About Us

When you work at Chugach Government Solutions (CGS), you join a proud legacy of supporting missions while sustaining culture. The federal division of Chugach Alaska Corporation, CGS has been supporting critical missions as a government contractor for over 25 years. Our focus is to support facility maintenance, IT/technical services, construction and education. We are proud to have built, and continue to foster, an incredibly talented team spanning across the globe in hundreds of different fields – each team member proud to serve our country with first-class business services, while also making a difference for our Chugach shareholders. At CGS, empowering employees is a part of our core, and that focus is one of the ways we build and foster high-performing teams. We empower our employees through competitive compensation and benefits package, professional growth opportunities, truthful communication, and more! If you are looking for an opportunity to serve something bigger than yourself; if you want your day job to be one that creates meaningful value; if you are looking for an environment that highly values employees and respects individual differences – then Chugach Government Solutions may be the right fit for you!

Position Location

This position is located in Portsmouth, VA; travel will be required. Salary range: $110,000-$160,000/yr.

Job Overview

The Industrial Control Systems (ICS) / SCADA/OT System Administrator is responsible for operating a mission-critical, converged Operational Technology (OT) and Information Technology (IT) ecosystem supporting defense facility infrastructures, will execute advanced system administration, multi-vendor HCI cluster maintenance, enterprise identity management, specialized industrial threat monitoring, network boundary enforcement, and high-availability multi-tiered disaster recovery operations for the storage layers. The scope spans all hardware, virtual storage fabrics, and software inside the FRCS enclave boundary. All work is stationery at the designated NIWC facility.

Responsibilities

Essential Job Duties:

• Must be proficient in standard industrial programming languages (standards such as Ladder Logic, Function Block Diagram, and Structured Text).
• Administer, configure, patch, and monitor dual hyperconverged platforms, specifically Nutanix AOS/AHV clusters and Cisco Hyperflex systems.
• Manage storage pools, distributed virtual networking, and computing nodes to guarantee application performance for virtualized SCADA environments. Ensure virtual machine snapshots and storage layer mirrors undergo automated validation checking.
• Perform non-disruptive, one-click firmware and software cluster orchestration updates while maintaining production pipeline execution.
• Configure, test, and maintain Nutanix Data Protection strategies. This includes establishing Protection Domains, executing Async/Near-Sync replication, and utilizing Nutanix Leap or Nutanix Mine for automated orchestration to target DR sites or cold-storage tiers.
• Administer native Cisco Hyperflex Data Platform DR features. Configure and maintain Cisco Hyperflex SmartDR (frequent snapshot schedules) and standard replication pairings to achieve optimal Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO). Align storage replication policies with sponsor's strict technical thresholds.
• Manage storage cluster convergence and disk/node failure scenarios. Handle data rebuilds, cluster resiliency checks, and cross-platform health verification without impacting real-time SCADA telemetry pipelines.
• Apply expert working knowledge of Unix, Linux (*nix), and Windows operating systems to manage and maintain the infrastructure.
• Utilize high-level *nix scripting languages (AWK, SED, Perl, BSH, etc.) alongside PowerShell, Python, C/C++, Java, Packet C (Rave), and Ruby-on-Rails to automate network administration, parse logs, and optimize system components.
• Develop and execute standard operating procedures for the installation, operation, configuration, hardening, system maintenance, and troubleshooting of all project/system components.
• Design, build, and troubleshoot localized Microsoft Active Directory (AD) domains. Maintain strict Group Policy Objects (GPOs) explicitly designed to lock down OT workstations without freezing operational software dependencies.
• Implement and administer Public Key Infrastructure (PKI) architecture, certificate authorities (CA), and RSA SecurID infrastructure.
• Apply and continuously validate Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) across all Windows Servers, Linux instances, Cisco network devices, SQL databases, and virtual infrastructure. Evaluated system against IAVM directives and ACAS discoveries. Ensure core infrastructure settings mirror automated and manual defense benchmarks.
• Configure, maintain, and execute scans using the Assured Compliance Assessment Solution (ACAS/Tenable). Create customized, non-disruptive asset scan profiles that safely query legacy SCADA controllers and automation field-level hardware.
• Maintain centralized Windows Defender Antivirus and Windows Defender Firewall with Advanced Security policies. Build explicit inbound/outbound rule sets tailored to isolate industrial protocols.
• Deploy, patch, and optimize Microsoft SQL Server instances hosting SCADA telemetry, engineering transaction data, and RMF compliance tracking tools. Implement SQL auditing and STIG access metrics.
• Administer SolarWinds Network Performance Monitor (NPM) and Network Configuration Manager (NCM). Map infrastructure components, track device up/down states, capture SNMP traps, and archive configuration files for network switches.
• Operate the Dragos Platform to maintain passive network visibility. Triage incoming security alerts, track OT operational anomalies, identify software vulnerabilities mapped to physical field devices (BACnet, Modbus, DNP3), and archive deep packet capture logs.
• Participate in the definition, iteration, and physical delivery of all required ATO package components. This includes creating the System Security Plan (SSP), Security Assessment Report (SAR), Information System Contingency Plan (ISCP), and system-level Risk Assessment Reports (RAR).
• Author, compile, review, and organize comprehensive security documentation required for the system's Assessment and Authorization (A&A) packages to achieve and sustain an Authority to Operate (ATO).
• Develop, update, and manage the Plan of Action and Milestones (POA&M). Document remediation strategies, milestones, resource constraints, and scheduled completion dates for identified system vulnerabilities and non-compliant RMF controls.
• Assist the Information System Security Manager (ISSM) during formal validation assessments. Provide direct technical evidence, system architecture definitions, and contextual proof of compliance to satisfy the Authorizing Official (AO).