Classified Systems Administrator

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms. JOB OVERVIEW We are seeking a Senior Systems Administrator for assigned classified authorization boundaries—facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, SAP carve-outs) and supporting lab/product systems. This person will own secure build, hardening, operations, account administration, and technical evidence the ISSO needs for ATO and continuous monitoring. Lanes are distinct; work is expected to overlap on TACLANE, CDS, COMSEC handling, and platform integration. RESPONSIBILITIES - Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems. - Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control. - Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections. - Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates. - Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed. - Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation. - Provide authorized hands-on support for TACLANE/Type-1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes. - Handle CCI/COMSEC-associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed. - Maintain as-builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection-ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments. - Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload-adjacent hosts when assigned. QUALIFICATIONS - Required - U.S. citizen. Active TS with SCI eligibility. - 5+ years systems/infrastructure administration, including classified DoD, IC, SAP, or equivalent environments. - Hands-on Windows and/or Linux administration; AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management. - STIG/SRG hardening, patching, ACAS/SCAP (or equivalent), and RMF evidence production for NIST SP 800-53 / CNSSI 1253 technical controls. - Working TCP/IP, VLAN, routing/switching, and firewall literacy sufficient to troubleshoot with Network Engineering. - Familiarity with COMSEC, CCI, Type-1 encryption, and TACLANE employment; direct TACLANE or CDS experience strongly valued. - DoD 8140 qualification appropriate to Systems Administrator / privileged access (Security+ CE or approved equivalent). - Able to work independently in SCIFs and field sites - Travel: 30–40% of time on short notices - Preferred - SIPR, JWICS, SAP, PIT/platform IT, unmanned/autonomous systems, or GFI/GFE administration. - Navy/NAVWAR/FLTCYBERCOM, DCSA DAAG, SOCOM, CSfC, ICD 705/TEMPEST, GDMS TACLANE training, CDSE COMSEC/CDS coursework. - Prior partnership with a COMSEC Account Manager or prior Custodian appointment. PHYSICAL DEMANDS - Prolonged periods of sitting at a desk and working on a computer - Occasional standing and walking within the office - Manual dexterity to operate a computer keyboard, mouse, and other office equipment - Visual acuity to read screens, documents, and reports - Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies - Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages) BENEFITS Medical Insurance: Comprehensive health insurance plans covering a range of services Saronic pays 100% of the premium for employees and 80% for dependents Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents Time Off: Generous PTO and Holidays Parental Leave: Paid maternity and paternity leave to support new parents Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses Retirement Plan: 401(k) plan with company match Stock Options: Equity options to give employees a stake in the company’s success Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office Saronic CCPA Notice for Candidates and California Employees https://saronic-assets-public.s3.us-east-2.amazonaws.com/Saronic%20CCPA%20Notice%20for%20Candidates%20and%20California%20Employees.pdf If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3) https://www.govinfo.gov/link/uscode/8/1324b. Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.