Seeking a versatile and mission-driven Systems Administrator (Linux & Windows) with dedicated experience as a Microsoft Endpoint Configuration Manager (MECM / SCCM) administrator. In this role, you will maintain, configure, and secure a heterogeneous enterprise hosting and laboratory testing environment comprising Red Hat Enterprise Linux (RHEL), modern Microsoft Windows Server (2019/2022), and Windows 10/11 endpoints.

You will be responsible for end-to-end endpoint life cycle management, centralized patch orchestration, operating system deployments, system hardening, and continuous cyber-compliance. Working closely with cybersecurity leads and infrastructure engineers, you will ensure high system availability, rapid vulnerability remediation, and rigorous adherence to defense cybersecurity frameworks.

Endpoint Lifecycle Management & MECM/SCCM Administration

• Serve as the primary administrator for Microsoft Endpoint Configuration Manager (MECM / SCCM), managing infrastructure health, site systems, distribution points, and client agent health across all connected enclaves.
• Engineer, test, deploy, and maintain standardized Windows Operating System Deployment (OSD) task sequences and baseline golden images.
• Package, test, distribute, and automate application installations, scripts, and software updates across heterogeneous lab and hosting workstations and servers.
• Manage and orchestrate enterprise-wide software update distribution using Software Update Points (SUP) integrated with Windows Server Update Services (WSUS).
• Create and deploy custom compliance baselines and configuration items (CIs) to enforce security settings, STIG configurations, registry keys, and audit controls.
• Develop custom MECM queries, device collections, and reports (SSRS) to provide real-time hardware/software inventory, asset discovery, and compliance auditing.

Systems Administration (Linux & Windows)

• Administer, build, configure, and maintain physical and virtual Red Hat Enterprise Linux (RHEL) servers, modern Windows Servers (2019/2022), and Windows 10/11 workstations.
• Manage core directory and identity infrastructure, including Active Directory Domain Services (AD DS), Group Policy Objects (GPOs), DNS, DHCP, and role-based access control.
• Troubleshoot and maintain enterprise Linux services, including SE Linux policies/security contexts, daemon services (systemd, chronyd), file systems (/opt, logical volumes), and local package managers.
• Maintain hypervisor and storage infrastructure, including Nutanix, VMware ESXi/vCenter, and enterprise backup/restore solutions (e.g., Cohesity, snapshots).
• Support basic multi-tier database hosting and connectivity for Oracle and Microsoft SQL server backends.
• Process, approve, and maintain user access documentation and account provisioning via DD Form 2875 and identity management systems.
• Issue, configure, and troubleshoot Public Key Infrastructure (PKI) certificates, CAC authentication, and secure remote protocols across all client and server endpoints.

Cybersecurity, Vulnerability Management & Compliance

• Maintain strict system security posture in compliance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Execute, review, and analyze weekly Assured Compliance Assessment Solution (ACAS / Tenable Nessus) vulnerability scans and monthly STIG evaluations.
• Rapidly remediate identified CVEs, IAVM alerts, CTO/DTO directives, and vendor patches across both Windows and Linux fleets.
• Draft, track, and update Plans of Action and Milestones (POA&Ms) for items requiring architectural mitigations or extended test schedules.
• Maintain endpoint security agents across all hosts, including Trellix/ePO agents, endpoint detection and response (EDR), and application whitelisting tools (e.g., fapolicyd).
• Monitor and analyze system, security, and application logs using SIEM and centralized log management tools (e.g., LogRhythm, Elastic Fleet).

Required Certifications

• Active DoD 8570/8140 IAT Level II Baseline Certification (e.g., CompTIA Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP).
• Relevant computing environment (CE) / vendor training or certification in Microsoft Windows Server/MECM or Red Hat Enterprise Linux (or ability to complete within 6 months of hire).

• Demonstrable proficiency configuring, operating, and troubleshooting MECM/SCCM (OSD, application packaging, software update deployments, collection management).
• Strong working knowledge of Linux administration, specifically Red Hat Enterprise Linux (RHEL), CLI troubleshooting, package management, daemon tuning, and SELinux enforcement.
• Solid experience with Windows Server (2019/2022) administration, Active Directory, GPO authoring/troubleshooting, and DNS.
• Experience with DoD vulnerability and compliance tooling: ACAS (Tenable/Nessus), SCAP Compliance Checker (SCC), and STIG Viewer (.ckl generation).
• Understanding of enterprise backup technologies, bare-metal server recovery, and hypervisor virtualization (Nutanix AHV, VMware).
• Excellent written communication skills for authoring Standard Operating Procedures (SOPs), weekly status reports, and technical troubleshooting documentation.

Strength Demands

• Light to Medium Work: Must be able to exert up to 30-50 pounds of force occasionally, and/or up to 20 pounds of force frequently to lift, carry, push, pull, or otherwise move rack-mounted hardware, server components, workstations, peripherals, and network cabling.

Physical Requirements

• Sitting or standing at computer workstations for extended periods.
• Dexterity of hands and fingers to operate computer keyboards, mice, test equipment, and hand tools (e.g., rack installation tools, screwdrivers).
• Stooping, kneeling, crouching, reaching, and bending required when installing or cabling servers, switches, or workstations in server racks and lab benches.
• Visual acuity to read fine print, computer monitors, wiring labels, and console screens for extended periods.