Senior Systems Administrator - Scientific...

We need to output HTML fragment only, with sections: About the role (maybe from description), Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Must remove boilerplate like EEO, legal, etc. Must preserve all substantive info. We need to parse the posting. Key parts: Intro paragraph about ALS, description of role. Could be "About the role" section. Responsibilities: list under "Key Responsibilities". Many bullet points. Required Qualifications: list. Desired Skills/knowledge: could be "Skills" section. Additional Information: includes Application date, Appointment type, Salary range, Background check, Work modality, Work schedule, etc. We need to extract Pay and Schedule sections if present. Pay: Salary range given: $179,000 - $218,000, fits into full salary $158,808 - $267,996. We can include that as Pay. Schedule: Work schedule: ALS is 24/7, position generally works regular schedule but may require occasional after-hours or weekend support during critical operations, incidents, maintenance, or system upgrades. Benefits: Not explicitly mentioned. No benefits details. So we should not create Benefits section. Qualifications: Might be separate from Required Qualifications? The posting has "Required Qualifications" and "Desired Skills/knowledge". Could treat Required Qualifications as "Qualifications". Desired as "Skills". Could also have "Requirements" maybe same as qualifications? The instruction: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need to decide which to include. We have Responsibilities, Qualifications (Required), Skills (Desired), Pay, Schedule. Also About the role (intro). Possibly Requirements could be same as Qualifications but we can omit if duplicate. We'll include Qualifications and Skills. We must not include filler like "commensurate with experience". Not present. We need to preserve all substantive information. So we need to include all bullet points from Responsibilities, Required Qualifications, Desired Skills/knowledge, Pay, Schedule, About the role. We must not include boilerplate: EEO, legal, misconduct disclosure, equal opportunity, etc. Also remove navigation, cookie, etc. Also remove "Application date: Priority consideration will be given to candidates who apply by September 15, 2026. Applications will be accepted until the job posting is removed." That's maybe not substantive? It's about application deadline; could be considered metadata but maybe we can drop as it's not core job content. The instruction: "Do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it." Application date is minor metadata; we could drop it. Also "Appointment type: This is a full-time career appointment, exempt (monthly paid) from overtime pay." Could be considered metadata but maybe relevant to schedule? It's about appointment type; could be included in a short paragraph maybe under About the role? But we can drop as minor. However we need to preserve ALL substantive information; is appointment type substantive? Possibly yes, but it's not about responsibilities etc. The instruction says fold minor metadata into a short

or drop it. So we could include a short p under About the role or separate? Might be okay to drop. But to be safe, we could include a short paragraph under About the role summarizing that it's full-time career appointment, exempt. However the instruction says "fold minor metadata into a short

or drop it." So we can include a short p. Similarly "Work modality: Work will be primarily performed at: Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA. A REAL ID or other acceptable form of identification is required to access Berkeley Lab sites (for more information click here)." That's location info; could be included in About the role. We need to avoid duplication. Let's craft sections:

About the role

Lawrence Berkeley National Lab's Advanced Light Source (ALS) Division seeks a Senior Systems Administrator - Scientific IT Infrastructure & Cybersecurity to supervise the ALS-IT team and provide strategic and technical direction for systems, servers, networks, and cybersecurity supporting over 40 scientific beamlines, the ALS Control Room, and mission‑critical facility operations. The ALS is a DOE Office of Science user facility producing bright x‑ray, UV, and IR light, serving thousands of users annually and collaborating with the Molecular Foundry, NERSC, and other Lab divisions. The role involves leading infrastructure modernization, cybersecurity initiatives, mentoring staff, and partnering with ALS leadership and central IT to enable world‑class scientific discovery.

