Classified Systems Administrator

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

JOB OVERVIEW

We are seeking a Senior Systems Administrator for assigned classified authorization boundaries—facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, SAP carve-outs) and supporting lab/product systems. This person will own secure build, hardening, operations, account administration, and technical evidence the ISSO needs for ATO and continuous monitoring. Lanes are distinct; work is expected to overlap on TACLANE, CDS, COMSEC handling, and platform integration.

RESPONSIBILITIES

- Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.

- Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control.

- Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections.

- Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates.

- Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed.

- Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.

- Provide authorized hands-on support for TACLANE/Type-1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes.

- Handle CCI/COMSEC-associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed.

- Maintain as-builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection-ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.

- Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload-adjacent hosts when assigned.

QUALIFICATIONS

- Required

- U.S. citizen. Active TS with SCI eligibility.

- 5+ years systems/infrastructure administration, including classified DoD, IC, SAP, or equivalent environments.

- Hands-on Windows and/or Linux administration; AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management.

- STIG/SRG hardening, patching, ACAS/SCAP (or equivalent), and RMF evidence production for NIST SP 800-53 / CNSSI 1253 technical controls.

- Working TCP/IP, VLAN, routing/switching, and firewall literacy sufficient to troubleshoot with Network Engineering.

- Familiarity with COMSEC, CCI, Type-1 encryption, and TACLANE employment; direct TACLANE or CDS experience strongly valued.

- DoD 8140 qualification appropriate to Systems Administrator / privileged access (Security+ CE or approved equivalent).

- Able to work independently in SCIFs and field sites

- Travel: 30–40% of time on short notices

- Preferred

- SIPR, JWICS, SAP, PIT/platform IT, unma