Cyber Career Pathways Tool

Show Core Relationships

Toggle to only show Federal Core knowledge, skills, abilities, and tasks (KSATs) in the Details for the Selected role, once set. This will also alter the galaxy when the KSATs relationship filter is active.

Show Core Relationships

Toggle to only show Federal Core knowledge, skills, abilities, and tasks (KSATs) in the Details for the Compared role, once set.

Begin typing to search work role names.

Select a second role.

Details

System Administrator

Responsible for setting up and maintaining a system or specific components of a system (e.g. for example, installing, configuring, and updating hardware and software; establishing and managing user accounts; overseeing or conducting backup and recovery tasks; implementing operational and technical security controls; and adhering to organizational security policies and procedures).

Community: IT

Category: Operate and Maintain

Specialty Area: Systems Administration

OPM ID: 451

See USAJOBS listings coded for System Administrator

Related Functional Titles

The following job titles have been identified by subject matter experts as either alternative titles for this work role or including the functions of this work role as part of their job duties.

Application Security Administrator
Identity Access Manager
Local Area Network (LAN)/Wide Area Network (WAN) Administrator
Platform Specialist
Security Administrator
Server Administrator
System Operations Personnel
System Security Administrator
UNIX/Windows System administrator
Web Administrator

View Cyber Career Pathway Documents

Spotlight Videos

Tasks

Legend

C: Core Tasks
A: Additional Tasks
: Aligned to the role
: Not aligned to the role
A*: Not included in the initial analysis to determine whether it is Core or Additional to the work role.

ImportanceAligned	Tasks ID	Tasks Description
Core	T0029	Conduct functional and connectivity testing to ensure continuing operability.
Additional	T0054	Design group policies and access control lists to ensure compatibility with organizational standards, business rules, and needs.
Core	T0063	Develop and document systems administration standard operating procedures.
Core	T0136	Maintain baseline system security according to organizational policies.
Core	T0144	Manage accounts, network rights, and access to systems and equipment.
Core	T0186	Plan, execute, and verify data redundancy and system recovery procedures.
Additional	T0207	Provide ongoing optimization and problem-solving support.
Core	T0418	Install, update, and troubleshoot systems/servers.
Additional	T0431	Check system hardware availability, functionality, integrity, and efficiency.
Additional	T0435	Conduct periodic system maintenance including cleaning (both physically and electronically), disk checks, routine reboots, data dumps, and testing.
Core	T0458	Comply with organization systems administration standard operating procedures.
Core	T0461	Implement and enforce local network usage policies and procedures.
Core	T0498	Manage system/server resources including performance, capacity, availability, serviceability, and recoverability.
Core	T0501	Monitor and maintain system/server configuration.
Additional	T0507	Oversee installation, implementation, configuration, and support of system components.
Additional	T0514	Diagnose faulty system/server hardware.
Core	T0515	Perform repairs on faulty system/server hardware.
Core	T0531	Troubleshoot hardware/software interface and interoperability problems.

KSAs

Knowledge

Legend

C: Core Knowledge
A: Additional Knowledge
: Aligned to the role
: Not aligned to the role
A*: Not included in the initial analysis to determine whether it is Core or Additional to the work role.

ImportanceAligned	Knowledge ID	Knowledge Description
Core	K0001	Knowledge of computer networking concepts and protocols, and network security methodologies.
Core	K0002	Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
Core	K0003	Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
Core	K0004	Knowledge of cybersecurity and privacy principles.
Core	K0005	Knowledge of cyber threats and vulnerabilities.
Core	K0006	Knowledge of specific operational impacts of cybersecurity lapses.
Additional	K0049	Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
Additional	K0050	Knowledge of local area and wide area networking principles and concepts including bandwidth management.
Core	K0053	Knowledge of measures or indicators of system performance and availability.
Core	K0064	Knowledge of performance tuning tools and techniques.
Additional	K0077	Knowledge of server and client operating systems.
Core	K0088	Knowledge of systems administration concepts.
Additional	K0100	Knowledge of the enterprise information technology (IT) architecture.
Additional	K0103	Knowledge of the type and frequency of routine hardware maintenance.
Additional	K0104	Knowledge of Virtual Private Network (VPN) security.
Additional	K0117	Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]).
Core	K0130	Knowledge of virtualization technologies and virtual machine development and maintenance.
Core	K0158	Knowledge of organizational information technology (IT) user security policies (e.g., account creation, password rules, access control).
Core	K0167	Knowledge of system administration, network, and operating system hardening techniques.
Additional	K0179	Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
Additional	K0260	Knowledge of Personally Identifiable Information (PII) data security standards.
Additional	K0261	Knowledge of Payment Card Industry (PCI) data security standards.
Additional	K0262	Knowledge of Personal Health Information (PHI) data security standards.
Additional	K0274	Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly.
Additional	K0280	Knowledge of systems engineering theories, concepts, and methods.
Additional	K0289	Knowledge of system/server diagnostic tools and fault identification techniques.
Additional	K0318	Knowledge of operating system command-line tools.
Additional	K0332	Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
Core	K0346	Knowledge of principles and methods for integrating system components.

