Systems Administrator

Job Description
We put our customers first – exemplified by our missions: “We Protect Those Who Protect Us®” and “We
Innovate for Those Who Move the World.” Sound like a team you want to be a part of? Come build your career
with BAE Systems.

BAE Systems is seeking a Senior Closed Area Systems Administrator to provide comprehensive technical and
operational support for classified IT systems. This position requires a seasoned IT professional with expertise
in managing complex, air-gapped systems and lab environments in accordance with DoD and Intelligence
Community security requirements. You will be responsible for the configuration, maintenance, and
monitoring of secure networks and systems, including Lab-in-a-Box (LIB) environments, virtualization
platforms, endpoint protection, and logging/alerting tools. This position is 100% onsite within a closed,
classified area. Some after-hours or weekend support may be required for maintenance windows or incident
response. You must be able to lift equipment (up to 40lbs) and work within controlled environments.

Key responsibilities include:
• Proficiency in Active Directory, including user/group management, OU structure, and GPOs.
• Configure, deploy, and maintain Lab-in-a-Box (LIB) environments used in closed area testing and
mission scenarios.
• Develop and execute system shutdown and secure wipe procedures, in accordance with DoD and
agency guidelines.
• Lead and coordinate data spill containment, response, and remediation actions in classified
environments.
• Operate and manage Nessus vulnerability scanning, assessment reporting, and risk remediation
tracking.
• Maintain and support VMware-based virtual infrastructure, including host management and
resource allocation.
• Operate and manage Veeam backup and recovery solutions for secure system images and
restoration planning.
• Administer Trellix ePO (McAfee) for endpoint protection policy management, signature updates, and
alert resolution.
• Perform domain controller maintenance, including replication, DNS/DHCP services, and health
monitoring.
• Design, implement, and troubleshoot Group Policy Objects (GPOs) in Active Directory.
• Support Splunk operations, including forwarder management, dashboard/report creation, and log
analysis for auditing and threat detection.
• Ensure all systems are compliant with applicable STIGs, RMF controls, and cyber hygiene policies.
• Maintain system documentation, configuration change records, and contribute to audit readiness. • Collaborate with ISSOs/ISSMs, facility security, and other stakeholders to ensure secure and compliant operations