Sign upLog in
Cybersecurity Engineer Jobs in Huntsville, AL

Systems Security Engineer & Administrator

Waypoint Human Capital
  • Huntsville, Alabama
  • Autofill and Review
7 days ago

Job Description

Position Title: Systems Security Engineer & AdministratorPosition Type: Full-Time, On-SiteLocation: Huntsville, ALClearance: Active SecretExperience Level: Junior to JourneymanFunded, Immediate HireWaypoint’s client is seeking a proactive, detail-oriented Systems Security Engineer & Administrator to support the administration, security, and operational readiness of EPIC-C assets within the SAIL accreditation boundary at Redstone Arsenal, AL.This position combines hands-on Windows and Linux systems administration with cybersecurity compliance, vulnerability management, and system accreditation support. The selected candidate will work closely with the Information System Security Officer (ISSO) to ensure systems meet federal security baseline standards, utilizing ACAS, DISA Security Technical Implementation Guides (STIGs), NIST Risk Management Framework (RMF) guidance, and DISA Best Practices to maintain the system's Authorization to Operate (ATO).The ideal candidate will have experience with Windows administration, Active Directory, workstation provisioning, vulnerability scanning, security remediation, and supporting continuous monitoring and ATO maintenance activities.Responsibilities:
  • Perform routine Windows systems administration, including user account management, Group Policy Object (GPO) configuration, and privilege management through Active Directory using the principle of least privilege.
  • Build, configure, and deploy Windows and Linux workstations from the ground up, ensuring compliance with established security baseline configurations.
  • Provide basic network administration, connectivity testing, and troubleshooting for Cisco-based network infrastructure.
  • Review, update, and patch systems based on findings from the Assured Compliance Assessment Solution (ACAS/Tenable Nessus) scanner in accordance with NIST SP 800-137 continuous monitoring guidelines.
  • Execute weekly vulnerability patching cycles to remediate identified security findings.
  • Maintain and update ACAS scanner infrastructure, ensuring current plugin libraries and operational health.
  • Prepare and upload monthly ACAS scan results to support continuous Authorization to Operate (ATO) maintenance.
  • Execute Evaluate STIG tools, SCAP Compliance Checker (SCC), and manual DISA STIG reviews.
  • Evaluate system findings against DISA Security Technical Implementation Guides (STIGs) and DISA Best Practices.
  • Develop and compile remediation reports and Plan of Action and Milestones (POA&M) inputs for the Information System Security Officer (ISSO).
  • Assist with the Risk Management Framework (RMF) lifecycle in accordance with NIST SP 800-37 (Rev. 2).
  • Support security control verification aligned with NIST SP 800-53 (Rev. 4/5).
  • Collect security artifacts, update cybersecurity documentation, and support RMF maintenance within the SAIL accreditation boundary.
  • Collaborate with the ISSO to support security compliance, continuous monitoring, and ongoing ATO requirements.
Required:
  • Active DoD Secret security clearance.
  • Must meet DoD 8140.03 Foundational Qualification requirements for one of the following Defense Cyber Workforce Framework (DCWF) work roles at the Basic or Intermediate level:
    • DCWF Work Role 451 – System Administrator
    • DCWF Work Role 461 – Systems Security Analyst
  • Must possess an approved foundational baseline certification prior to the start date, such as:
    • CompTIA Security+ CE
    • CompTIA CySA+
    • Systems Security Certified Practitioner (SSCP)
    • Equivalent DoD 8140-approved baseline credential
Desired:
  • Strong proficiency in Windows Server and Windows Desktop administration.
  • Functional understanding of Linux operating systems.
  • Hands-on experience with cybersecurity and compliance tools, including:
    • ACAS (Tenable Nessus)
    • DISA STIGs
    • STIG Viewer
    • SCAP Compliance Checker (SCC)
    • Splunk
  • Solid understanding of the Risk Management Framework (RMF) process defined in NIST SP 800-37 (Rev. 2) and the process of obtaining and maintaining an Authorization to Operate (ATO).
  • Functional understanding of NIST SP 800-53 (Rev. 4 and Rev. 5) security control selection and implementation.
  • Familiarity with NIST SP 800-137, Information Security Continuous Monitoring (ISCM), and DISA Best Practices.
  • Practical understanding of Active Directory, Group Policy Objects (GPOs), and Identity and Access Management (IAM).
  • Basic understanding of Cisco networking concepts, including routing and switching.
  • Additional certifications are a plus, including:
    • Cisco Certified Network Associate (CCNA)
    • Microsoft Certified System Administrator
    • Linux certifications
Candidates outside commuting distance would need to consider relocation. We understand if relocation is not an option; however, relocation assistance may be available through the client for qualified, interested candidates.

Numbers & Facts

LocationHuntsville, Alabama

Skills

  • Best Practicesunmatched
  • CCNA - Cisco Certified Network Associateunmatched
  • Cisco Network Systemsunmatched
  • CompTIA - Computing Technology Industry Associationunmatched
  • CompTIA Security+unmatched
  • Computer Securityunmatched
  • Computer Workstationsunmatched
  • Configuration Managementunmatched
  • Defense Information Systems Agency (DISA)unmatched
  • Desktop Administrationunmatched
  • Detail Orientedunmatched
  • DoD Directive 8140unmatched
  • DoD Directive 8570unmatched
  • DoD Secret Clearanceunmatched
  • Identity Data Managementunmatched
  • Information/Data Security (InfoSec)unmatched
  • Internet Securityunmatched
  • Linux Administrationunmatched
  • Linux Operating Systemunmatched
  • MCSA - Microsoft Certified Systems Administratorunmatched
  • Maintain Complianceunmatched
  • Microsoft Active Directoryunmatched
  • Microsoft Windows Desktopunmatched
  • Microsoft Windows NT Group Policyunmatched
  • Microsoft Windows Serverunmatched
  • Microsoft Windows System Administrationunmatched
  • Nessusunmatched
  • Network Administration/Managementunmatched
  • Network Connectivityunmatched
  • Network Routingunmatched
  • Network Switchingunmatched
  • Risk Management Framework (RMF)unmatched
  • SSCP - Systems Security Certified Practitionerunmatched
  • Security Analysisunmatched
  • Security Clearanceunmatched
  • Security Complianceunmatched
  • Security Monitoringunmatched
  • Software Patchesunmatched
  • Splunkunmatched
  • Support Documentationunmatched
  • Systems Administration/Managementunmatched
  • Systems Analysisunmatched
  • Systems Engineeringunmatched
  • Systems Maintenanceunmatched
  • Testingunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • User Account Administrationunmatched
  • Vulnerability Scannersunmatched
  • Web Client Plug-insunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder