BAE Systems · Broomfield, CO

Salary
$79,365–$134,921from the description
Posted
Jul 10, 2026
Location
Broomfield, CO
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A mid-level Windows Systems Administrator role centered on security remediation in isolated, classified computing environments. Day-to-day work involves patching and hardening Windows Server (2019–2025) and VDI systems against vulnerabilities, applying STIGs, running security scans with tools like Tenable or SCAP, and managing Group Policy. The role suits someone with hands-on Windows infrastructure experience and an active TS/SCI clearance.

Mid level · 2+ years · National · TS/SCI clearance · Full-time

Must have (6)
Windows ServerSTIGsTenable or ScapGroup PolicyVMwarePowerShell
Nice to have (5)
SCCM or MecmActive DirectorySentinelOne, Rsa or Ping IdentityCommvault, Veeam, Ppdm or NetworkerJIRA or ServiceNow

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What gives you an edge
Tenable2%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
Windows Server55%PowerShell50%VMware42%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $101,310 (middle half $79,725–$129,425). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (9)

The job title includes 'II', indicating a mid-level role; the experience requirement (2+ years with a Bachelor's, or 6+ years with a HS diploma) also aligns with Mid seniority.

Location is not explicitly stated in the posting, but the role is on-site five days per week at a BAE Systems facility; the CBSA could not be determined from the text alone.

A TS/SCI clearance is hard-required; the posting also states the ability to obtain a TS/SCI Polygraph is required, and a current CI Polygraph is listed under Preferred.

The role has a strong security-remediation focus (vulnerability scanning, STIGs, patching), which creates genuine ambiguity between a Systems Administrator (15-1244) and an Information Security Analyst (15-1212); 15-1244 was chosen as primary because the day-to-day work centers on operating and maintaining Windows infrastructure rather than security analysis or policy.

VMware and VDI are listed under required skills with 'Some Knowledge' framing, but they appear in the Required Skills section, so they are treated as hard gates.

PowerShell is listed under required skills with 'Some experience' framing but appears in the Required Skills section, so it is treated as a hard gate.

SCCM/MECM appears both in the required section (as 'occasional interface') and the preferred section (multiple years of use); it is marked preferred to reflect the 'occasional' and secondary framing.

Degree requirement is set to None because the JD explicitly accepts a HS Diploma plus additional years of experience, and also states related technical experience may be considered in lieu of education.

Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