Windows/SQL Sys Admin for PAM

BAE Systems•Herndon, VA

About The Position

BAE Systems is seeking a skilled Windows/SQL Systems Administrator to support the establishment and integration of a new, air-gapped Privileged Access Management (PAM) solution. The ideal candidate will play a critical role as part of the PAM team in the build phase, focusing on Windows Server and SQL Server configuration, Active Directory integration, and custom development for PAM integrations. Expect approximately 30% of effort dedicated to A&A activities during initial buildout, with the remainder focused on technical implementation and custom integration development.

Requirements

Bachelor's degree in Computer Science, Information Technology, Systems Engineering, or a related field (or equivalent experience).
One or more Microsoft certifications (MCSA/MCSE, Windows Server, Azure Administrator).
One or more security certifications (Security+, CISSP, CISM, or related security certifications).
Minimum 11 years' experience in Windows/SQL systems administration.
Advanced proficiency in Windows Server (2016, 2019, 2022) and Active Directory architecture.
Proficiency in SQL Server Enterprise Edition administration and performance optimization.
Strong knowledge of PAM concepts, including privileged account management, session monitoring, and credential vaulting.
Proficiency in PowerShell scripting; experience with Python or Bash for custom integrations.
Hands-on experience with PAM tools.
Working knowledge of AWS services (EC2, IAM, VPC, networking).
Understanding of security controls and compliance requirements.
Demonstrated experience developing custom scripts or integrations for enterprise systems.
Experience with PAM technology implementation or administration.
Experience building and documenting SOPs for systems or processes.
Strong analytical and problem-solving capabilities.
Excellent communication and collaboration skills.
Ability to work independently and manage multiple tasks.

Nice To Haves

Experience in restricted or air-gapped environments.
SQL Server or PAM vendor certifications.

Responsibilities

Designing, configuring, and deploying Windows Server environments to support PAM infrastructure.
Installing, configuring, and maintaining SQL Server Enterprise Edition databases, including performance tuning and backup/recovery.
Configuring and integrating AWS services (EC2, IAM, VPC, S3) with PAM solution to support hybrid cloud privileged access management.
Integrating PAM solution with Active Directory, including service accounts, group policies, and security permissions.
Developing custom scripts and integrations using PowerShell, Python, or Bash to automate PAM workflows and account provisioning.
Configuring and managing PAM tools.
Supporting development of System Security Plans, Risk Assessment Reports, and POA&Ms related to Windows, SQL, and PAM components.
Implementing and documenting security controls for Windows Server, SQL Server, and Active Directory.
Providing O&M support as the system transitions to production.
Troubleshooting and resolving complex technical issues related to Windows/SQL/AD integration with PAM systems.
Developing and maintaining Standard Operating Procedures (SOPs) and technical documentation.