Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 129 days ago

System Administrator (Clearance Required)

Kroll79 open roles

Pay
$100,000 – $150,000 a year
Where
Washington, DC, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSystem Administrator (Clearance Required)Kroll · Washington, DC, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Kroll's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market. Kroll postings stay open a median of 5 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.5%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 33.9%30 days
This job: posted 129 days ago

Kroll median: 5 days open

The posting

Job Description

Location: Fort Meade, MD

Clearance Required: Top Secret/SCI with Active Full Scope Polygraph

We are seeking an experienced Linux-focused System Administrator (Level 2) to support a mission-critical program within the Intelligence Community at Fort Meade, MD. This is an on-site position in a Sensitive Compartmented Information Facility (SCIF) environment requiring a TS/SCI clearance with an active Full Scope Polygraph prior to consideration. The successful candidate will be responsible for the day-to-day administration, security compliance, and operational health of complex Linux-based infrastructure spanning virtualized environments, container platforms, and classified networked systems.

The SA Level 2 operates with a high degree of independence and serves as a technical authority on Linux systems engineering, PKI/cryptographic policy enforcement, storage management, IP networking, and security compliance. This role carries significant responsibility for System Security Plan (SSP) maintenance, STIG implementation, and supporting Secure Telephone Equipment/Network (STE/STN) infrastructure within a heavily regulated RMF/NIST framework.

Key Responsibilities:

Linux Systems Administration

  • Administer, configure, harden, and maintain Red Hat Enterprise Linux (RHEL), Rocky Linux, and/or CentOS Stream server environments
  • Apply and maintain DISA STIG configurations using OpenSCAP and other SCAP-compliant tooling; remediate findings from automated scans
  • Manage system performance tuning, patch management (yum/dnf), software package management, and OS lifecycle operations
  • Configure and manage system services, daemons, scheduled tasks, logging (rsyslog/journald), and audit frameworks (auditd)
  • Provide Tier 1 and Tier 2 application support and general troubleshooting across all Linux-based systems

Security Compliance - SSP, RMF, and STIG

  • Support ongoing System Security Plan (SSP) development, maintenance, and compliance activities in accordance with NIST SP 800-53 Rev 5 controls
  • Conduct and document Risk Management Framework (RMF) activities including control implementation statements, POA&M tracking, and continuous monitoring
  • Perform and respond to vulnerability assessments; coordinate CVE remediation and ensure timely patching
  • Maintain system authorization boundaries, support A&A activities, and coordinate with the ISSO/ISSM
  • Enforce DoD crypto policies including FIPS 140-2/140-3 mode configuration

STE/STN Support

  • Install, configure, and maintain Secure Telephone Equipment (STE) and Secure Telephone Network (STN) infrastructure
  • Coordinate STE/STN provisioning, moves, adds, and changes (MACs) with communications and security personnel
  • Troubleshoot STE/STN connectivity and interoperability issues
  • Maintain accurate inventory and documentation for all STE/STN endpoints

PKI, TLS, and Cryptographic Management

  • Manage DoD PKI operations including certificate issuance, renewal, revocation, and trust store management
  • Configure and maintain TLS/SSL for system services and applications
  • Administer hardware security modules (HSMs) and software-based key management systems where deployed
  • Apply and enforce system crypto policies to ensure FIPS compliance across all managed systems

Containers and Cloud Environments

  • Deploy, operate, and maintain containerized workloads using Docker and/or Podman
  • Administer Kubernetes or OpenShift container orchestration clusters within classified/air-gapped environments
  • Manage container image pipelines including base image hardening, vulnerability scanning, and approved image registries
  • Support lifecycle management of containerized applications

Virtualization

  • Administer VMware vSphere/vCenter environments including ESXi host management
  • Manage KVM/QEMU-based virtual environments on Linux hosts
  • Coordinate capacity planning and resource optimization across virtualized infrastructure

Storage Management

  • Administer NAS and SAN systems; manage LUN provisioning, zoning, and multipath I/O
  • Operate and maintain Ceph distributed storage clusters
  • Configure and manage LVM, RAID arrays, and filesystem operations
  • Implement and verify data-at-rest encryption requirements

IP Networking and Firewall Management

  • Configure and manage host-based firewalls (firewalld, iptables/nftables) on Linux systems
  • Troubleshoot TCP/IP networking issues including routing, DNS, DHCP, VLAN segmentation
  • Interface with network engineers on firewall rule changes and ACLs

Qualifications:

Education: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field. Equivalent experience may be substituted.

Experience: 5+ years of system administration experience in classified or secure DoD/IC environments.

Additional Required Qualifications:

  • Active TS/SCI clearance with Full Scope Polygraph - must be active prior to start
  • Deep hands-on Linux proficiency across RHEL, Rocky Linux, and/or CentOS
  • Demonstrated experience with DISA STIGs and SCAP compliance scanning
  • Working knowledge of NIST SP 800-53 controls and RMF process
  • Experience with SSP development and A&A/ATO activities
  • Hands-on STE/STN installation, configuration, and support experience
  • Solid understanding of PKI/TLS/cryptographic standards including DoD PKI and FIPS enforcement
  • Strong IP networking fundamentals and host-based firewall management
  • Experience with container platforms (Docker, Podman, Kubernetes, or OpenShift)
  • Experience with virtualization platforms (VMware vSphere, KVM/QEMU)
  • Storage management experience with NAS, SAN, LVM, and/or distributed storage
  • DoD 8140 IAT Level II compliance (Security+, CASP+, or equivalent)

Desired Skills

  • Experience with Ansible, Puppet, SaltStack, or Chef
  • Proficiency in Bash and Python scripting
  • OpenShift Container Platform experience in classified deployments
  • Experience with cross-domain solutions (CDS)
  • Familiarity with DoD cloud environments (AWS GovCloud, C2S)
  • Red Hat RHCSA or RHCE certification

Your recruiter will be happy to walk you through your U.S.-specific benefits, which include:

  • Healthcare Coverage: Comprehensive medical, dental, and vision plans.
  • Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.
  • Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.
  • Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.
  • Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.

In order to be considered for a position, you must formally apply via careers.kroll.com.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.

The current salary range for this position is $100,000 to $150,000

#LI-CN1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Kroll's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Kroll's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Kroll's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.