Skip to main content
W

Systems Administrator / Cybersecurity Specialist

Waypoint Human Capital
1 day ago
On-site
Huntsville, Alabama, United States
Position Title: Systems Administrator / Cybersecurity Specialist
Position Type: Full-Time, On-Site
Location: Huntsville, AL
Clearance: Active Secret
Experience Level: Junior to Journeyman
Funded, Immediate Hire


Waypoint’s client is seeking a proactive, detail-oriented Systems Administrator / Cybersecurity Specialist to support the administration, security, and operational readiness of EPIC-C assets within the SAIL accreditation boundary at Redstone Arsenal, AL.

This position combines hands-on Windows and Linux systems administration with cybersecurity compliance, vulnerability management, and system accreditation support. The selected candidate will work closely with the Information System Security Officer (ISSO) to maintain secure systems, remediate vulnerabilities, implement DISA Security Technical Implementation Guides (STIGs), and support ongoing Authorization to Operate (ATO) requirements.

The ideal candidate will have experience with Active Directory, Windows administration, workstation provisioning, ACAS vulnerability scanning, and federal cybersecurity compliance standards.

Responsibilities:
  • Perform routine Windows systems administration, including user account creation, Active Directory management, Group Policy Object (GPO) administration, and privilege management.
  • Build, configure, deploy, and maintain Windows and Linux workstations in accordance with established security baselines.
  • Support Windows Server and desktop environments, including system configuration, troubleshooting, and maintenance.
  • Provide basic network administration and troubleshooting for Cisco-based network infrastructure.
  • Maintain system configurations and ensure compliance with applicable security requirements.
  • Conduct vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) and associated security tools.
  • Review ACAS scan findings, identify vulnerabilities, and perform weekly system patching and remediation.
  • Maintain and update the ACAS scanner, including plugin libraries and security updates.
  • Prepare and upload monthly ACAS scan results to support ongoing ATO maintenance.
  • Conduct DISA STIG assessments using Evaluate STIG, SCAP Compliance Checker (SCC), and related tools.
  • Identify and remediate STIG findings and prepare compliance reports for the ISSO.
  • Support Risk Management Framework (RMF) activities, including security control implementation, vulnerability tracking, and compliance documentation.
  • Assist with security policy updates, artifact collection, and accreditation documentation supporting the SAIL accreditation boundary.
  • Support the maintenance of the system's Authorization to Operate (ATO).
  • Assist in designing, testing, implementing, and maintaining secure operating systems, networks, and security monitoring solutions.
  • Conduct risk and vulnerability assessments at the network, system, and application levels.
  • Support threat modeling, incident response, security monitoring, and operational risk mitigation activities.
  • Evaluate security requirements and recommend additional safeguards to strengthen system security.
  • Utilize Commercial Off-the-Shelf (COTS), Government Off-the-Shelf (GOTS), and custom security tools to identify, contain, mitigate, and remediate vulnerabilities and intrusions.
  • Assist with implementing applicable government security policies, including NISPOM and DCID 6/3, as required.
  • Support formal Security Test and Evaluation (ST&E) activities, including test preparation, execution, results analysis, and reporting.
  • Review system audit findings, track corrective actions, and ensure identified security issues are addressed.
  • Assist with cybersecurity metrics development, maintenance, and reporting.
  • Prepare technical documentation and provide security briefings to senior personnel as needed.

Required:
  • Active Secret security clearance.
  • Experience administering Windows operating systems, including Windows Server and desktop environments.
  • Experience with Active Directory, user account administration, Group Policy Objects (GPOs), and access management.
  • Ability to configure, deploy, maintain, and troubleshoot Windows and Linux workstations.
  • Familiarity with cybersecurity principles, system security controls, and vulnerability remediation.
  • Ability to support full-time, on-site operations at Redstone Arsenal, AL.
  • Strong troubleshooting, organizational, and technical communication skills.
  • Ability to collaborate with systems administrators, cybersecurity personnel, and Information System Security Officers (ISSOs).

Desired:
  • Strong proficiency in Windows Server/Desktop administration and basic Linux administration.
  • Hands-on experience with ACAS (Tenable Nessus), DISA STIGs, Evaluate STIG, and SCAP Compliance Checker (SCC).
  • Experience performing vulnerability scans, analyzing findings, applying patches, and documenting remediation activities.
  • Strong understanding of Active Directory, Group Policy Objects (GPOs), and Identity and Access Management (IAM) principles.
  • Basic understanding of Cisco networking concepts, including routing and switching.
  • Familiarity with the Risk Management Framework (RMF) and Authorization to Operate (ATO) processes.
  • Experience supporting DoD cybersecurity compliance, security assessments, and system accreditation.
  • Experience preparing cybersecurity documentation, security assessment reports, and compliance artifacts.
  • Familiarity with federal security policies, including NISPOM and DCID 6/3.

Preferred Certifications:
  • DoD 8570.01-M IAM/IAT Level II compliance, such as CompTIA Security+ CE, CySA+, or equivalent.
  • Cisco Certified Network Associate (CCNA).
  • Microsoft certifications relevant to Windows systems administration.

Candidates outside commuting distance would need to consider relocation. We understand if relocation is not an option; however, relocation assistance may be available through the client for qualified, interested candidates.