Engineering System Administrator, Principal

Centrus Energy•Oak Ridge, TN

5d•Onsite

About The Position

Are you energized by solving complex engineering challenges that directly support national security, energy reliability, and scientific innovation? We’re looking for a Systems Engineer / Systems Architect who thrives in mission‑critical environments and is ready to take on a role where their work truly makes a difference. In this position, you’ll design, secure, and sustain the control systems and OT infrastructures that keep essential DOE and energy‑sector operations running—spanning nuclear facilities, accelerator systems, experimental platforms, and site‑wide operational technologies. You’ll work at the intersection of OT engineering, cybersecurity, facility operations, and research programs to deliver resilient, well‑architected systems aligned with NIST frameworks and DOE requirements. If you enjoy systems engineering with real‑world impact, this is a unique opportunity.

Requirements

5–10+ years as a Systems Engineer or Architect, including 3+ years supporting OT/ICS or critical infrastructure.
Strong experience with Windows/Linux administration, virtualization (VMware, Hyper‑V, KVM), and storage systems.
Background with SCADA/ICS architectures, HMIs, engineering workstations, and historians.
Working knowledge of NIST cybersecurity frameworks.
Hands‑on experience with configuration management, patching, imaging, and lifecycle processes.
Experience supporting operational environments such as energy, nuclear, accelerator, national lab, or 24/7 mission systems.
Ability to collaborate seamlessly across engineering, cybersecurity, operations, and research groups.
Must be eligible for a Q clearance.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
This position will require a pre-employment background check and a pre-employment drug test.
This position requires the successful candidate to obtain and maintain a Q security clearance.
Candidates for positions requiring a security clearance are required to be tested for the absence of any illegal drug as defined in 10 CFR 707.4 prior to an offer of employment being made.
In addition, once employe, employees will become part of a random drug testing program and may also be tested in the event of any incident causing injury or causing damage to property, or if it is determined that there is a reasonable suspicion the employee is under the influence of drugs or alcohol.
This position will require preemployment background check on the part of the Company and in order to receive a Q security clearance, a background investigation by the Federal government.
Subsequent Federal government reinvestigations may be required.

Nice To Haves

Certifications: CISSP, Security+, GICSP, Microsoft/Linux engineering certs, VMware VCP, Red Hat, ISA/IEC 62443.
Experience in secure or high‑hazard environments (nuclear, accelerator, etc.).
Familiarity with OT monitoring tools (Nozomi, Claroty, Dragos) and SIEM platforms.
Background designing resilient architectures for scientific or experimental workloads.
Experience with cyber assessments and configuration management processes.

Responsibilities

Build secure, resilient system architectures for high‑consequence OT and control‑system environments.
Design solutions aligned with NIST 800‑82, NIST 800‑53/171, and ISA/IEC 62443.
Engineer systems supporting SCADA, PLC/DCS, building automation, power distribution, and other mission systems.
Define architectures for deterministic behavior, high availability, and fault tolerance.
Maintain configuration baselines, lifecycle documentation, and system design records.
Deploy and manage Windows/Linux servers, virtualization platforms, storage, and clustered systems.
Integrate OT/ICS systems with authentication, monitoring, patching, and secure remote access services.
Support SCADA/HMI servers, historians, engineering workstations, and other OT workloads.
Ensure secure, reliable data flows between OT and enterprise/DMZ environments.
Develop inventories, diagrams, SOPs, and configuration documentation.
Implement required NIST-aligned security controls and DOE cybersecurity directives.
Support vulnerability management, patching, and secure system baselines.
Participate in cyber and operational readiness assessments.
Integrate systems with cybersecurity monitoring, logging, and detection platforms.
Support privileged access, vendor access, and secure identity workflows in OT spaces.
Create safe automation using PowerShell, Python, Ansible, or similar tools.
Deploy and maintain monitoring and observability platforms (Splunk, Elastic/Grafana, SolarWinds, Nozomi/Claroty).
Perform root‑cause analysis and support cyber or operational incident response.
Continuously improve system reliability and performance in mission‑critical contexts.