We put our customers first – exemplified by our missions: “We Protect Those Who Protect Us®” and “We Innovate for Those Who Move the World.” Sound like a team you want to be a part of? Come build your career with BAE Systems. BAE Systems is seeking a Senior Closed Area Systems Administrator to provide comprehensive technical and operational support for classified IT systems. This position requires a seasoned IT professional with expertise in managing complex, air-gapped systems and lab environments in accordance with DoD and Intelligence Community security requirements. You will be responsible for the configuration, maintenance, and monitoring of secure networks and systems, including Lab-in-a-Box (LIB) environments, virtualization platforms, Linux/Windows servers and workstations, endpoint protection, and logging/alerting tools. This position is 100% onsite within a closed, classified area. Some after-hours or weekend support may be required for maintenance windows or incident response. You must be able to lift equipment (up to 40lbs) and work within controlled environments. Key responsibilities include: • Proficiency in Linux operating systems, deployment, installation, system hardening, software installation and configuration of software. • Working experience with Active Directory, including user/group management, OU structure, and GPOs. • Configure, deploy, and maintain Lab-in-a-Box (LIB) environments used in closed area testing and mission scenarios. • Develop and execute system shutdown and secure wipe procedures, in accordance with DoD and agency guidelines. • Lead and coordinate data spill containment, response, and remediation actions in classified environments. • Operate and manage Nessus vulnerability scanning, assessment reporting, and risk remediation tracking. • Maintain and support VMware-based virtual infrastructure, including host management and resource allocation. • Operate and manage Veeam backup and recovery solutions for secure system images and restoration planning. • Administer Trellix ePO (McAfee) for endpoint protection policy management, signature updates, and alert resolution. • Perform domain controller maintenance, including replication, DNS/DHCP services, and health monitoring. • Design, implement, and troubleshoot Group Policy Objects (GPOs) in Active Directory. • Support Splunk operations, including forwarder management, dashboard/report creation, and log analysis for auditing and threat detection. • Ensure all systems are compliant with applicable STIGs, RMF controls, and cyber hygiene policies. • Maintain system documentation, configuration change records, and contribute to audit readiness. • Collaborate with ISSOs/ISSMs, facility security, and other stakeholders to ensure secure and compliant operations.