Job description

Job Description BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world. At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom. We are seeking a Senior AWS Cloud Administrator to own and operate the classified and unclassified GovCloud AWS environments supporting the Advanced Technology team's SaaS application development, as well as help to protect and defend our NSS classified SIPRNET environment. As part of this role, you will also coordinate with our on-site cybersecurity team and lead vendor and software license coordination on behalf of Advanced Technology. You will build and maintain hands-on familiarity with our cybersecurity operations — including cyber threat analysis, incident response, and vulnerability assessment across Windows Server 2022 domain infrastructure, Windows 11 Enterprise workstations, Cisco networking infrastructure, Palo Alto firewalls, and enterprise security tools within our classified network environment. This position offers ownership of a growing AWS cloud environment supporting active SaaS development, plus regular working contact with our cybersecurity team. It's built for someone who wants a real cloud administration role grounded in hands-on classified-network cybersecurity experience, not just adjacent to it — with breadth, autonomy, and visibility across both teams. Primary Responsibilities Include: • Serve as cloud administrator for the Advanced Technology team's AWS environment supporting active SaaS application development • Manage AWS accounts, IAM, networking (VPC), storage, and compute resources in a classified/GovCloud context, in coordination with security and compliance requirements • Work directly with software and services vendors, and with internal program management operations, to track license statuses, renewals, and costs, and to plan and execute new software installs and updates • Coordinate with the on-site cybersecurity team on requirements, current activities, and upcoming changes relevant to Advanced Technology's systems and development plans • Proactively surface upcoming cybersecurity policy, tooling, or compliance changes to the Advanced Technology team so development plans can adapt ahead of time • Maintain hands-on fluency in the cybersecurity team's environment and tooling — monitoring, detecting, analyzing, and responding to cyber threats — to communicate effectively on technical requirements and constraints Required Education, Experience, & Skills • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field and minimum 5 years of experience in cybersecurity, IT security, or related field, or equivalent military experience (Associate's degree with 7 years of experience also considered) • Current SECRET clearance • Hands-on experience administering AWS environments (EC2, S3, IAM, VPC, CloudTrail) supporting application development teams; AWS GovCloud experience strongly preferred given classified network context • Experience coordinating with software/license vendors and internal Program Management on license tracking, renewals, and software deployment • Current CompTIA Security+ CE certification • Cybersecurity certification demonstrating intermediate-to-advanced analysis skills (CySA+, GCIH, GCFA, or equivalent) • Working knowledge of Windows Server 2016/2019/2022 domain environments and Active Directory administration • Experience with SIEM platforms (Splunk preferred), log analysis, and event correlation • Understanding of network security principles with Cisco networking equipment (routers, switches, firewalls) • Experience with vulnerability scanning tools (Tenable Nessus or similar) and endpoint security/malware detection tools (Trellix ENS/ESS or similar) • Understanding of incident response principles and digital forensics concepts in Windows environments • Knowledge of STIG compliance requirements and DoD security baselines • Excellent written and verbal communication skills; demonstrated ability to translate technical requirements between distinct teams/stakeholders • Ability to work independently, manage competing priorities, and operate in high-pressure environments Flexibility to work rotating shifts (including evenings, weekends, holidays) during the initial cybersecurity onboarding period as operational needs require Preferred Education, Experience, & Skills • AWS certification (Solutions Architect – Associate, SysOps Administrator, or Security Specialty) • Familiarity with administering environments with Bedrock, Lambda, Step Functions, and Redshift services • Familiarity with software asset/license management platforms and vendor management workflows • Demonstrated success operating as a liaison or embedded resource between two functional teams • Military experience in cybersecurity, signals intelligence, or communications fields (25B, 35N, 17C, 35S) • Advanced DoD 8570.01-M IAT Level II/III certification (GCIH, GCFA, CISSP) • Advanced platform-specific certification (Splunk Power User/Admin), Cisco security certifications (CCNA Security, CyberOps), or Palo Alto certifications (PCNSA, PCCSA) • Experience with Palo Alto Networks firewall administration or similar next-generation firewall platforms • Basic scripting experience (PowerShell, Python, Bash) for security or cloud automation tasks • Understanding of DoD PKI implementation, CNSS policies, and NSS classification handling procedures • Prior experience supporting classified networks or SIPRNET connectivity requirements • Experience with DISA STIG implementation and compliance validation tools Pay Information Full-Time Salary Range: $79365 - $134921 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics. About BAE Systems, Inc. BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support. Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters. This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.

Requirements

Must-haves

Serve as cloud administrator for the Advanced Technology team's AWS environment supporting active SaaS application development
Manage AWS accounts, IAM, networking (VPC), storage, and compute resources in a classified/GovCloud context, in coordination with security and compliance requirements
Work directly with software and services vendors, and with internal program management operations, to track license statuses, renewals, and costs, and to plan and execute new software installs and updates
Coordinate with the on-site cybersecurity team on requirements, current activities, and upcoming changes relevant to Advanced Technology's systems and development plans
Proactively surface upcoming cybersecurity policy, tooling, or compliance changes to the Advanced Technology team so development plans can adapt ahead of time
Maintain hands-on fluency in the cybersecurity team's environment and tooling — monitoring, detecting, analyzing, and responding to cyber threats — to communicate effectively on technical requirements and constraints
Current SECRET clearance
Experience coordinating with software/license vendors and internal Program Management on license tracking, renewals, and software deployment
Current CompTIA Security+ CE certification
Cybersecurity certification demonstrating intermediate-to-advanced analysis skills (CySA+, GCIH, GCFA, or equivalent)
Working knowledge of Windows Server 2016/2019/2022 domain environments and Active Directory administration
Understanding of network security principles with Cisco networking equipment (routers, switches, firewalls)
Experience with vulnerability scanning tools (Tenable Nessus or similar) and endpoint security/malware detection tools (Trellix ENS/ESS or similar)
Understanding of incident response principles and digital forensics concepts in Windows environments
Knowledge of STIG compliance requirements and DoD security baselines
Excellent written and verbal communication skills; demonstrated ability to translate technical requirements between distinct teams/stakeholders
Ability to work independently, manage competing priorities, and operate in high-pressure environments
Flexibility to work rotating shifts (including evenings, weekends, holidays) during the initial cybersecurity onboarding period as operational needs require
Familiarity with administering environments with Bedrock, Lambda, Step Functions, and Redshift services
Familiarity with software asset/license management platforms and vendor management workflows
Demonstrated success operating as a liaison or embedded resource between two functional teams

Nice-to-haves

Hands-on experience administering AWS environments (EC2, S3, IAM, VPC, CloudTrail) supporting application development teams; AWS GovCloud experience strongly preferred given classified network context
Experience with SIEM platforms (Splunk preferred), log analysis, and event correlation
Preferred Education, Experience, & Skills • AWS certification (Solutions Architect – Associate, SysOps Administrator, or Security Specialty)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awspython

Platform: phenom
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off