Cybersecurity System Administrator - DMV

Overview

M.C. Dean is seeking a highly skilled Cybersecurity System Administrator to support a secure operational technology environment by integrating advanced system administration with proactive cybersecurity operations. This dual‑role position requires an individual with both hands‑on technical expertise in managing modern enterprise IT systems and a deep understanding of federal cybersecurity frameworks and risk management.

• System Administration Duties
  • Install, configure, upgrade, and maintain enterprise systems including Windows Server 2019/2022, Windows 10, RHEL 7/8, VMware ESXi/vSAN infrastructure, Web browsers, Adobe Acrobat, and other desktop applications.
  • Manage virtual machines and storage in a VMware vSAN environment.
  • Administer Microsoft SCCM, WSUS, Active Directory (AD), Group Policy (GPO), and perform system patching and image deployment.
  • Integrate and maintain vendor systems and third‑party applications within a Windows ecosystem.
  • Operate and manage jump (bastion) hosts for network segregation and secure remote access.
  • Coordinate with development and support teams to test system hardware/software and optimize performance.
  • Provide Tier 1‑3 support, troubleshoot incidents, and maintain operational resilience via regular backups and recovery plans.
  • Load PKI certificates and maintain change management documentation and incident logs.
• Cybersecurity Operations
  • Serve as the Information System Security Manager (ISSM) for all assigned systems.
  • Monitor networks for real‑time threat indicators; investigate and respond to security events.
  • Implement and operate cybersecurity tools such as ACAS, Nessus, SCAP, and STIG Checklists.
  • Conduct and remediate vulnerability scans; follow DISA STIGs and IAVA compliance.
  • Manage POA&M’s, deviation lists, and ensure systems maintain Authority to Operate (ATO).
  • Provide FRCS cybersecurity engineering support and continuous monitoring in accordance with DoD and Army standards.
  • Perform penetration testing, threat analysis, and security risk assessments in lab/test environments.
  • Collaborate with stakeholders to improve system hardening, respond to ICS‑CERT alerts, and mitigate CAT 1/2/3 vulnerabilities.
• Compliance & Documentation
  • Maintain up‑to‑date security artifacts, plans, and policies as required under RMF, NIST SP 800‑series, FISMA, and FedRAMP.
  • Load documentation and scan data into the A&A Asset Manager.
  • Facilitate FISMA‑required annual reviews (e.g., Contingency Plans, Security Controls).
  • Support system reauthorization activities, including 5‑day on‑site assessments if required.
  • Educate end users on security best practices and threat awareness.
• Work Conditions & Travel
  • Primarily on‑site; periodic travel may be required for assessments or installations.
  • Participation in on‑site assessments up to 5 days in duration.
  • Occasional after‑hours support for mission‑critical operations.

• Conduct ICA/SCADA system inventories following guidance including U.S. Army IC inventory methodology and UFC 4‑010‑06, Cybersecurity of Facility‑Related Control Systems.
• Assist in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process.
• Implement DoD Security Technical Implementation Guides (STIGs) on traditional IT and OT systems.
• Conduct vulnerability scanning and document system vulnerabilities.
• Work in a team environment alongside other cybersecurity engineers and RMF analysts.

• Active TS/SCI with polygraph clearance.
• 3+ years of experience with a master’s degree in Information Technology, Risk Management, Cybersecurity.
• 5+ years of experience with a bachelor’s degree in the same fields.
• 8+ years of experience with an associate’s degree in the same fields.
• 11+ years with a high school diploma.
• Ability to process and operate application software (word processing, spreadsheets, databases).
• Must meet DoD Directive 8570.01 (IAM II, IAT II, IASAE II) and DoD 8570‑M requirements.
• Documented training in network infrastructure (Cisco) and Microsoft Windows.
• Experience with government/commercial projects implementing cybersecurity for industrial control systems.