Apply on Employer Site

Argonne National Laboratory · 3 days ago

Network/Systems Administrator

Lemont, IL

Full-time

Onsite

Mid Level

$83K/yr - $131K/yr

4+ years exp

Argonne National Laboratory is seeking a System Administrator for the classified National Security Systems at the Security Programs Facility. The role involves developing, integrating, deploying, and maintaining security-related applications while ensuring the secure operation of systems and networks.

EnergySecuritySocial Impact

Culture & Values

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Develop, integrate, deploy and maintain other security related applications with a focus of centralization and automation of division related applications

Design, configure, implement, and maintain the secure operating systems, networks, and applications for the SPF classified NSS

Knowledge and demonstrated expertise administering a networked computer environment

Knowledge of designing, planning and implementing cabling, racking, hardware, and software upgrades

Experience with the administration of common Windows Server Domain Services such as Active Directory, DNS, DHCP, File and Print Servers, Remote Desktop Session Host, and Group Policy

Experience with maintenance routines such as monthly security and vulnerability patching, firmware and driver updates, and routine backup schedules

Knowledge and experience with virtualization technologies, virtual hardware environments, virtual machines (ProxMox, VMware ESXi, Microsoft Hyper-V)

Ability to configure, implement, and maintain information systems to meet National Institute of Standards and Technology (NIST) 800-53 Security and Privacy Controls for Information Systems and Organizations

Experience with the application of Secure Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and/or Center for Internet Security (CIS) Baselines

Experience with vulnerability scanning and remediation using Nessus or similar tools

Experience with Multifactor authentication (MFA) technologies such as RSA SecureID and Smart Card PKI Programs

Knowledge and experience with installing, configuring, and troubleshooting network encryption devices

Assist with device maintenance and transferring electronic keys

Ability to manage multiple concurrent tasks and balance conflicting priorities

Ability to work effectively as a team member

Strong customer service skills in providing user support to research and scientific staff

Preparing tools, resources, and documentation describing national security system services and capabilities

Verbal and written communication skills and ability to develop detailed documentation

Skill and experience in analyzing and recommending cost-beneficial technological upgrades to network and for centralization and automation of division related applications

Qualification

Network administrationWindows Server Domain ServicesVirtualization technologiesNIST 800-53 complianceVulnerability scanningNetwork encryption devicesMultifactor authenticationCisco switches configurationLinux Server Operating SystemsCustomer serviceAnalytical skillsTeamworkCommunication skills

Required

Due to the nature of the work, this position requires an active DOE Q‑level security clearance at the time of hire. Applicants must currently hold, and be able to maintain, a DOE Q‑level clearance. A 'Q' clearance, or Q access authorization, is a security clearance granted by the U.S. Department of Energy (DOE). It's functionally equivalent to a Top Secret clearance, allowing access to information classified up to that level, but also grants access to Restricted Data (RD) and Special Nuclear Material (SNM)

To perform the essential functions of this position successful applicants must provide proof of U.S. citizenship, which is required to comply with federal regulations and contract

Knowledge and demonstrated expertise administering a networked computer environment. Including hardware and software operation, troubleshooting, and maintenance

Knowledge of designing, planning and implementing cabling, racking, hardware, and software upgrades

Experience with the administration of common Windows Server Domain Services such as Active Directory, DNS, DHCP, File and Print Servers, Remote Desktop Session Host, and Group Policy

Experience with maintenance routines such as monthly security and vulnerability patching, firmware and driver updates, and routine backup schedules

Knowledge and experience with virtualization technologies, virtual hardware environments, virtual machines (ProxMox, VMware ESXi, Microsoft Hyper-V)

Experience with the application of Secure Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and/or Center for Internet Security (CIS) Baselines

Experience with vulnerability scanning and remediation using Nessus or similar tools

Experience with Multifactor authentication (MFA) technologies such as RSA SecureID and Smart Card PKI Programs

Knowledge and experience with installing, configuring, and troubleshooting network encryption devices. Assist with device maintenance and transferring electronic keys

Ability to manage multiple concurrent tasks and balance conflicting priorities

Ability to work effectively as a team member

Strong customer service skills in providing user support to research and scientific staff. Preparing tools, resources, and documentation describing national security system services and capabilities

Verbal and written communication skills and ability to develop detailed documentation

Skill and experience in analyzing and recommending cost-beneficial technological upgrades to network and for centralization and automation of division related applications

Ability to model Argonne's Core Values: Impact, Safety, Respect, Integrity, and Teamwork

This position is at a PT3 level in our Career Framework: Bachelor's degree and 4+ years of experience, or Master's degree and 2+ years of experience or equivalent

Preferred

Prior experience managing and supporting classified networks

Experience implementing RSA Authentication Manager Virtual Appliances in a networked environment

Experience using Veritas NetBackup, Veeam, or similar enterprise backup solutions

Familiarity with Linux Server Operating Systems such as RHEL, Rocky, Ubuntu Pro

Experience with the configuration and maintenance of Cisco switches using the Cisco IOS Command-Line Interface (CLI)

Familiarity with security information and event management (SIEM) tools such as Elasticsearch, Logstash, and Kibana (ELK), Solarwinds Security Event Manager, and Splunk

Knowledge and experience with NIST Special Publications 800-18 Guide for Developing Security Plans for Federal Information Systems and SP 800-37 Rev. 2 Risk Management Framework

Experience with Wyse Device Manager (WDM) and thin client configuration and deployment