Lead Systems Administrator responsible for managing enterprise endpoint lifecycle, MECM/SCCM infrastructure, and compliance across mixed Red Hat Linux and Windows Server environments supporting DoD defense missions. This role combines hands-on systems engineering with security hardening and vulnerability management in a high-tempo lab and hosting environment.
What you'll do
- Administer Microsoft Endpoint Configuration Manager (MECM/SCCM) across all enclaves, managing site systems, distribution points, client health, and orchestrating enterprise-wide software updates via WSUS
- Engineer, test, and deploy standardized Windows OS deployment task sequences, golden images, and automated application packaging across heterogeneous lab and hosting environments
- Maintain and harden Red Hat Enterprise Linux (RHEL) servers and Windows Server (2019/2022) infrastructure, including Active Directory, DNS, DHCP, SELinux policies, and role-based access control
- Execute weekly ACAS/Nessus vulnerability scans and monthly STIG evaluations; rapidly remediate CVEs, IAVM alerts, and vendor patches across Windows and Linux fleets
- Develop custom MECM compliance baselines, configuration items (CIs), and SSRS reports to enforce security settings, audit controls, and provide real-time asset inventory and compliance auditing
- Manage endpoint security agents (Trellix/ePO, EDR, application whitelisting), centralized log analysis (SIEM), and PKI certificate/CAC authentication infrastructure
- Draft and maintain Plans of Action and Milestones (POA&Ms) for vulnerabilities requiring architectural mitigation or extended remediation schedules
Mission
Agile Defense is a defense contractor focused on adaptive innovation for national security missions. This role directly supports the organization's secure hosting and laboratory testing infrastructure, ensuring endpoints meet strict DISA STIG compliance standards and rapid vulnerability remediation requirements essential to defense operations.
Required skills
- Microsoft Endpoint Configuration Manager (MECM/SCCM) administration
- Red Hat Enterprise Linux (RHEL) systems administration
- Windows Server (2019/2022) administration
- Active Directory Domain Services (AD DS) and Group Policy Objects (GPO)
- DISA STIG compliance and vulnerability remediation
- ACAS/Tenable Nessus vulnerability scanning
- Windows Operating System Deployment (OSD) and golden image management
- PKI certificate management and CAC authentication
- Enterprise patch orchestration and software update management
- SELinux policies and Linux daemon service administration