Maybe also include appointment type and work modality as a short p. But we already have a p; we could add another p after. Better: Keep About the role as description; then add a short p for logistics: "This is a full‑time career appointment (exempt, monthly paid) located at Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA. A REAL ID or other acceptable ID is required for site access." That seems fine. Now Responsibilities: we need to list each bullet from "Key Responsibilities". Let's extract them: - Lead and supervise the ALS Information Technology (ALS-IT) team, providing coaching, performance management, hiring, employee development, and oversight in accordance with Laboratory policies. - Set strategic and technical direction for the IT infrastructure supporting the Advanced Light Source, including systems, servers, storage, networking, virtualization, identity management, and cybersecurity. - Develop and execute the ALS-IT technology roadmap, establish priorities, manage resources, contribute to budget planning, and lead infrastructure modernization initiatives. - Serve as the primary technical advisor and cybersecurity expert for the ALS beamline and controls computing environment, ensuring the reliability, security, and availability of mission-critical research systems. - Oversee the design, implementation, and administration , implementation, and administration of enterprise Windows and Linux environments, Active Directory, virtualization platforms, Kubernetes-based services, identity and access management, and infrastructure automation. (Note duplicate phrase; we can combine: Oversee the design, implementation, and administration of enterprise Windows and Linux environments, Active Directory, virtualization platforms, Kubernetes-based services, identity and access management, and infrastructure automation.) - Oversee system monitoring, incident response, patch management, disaster recovery, and operational support to maintain high availability for scientific operations. - Direct disaster recovery and business continuity planning, testing, and drills tailored to scientific data storage, control room systems, and other mission-critical user facility operations. - Partner with ALS leadership, beamline scientists, and Berkeley Lab IT to develop technology solutions, establish best practices, and support complex scientific computing initiatives. - Drive network security and infrastructure modernization initiatives, including the implementation of Zero Trust principles for edge devices and systems within the ALS beamline and controls computing environment. - Establish and maintain Service Level Agreements, support procedures, and ticketing workflows that provide responsive and consistent IT services to ALS staff, scientific personnel, and visiting facility users. - Support accelerator operations and scientific user programs by ensuring reliable IT services for the ALS Control Room, beamlines, and research operations, including occasional after-hours support during critical operational periods in support of ALS's 24/7 operations. - Stay current with emerging technologies and recommend innovative solutions that improve operational efficiency, cybersecurity, and scientific computing capabilities. We need to ensure no duplication. Now Required Qualifications: list each bullet: - Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education and experience, with a minimum of 12 years of relevant experience in a professional IT environment or 8 years with a Master's degree. - Demonstrated people-management experience supervising technical staff, including assigning and reviewing work, setting priorities, coaching and developing employees, providing performance feedback, and addressing performance concerns. - Proven experience leading cybersecurity initiatives and complex technical projects in enterprise or similarly complex IT environments, preferably within a research or academic setting. - Demonstrated ability to work independently with minimal supervision, exercise sound technical judgment, and lead complex initiatives from planning through implementation. - In-depth knowledge of Windows and Linux systems and strong working knowledge of macOS, including experience administering and troubleshooting cross-platform computing environments. - In-depth knowledge of virtualized server environments and infrastructure, such as VMware, Hyper-V, or Proxmox. - Hands-on experience with Kubernetes, containerized application deployments, infrastructure automation, and CI/CD pipelines. - Advanced knowledge of computer hardware, including PC and Mac workstations, rack-mounted server hardware, and networking and security devices. - Experience administering enterprise storage systems, such as NetApp, with a strong understanding of RAID concepts, configurations, and levels. - Advanced knowledge of enterprise networking and network security, including TCP/IP, routing and switching, subnetted environments, remote-access technologies, and network troubleshooting using packet-analysis tools. - Experience managing data center and server-room infrastructure, including rack layout, power distribution and management, cooling requirements, server hardware, and storage systems. - Broad knowledge of cybersecurity concepts, tools, methods, frameworks, and evolving threats, supported by hands-on experience or formal training in network and cybersecurity practices. - Demonstrated experience implementing defense-in-depth cybersecurity controls, including system hardening, firewalls, endpoint protection, vulnerability mitigation, intrusion detection/prevention, and other technical safeguards. - Demonstrated familiarity with NIST SP 800-53 security controls, the DOE Risk Management Framework, or comparable federal cybersecurity standards and frameworks. - Experience managing IT budgets, technology procurement, vendor contracts, and lifecycle replacement schedules for enterprise hardware and infrastructure. - Broad and specialized expertise in enterprise systems administration and cybersecurity sufficient to serve as a trusted technical advisor and recognized subject-matter expert. - Excellent written, verbal, and interpersonal communication skills, including the ability to work effectively with a wide variety of colleagues, explain complex technical information clearly and concisely, and produce well-crafted technical documentation. - Strong commitment to promoting, implementing, and modeling effective cybersecurity practices while maintaining reliable, secure, and highly available IT services. Now Desired Skills/knowledge: list: - Relevant cybersecurity certifications such as CISSP, CISM, CISA, Security+, CASP+, SSCP, or comparable credentials. - Experience supporting scientific research, laboratory, academic, accelerator, industrial controls, or other complex 24/7 operational environments. - Experience implementing Zero Trust principles in environments that include specialized, legacy, or operational technology systems. - Experience leading disaster recovery, business continuity, or cybersecurity tabletop exercises for mission-critical infrastructure. - Experience with infrastructure-as-code, configuration management, observability, or enterprise automation technologies. Now Pay: Salary range: The expected salary for this position is $179,000 - $218,000, which fits into the full salary of $158,808 - $267,996 depending upon the candidate's skills, knowledge, and abilities. This includes education, certifications, and years of experience. We can present as: Pay: $179,000 – $218,000 (range within $158,808 – $267,996 based on skills, knowledge, and experience). Now Schedule: Work schedule: The ALS is a 24/7 scientific user facility. This position generally works a regular schedule but may require occasional after-hours or weekend support during critical operations, incidents, maintenance, or system upgrades. We'll put that. Now ensure we don't include Benefits section. Now output HTML fragment only, no markdown. We'll wrap sections in appropriate tags. Structure:

About the role

...

This is a full‑time career appointment (exempt, monthly paid) located at Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA. A REAL ID or other acceptable ID is required for site access.

Responsibilities

• ...