Cloud Systems Administrator with Security Clearance

SSI is seeking an experienced System Administrator with expertise in AWS Cloud and knowledge of on-prem server fundamentals. Individuals must have a strong technical background in Windows, Networking, and DoD security assessment and hardening tools. Must be willing to work in a fast-paced environment and support enterprise initiatives. Hybrid role: Job requires onsite work at NIWC PAC San Diego a minimum of one day per week, with several days per week permitted for telecommuting. DUTIES AND RESPONSIBILITIES: * Perform systems administration, testing, evaluation and assessment for assigned projects.  
* Support development team with review, assessment and guidance for PKI architecture and software solutions. 
* Will need strong system admin/network background to be able to stand up and maintain test environments on AWS Cloud as well as physical assets.  
* Cybersecurity related tasking (ACAS scans, security controls, STIGs, vulnerability remediation, etc.) will also be part of routine tasks.  Requirements REQUIRED SKILLS AND QUALIFICATIONS: * Security+ certification
* SECRET clearance
* System Administration experience (Managing Windows workstations/servers, remote desktop)
* Automation and scripting experience (bash/PowerShell)
* Some VMware or other virtualization experience
* Active Directory experience (configuring smart card login, configuring domains, managing GPOs, etc.)
* Networking fundamentals
* AWS Cloud experience (EC2, Lambda, S3, Directory Service, Workspaces) 
* Some Linux experience
* ACAS Scan experience (mitigating system vulnerabilities)
* STIG experience (risk assessments, hardening)
* Ability to develop and execute test plans/cases
PREFERRED SKILLS: * DoD Public Key Infrastructure (PKI) experience (cryptographic algorithms, digital signatures, smart card authentication, etc.) 
* Middleware experience (ActivClient, 90meter, Axway)
* Knowledge of PKI policies: HSPD-12, FIPS 140-2, FIPS 201, x.509
* Risk Management Framework (RMF) experience
* Knowledge of FIPS 140-2 Hardware Security Modules
* Familiarity with Ansible, and/or Infrastructure-as-code (IAC)
* Familiarity with Privileged Access Management (PAM) solutions (CyberArk, other)