Cybersecurity Tools & Infrastructure Administrator

The Cybersecurity Tools & Infrastructure Administrator supports Navy ERP’s core cybersecurity tools across Test and Production environments. This role maintains system health, applies patches, and manages configurations across Red Hat Enterprise Linux, Ubuntu Linux, and Windows Server infrastructure. The administrator works with Security Operations Center (SOC) analysts and system owners to onboard data sources, maintain agent health, and support effective alerting. The following reflects management’s definition of essential functions for this job but does not restrict the tasks that may be assigned. Platform Administration & Infrastructure HealthMaintain operational readiness, performance, and uptime across test and production environmentsSplunk Linux RHEL 8/9Tripwire Enterprise Windows 2022Monitor host-level services, disk storage, and resource utilization.Patching & Lifecycle OperationsExecute application-level patching, hotfixes, and software upgrades.Support OS-level patching, kernel updates, and hardening alongside host system administrators.Maintain system compliance with DoD Security Technical Implementation Guides (STIGs) for the cyber team servers.Tool Configuration & OnboardingOnboard new data sources into Splunk; troubleshoot log ingestion, forwarder issues, and parsing rules.Configure Tripwire Enterprise console, user RBAC, baseline integrity policies, and automated alerts.Assist analysts with Splunk data models, dashboards, and automated report generation.Troubleshooting & Vendor SupportDiagnose and resolve application crashes, synchronization failures, and connectivity issues.Coordinate with commercial vendor support teams (Splunk, Tripwire) for advanced bug resolution.Documentation & GovernanceAuthor, update, and maintain Standard Operating Procedures (SOPs) and system administration runbooks. Experience 4+ years administering enterprise cybersecurity applications within DoD or federal IT environments.Operating SystemsStrong Linux system administration skills (RHEL and Ubuntu CLI, services, systemd, package management).Working knowledge of Windows Server administration and Active Directory/RBAC concepts.Tool Administration Direct hands-on administration experience with at least one of the followingSplunk Enterprise (distributed indexers, search heads, heavy/universal forwarders).Tripwire Enterprise (console management, agent deployments, FIM policies).CertificationsDoD 8570/8140 IAT Level II baseline (Security+ CE, CCNA Security, CySA+, or equivalent). Preferred Qualifications Splunk Enterprise Certified Admin or Power User certification.Relevant OS certifications (Red Hat RHCSA / RHCE, Linux+, or Microsoft Windows Server).Scripting capability for automation and maintenance (Bash, PowerShell, or Python). Physical Requirements The ideal candidate must at a minimum be able to meet the following physical requirements of the job with or without a reasonable accommodation Ability to perform repetitive motions with the hands, wrists, and fingers. Ability to engage in and follow audible communications in emergency situations. Ability to sit for prolonged periods at a desk and working on a computer.