• Own and continuously improve endpoint management capabilities. • Implement and support endpoint security controls and hardening baselines. • Own endpoint provisioning workflows and zero-touch/low-touch deployment practices. • Function as a top-level escalation point for complex endpoint incidents. • Build and support automation to reduce repetitive manual work. • Create and support runbooks, operational playbooks, and high-quality documentation. • Collaborate across IT Operations and Security.

• Define and steward endpoint architecture patterns across management, security, deployment, and compliance. • Provide technical leadership across major endpoint roadmap initiatives. • Lead design and implementation of endpoint hardening and baseline configuration approaches. • Partner with Security using a shared delivery model. • Configure enforcement, remediations, reporting, and repeatable deployment pipelines. • Function as the final technical escalation point for complex endpoint incidents. • Own the endpoint engineering “source of truth” expectations.

• Serve as the senior technical lead for enterprise Windows Server, Active Directory, and Group Policy administration. • Design and implement advanced configurations, upgrades, and hardening for Microsoft server and collaboration environments. • Administer Microsoft 365 services, including Exchange Online, SharePoint Online, and Teams, to ensure high availability and performance. • Ensure secure, reliable, and high-performing Microsoft platform operations across the enterprise. • Design, deploy, and manage Azure resources, including virtual machines, storage, and networking services. • Administer Azure Active Directory (Microsoft Entra ID) and hybrid identity services. • Lead integration of Azure cloud services with enterprise systems and on-premises dependencies. • Optimize platform performance, scalability, and operational resilience.

Role Description This position supports Linux Engineering Sustainment under ASRC Federal's CECOM SETA Support within the PEO EIS MSP, in direct support of the CECOM Army Software Integration Center (ASIC). The PEO EIS MSP ensures that the U.S. Army's Linux systems are secure, reliable, and capable of supporting mission-critical operations. As a Senior Linux System Administrator, you will lead the day-to-day administration, hardening, and modernization of complex enterprise Linux environments and play a key role in delivering ASIC software updates to deployed soldiers. Key Responsibilities - Administer, maintain, and harden enterprise Red Hat Enterprise Linux (RHEL) environments across on-premise and AWS GovCloud infrastructure. - Operate and troubleshoot high-availability architectures including Red Hat Pacemaker / Corosync clusters and load-balanced services. - Lead patch management, system hardening, and STIG/ACAS compliance activities; coordinate vulnerability remediation across production fleets. - Support ASIC software delivery workflows, including web-based deployment of software updates to deployed Army units. - Develop and maintain Infrastructure as Code (IaC) and configuration management using Ansible, Terraform, or equivalent. - Author and maintain automation scripts (Bash, Python) to streamline operational tasks, monitoring, and reporting. - Collaborate with security, network, and application teams to support Authority to Operate (ATO) activities and Continuous Authorization processes. - Serve as a senior technical resource — mentor junior administrators, lead troubleshooting bridges, and contribute to architecture and lifecycle decisions. Qualifications - Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, or a related technical discipline preferred. Equivalent experience in lieu of degree will be considered. - Minimum 5 years of hands-on Linux system administration experience, with at least 3 of those years in a senior-level or technical lead capacity. - Demonstrated experience supporting mission-critical Linux environments in a DoD or federal setting. - Experience administering and troubleshooting RHEL in both on-premise data centers and cloud environments. - Proven ability to communicate technical strategies, risks, and recommendations clearly to both technical teams and customer stakeholders. - Active Secret security clearance required; ability to obtain and maintain TS/SCI strongly preferred. - DoD 8570/8140 compliant baseline certification (Security+ CE or higher) required at time of hire or within 6 months. Requirements - Expert-level Red Hat Enterprise Linux administration (RHEL 8 required; RHEL 9 strongly preferred). - Experience operating RHEL workloads in AWS GovCloud, including EC2, S3, IAM, VPC, and EBS. - Strong scripting and automation skills in Bash and Python; PowerShell a plus. - Hands-on experience with Ansible (or equivalent configuration management — Puppet, Chef, Salt). - Working knowledge of CI/CD tooling (GitLab CI, Jenkins, or similar) and Git-based source control workflows. - Experience with system hardening, STIG application, ACAS scanning, and vulnerability remediation in DoD environments. - Solid understanding of TCP/IP networking, DNS, LDAP/Active Directory integration, PKI, and SSH key management. - Demonstrated problem-solving ability under operational pressure; excellent written and verbal communication. - Linux-focused certification preferred (RHCSA, RHCE, or CompTIA Linux+). Desired Skills - Familiarity with CECOM ASIC software delivery processes and web-based deployment to deployed Army units. - Infrastructure as Code experience with Terraform or AWS CloudFormation. - Experience with observability and SIEM tooling — Splunk, Elastic, Prometheus/Grafana. - Knowledge of Zero Trust architecture principles and DoD ICAM. - Experience performing RHEL major version upgrades (RHEL 7 → 8, RHEL 8 → 9) and Leapp-based migrations. - Working knowledge of ServiceNow ITSM workflows (Incident, Problem, Change). - Familiarity with ERP SAP environments running on Linux. - Experience working in an Agile / Scrum framework. - Red Hat Certified Engineer (RHCE), AWS Solutions Architect, or comparable advanced certification. Cybersecurity Requirements This position requires an understanding of software assurance and compliance with Application Security and Development Security Technical Implementation Guidelines (STIGs) applicable to the project. The selected candidate must be able to operate within DoD Risk Management Framework (RMF) processes and support Continuous Authorization (cATO) activities. Benefits - Comprehensive plans for medical, dental, vision, life insurance, and short-term/long-term disability. - Inclusive policies for bereavement, military obligations, and parental needs, along with 11 paid holidays annually. - A 401(k) plan with a generous company match and immediate vesting to help secure your financial future. - Employee referral bonuses to reward you for helping grow the ASRC Federal Family. - After 90 days of employment, regular full-time employees are eligible for our professional development program, including funding for degrees and certifications. - Centers of Excellence to build, leverage, and grow our technological capabilities and best practices.