Classified IT Systems Administrator - The Charles Stark Draper Laboratory Inc

Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com.

Our work is very important to us, but so is our life outside of work. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities. If this specific job opportunity and the chance to work at a nationally renowned R&D innovation company appeals to you, apply now www.draper.com/careers.

Equal Employment Opportunity

Draper is committed to creating a diverse environment and is proud to be an affirmative action and equal opportunity employer.   We understand the value of diversity and its impact on a high-performance culture.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.   

Draper is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact hr@draper.com.

The Classified Systems Administrator is a key member in several small to medium sized dynamic research and development environments in which they support the day-to-day activities of users, perform system maintenance, and upkeep of Information Technology. As well as provide the development, documentation, and deployment of IT Infrastructureband Operation.  The Systems Administrator will have responsibilities to support IT technology that will cover a wide array of competencies such as data administration, knowledge management, customer service, technical support, network services, system administration and systems security analysis.

Due to the nature of this work, this job requires on-site presence in Cambridge, MA.  Off-hour/on-call support as needed. A certain degree of flexibility of schedule is required as some work (planned/unplanned) must be done outside of major production hours during pre-scheduled maintenance windows.

Essential Functions

• Installs, configures, troubleshoots, and maintains server configurations (hardware and software) to ensure their confidentiality, integrity, and availability. Also manage accounts, firewalls, and patches. Responsible for implementing access control, resetting passwords, account creation, and general administration.
• Responsible for day-to-day support and maintenance of IT infrastructure systems (e.g. servers, workstations, switches, routers, firewalls, intrusion prevention systems, encryption devices)
• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.
• Maintain required IA certifications.
• Maintain and update documentation, including standard operating procedures, network drawings, and configuration documentation.
• Report all security-related incidents to the ISSM.
• Conduct reviews and technical inspections to identify and mitigate potential security weaknesses and ensure security compliance is implemented and all necessary systems are functional.
• Provide resolutions to an assortment of customer defined problems of moderately complex scope.   Ask appropriate questions and use knowledge and resources to diagnose and resolve basic technical issues. Escalate issues that extend beyond Tier II level of support as needed. Troubleshoots and solves problems without violating the security architecture requirements of the systems they are assigned to. 
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
• Formally notify the ISSM and AO/DAO when changes occur that might affect system authorization.
• Other duties include but are not limited to system troubleshooting, vendor coordination, software patching, system deployment, license management, hardware and software management, and lifecycle management.
• Work closely with the Information Assurance group to ensure system accreditation process is followed including maintenance of standard operating procedures, network drawings and configuration documentation.
• Coordinate with senior personnel and IT management of all risks impacting IT related services including but not limited to: power outages, environmental changes, natural disasters, employee accident or deliberate acts, maintenance or third party vendor actions.
• Provides guidance to and may oversee the activities more junior team members.
• Develop and conduct tests of systems to evaluate compliance with specifications and requirements by applying principles and methods for cost-effective planning, evaluating, verifying, and validating of technical, functional, and performance characteristics (including interoperability) of systems or elements of systems incorporating IT.

Required Qualifications:   

• Must possess and retain Top Secret/SCI clearance and willing to take a CI-Poly (customer and/or department dependent).
• Bachelor of Science in Information Technology or a related field, and 3-4 years of relevant experience, or 5+ years of experience without degree.
• Possess or obtain within six month of hire Security+ certification or higher professional certifications in accordance with DoD 8570.01-M, IAT Level II and IAM Level I.
• Familiarity with Windows/Active Directory integration with Red Hat Linux workstations and servers
• Experience implementing samba and CUPS to access file shares and printers.
• Familiarity implementing SSSD to join Active Directory Servers and implementing access control policies for Linux computers using security groups.
• Experience with Python, Bash, Perl, or other shell scripting.
• Experience with command line tools such as network manager, yum, tar, firewall, tail, top, git etc.
• Ability to perform system maintenance including creating and resizing LVM partitions, creating file systems, implementing, and managing backups.
• Maintaining audit logs, implementing audit rules, configuring audit log rotation and audit log offloading, ability to search through logs using ausearch.
• Experience configuring SELinux.
• Hands on experience with Red Hat Enterprise Linux, Centos, or a similar enterprise Linux product.
• Experience using Ansible, ability to create and implement ansible roles and playbooks.
• Familiarity with managing and installing patches for air gapped Red Hat Linux systems.
• Familiarity with using and configuring the Gnome desktop environment.
• Prior systems administration or networking administration and experience with some, but not limited to, the following technologies:  LDAP, Active Directory, WSUS, VMware, Veeam (or equivalent), Nessus, or Splunk.
• Knowledge of and implementation experience with security technologies and architecture, including encryption, network security, firewall configuration, intrusion detection.
• Has implemented DoD Security Technical Implementation Guides on at least one technology platform (i.e. Windows or Linux OS, switches, printers).
• Proficiency working with Windows operating systems, including Windows 10, Windows Server 2016 Server, Windows Server 2019.
• Ability to provide off-hour/on-call support as needed.

Required Qualifications: 

• Active CI Polygraph approved within past 5 years is preferred. 
• Linux certification such as the Red Hat Certified Systems Administrator (RHCSA), Linux+, Linux Certified Professional (LCP), Linux Foundation Certified System Administrator (LFCS).
• Experience installing, configuring, and supporting GUI workstation applications including MATLAB, simulating software, real-time processing software and 3rd party drivers.
• Excellent time management skills, and the ability to prioritize and multi-task.
• Ability to work efficiently and independently with minimal supervision (i.e. self-motivated and willing to stretch to meet important deadlines).
• Vendor specific certifications from Cisco, VMware, Microsoft, or Dell are desired.
• Knowledge and understanding of one or more of the following regulations: JAFAN 6/9, NISPOM, JSIG, CNSSI 1253, NIST, RMF, and ICD 503. 
• Experience supporting engineers in software, simulations, and hardware development.
• Ability to convey risks and propose mitigation strategies to technical and business audiences.
• Demonstrated ability to mentor team members and technically lead project teams to implement new IT solutions and streamline current solutions and processes.
• Demonstrated project management abilities and/or aptitude with excellent written and verbal communication skills.
• An ideal candidate has at least 2 or more years implementing current versions of VMWare infrastructure.   Responsibilities with lifecycle maintenance such as version upgrades, software and firmware upgrades, patching, feature enhancements.  Experience with Dell and VMWare solutions in a virtual Infrastructure. 

Security Requirement:  

• Current in scope Top Secret security clearance with SCI eligibility is required.
  
  

#LI-KP1