Classified Systems Administrator

📋 Job Overview

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms. We are seeking a Senior Systems Administrator for assigned classified authorization boundaries—facility enclaves (SIPR, JWICS/CWAN, customer-dedicated, SAP carve-outs) and supporting lab/product systems.

🏢 About Saronic Technologies

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

🎯 The Role

This person will own secure build, hardening, operations, account administration, and technical evidence the ISSO needs for ATO and continuous monitoring. Lanes are distinct; work is expected to overlap on TACLANE, CDS, COMSEC handling, and platform integration.

✅ Key Responsibilities

• Administer classified servers, workstations, virtualization, storage, and appliances for SIPR, JWICS/CWAN, SAP, lab, and assigned platform systems.
• Build and maintain systems to approved architectures, STIGs/SRGs, vendor guidance, and ISSM/ISSO baselines. Execute provisioning, patching, firmware, certificates, backup/recovery, and configuration changes through change control.
• Implement and validate technical controls under CNSSI 1253, NIST SP 800-53, JSIG, DAAPM/DAAG, and customer requirements. Run SCAP/STIG Viewer/ACAS (or equivalent); remediate findings to timeline; deliver evidence for ATO, ConMon, POA&M closure, and inspections.
• Administer user, privileged, service, and group accounts from approved authorization. Enforce least privilege and deprovision on required timelines. Protect admin credentials, PAWs, tokens, and certificates.
• Configure audit logging, time sync, retention, and forwarding to the accredited collector/SIEM. Support incident response with log/state preservation. Do not wipe or reimage evidence unless directed.
• Support assigned classified network infrastructure in coordination with the Network Engineer: management interfaces, services, inventories, and endpoint-to-enclave troubleshooting while maintaining red/black separation.
• Provide authorized hands-on support for TACLANE/Type-1 devices and CDS components: configuration backups, firmware, connectivity testing, logging, and restoration. Coordinate keying, fill, CIK/token, and zeroize with appointed COMSEC personnel. Do not freelance CDS filter/policy changes.
• Handle CCI/COMSEC-associated equipment within training and authorization. Maintain accountability of assigned CCI. Report suspected loss, compromise, tampering, or inventory discrepancy immediately. This billet is not the COMSEC Account Manager/CRO unless separately appointed.
• Maintain as-builts, inventories, IP/hostname records, SOPs, build/hardening guides, and recovery procedures. Keep systems inspection-ready. Support DCSA, Navy, IC, SAP, CSSP, and customer assessments.
• Travel to sites, shipyards, and integration events to install, recover, and sustain classified systems, including support to GFI/GFE and payload-adjacent hosts when assigned.

📌 Required Qualifications

• U.S. citizen. Active TS with SCI eligibility.
• 5+ years systems/infrastructure administration, including classified DoD, IC, SAP, or equivalent environments.
• Hands-on Windows and/or Linux administration; AD, GPO, DNS, DHCP, PKI, privileged access, logging, and endpoint management.
• STIG/SRG hardening, patching, ACAS/SCAP (or equivalent), and RMF evidence production for NIST SP 800-53 / CNSSI 1253 technical controls.
• Working TCP/IP, VLAN, routing/switching, and firewall literacy sufficient to troubleshoot with Network Engineering.
• Familiarity with COMSEC, CCI, Type-1 encryption, and TACLANE employment; direct TACLANE or CDS experience strongly valued.
• DoD 8140 qualification appropriate to Systems Administrator / privileged access (Security+ CE or approved equivalent).
• Able to work independently in SCIFs and field sites
• Travel: 30–40% of time on short notices

⭐ Desirable Experience

• SIPR, JWICS, SAP, PIT/platform IT, unmanned/autonomous systems, or GFI/GFE administration.
• Navy/NAVWAR/FLTCYBERCOM, DCSA DAAG, SOCOM, CSfC, ICD 705/TEMPEST, GDMS TACLANE training, CDSE COMSEC/CDS coursework.
• Prior partnership with a COMSEC Account Manager or prior Custodian appointment.

🎁 Benefits

• Medical Insurance: Comprehensive health insurance plans covering a range of services. Saronic pays 100% of the premium for employees and 80% for dependents.
• Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care. Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents.
• Time Off: Generous PTO and Holidays
• Parental Leave: Paid maternity and paternity leave to support new parents
• Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
• Retirement Plan: 401(k) plan with company match
• Stock Options: Equity options to give employees a stake in the company’s success
• Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
• Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
• Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office

🛂 Visa & Eligibility

U.S. citizen. Active TS with SCI eligibility. This role requires access to export-controlled information or items that require “U.S. Person” status.