IT Systems Administrator II

About the role

BAE Systems is seeking a proactive and detail-oriented Closed Area Systems Administrator to join our Information Technology team supporting classified environments. This individual will work with a dynamic team responsible for the configuration, maintenance, and security of IT systems housed in closed areas, supporting critical national defense programs.

Responsibilities

• Perform user account administration, group policy configuration, and role-based access control in Active Directory for a classified environment.
• Provide desktop systems administration, including imaging, configuration, troubleshooting, and secure application support.
• Manage and monitor virtual server instances (e.g., VMware, Hyper-V), ensuring uptime, performance, and resource allocation.
• Lead and track monthly OS and application patching across desktops and servers, ensuring full compliance with security baselines and STIGs.
• Maintain domain health, DNS/DHCP, and group policy objects within Active Directory.
• Support system logging, event correlation, and incident response efforts within the closed area.
• Collaborate with ISSOs and security staff to ensure all system changes comply with RMF and local security policies.
• Maintain thorough system documentation, configuration baselines, and change logs.
• Support classified system accreditation activities and audits as needed.

Requirements

• AS or BS degree in computer related fields.
• CompTIA Security+ Certification (must be currently active or able to obtain certification within 6 months).
• General understanding of Active Directory, able to manage user accounts, shares and computer objects in AD.
• Group Policy Management, ability to identify, modify and troubleshoot GPO settings.
• Troubleshooting and maintaining DHCP and DNS settings.
• BackupExec and VEEAM backup application usage and general knowledge.
• Knowledge of security patching tools (WSUS) and/or script-based Microsoft patching techniques.
• Able to manage Trellix (McAfee) EPO2 anti-virus server tools and deployed endpoint clients.
• Able to manage VMWare ESXi VM Servers; standing up new VMs, running and maintaining existing VMs.
• Must be able to obtain Secret Clearance.

Qualifications

• Secret Clearance.
• CompTIA Security+ CE Certification.
• General understanding of Active Directory, able to manage user accounts, shares and computer objects in AD.
• Group Policy Management, ability to identify, modify and troubleshoot GPO settings.
• Troubleshooting and maintaining DHCP and DNS settings.
• BackupExec and VEEAM backup application usage and general knowledge.
• Knowledge of security patching tools (WSUS) and/or script-based Microsoft patching techniques.
• Able to manage Trellix (McAfee) EPO2 anti-virus server tools and deployed endpoint clients.
• Able to manage VMWare ESXi VM Servers; standing up new VMs, running and maintaining existing VMs.

Skills

• General understanding of Active Directory, able to manage user accounts, shares and computer objects in AD.
• Group Policy Management, ability to identify, modify and troubleshoot GPO settings.
• Troubleshooting and maintaining DHCP and DNS settings.
• BackupExec and VEEAM backup application usage and general knowledge.
• Knowledge of security patching tools (WSUS) and/or script-based Microsoft patching techniques.
• Able to manage Trellix (Mcfee) EPO2 anti-virus server tools and deployed endpoint clients.
• Able to manage VMWare ESXi VM Servers; standing up new VMs, running and maintaining existing VMs.

Benefits

• Health, dental, and vision insurance.
• Health savings account.
• 401(k) savings plan.
• Disability coverage.
• Life and accident insurance.
• Employee Assistance Program.
• Legal plan.
• Discounts on home, auto, and pet insurance.
• Recognition program.
• Other incentives based on position level and/or job specifics.

Pay

Full-Time Salary Range: $79365 - $134921

Schedule

This role requires 100% onsite work in a secure, closed area—remote or hybrid options are not available. Work may occasionally require after-hours support for patching or security-related events.

Additional Information

• Must be capable of lifting/moving equipment (up to 40 lbs) and performing physical tasks within secure rooms.