Cybersecurity Tools & Infrastructure Administrator

Overview:

The Cybersecurity Tools & Infrastructure Administrator supports Navy ERP’s core cybersecurity tools across Test and Production environments. This role maintains system health, applies patches, and manages configurations across Red Hat Enterprise Linux, Ubuntu Linux, and Windows Server infrastructure. The administrator works with Security Operations Center (SOC) analysts and system owners to onboard data sources, maintain agent health, and support effective alerting.

Responsibilities:

The following reflects management’s definition of essential functions for this job but does not restrict the tasks that may be assigned. 

• Platform Administration & Infrastructure Health:
  • Maintain operational readiness, performance, and uptime across test and production environments:
    • Splunk: Linux RHEL 8/9
    • Tripwire Enterprise: Windows 2022
  • Monitor host-level services, disk storage, and resource utilization.
• Patching & Lifecycle Operations:
  • Execute application-level patching, hotfixes, and software upgrades.
  • Support OS-level patching, kernel updates, and hardening alongside host system administrators.
  • Maintain system compliance with DoD Security Technical Implementation Guides (STIGs) for the cyber team servers.
• Tool Configuration & Onboarding:
  • Onboard new data sources into Splunk; troubleshoot log ingestion, forwarder issues, and parsing rules.
  • Configure Tripwire Enterprise console, user RBAC, baseline integrity policies, and automated alerts.
  • Assist analysts with Splunk data models, dashboards, and automated report generation.
• Troubleshooting & Vendor Support:
  • Diagnose and resolve application crashes, synchronization failures, and connectivity issues.
  • Coordinate with commercial vendor support teams (Splunk, Tripwire) for advanced bug resolution.
• Documentation & Governance:
  • Author, update, and maintain Standard Operating Procedures (SOPs) and system administration runbooks.

Qualifications:

• Experience: 4+ years administering enterprise cybersecurity applications within DoD or federal IT environments.
• Operating Systems:
  • Strong Linux system administration skills (RHEL and Ubuntu CLI, services, systemd, package management).
  • Working knowledge of Windows Server administration and Active Directory/RBAC concepts.
• Tool Administration: Direct hands-on administration experience with at least one of the following:
  • Splunk Enterprise (distributed indexers, search heads, heavy/universal forwarders).
  • Tripwire Enterprise (console management, agent deployments, FIM policies).
• Certifications:
  • DoD 8570/8140 IAT Level II baseline (Security+ CE, CCNA Security, CySA+, or equivalent).

Preferred Qualifications

• Splunk Enterprise Certified Admin or Power User certification.
• Relevant OS certifications (Red Hat RHCSA / RHCE, Linux+, or Microsoft Windows Server).
• Scripting capability for automation and maintenance (Bash, PowerShell, or Python).

Physical Requirements: The ideal candidate must at a minimum be able to meet the following physical requirements of the job with or without a reasonable accommodation:  

• Ability to perform repetitive motions with the hands, wrists, and fingers.  
• Ability to engage in and follow audible communications in emergency situations.  
• Ability to sit for prolonged periods at a desk and working on a computer.