Cloud Systems Administrator

SSI is seeking an experienced System Administrator with expertise in AWS Cloud and knowledge of on-prem server fundamentals. Individuals must have a strong technical background in Windows, Networking, and DoD security assessment and hardening tools. Must be willing to work in a fast-paced environment and support enterprise initiatives.

Hybrid role: Job requires onsite work at NIWC PAC San Diego a minimum of one day per week, with several days per week permitted for telecommuting.

DUTIES AND RESPONSIBILITIES:

• Perform systems administration, testing, evaluation and assessment for assigned projects.  
• Support development team with review, assessment and guidance for PKI architecture and software solutions. 
• Will need strong system admin/network background to be able to stand up and maintain test environments on AWS Cloud as well as physical assets.  
• Cybersecurity related tasking (ACAS scans, security controls, STIGs, vulnerability remediation, etc.) will also be part of routine tasks. 

REQUIRED SKILLS AND QUALIFICATIONS:

• Security+ certification
• SECRET clearance
• System Administration experience (Managing Windows workstations/servers, remote desktop)
• Automation and scripting experience (bash/PowerShell)
• Some VMware or other virtualization experience
• Active Directory experience (configuring smart card login, configuring domains, managing GPOs, etc.)
• Networking fundamentals
• AWS Cloud experience (EC2, Lambda, S3, Directory Service, Workspaces) 
• Some Linux experience
• ACAS Scan experience (mitigating system vulnerabilities)
• STIG experience (risk assessments, hardening)
• Ability to develop and execute test plans/cases

PREFERRED SKILLS:

• DoD Public Key Infrastructure (PKI) experience (cryptographic algorithms, digital signatures, smart card authentication, etc.) 
• Middleware experience (ActivClient, 90meter, Axway)
• Knowledge of PKI policies: HSPD-12, FIPS 140-2, FIPS 201, x.509
• Risk Management Framework (RMF) experience
• Knowledge of FIPS 140-2 Hardware Security Modules
• Familiarity with Ansible, and/or Infrastructure-as-code (IAC)
• Familiarity with Privileged Access Management (PAM) solutions (CyberArk, other)