Systems Administrator (Linux & Windows)

Five Stones Research Corporation•Fort Huachuca, AZ

2d•Onsite

About The Position

Five Stones Research Corporation (5SRC) is seeking a Systems Administrator to support its team in Fort Huachuca, Arizona. The role administers Microsoft Endpoint Configuration Manager (MECM/SCCM), Linux and Windows systems, virtualization and storage infrastructure, identity services, endpoint security, and cybersecurity compliance in a Department of Defense environment. A DoD Secret security clearance and U.S. citizenship are required. No travel is expected. The administrator manages endpoint lifecycle operations, including Windows deployment images and task sequences, application packaging and distribution, software updates, compliance baselines, and inventory and reporting. The role also builds and maintains RHEL and Windows servers and workstations; supports directory, network, and identity services; manages virtualization and backup infrastructure; and assists with database hosting and connectivity. The position maintains security in accordance with DISA STIGs and SRGs, reviews vulnerability scans and STIG evaluations, remediates findings and patches, tracks POA&Ms, maintains endpoint security tools, and monitors logs using SIEM and centralized logging systems. A bachelor's degree in a related STEM discipline is required, though equivalent relevant professional experience may substitute. The position requires 3–5+ years of mixed Linux and Windows systems administration experience, 2+ years of MECM/SCCM administration, an active DoD IAT Level II baseline certification, and relevant vendor or computing-environment training or certification, or the ability to complete it within six months of hire.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related STEM discipline; equivalent relevant professional experience may substitute.
3–5+ years of hands-on systems administration experience across mixed RHEL and Windows enterprise server/workstation environments.
2+ years of dedicated, hands-on MECM/SCCM administration in an enterprise or lab environment.
Active DoD 8570/8140 IAT Level II baseline certification, such as CompTIA Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP.
Relevant computing environment or vendor training/certification in Microsoft Windows Server/MECM or RHEL, or ability to complete it within six months of hire.
Active DoD Secret security clearance.
U.S. citizenship.

Nice To Haves

Proficiency configuring, operating, and troubleshooting MECM/SCCM, including OSD, application packaging, software update deployments, and collection management.
Strong RHEL administration skills, including CLI troubleshooting, package management, daemon tuning, and SELinux enforcement.
Experience with Windows Server 2019/2022, Active Directory, Group Policy authoring and troubleshooting, and DNS.
Experience with ACAS (Tenable/Nessus), SCAP Compliance Checker, and STIG Viewer, including .ckl generation.
Knowledge of enterprise backup technologies, bare-metal server recovery, and Nutanix AHV or VMware virtualization.
Strong written communication skills for SOPs, weekly status reports, and technical troubleshooting documentation.
Experience administering systems in DoD enterprise testing facilities, operational lab environments, or defense staging enclaves.
PowerShell and Bash scripting skills for routine administration, reporting, and deployment automation.
Experience managing and troubleshooting enterprise backup appliances such as Cohesity and application whitelisting tools such as fapolicyd.
Familiarity with Elastic Agent/Fleet management, LogRhythm, or enterprise SIEM architectures.
Basic understanding of firewalls, VPNs, F5 BIG-IP load balancers, and AWS GovCloud.

Responsibilities

Administer MECM/SCCM infrastructure, including site systems, distribution points, and client agent health across connected enclaves.
Engineer, test, deploy, and maintain standardized Windows OSD task sequences and golden images.
Package, test, distribute, and automate application installations, scripts, and software updates across lab and hosting workstations and servers.
Manage enterprise software update distribution through SUP integrated with WSUS.
Create and deploy compliance baselines and configuration items for security settings, STIG configurations, registry keys, and audit controls.
Develop MECM queries, device collections, and SSRS reports for inventory, asset discovery, and compliance auditing.
Build, configure, and maintain physical and virtual RHEL servers, Windows Server 2019/2022 systems, and Windows 10/11 workstations.
Administer AD DS, Group Policy, DNS, DHCP, and role-based access control.
Maintain Linux services, SELinux policies and contexts, systemd and chronyd daemons, file systems, logical volumes, and package managers.
Maintain hypervisor and storage infrastructure, including Nutanix, VMware ESXi/vCenter, and backup and restore solutions.
Support multi-tier database hosting and connectivity for Oracle and Microsoft SQL Server backends.
Process and maintain user access documentation and account provisioning through DD Form 2875 and identity management systems.
Issue, configure, and troubleshoot PKI certificates, CAC authentication, and secure remote protocols.
Maintain system security in compliance with DISA STIGs and SRGs.
Execute, review, and analyze weekly ACAS/Tenable Nessus vulnerability scans and monthly STIG evaluations.
Remediate CVEs, IAVM alerts, CTO/DTO directives, and vendor patches across Windows and Linux systems.
Draft, track, and update POA&Ms for items requiring architectural mitigations or extended test schedules.
Maintain endpoint security agents, including Trellix/ePO, EDR, and application whitelisting tools such as fapolicyd.
Monitor and analyze system, security, and application logs using SIEM and centralized log management tools.