Systems Administrator (Secret Clearance required) with Security Clearance

The Classified Systems Administrator will join the Classified Enterprise Services Engineering team supporting the Laboratory's enterprise classified computing infrastructure. This position is responsible for the administration, maintenance, security, reliability, and continued improvement of Windows-based enterprise services and the virtualization infrastructure on which they operate. The successful candidate will have strong hands-on experience administering Microsoft Windows Server, Active Directory, VMware vSphere, and related enterprise infrastructure technologies.

The individual will also have experience supporting Microsoft Exchange Server and will be expected to develop into the team's primary subject matter expert (SME) for its Exchange environments. Approximately 25% of this position's responsibilities will be dedicated to Microsoft Exchange, including configuring, managing, maintaining, patching, monitoring, optimizing, and troubleshooting the Exchange environment.

The administrator will be expected to progressively develop deeper Exchange expertise, establish and maintain operational best practices, document the environment, and serve as a technical resource to other members of the team. The remaining responsibilities will span Windows Server and Active Directory administration, virtualization, endpoint deployment and management, automation, cybersecurity compliance, monitoring, vulnerability remediation, lifecycle management, and other enterprise infrastructure services.

This position requires an administrator who can independently troubleshoot complex technical problems while effectively collaborating with other system administrators, network engineers, cybersecurity personnel, application owners, and end users. The successful candidate will be expected to remain current on relevant technologies, identify opportunities to improve reliability and efficiency, and make recommendations for improving the services supported by the team.

This position is 100% dedicated to supporting classified computing environments and operates under the general supervision of the Classified Enterprise Services Engineering Manager. The position does not have direct financial responsibility; however, technical expertise may be required to assist with product evaluations, technology selections, licensing, support renewals, capacity planning, and hardware and software lifecycle planning.

The administrator will have frequent interaction with internal Laboratory staff and external vendors in support of incident resolution, infrastructure upgrades, technical projects, product research, and service improvements. Required Minimum Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related technical discipline, or equivalent relevant professional experience.
• Demonstrated professional experience administering Microsoft Windows enterprise environments.
• Strong hands-on knowledge of:
• Windows 11
• Windows Server
• Group Policy
• Experience administering Microsoft Exchange Server, with working knowledge of Exchange administration, mail flow, recipient management, troubleshooting, and routine maintenance.
• Willingness and demonstrated ability to develop into the team's primary Microsoft Exchange subject matter expert, including assuming increasing responsibility for the configuration, maintenance, optimization, lifecycle management, and troubleshooting of the Exchange environments.
• Strong understanding of VMware virtualization technologies such as vCenter Server, ESXi, vSAN, vSphere networking, virtual machine configuration, templates, and related infrastructure.
• Working knowledge of enterprise networking concepts, including TCP/IP, routing, switching, VLANs, DNS, DHCP, firewalls, and network troubleshooting.
• Experience using PowerShell or another scripting language to perform system administration or automate repetitive tasks.
• Experience troubleshooting complex infrastructure issues using logs, monitoring tools, system utilities, and structured troubleshooting methodologies.
• Understanding of enterprise patching, vulnerability remediation, configuration management, system hardening, backup/recovery, and lifecycle management practices.
• Ability to work independently toward defined objectives while effectively collaborating as part of a technical team.
• Demonstrated ability to learn new technologies and technical disciplines.
• Excellent troubleshooting, organizational, customer-service, verbal communication, and written communication skills.
• Ability to document system configurations, administrative procedures, troubleshooting processes, and operational standards.
• Active Secret-level U.S. Government security clearance
• CompTIA Security+ certification or ability to obtain the certification within six months of employment.

Preferred Qualifications

• Six or more years of professional information technology experience, including several years administering enterprise Windows infrastructure.
• Experience with Microsoft Exchange Server, particularly in on-premises or disconnected environments.
• Experience administering Active Directory, including organizational units, delegation, Group Policy, authentication, service accounts, and troubleshooting replication or directory-service issues.
• Experience with Microsoft Configuration Manager (MECM/SCCM), Microsoft Deployment Toolkit or comparable endpoint imaging, operating-system deployment, software-distribution, and configuration-management technologies.
• Experience developing and maintaining standardized Windows workstation and server configurations, images, or deployment workflows.
• Advanced PowerShell scripting and task-automation experience.
• VMware administration experience with technologies such as vCenter Server, ESXi, vSAN, distributed virtual switches, clusters, high availability, resource management, and virtual machine templates.
• Experience with infrastructure monitoring, performance analysis, capacity management, and centralized logging.
• Experience administrating an enterprise storage environment with technologies such as Netapp
• Familiarity with enterprise backup and recovery technologies and disaster-recovery practices.
• Proficiency with Linux operating systems
• Experience supporting Public Key Infrastructure (PKI), certificates, authentication services, or related enterprise infrastructure.
• Experience working within cybersecurity compliance frameworks applicable to U.S. Government or classified environments.
• Knowledge of DISA Security Technical Implementation Guides (STIGs), STIG Viewer, Security Content Automation Protocol (SCAP) tools, and processes for evaluating and remediating system compliance.
• Experience applying security baselines and automating security configuration or compliance validation.
• Microsoft, VMware/Broadcom, CompTIA, or other relevant industry certifications.
• Experience working in classified or otherwise highly regulated computing environments.

Work Schedule and Operational Requirements Occasional off-hours or on-call support is required. Some planned maintenance, upgrades, and unplanned service-restoration activities must be performed outside normal production hours during scheduled maintenance windows or in response to operational needs. The position requires an individual who can work effectively in a fast-paced technical environment with limited supervision and execute operational, project, and administrative responsibilities with a high degree of quality.

The administrator must be able to follow established processes while also recognizing when new procedures, automation, documentation, or operational best practices should be developed. The individual must work effectively across organizational boundaries and collaborate with systems administrators, network engineers, cybersecurity personnel, application teams, service-desk personnel, management, vendors, and end users to accomplish department and Laboratory objectives.