Job description

Job Description See what you’re missing. Our employees work on the world’s most advanced electronics – from detecting threats for F-35 pilots to illuminating the night for soldiers. Spanning air, land, sea, and space, we are developing the technology of tomorrow, delivered today. Drawing strength from our differences, we’re innovating for the future. And you can, too. Our flexible work environment provides you a chance to change the world without giving up your personal life. We put our customers first – exemplified by our mission: “We Protect Those Who Protect Us®.” Sound like a team you want to be a part of? Come build your career with BAE Systems. We put our customers first – exemplified by our missions: “We Protect Those Who Protect Us®” and “We Innovate for Those Who Move the World.” Sound like a team you want to be a part of? Come build your career with BAE Systems. BAE Systems is seeking a Senior Closed Area Systems Administrator to provide comprehensive technical and operational support for classified IT systems. This position requires a seasoned IT professional with expertise in managing complex, air-gapped systems and lab environments in accordance with DoD and Intelligence Community security requirements. You will be responsible for the configuration, maintenance, and monitoring of secure networks and systems, including Lab-in-a-Box (LIB) environments, virtualization platforms, endpoint protection, and logging/alerting tools. This position is 100% onsite within a closed, classified area. Some after-hours or weekend support may be required for maintenance windows or incident response. You must be able to lift equipment (up to 40lbs) and work within controlled environments. Key responsibilities include: • Proficiency in Active Directory, including user/group management, OU structure, and GPOs. • Configure, deploy, and maintain Lab-in-a-Box (LIB) environments used in closed area testing and mission scenarios. • Develop and execute system shutdown and secure wipe procedures, in accordance with DoD and agency guidelines. • Lead and coordinate data spill containment, response, and remediation actions in classified environments. • Operate and manage Nessus vulnerability scanning, assessment reporting, and risk remediation tracking. • Maintain and support VMware-based virtual infrastructure, including host management and resource allocation. • Operate and manage Veeam backup and recovery solutions for secure system images and restoration planning. • Administer Trellix ePO (McAfee) for endpoint protection policy management, signature updates, and alert resolution. • Perform domain controller maintenance, including replication, DNS/DHCP services, and health monitoring. • Design, implement, and troubleshoot Group Policy Objects (GPOs) in Active Directory. • Support Splunk operations, including forwarder management, dashboard/report creation, and log analysis for auditing and threat detection. • Ensure all systems are compliant with applicable STIGs, RMF controls, and cyber hygiene policies. • Maintain system documentation, configuration change records, and contribute to audit readiness. • Collaborate with ISSOs/ISSMs, facility security, and other stakeholders to ensure secure and compliant operations. Required Education, Experience, & Skills • US Citizenship. • Active U.S. Top Secret Security Clearance and CompTIA Security+ or equivalent DoD 8570 IAT Level II certification. • 5-7 years of experience (4+ years of experience with a degree) as a system administrator. • Direct experience configuring and managing Lab-in-a-Box (LIB) environments. • Familiarity with data spill response protocols and secure system sanitization. • Hands-on experience with Nessus, VMware vSphere, Veeam, and Trellix ePO. • Strong Active Directory experience, including domain controller and GPO management. • Working knowledge of Splunk in secure environments (including alerting and data retentionstrategies). • Understanding of DoD and IC security standards, including RMF, NISPOM, and STIG compliance. Preferred Education, Experience, & Skills • Active U.S. TS/SCI Security Clearance • 4+ years of experience working in a classified environment • Experience with system accreditation (e.g., SSP development, POA&M tracking). • Familiarity with classified lab setups, test bed environments, or R&D support. • Exposure to cross-domain solutions, enclave management, or SAP/SAR environments. • Scripting experience (PowerShell, Python) to automate common sysadmin tasks. • Experience supporting audit and inspection activities. Pay Information Full-Time Salary Range: $97008 - $164914 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics. About BAE Systems, Inc. BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support. Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters. This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.

Requirements

Must-haves

Key responsibilities include: • Proficiency in Active Directory, including user/group management, OU structure, and GPOs.
Configure, deploy, and maintain Lab-in-a-Box (LIB) environments used in closed area testing and mission scenarios.
Develop and execute system shutdown and secure wipe procedures, in accordance with DoD and agency guidelines.
Lead and coordinate data spill containment, response, and remediation actions in classified environments.
Operate and manage Nessus vulnerability scanning, assessment reporting, and risk remediation tracking.
Maintain and support VMware-based virtual infrastructure, including host management and resource allocation.
Operate and manage Veeam backup and recovery solutions for secure system images and restoration planning.
Administer Trellix ePO (McAfee) for endpoint protection policy management, signature updates, and alert resolution.
Perform domain controller maintenance, including replication, DNS/DHCP services, and health monitoring.
Design, implement, and troubleshoot Group Policy Objects (GPOs) in Active Directory.
Support Splunk operations, including forwarder management, dashboard/report creation, and log analysis for auditing and threat detection.
Ensure all systems are compliant with applicable STIGs, RMF controls, and cyber hygiene policies.
Maintain system documentation, configuration change records, and contribute to audit readiness.
Collaborate with ISSOs/ISSMs, facility security, and other stakeholders to ensure secure and compliant operations.
Required Education, Experience, & Skills • US Citizenship.
Active U.S. Top Secret Security Clearance and CompTIA Security+ or equivalent DoD 8570 IAT Level II certification.
5-7 years of experience (4+ years of experience with a degree) as a system administrator.
Direct experience configuring and managing Lab-in-a-Box (LIB) environments.
Familiarity with data spill response protocols and secure system sanitization.
Hands-on experience with Nessus, VMware vSphere, Veeam, and Trellix ePO.
Strong Active Directory experience, including domain controller and GPO management.
Working knowledge of Splunk in secure environments (including alerting and data retentionstrategies).
Understanding of DoD and IC security standards, including RMF, NISPOM, and STIG compliance.

Nice-to-haves

Preferred Education, Experience, & Skills • Active U.S. TS/SCI Security Clearance

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: phenom
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off