Systems Administrator (Linux & Windows)

Five Stones Research Corporation•Sierra Vista, AZ

3d•Onsite

About The Position

Five Stones Research Corporation (5SRC) is seeking an energetic Systems Administrator to join its established and growing Huntsville-headquartered team. The position is full-time and located at Fort Huachuca, Arizona, with no travel expected. Applicants must be U.S. citizens and hold a Department of Defense (DoD) Secret security clearance. The Systems Administrator manages Microsoft Endpoint Configuration Manager (MECM/SCCM), including endpoint lifecycle management, operating system deployment, application and update distribution, compliance baselines, collections, queries, and reporting. The role administers Linux and Windows servers and workstations, directory and identity services, virtualization and storage infrastructure, database connectivity, user access, and PKI authentication. The position also maintains cybersecurity and compliance across system environments by applying DISA STIGs and SRGs, conducting vulnerability scans and STIG evaluations, remediating vulnerabilities and directives, tracking POA&Ms, maintaining endpoint security tools, and reviewing system and security logs.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related STEM discipline; equivalent relevant professional experience may be substituted.
3–5+ years of hands-on systems administration experience across mixed RHEL Linux and Windows enterprise server/workstation environments.
2+ years of dedicated, hands-on MECM/SCCM administration in an enterprise or lab environment.
Active DoD 8570/8140 IAT Level II baseline certification, such as CompTIA Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP.
Relevant computing environment/vendor training or certification in Microsoft Windows Server/MECM or RHEL, or ability to complete it within six months of hire.
U.S. citizenship.
Active DoD Secret security clearance.

Nice To Haves

Proficiency configuring, operating, and troubleshooting MECM/SCCM, including OSD, application packaging, software update deployments, and collection management.
Strong working knowledge of RHEL administration, CLI troubleshooting, package management, daemon tuning, and SELinux enforcement.
Experience administering Windows Server 2019/2022, Active Directory, Group Policy, and DNS.
Experience with DoD vulnerability and compliance tools, including ACAS (Tenable/Nessus), SCAP Compliance Checker, and STIG Viewer.
Knowledge of enterprise backup technologies, bare-metal server recovery, and Nutanix AHV or VMware virtualization.
Written communication skills for preparing SOPs, weekly status reports, and technical troubleshooting documentation.
Experience administering systems in DoD enterprise testing facilities, operational lab environments, or defense staging enclaves.
PowerShell and Bash scripting skills for administration, reporting, and deployment automation.
Experience managing and troubleshooting enterprise backup appliances such as Cohesity and application whitelisting tools such as fapolicyd.
Familiarity with Elastic Agent/Fleet management, LogRhythm, or enterprise SIEM architectures.
Basic understanding of firewalls, VPNs, F5 BIG-IP load balancers, and cloud hosting environments such as AWS GovCloud.

Responsibilities

Administer MECM/SCCM infrastructure, site systems, distribution points, and client agent health across connected enclaves.
Engineer, test, deploy, and maintain Windows operating system deployment task sequences and standardized golden images.
Package, test, distribute, and automate application installations, scripts, and software updates across workstations and servers.
Manage enterprise software update distribution through Software Update Points integrated with WSUS.
Create and deploy compliance baselines and configuration items to enforce security settings, STIG configurations, registry keys, and audit controls.
Develop MECM queries, device collections, and SSRS reports for inventory, asset discovery, and compliance auditing.
Build, configure, administer, and maintain physical and virtual RHEL servers, Windows Server 2019/2022 systems, and Windows 10/11 workstations.
Manage Active Directory Domain Services, Group Policy Objects, DNS, DHCP, and role-based access control.
Maintain Linux services, SELinux policies and security contexts, systemd and chronyd services, filesystems, logical volumes, and package managers.
Maintain hypervisor and storage infrastructure, including Nutanix, VMware ESXi/vCenter, and backup and restore solutions.
Support basic multi-tier database hosting and connectivity for Oracle and Microsoft SQL Server backends.
Process, approve, and maintain user access documentation and account provisioning through DD Form 2875 and identity management systems.
Issue, configure, and troubleshoot PKI certificates, CAC authentication, and secure remote protocols on client and server endpoints.
Maintain system security in compliance with DISA STIGs and SRGs.
Execute, review, and analyze weekly ACAS/Tenable Nessus vulnerability scans and monthly STIG evaluations.
Remediate CVEs, IAVM alerts, CTO/DTO directives, and vendor patches across Windows and Linux systems.
Draft, track, and update POA&Ms for items requiring architectural mitigation or extended testing.
Maintain endpoint security agents, including Trellix/ePO, EDR, and application whitelisting tools such as fapolicyd.
Monitor and analyze system, security, and application logs using SIEM and centralized log management tools such as LogRhythm and Elastic Fleet.