Windows & Linux Systems Administrator Staff

Lockheed Martin•Fort Meade, MD

2d•Onsite

About The Position

This position is participating in our External Referral Program. If you know somebody who may be a fit, click here to submit a referral. If your referral is hired, you'll receive a $3000 payment! WHAT WE'RE DOING: Lockheed Martin, Cyber & Intelligence invites you to step up to one of today’s most daunting challenges: the evolving threat of cyber warfare. As a cyber security professional at Lockheed Martin, you’ll protect the networks that our citizens and the world depend upon each minute. Here, you’ll work with cybersecurity experts on the forefront of threat protection and proactive prevention. In this fast-paced, real-world environment, you’ll draw on all your education and experience as well as the resources of Lockheed Martin to keep the threats at bay. THE WORK: The GG System Administrator is a senior level role that blends enterprise system administration (Linux & Windows) with full cycle network engineering, including design, deployment, and support of Arista as well as other vendor platforms. The incumbent will drive automation, security, and DevOps best practices while delivering resilient, high performance infrastructure for mission critical workload.

Requirements

Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education, with ten (10) years or more of professional experience. An additional five (5) years of experience can be substituted for a degree. Considered an expert, authority in discipline.
DOD 8570 certification to meet IAT Level 2 requirements
Possess all capabilities as defined by the GG Statement of work (SOW) Appendix B for the USG standard SA labor category level X.
You must possess the requisite security clearance and polygraphs to apply to this position

Nice To Haves

Experience with container orchestration tools such as Docker Swarm, Kubernetes, or Apache Mesos
Understanding of container networking, service discovery, and load balancing
Familiarity with cloud-native technologies such as cloud providers (AWS, Azure, GCP), container registries (Docker Hub, Google Container Registry), and cloud-based logging and monitoring tools (e.g., ELK Stack, Prometheus)
Experience with monitoring tools such as Nagios, Prometheus, or Grafana
Knowledge of logging tools such as ELK Stack, Splunk, or Logstash
Experience with CI/CD tools such as Jenkins, GitLab CI/CD, or CircleCI
Understanding of pipeline automation, testing, and deployment
Experience with networking protocols (e.g., TCP/IP, HTTP) and storage solutions (e.g., SAN, NAS, Ceph)
RHCE (Red Hat Certified Engineer)
RHCSA (Red Hat Certified System Administrator)
LFCS (Linux Foundation Certified System Administrator)
CKAD (Certified Kubernetes Application Developer)
CKA (Certified Kubernetes Administrator)

Responsibilities

Install, configure, and maintain RHEL/CentOS/Ubuntu/Debian servers and Windows Server 2016/2019/2022 instances.
Manage users, groups, Active Directory, and local security principals.
Provision and manage storage (partitioning, LVM, RAID, SMB/NFS shares).
Perform system hardening, patching, and vulnerability remediation in accordance with DoD STIG/CIS baselines.
Monitor performance, tune kernel/OS parameters, and troubleshoot services.
Develop and maintain Ansible playbooks and roles to automate both Linux and Windows workloads (use of WinRM modules).
Write Bash, PowerShell, and Python scripts for routine tasks, incident response, and reporting.
Operate Ansible Tower/AWX for job scheduling, credential management, and audit trails.
Integrate Git version control workflows for infrastructure as code (IaC).
Design, implement, and troubleshoot enterprise L2/L3 networks (VLANs, routing protocols, QoS, DHCP, DNS).
Arista Specific: Configure Arista EOS switches, leverage CloudVision for centralized provisioning, and automate via eAPI/Ansible modules.
Conduct capacity planning, high availability design, and performance tuning (BGP, OSPF, EVPN, VXLAN).
Implement security controls (ACLs, RADIUS/TACACS+, 802.1X, MACsec) and ensure compliance with DoD requirements.
Enforce DoD 8570 IAT 2 standards; apply DISA STIGs and CIS Benchmarks across hosts and network devices.
Manage secrets, certificates, and role based access controls (RBAC) for both servers and switches.
Perform regular audits, vulnerability scans, and remediation tracking.
Translate technical concepts into clear business value for stakeholders.
Provide Tier 3 support and knowledge transfer to Tier 1/2 service teams.
Document designs, runbooks, and SOPs in Confluence/SharePoint and maintain configuration libraries in Git.