operations, and research groups.
• Must be eligible for a Q clearance.
• In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
• This position will require a pre­-employment background check and a pre-employment drug test.

Nice To Haves

• Certifications: CISSP, Security+, GICSP, Microsoft/Linux engineering certs, VMware VCP, Red Hat, ISA/IEC 62443.
• Experience in secure or high‑hazard environments (nuclear, accelerator, etc.).
• Familiarity with OT monitoring tools (Nozomi, Claroty, Dragos) and SIEM platforms.
• Background designing resilient architectures for scientific or experimental workloads.
• Experience with cyber assessments and configuration management processes.

Responsibilities

• Build secure, resilient system architectures for high‑consequence OT and control‑system environments.
• Design solutions aligned with NIST 800‑82, NIST 800‑53/171, and ISA/IEC 62443.
• Engineer systems supporting SCADA, PLC/DCS, building automation, power distribution, and other mission systems.
• Define architectures for deterministic behavior, high availability, and fault tolerance.
• Maintain configuration baselines, lifecycle documentation, and system design records.
• Deploy and manage Windows/Linux servers, virtualization platforms, storage, and clustered systems.
• Integrate OT/ICS systems with authentication, monitoring, patching, and secure remote access services.
• Support SCADA/HMI servers, historians, engineering workstations, and other OT workloads.
• Ensure secure, reliable data flows between OT and enterprise/DMZ environments.
• Develop inventories, diagrams, SOPs, and configuration documentation.
• Implement required NIST‑aligned security controls and DOE cybersecurity directives.
• Support vulnerability management, patching, and secure system baselines.
• Participate in cyber and operational readiness assessments.
• Integrate systems with cybersecurity monitoring, logging, and detection platforms.
• Support privileged access, vendor access, and secure identity workflows in OT spaces.
• Create safe automation using PowerShell, Python, Ansible, or similar tools.
• Deploy and maintain monitoring and observability platforms (Splunk, Elastic/Grafana, SolarWinds, Nozomi/Claroty).
• Perform root‑cause analysis and support cyber or operational incident response.
• Continuously improve system reliability and performance in mission‑critical contexts.

Benefits

• We prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed