Apply to Systems Security Engineer & Administrator

Position Title: Systems Security Engineer & Administrator
Position Type: Full-Time, On-Site
Location: Huntsville, AL
Clearance: Active Secret
Experience Level: Junior to Journeyman
Funded, Immediate Hire

Waypoint’s client is seeking a proactive, detail-oriented Systems Security Engineer & Administrator to support the administration, security, and operational readiness of EPIC-C assets within the SAIL accreditation boundary at Redstone Arsenal, AL.

This position combines hands-on Windows and Linux systems administration with cybersecurity compliance, vulnerability management, and system accreditation support. The selected candidate will work closely with the Information System Security Officer (ISSO) to ensure systems meet federal security baseline standards, utilizing ACAS, DISA Security Technical Implementation Guides (STIGs), NIST Risk Management Framework (RMF) guidance, and DISA Best Practices to maintain the system's Authorization to Operate (ATO).

The ideal candidate will have experience with Windows administration, Active Directory, workstation provisioning, vulnerability scanning, security remediation, and supporting continuous monitoring and ATO maintenance activities.

Responsibilities:

Perform routine Windows systems administration, including user account management, Group Policy Object (GPO) configuration, and privilege management through Active Directory using the principle of least privilege.
Build, configure, and deploy Windows and Linux workstations from the ground up, ensuring compliance with established security baseline configurations.
Provide basic network administration, connectivity testing, and troubleshooting for Cisco-based network infrastructure.

Review, update, and patch systems based on findings from the Assured Compliance Assessment Solution (ACAS/Tenable Nessus) scanner in accordance with NIST SP 800-137 continuous monitoring guidelines.
Execute weekly vulnerability patching cycles to remediate identified security findings.
Maintain and update ACAS scanner infrastructure, ensuring current plugin libraries and operational health.
Prepare and upload monthly ACAS scan results to support continuous Authorization to Operate (ATO) maintenance.
Execute Evaluate STIG tools, SCAP Compliance Checker (SCC), and manual DISA STIG reviews.
Evaluate system findings against DISA Security Technical Implementation Guides (STIGs) and DISA Best Practices.
Develop and compile remediation reports and Plan of Action and Milestones (POA&M) inputs for the Information System Security Officer (ISSO).

Assist with the Risk Management Framework (RMF) lifecycle in accordance with NIST SP 800-37 (Rev. 2).
Support security control verification aligned with NIST SP 800-53 (Rev. 4/5).
Collect security artifacts, update cybersecurity documentation, and support RMF maintenance within the SAIL accreditation boundary.
Collaborate with the ISSO to support security compliance, continuous monitoring, and ongoing ATO requirements.

Required:

Active DoD Secret security clearance.
Must meet DoD 8140.03 Foundational Qualification requirements for one of the following Defense Cyber Workforce Framework (DCWF) work roles at the Basic or Intermediate level:
- DCWF Work Role 451 – System Administrator
- DCWF Work Role 461 – Systems Security Analyst
Must possess an approved foundational baseline certification prior to the start date, such as:
- CompTIA Security+ CE
- CompTIA CySA+
- Systems Security Certified Practitioner (SSCP)
- Equivalent DoD 8140-approved baseline credential

Desired:

Strong proficiency in Windows Server and Windows Desktop administration.
Functional understanding of Linux operating systems.
Hands-on experience with cybersecurity and compliance tools, including:
- ACAS (Tenable Nessus)
- DISA STIGs
- STIG Viewer
- SCAP Compliance Checker (SCC)
- Splunk
Solid understanding of the Risk Management Framework (RMF) process defined in NIST SP 800-37 (Rev. 2) and the process of obtaining and maintaining an Authorization to Operate (ATO).
Functional understanding of NIST SP 800-53 (Rev. 4 and Rev. 5) security control selection and implementation.
Familiarity with NIST SP 800-137, Information Security Continuous Monitoring (ISCM), and DISA Best Practices.
Practical understanding of Active Directory, Group Policy Objects (GPOs), and Identity and Access Management (IAM).
Basic understanding of Cisco networking concepts, including routing and switching.
Additional certifications are a plus, including:
- Cisco Certified Network Associate (CCNA)
- Microsoft Certified System Administrator
- Linux certifications

Candidates outside commuting distance would need to consider relocation. We understand if relocation is not an option; however, relocation assistance may be available through the client for qualified, interested candidates.