Security Platform Administrator
Position Overview
The Security Platform Administrator maintains the health, availability, security, and supportability of operating systems, security platforms, sensors, enclaves, and related software. The role performs patching, hardening, monitoring, backup and recovery, troubleshooting, maintenance, configuration management, and administrative automation while keeping platform documentation and lifecycle information current.
Duties & Responsibilities
- Implement, configure, operate, and maintain operating systems and related software supporting security tools, sensors, platforms, enclaves, applications, and data services.
- Apply platform and software updates, security patches, hardening requirements, and approved configuration baselines.
- Monitor system resources, capacity, performance, availability, service health, and supporting dependencies.
- Troubleshoot system issues, outages, integration failures, data-flow problems, and degraded platform performance.
- Design, implement, schedule, perform, monitor, and test backup and recovery processes for supported platforms and data.
- Plan and execute maintenance activities while preserving service continuity and coordinating required operational handoffs.
- Automate routine monitoring, troubleshooting, deployment, configuration, patching, maintenance, and reporting activities.
- Maintain asset, software, license, certificate, credential, maintenance, support, and inventory information for assigned platforms.
- Support change implementation, testing, deployment, rollback, and post-change verification using established change-management processes.
- Maintain configuration notes, troubleshooting procedures, maintenance documentation, deployment records, and operational handoff materials.
- Lead or review the work of junior administrators and coordinate closely with engineers, analysts, service owners, and customer support teams.
Qualifications
Minimum Requirements:
- Seven or more years of system, platform, infrastructure, or security-tool administration experience.
- Experience maintaining Linux or Windows environments that support enterprise security capabilities.
- Experience with patching, hardening, resource monitoring, troubleshooting, backup, recovery, and configuration management.
- Experience automating administrative or maintenance tasks using Bash, PowerShell, Python, Ansible, or comparable tools.
- Ability to participate in planned after-hours maintenance and on-call support.
Preferred Qualifications:
- Five or more years administering platforms that host or support SIEM, EDR, NDR, security analytics, case management, or network sensors.
- Experience with Red Hat Enterprise Linux, Windows Server, Splunk, virtualization, AWS, Azure, or container platforms.
- Experience with security baselines, vulnerability remediation, cryptographic modules, PKI certificate management, and regulated environments.
- Security+, RHCSA, Microsoft, Splunk Enterprise Certified Administrator, GCED, Linux+, or comparable role-aligned certifications preferred.
- Experience operating highly available platforms with formal maintenance, change, backup, and recovery requirements.
What Success Looks Like
- Supported platforms remain secure, stable, observable, recoverable, and current throughout their operational lifecycle.
- Patches, maintenance activities, and changes are planned, tested, documented, and executed with minimal disruption.
- Outages and degraded conditions are identified quickly, communicated clearly, and restored through disciplined troubleshooting.
- Platform documentation, asset information, backups, and operational handoffs remain current and usable.
Education and Certifications:
- Minimum: Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field; additional relevant experience may be considered in lieu of a degree.
- Clearance Level:
- Active Secret clearance required.
Work Location
- Hybrid federal customer environment with onsite presence required for selected maintenance, troubleshooting, integration, and recovery activities.
Hours of Operation
- Assigned 24x7 SOC shift, which may include days, nights, weekends, and holidays. Participation in on-call and non-regular-duty coverage may be required.
- Ability to pass a minimum background investigation.