Skills

Legend

C: Core Skills
A: Additional Skills
: Aligned to the role
: Not aligned to the role
A*: Not included in the initial analysis to determine whether it is Core or Additional to the work role.

ImportanceAligned	Skills ID	Skills Description
Additional	S0016	Skill in configuring and optimizing software.
Additional	S0033	Skill in diagnosing connectivity problems.
Additional	S0043	Skill in maintaining directory services. (e.g., Microsoft Active Directory, LDAP, etc.).
Additional	S0073	Skill in using virtual machines. (e.g., Microsoft Hyper-V, VMWare vSphere, Citrix XenDesktop/Server, Amazon Elastic Compute Cloud, etc.).
Additional	S0076	Skill in configuring and utilizing software-based computer protection tools (e.g., software firewalls, antivirus software, anti-spyware).
Additional	S0111	Skill in interfacing with customers.
Additional	S0143	Skill in conducting system/server planning, management, and maintenance.
Core	S0144	Skill in correcting physical and technical problems that impact system/server performance.
Additional	S0151	Skill in troubleshooting failed system components (i.e., servers)
Additional	S0153	Skill in identifying and anticipating system/server performance, availability, capacity, or configuration problems.
Additional	S0154	Skill in installing system and component upgrades. (i.e., servers, appliances, network devices).
Core	S0155	Skill in monitoring and optimizing system/server performance.
Core	S0157	Skill in recovering failed systems/servers. (e.g., recovery software, failover clusters, replication, etc.).
Core	S0158	Skill in operating system administration. (e.g., account maintenance, data backups, maintain system performance, install and configure new hardware/software).

Abilities

Legend

C: Core Abilities
A: Additional Abilities
: Aligned to the role
: Not aligned to the role
A*: Not included in the initial analysis to determine whether it is Core or Additional to the work role.

ImportanceAligned	Abilities ID	Abilities Description
Core criticality not evaluated	A0025	Ability to accurately define incidents, problems, and events in the trouble ticketing system.
Core criticality not evaluated	A0027	Ability to apply an organization's goals and objectives to develop and maintain architecture.
Core criticality not evaluated	A0034	Ability to develop, update, and/or maintain standard operating procedures (SOPs).
Core criticality not evaluated	A0055	Ability to operate common network tools (e.g., ping, traceroute, nslookup).
Core criticality not evaluated	A0062	Ability to monitor measures or indicators of system performance and availability.
Core criticality not evaluated	A0074	Ability to collaborate effectively with others.
Core criticality not evaluated	A0088	Ability to function effectively in a dynamic, fast-paced environment.
Core criticality not evaluated	A0123	Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Core criticality not evaluated	A0124	Ability to establish and maintain automated security control assessments

