Systems Administrator

Job Description

Classified System Administrator

Clearance Level: Must be US Citizen - An Active Secret/ Top Secret Clearance is required to be considered for this position

At Aquila Technology, you will see our team's passion every day, whether we are building a robust, policy-compliant IT system or stress-testing a system to identify gaps and security vulnerabilities. To own the advantage, we ensure our team owns results and gets the work done right the first time by deploying smart, purposeful solutions that work. Aquila is the right people with the right skills driving the right outcomes. We call this the Aquila Advantage.

About the Role:

Aquila is seeking a Systems Administrator to join our team in supporting one of the country's premier defense research organizations. The Systems Administrator will demonstrate proficiency with DISA STIGs (full and benchmark),DISA's SCC Tool, EvalSTIG, STIG Viewer and how to evaluate systems for STIG compliance. The Systems Administrator will have a background in evaluating and maintaining DoD compliant systems, especially those familiar with DISA's Command Operational Readiness Assessment (CORA), will be given preference.

There are a few requirements for the position:

Must be a U.S Citizen- Must have an Active Secret/Top Secret Clearance (Green Cards / Visas do not qualify)

Willingness to undergo a comprehensive background investigation and maintain a personal security clearance. (Aquila would sponsor you for the security clearance.)

Must be within 100 miles of worksite (Lexington, MA)

Responsibilities include but are not limited to:

Ensure compliance with applicable regulations, policies, and security frameworks, including relevant STIGs, NIST 800-171, NIST 800-53, RMF, and DFARS .

Conduct regular compliance assessments, audits, and risk analyses of classified IT systems to identify and mitigate potential security gaps.

Provide input for developing and maintaining security documentation, including System Security Plans (SSP), Plan of Action & Milestones (POA&M), and risk assessments.

Collaborate with cybersecurity teams to ensure that security controls are implemented, tested, and maintained per compliance requirements.

Assist in the implementation and sustainment of Security Technical Implementation Guides (STIGs) and Continuous Monitoring (ConMon) programs.

Provide subject matter expertise on technical configurations to support classified system security controls, ensuring alignment with compliance objectives.

Stay up to date with evolving security and compliance regulations to ensure continuous improvement of policies and procedures.

Provide 1st tier technical support as needed in support of the Laboratory community. This would include taking shifts in the classified hubs to provide assistance with password resets and other end user issues as well as working tickets and assisting users as needed.

Candidates with experience Ansible or other automation tools will be given preference

Must Have

Certification: Security+ certification (or the ability to obtain within 6 months of employment)

Degree Level: Bachelor's Degree

Clearance Level: Currently holds a Secret Clearance (OR a higher clearance)

3 years - Implement, and automate security controls, governance processes, and compliance validation

3 years - Government Policy/Regulations

3 years - STIG Compliance

3 years - Hardware

3 years - VMware infrastructure (vCenter, ESXi, vSAN, etc.)

3 years - Networks

3 years - Networking experience (routers/switches/firewalls/servers)

3 years - Security

3 years - Experience with security assessment tools, audit methodologies, and compliance reporting

3 years - Hardening systems to DoD IT security requirements, and policies (CMMC, RMF, STIGs)

3 years - IT compliance, security, or risk management within classified or highly regulated environments

3 years - NIST 800-171

3 years - NIST 800-53

3 years - Risk Management Framework (RMF)

Soft Skills

Analytical and Decision-Making Skills

Independent Contribution and Collaboration

5 years - Active Directory Administration and GPOs

3 years - Redhat Linux Systems Administration

5 years - Windows 11

5 years - Windows Server Platform

What you will Bring:

Bachelor's degree in Cybersecurity, Information Systems, or a related technical field (or equivalent experience).

3+ years of experience (preferably 5+ years) in IT compliance, security, or risk management within classified or highly regulated environments.

5+ years of experience (preferably 7+ years) with the following technologies:

Windows 10/11

Windows Server

Active Directory

3+ years of experience (preferably 5+) with ONE of the following technologies:

VMware infrastructure (vCenter, ESXi, vSAN, Horizon, etc.)

Network or SAN storage platforms (NetApp, EMC, Pure, etc.)

Redhat Linux

Networking (configuring switches, routers, firewalls)

Strong understanding of DoD cybersecurity frameworks, including NIST 800-171, NIST 800-53, and RMF.

Experience working with security assessment tools, audit methodologies, and compliance reporting.

Familiarity with Security Technical Implementation Guides (STIGs) and other DoD security hardening standards.

Strong analytical and problem-solving skills with attention to detail.

Excellent communication and documentation skills to effectively collaborate with technical and non-technical stakeholders.

Excellent customer service skills

Excellent verbal and written communication skills

Ability to work independently toward delivery of goals as well as collaborate in team efforts

Security+ certification or the ability to obtain within 6 months of employment

Benefits and Perks:

Aquila team members experience the opportunity to be part of a fast-paced, customer-focused, and technically innovative work environment. Aquila strives to deliver the best of the best in technical services to our customers. Candidates that possess a love for technical challenges, a desire to constantly learn, and the desire to establish themselves as critical players within a team will enjoy calling Aquila Technology home.

Our Perks Include:

PTO - 15 days (vacation/sick) 10 paid holidays - 6 standard (New Year's, Memorial Day, Independence Day, Labor Day, Thanksgiving, and Christmas) - 4 floating holidays prorated based on your day of hire

1.5 paid days, or 12 hours, for approved volunteer work

1 week of paid maternity/paternity LOA after 1 year of Full-time employment

Tuition & Training Reimbursement - 5K annually for pre-approved, job-related tuition, certification, or professional conferences

401K with Fidelity 100% immediate vesting; Plan eligibility begins 90 days following the date of hire. Aquila matches 50 cents on the dollar, up to 6%.

Cell Phone & Internet Reimbursed up to $150 monthly to cover cell phone, data, and home internet expenses.

Buy Your Own Device (BYOD) Allowance Reimbursed up to $1500 for the purchase of a qualified technology device. Eligible after 90 days of employment, and benefit renews every three years.

Clearance: Candidates should have an active clearance (secret/top secret, etc.) in order to be considered for this position due to the nature of the work being done. MUST BE US CITIZEN

Location: This position will be 100% onsite due to the nature of the work. There may be some remote flexibility on a case by case basis but there are no regular remote days.

We are an Equal Opportunity Employer.

Full-time