Apply on Employer Site

Argonne National Laboratory · 1 month ago

Network/Systems Administrator

Lemont, IL USA

Full-time

Onsite

Mid Level

$83K/yr - $131K/yr

4+ years exp

Argonne National Laboratory is seeking a Network/Systems Administrator for the classified National Security Systems. The role involves developing and maintaining security-related applications, as well as configuring and managing secure operating systems and networks for the Security Programs Facility.

EnergySecuritySocial Impact

Culture & Values

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Develop, integrate, deploy and maintain other security related applications with a focus of centralization and automation of division related applications

Design, configure, implement, and maintain the secure operating systems, networks, and applications for the SPF classified NSS

Provide proof of U.S. citizenship, which is required to comply with federal regulations and contract

Administer a networked computer environment including hardware and software operation, troubleshooting, and maintenance

Design, plan and implement cabling, racking, hardware, and software upgrades

Administer common Windows Server Domain Services such as Active Directory, DNS, DHCP, File and Print Servers, Remote Desktop Session Host, and Group Policy

Perform maintenance routines such as monthly security and vulnerability patching, firmware and driver updates, and routine backup schedules

Configure, implement, and maintain information systems to meet National Institute of Standards and Technology (NIST) 800-53 Security and Privacy Controls for Information Systems and Organizations

Apply Secure Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and/or Center for Internet Security (CIS) Baselines

Conduct vulnerability scanning and remediation using Nessus or similar tools

Install, configure, and troubleshoot network encryption devices and assist with device maintenance and transferring electronic keys

Manage multiple concurrent tasks and balance conflicting priorities

Work effectively as a team member and provide user support to research and scientific staff

Prepare tools, resources, and documentation describing national security system services and capabilities

Analyze and recommend cost-beneficial technological upgrades to network and for centralization and automation of division related applications

Qualification

DOE Q-level security clearanceWindows Server Domain ServicesVirtualization technologiesNIST 800-53 complianceVulnerability scanningNetwork encryption devicesMultifactor authenticationCisco switches configurationCustomer service skillsAnalytical skillsTeamworkCommunication skills

Required

Due to the nature of the work, this position requires an active DOE Q‑level security clearance at the time of hire. Applicants must currently hold, and be able to maintain, a DOE Q‑level clearance

To perform the essential functions of this position successful applicants must provide proof of U.S. citizenship

Knowledge and demonstrated expertise administering a networked computer environment. Including hardware and software operation, troubleshooting, and maintenance

Knowledge of designing, planning and implementing cabling, racking, hardware, and software upgrades

Experience with the administration of common Windows Server Domain Services such as Active Directory, DNS, DHCP, File and Print Servers, Remote Desktop Session Host, and Group Policy

Experience with maintenance routines such as monthly security and vulnerability patching, firmware and driver updates, and routine backup schedules

Knowledge and experience with virtualization technologies, virtual hardware environments, virtual machines (ProxMox, VMware ESXi, Microsoft Hyper-V)

Ability to configure, implement, and maintain information systems to meet National Institute of Standards and Technology (NIST) 800-53 Security and Privacy Controls for Information Systems and Organizations

Experience with the application of Secure Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and/or Center for Internet Security (CIS) Baselines

Experience with vulnerability scanning and remediation using Nessus or similar tools

Experience with Multifactor authentication (MFA) technologies such as RSA SecureID and Smart Card PKI Programs

Knowledge and experience with installing, configuring, and troubleshooting network encryption devices. Assist with device maintenance and transferring electronic keys

Ability to manage multiple concurrent tasks and balance conflicting priorities

Ability to work effectively as a team member

Strong customer service skills in providing user support to research and scientific staff. Preparing tools, resources, and documentation describing national security system services and capabilities

Verbal and written communication skills and ability to develop detailed documentation

Skill and experience in analyzing and recommending cost-beneficial technological upgrades to network and for centralization and automation of division related applications

Ability to model Argonne's Core Values: Impact, Safety, Respect, Integrity, and Teamwork

This position is at a PT3 level in our Career Framework: Bachelor's degree and 4+ years of experience, or Master's degree and 2+ years of experience or equivalent

Preferred

Prior experience managing and supporting classified networks

Experience implementing RSA Authentication Manager Virtual Appliances in a networked environment

Experience using Veritas NetBackup, Veeam, or similar enterprise backup solutions

Familiarity with Linux Server Operating Systems such as RHEL, Rocky, Ubuntu Pro

Experience with the configuration and maintenance of Cisco switches using the Cisco IOS Command-Line Interface (CLI)

Familiarity with security information and event management (SIEM) tools such as Elasticsearch, Logstash, and Kibana (ELK), Solarwinds Security Event Manager, and Splunk

Knowledge and experience with NIST Special Publications 800-18 Guide for Developing Security Plans for Federal Information Systems and SP 800-37 Rev. 2 Risk Management Framework

Experience with Wyse Device Manager (WDM) and thin client configuration and deployment