Capability Indicators

Capability Indicators for System Administrator
Category	Entry	Intermediate	Advanced
Credentials/Certifications	Recommended: Not essential but may be beneficial Example Types: N/A Example Topics: Certifications addressing network infrastructure, mobile device integration, hardware evaluation, operating systems, technical support, business continuity and disaster recovery, cloud computing security, incident management, IT governance, risk management, securing communications, authentication, security testing, intrusion detection/prevention, incident response and recovery, attacks and countermeasures, cryptography, malicious code countermeasures, and managing, maintaining, troubleshooting, installing, and configuring basic network infrastructure	Recommended: Not essential but may be beneficial Example Types: N/A Example Topics: : Certifications addressing access control theory, alternate network mapping techniques, authentication and password management, common types of attacks, contingency planning, critical security controls, concepts, crypto fundamentals, defense-in-depth, DNS, firewalls, honeypots, ICMP, incident handling fundamentals, intrusion detection overview, IP packets, IPS overview, IPv6, legal aspects of incident handling, Mitnick-Shimomura attack, network addressing, network fundamentals, network mapping and scanning, network protocol, policy framework, protecting data at rest, PKI, reading packets, risk management, securing server services, SIEM/Log management, steganography overview, TCP, UDP, virtual private networks, viruses and malicious code, vulnerability management overview, vulnerability scanning, web application security, auditing and forensics, network security overview, permissions and user rights, security templates and group policy, service packs, hotfixes and backups, active directory and group policy overview, wireless security, authentication, security testing, intrusion detection/prevention, incident response and recovery, attacks and countermeasures, cryptography, and malicious code countermeasures	Recommended: Yes Example Topics: Certifications addressing system security, network infrastructure, access control, cryptography, assessments and audits, and organizational security
Continuous Learning	Recommended: Not essential but may be beneficial Examples: 40 hours annually (may include mentoring, shadowing, conferences, webinars, or rotations)	Recommended: Not essential but may be beneficial Examples: 40 hours annually (may include mentoring, shadowing, conferences, webinars, or rotations)	Recommended: Yes Examples: 40 hours annually (may include role rotations)
Education	Recommended: Not essential but may be beneficial Example Types: Associate's (certifications addressing information systems security may substitute education) Example Topics: Computer science, cybersecurity, information technology, software engineering, information systems, and computer engineering	Recommended: Not essential but may be beneficial Example Types: Bachelor's (certifications addressing the following may substitute education: analyzing, assessing, controlling, determining, mitigating and managing risk within a management and acquisition framework that contains personal data; identifying, implementing and integrating management, acquisition and administrative risk methodologies for securing critical and sensitive information infrastructures) Example Topics: Computer science, cybersecurity, information technology, software engineering, information systems, and computer engineering	Recommended: Not essential but may be beneficial Example Types: Bachelor's, Master's, Ph.D. (certifications addressing the following may substitute education: analyzing, assessing, controlling, determining, mitigating and managing risk within a management and acquisition framework that contains personal data; identifying, implementing, and integrating management, acquisition, and administrative risk methodologies for securing critical and sensitive information infrastructures) Example Topics: Computer science, cybersecurity, information technology, software engineering, information systems, and computer engineering
Experiential Learning	Recommended: Not essential but may be beneficial Examples: Information assurance	Recommended: Not essential but may be beneficial Examples: Information assurance, area network, wireless reach back system, enterprise messaging system, combined enterprise regional information exchange system, global command and control system, networks	Recommended: Yes Examples: 7+ years of experience directly performing configurations and security implementations on LAN and WAN equipment, information assurance
Training	Recommended: Not essential but may be beneficial Example Types: N/A Example Topics: Information assurance, operational support systems, and security fundamentals	Recommended: Not essential but may be beneficial Example Types: N/A Example Topics: Systems administration, security fundamentals	Recommended: Yes Example Types: N/A Example Topics: Self- or instructor-led training in the areas of LAN, WAN architectures, and network security, advanced network analysis, and network security vulnerability

Common Relationships

Related Roles by KSAT

The following work roles are related by their shared tasks, knowledge, skills and abilities.

The following work roles are related by their shared core tasks, knowledge, skills and abilities.

Roles are listed by all or core shared KSATs, as selected.

Related Roles by KSAT	Percentage
441-Network Operations Specialist	19.05%
411-Technical Support Specialist	17.95%
521-Cyber Defense Infrastructure Support Specialist	13.51%
671-System Testing and Evaluation Specialist	12.96%
611-Authorizing Official/Designating Representative	12%

Related Roles by Core KSAT	Percentage
411-Technical Support Specialist	9.09%
531-Cyber Defense Incident Responder	3.03%
441-Network Operations Specialist	2.27%

On Ramps

Off Ramps

Federal Data

The below list defines the most common occupational series used in the Federal Government for this specific work role. This can be used as an indicator for users for things like position descriptions. Some work roles require multiple codes to illustrate the breadth and depth of a work role. The secondary work roles listed below can help users to identify potential work role pairing. This data was pulled from The Office of Personnel Management (OPM) Federal Government-wide data as reported in 2020.

Top 5 Occupational Series

Top 5 Occupational Series	Percentage
2210-INFORMATION TECHNOLOGY MANAGEMENT	85.24%
0391-TELECOMMUNICATIONS	1.92%
1550-COMPUTER SCIENCE	1.73%
0855-ELECTRONICS ENGINEERING	1.41%
0335-COMPUTER CLERK AND ASSISTANT	1.16%

Top 5 Secondary Work Roles

Top 5 Secondary Work Roles	Percentage
411-Technical Support Specialist	41.3%
421-Database Administrator	10.26%
441-Network Operations Specialist	9.48%
461-Systems Security Analyst	8.39%
641-Systems Requirements Planner	3.81%

The Cyber Career Pathways Tool is developed and maintained in partnership with the Federal Cyber Workforce Management and Coordination Working Group.

This tool is based on the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NIST Special Publication 800-181, August 2017) and revisions published in late 2020 renaming the framework as the Workforce Framework for Cybersecurity (NIST Special Publication 800-181 Rev. 1, November 2020). Please visit the NICE Framework Resource Center for more information, as well as the latest updates.

Additional Resources

Find federal job announcements by cyber skills community on USAJOBS: IT, Cybersecurity, Cyber Effects, Intel (Cyber), and Cross-Functional.