Cybersecurity Tools & Infrastructure Administrator

The Cybersecurity Tools & Infrastructure Administrator supports Navy ERPs core cybersecurity tools across Test and Production environments. This role maintains system health applies patches and manages configurations across Red Hat Enterprise Linux Ubuntu Linux and Windows Server infrastructure. The administrator works with Security Operations Center (SOC) analysts and system owners to onboard data sources maintain agent health and support effective alerting.

The following reflects managements definition of essential functions for this job but does not restrict the tasks that may be assigned.

• Platform Administration & Infrastructure Health:
  • Maintain operational readiness performance and uptime across test and production environments:
    • Splunk: Linux RHEL 8/9
    • Tripwire Enterprise: Windows 2022
  • Monitor host-level services disk storage and resource utilization.
• Patching & Lifecycle Operations:
  • Execute application-level patching hotfixes and software upgrades.
  • Support OS-level patching kernel updates and hardening alongside host system administrators.
  • Maintain system compliance with DoD Security Technical Implementation Guides (STIGs) for the cyber team servers.
• Tool Configuration & Onboarding:
  • Onboard new data sources into Splunk; troubleshoot log ingestion forwarder issues and parsing rules.
  • Configure Tripwire Enterprise console user RBAC baseline integrity policies and automated alerts.
  • Assist analysts with Splunk data models dashboards and automated report generation.
• Troubleshooting & Vendor Support:
  • Diagnose and resolve application crashes synchronization failures and connectivity issues.
  • Coordinate with commercial vendor support teams (Splunk Tripwire) for advanced bug resolution.
• Documentation & Governance:
  • Author update and maintain Standard Operating Procedures (SOPs) and system administration runbooks.

• Experience: 4 years administering enterprise cybersecurity applications within DoD or federal IT environments.
• Operating Systems:
  • Strong Linux system administration skills (RHEL and Ubuntu CLI services systemd package management).
  • Working knowledge of Windows Server administration and Active Directory/RBAC concepts.
• Tool Administration: Direct hands-on administration experience with at least one of the following:
  • Splunk Enterprise (distributed indexers search heads heavy/universal forwarders).
  • Tripwire Enterprise (console management agent deployments FIM policies).
• Certifications:
  • DoD 8570/8140 IAT Level II baseline (Security CE CCNA Security CySA or equivalent).

• Splunk Enterprise Certified Admin or Power User certification.
• Relevant OS certifications (Red Hat RHCSA / RHCE Linux or Microsoft Windows Server).
• Scripting capability for automation and maintenance (Bash PowerShell or Python).

Physical Requirements: The ideal candidate must at a minimum be able to meet the following physical requirements of the job with or without a reasonable accommodation:

• Ability to perform repetitive motions with the hands wrists and fingers.
• Ability to engage in and follow audible communications in emergency situations.
• Ability to sit for prolonged periods at a desk and working on a computer.