← All roles

Systems Administrator (Linux & Windows)

Agile Defense· Digital Transformation – Test and Evaluation
Apply on company site
Fort Huachuca, AZRegularPosted 2w ago

About the role

Versatile Systems Administrator (Linux & Windows) focused on MECM/SCCM administration, endpoint lifecycle management, OS deployment, patching, system hardening, and cyber‑compliance in a mixed Linux (RHEL) and Windows environment hosted in DoD‑style facilities.

Responsibilities

  • Serve as the primary administrator for Microsoft Endpoint Configuration Manager (MECM / SCCM), managing infrastructure health, site systems, distribution points, and client agent health across all connected enclaves.
  • Engineer, test, deploy, and maintain standardized Windows Operating System Deployment (OSD) task sequences and baseline golden images.
  • Package, test, distribute, and automate application installations, scripts, and software updates across heterogeneous lab and hosting workstations and servers.
  • Manage and orchestrate enterprise-wide software update distribution using Software Update Points (SUP) integrated with Windows Server Update Services (WSUS).
  • Create and deploy custom compliance baselines and configuration items (CIs) to enforce security settings, STIG configurations, registry keys, and audit controls.
  • Develop custom MECM queries, device collections, and reports (SSRS) to provide real-time hardware/software inventory, asset discovery, and compliance auditing.
  • Administer, build, configure, and maintain physical and virtual Red Hat Enterprise Linux (RHEL) servers, modern Windows Servers (2019/2022), and Windows 10/11 workstations.
  • Manage core directory and identity infrastructure, including Active Directory Domain Services (AD DS), Group Policy Objects (GPOs), DNS, DHCP, and role-based access control.
  • Troubleshoot and maintain enterprise Linux services, including SE Linux policies/security contexts, daemon services (systemd, chronyd), file systems (/opt, logical volumes), and local package managers.
  • Maintain hypervisor and storage infrastructure, including Nutanix, VMware ESXi/vCenter, and enterprise backup/restore solutions (e.g., Cohesity, snapshots).
  • Support basic multi-tier database hosting and connectivity for Oracle and Microsoft SQL server backends.
  • Process, approve, and maintain user access documentation and account provisioning via DD Form 2875 and identity management systems.
  • Issue, configure, and troubleshoot Public Key Infrastructure (PKI) certificates, CAC authentication, and secure remote protocols across all client and server endpoints.
  • Maintain strict system security posture in compliance with DISA STIGs and SRGs.
  • Execute, review, and analyze weekly ACAS / Tenable Nessus vulnerability scans and monthly STIG evaluations.
  • Rapidly remediate identified CVEs, IAVM alerts, CTO/DTO directives, and vendor patches across both Windows and Linux fleets.
  • Draft, track, and update Plans of Action and Milestones (POA&Ms) for items requiring architectural mitigations or extended test schedules.
  • Maintain endpoint security agents across all hosts, including Trellix/ePO agents, EDR, and application whitelisting tools (e.g., fapolicyd).
  • Monitor and analyze system, security, and application logs using SIEM and centralized log management tools (e.g., LogRhythm, Elastic Fleet).

Qualifications

  • Active DoD 8570/8140 IAT Level II Baseline Certification (e.g., CompTIA Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP)
  • Relevant computing environment (CE) / vendor training or certification in Microsoft Windows Server/MECM or Red Hat Enterprise Linux (or ability to complete within 6 months of hire)
  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related STEM discipline (equivalent relevant professional experience may be substituted in lieu of degree)
  • Minimum of 3–5+ years of hands-on systems administration experience across mixed Linux (RHEL) and Windows enterprise server/workstation environments
  • Minimum of 2+ years of dedicated, hands-on administration of MECM / SCCM in an enterprise or lab environment

Skills

Required:MECM / SCCM administrationWindows OS Deployment (OSD)Software updates managementRHEL administrationActive Directory / GPOsPKI / CAC
Nice to have:ACAS / Nessus vulnerability managementSIEM tooling (LogRhythm / Elastic

Benefits

  • Not explicitly listed in the description
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Agile Defense

Always Evolving

Agile Defense delivers advanced capabilities and solutions tailored to the most critical national security and civilian missions.

national securitycivilian missionsinnovationcapabilitiessolutions
Company profileWebsite

More open roles at Agile Defense