Classified Systems Administrator

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

Job Overview

We are seeking a Senior Systems Administrator for assigned classified authorization boundaries—facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, SAP carve-outs) and supporting lab/product systems. This person will own secure build, hardening, operations, account administration, and technical evidence the ISSO needs for ATO and continuous monitoring. Lanes are distinct; work is expected to overlap on TACLANE, CDS, COMSEC handling, and platform integration.

Responsibilities

• Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.
• Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control.
• Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections.
• Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates.
• Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed.
• Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.
• Provide authorized hands-on support for TACLANE/Type-1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes.
• Handle CCI/COMSEC-associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed.
• Maintain as-builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection-ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.
• Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload-adjacent hosts when assigned.

Qualifications

• Required
• U.S. citizen. Active TS with SCI eligibility.
• 5+ years systems/infrastructure administration, including classified DoD, IC, SAP, or equivalent environments.
• Hands-on Windows and/or Linux administration; AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management.
• STIG/SRG hardening, patching, ACAS/SCAP (or equivalent), and RMF evidence production for NIST SP 800-53 / CNSSI 1253 technical controls.
• Working TCP/IP, VLAN, routing/switching, and firewall literacy sufficient to troubleshoot with Network Engineering.
• Familiarity with COMSEC, CCI, Type-1 encryption, and TACLANE employment; direct TACLANE or CDS experience strongly valued.
• DoD 8140 qualification appropriate to Systems Administrator / privileged access (Security+ CE or approved equivalent).
• Able to work independently in SCIFs and field sites
• Travel: 30–40% of time on short notices
• Preferred
• SIPR, JWICS, SAP, PIT/platform IT, unmanned/autonomous systems, or GFI/GFE administration.
• Navy/NAVWAR/FLTCYBERCOM, DCSA DAAG, SOCOM, CSfC, ICD 705/TEMPEST, GDMS TACLANE training, CDSE COMSEC/CDS coursework.
• Prior partnership with a COMSEC Account Manager or prior Custodian appointment.
• Physical Demands
• Prolonged periods of sitting at a desk and working on a computer
• Occasional standing and walking within the office
• Manual dexterity to operate a computer keyboard, mouse, and other office equipment
• Visual acuity to read screens, documents, and reports
• Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies
• Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)