Subject Matter Expert III - System Administrator (SCADA)

About Us

When you work at Chugach Government Solutions (CGS), you join a proud legacy of supporting missions while sustaining culture.

The federal division of Chugach Alaska Corporation, CGS has been supporting critical missions as a government contractor for over 25 years. Our focus is to support facility maintenance, IT/technical services, construction and education. We are proud to have built, and continue to foster, an incredibly talented team spanning across the globe in hundreds of different fields – each team member proud to serve our country with first-class business services, while also making a difference for our Chugach shareholders.

At CGS, empowering employees is a part of our core, and that focus is one of the ways we build and foster high-performing teams. We empower our employees through competitive compensation and benefits package, professional growth opportunities, truthful communication, and more!

If you are looking for an opportunity to serve something bigger than yourself; if you want your day job to be one that creates meaningful value; if you are looking for an environment that highly values employees and respects individual differences – then Chugach Government Solutions may be the right fit for you!

Position Location

This position is located in Portsmouth, VA; travel will be required.

Salary range: $110,000-$160,000/yr.

Job Overview

The Industrial Control Systems (ICS) / SCADA/OT System Administrator is responsible for operating a mission-critical, converged Operational Technology (OT) and Information Technology (IT) ecosystem supporting defense facility infrastructures, will execute advanced system administration, multi-vendor HCI cluster maintenance, enterprise identity management, specialized industrial threat monitoring, network boundary enforcement, and high-availability multi-tiered disaster recovery operations for the storage layers. The scope spans all hardware, virtual storage fabrics, and software inside the FRCS enclave boundary. All work is stationery at the designated NIWC facility.

Responsibilities

Essential Job Duties:

Must be proficient in standard industrial programming languages (standards such as Ladder Logic, Function Block Diagram, and Structured Text).

• Administer, configure, patch, and monitor dual hyperconverged platforms, specifically Nutanix AOS/AHV clusters and Cisco Hyperflex systems.
• Manage storage pools, distributed virtual networking, and computing nodes to guarantee application performance for virtualized SCADA environments. Ensure virtual machine snapshots and storage layer mirrors undergo automated validation checking.
• Perform non-disruptive, one-click firmware and software cluster orchestration updates while maintaining production pipeline execution.
• Configure, test, and maintain Nutanix Data Protection strategies. This includes establishing Protection Domains, executing Async/Near-Sync replication, and utilizing Nutanix Leap or Nutanix Mine for automated orchestration to target DR sites or cold-storage tiers.
• Administer native Cisco Hyperflex Data Platform DR features. Configure and maintain Cisco Hyperflex SmartDR (frequent snapshot schedules) and standard replication pairings to achieve optimal Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO). Align storage replication policies with sponsor's strict technical thresholds,
• Manage storage cluster convergence and disk/node failure scenarios. Handle data rebuilds, cluster resiliency checks, and cross-platform health verification without impacting real-time SCADA telemetry pipelines.
• Apply expert working knowledge of Unix, Linux (*nix), and Windows operating systems to manage and maintain the infrastructure.
• Utilize high-level *nix scripting languages (AWK, SED, Perl, BSH, etc.) alongside PowerShell, Python, C/C++, Java, Packet C (Rave), and Ruby-on-Rails to automate network administration, parse logs, and optimize system components.
• Develop and execute standard operating procedures for the installation, operation, configuration, hardening, system maintenance, and troubleshooting of all project/system components.
• Design, build, and troubleshoot localized Microsoft Active Directory (AD) domains. Maintain strict Group Policy Objects (GPOs) explicitly designed to lock down OT workstations without freezing operational software dependencies.
• Implement and administer Public Key Infrastructure (PKI) architecture, certificate authorities (CA), and RSA SecurID infrastructure.
• Apply and continuously validate Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) across all Windows Servers, Linux instances, Cisco network devices, SQL databases, and virtual infrastructure. Evaluated system against IAVM directives and ACAS discoveries. Ensure core infrastructure settings mirror automated and manual defense benchmarks.
• Configure, maintain, and execute scans using the Assured Compliance Assessment Solution (ACAS/Tenable). Create customized, non-disruptive asset scan profiles that safely query legacy SCADA controllers and automation field-level hardware.
• Maintain centralized Windows Defender Antivirus and Windows Defender Firewall with Advanced Security policies. Build explicit inbound/outbound rule sets tailored to isolate industrial protocols.
• Deploy, patch, and optimize Microsoft SQL Server instances hosting SCADA telemetry, engineering transaction data, and RMF compliance tracking tools. Implement SQL auditing and STIG access metrics.
• Administer SolarWinds Network Performance Monitor (NPM) and Network Configuration Manager (NCM). Map infrastructure components, track device up/down states, capture SNMP traps, and archive configuration files for network switches.
• Operate the Dragos Platform to maintain passive network visibility. Triage incoming security alerts, track OT operational anomalies, identify software vulnerabilities mapped to physical field devices (BACnet, Modbus, DNP3), and archive deep packet capture logs.
• Participate in the definition, iteration, and physical delivery of all required ATO package components. This includes creating the System Security Plan (SSP), Security Assessment Report (SAR), Information System Contingency Plan (ISCP), and system-level Risk Assessment Reports (RAR).
• Author, compile, review, and organize comprehensive security documentation required for the system's Assessment and Authorization (A&A) packages to achieve and sustain an Authority to Operate (ATO).
• Develop, update, and manage the Plan of Action and Milestones (POA&M). Document remediation strategies, milestones, resource constraints, and scheduled completion dates for identified system vulnerabilities and non-compliant RMF controls.
• Assist the Information System Security Manager (ISSM) during formal validation assessments. Provide direct technical evidence, system architecture definitions, and contextual proof of compliance to satisfy the Authorizing Official (AO).

Key Responsibilities:

• Ability to work well with others.
• Ability to adhere to contract requirements.
• Ability to comply with company policies and procedures.

Job Requirements

Mandatory:

• Must be a US citizen
• Must have a Secret clearance or higher
• Effective oral and written communication skills
• Must meet IAT Level II requirements (e.g., CompTIA Security+ CE, CySA+, or CCNA Security).
• Minimum of 5+ years of production experience in systems administration, with 3+ years specifically in a DoD operational technology (OT), industrial SCADA, or utility control system environment.
• Demonstrated competency operating, configuring, and executing disaster recovery strategies across Nutanix AOS/AHV and Cisco Hyperflex clusters.
• Proven experience administering Microsoft Active Directory, managing enterprise PKI architecture / CA operations, and implementing RSA / Alt Token access pathways.
• Functional knowledge of SolarWinds infrastructure tracking and the Dragos Platform for network behavior analysis.
• Must be able to successfully pass a pre-employment background check and pre-hire drug test.

Working Conditions:

• Travel will be required.

Physical Requirements:

• Must be able to carry material/equipment up to (<40lbs.)

Disclosures

Chugach Government Solutions is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, gender, sexual orientation, gender identity or expression, age, pregnancy, disability, genetic factors, protected veteran status or other characteristics protected by law.

Chugach will provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities. In compliance with the ADA Amendments Act (ADAAA), if you have a disability and would like to request an accommodation in order to apply for a position with Chugach Government Solutions or any of its subsidiaries, please email ada@chugachgov.com.

Chugach Government Solutions supports pay transparency and is committed to equitable and competitive compensation practices. Compensation for this role will be determined based on factors including job responsibilities, experience, skills, internal equity, geographic location, and applicable contract requirements. Where required by law, compensation ranges will be provided to candidates during the hiring process.

Privacy Policy for California Job Applicants