Cyber Tool Systems Administrator, Mid

Booz Allen Hamilton Inc.•Washington, DC

55d•$62,000 - $141,000

About The Position

Cyber Tool Systems Administrator, Mid Key Role: Deploy, configure, troubleshoot, and optimize the infrastructure and security solutions housed in the SOC enclave. Support and optimize a mix of open source, commercial, and in-house developed security applications. Perform systems administration, tuning, and troubleshooting of SOC systems, servers, virtual machines, and hosted applications adhering to agency policies and relevant NIST guidance. Deploy, configure, troubleshoot, and maintain virtualized infrastructure supporting hosted SOC applications. Ensure all routine and ad hoc system changes are tested, validated, and approved prior to implementation in the production environment in alignment with the agency's enterprise change management process. Track, maintain, and update all operating system and hardware costs in accordance with agency-defined equipment lifecycles to support continuous and optimal operations of SOC systems, with a focus on identifying cost-saving initiatives. Create standardized reporting templates, dashboards, and operating procedures. Perform testing and documentation of new hardware, software, products, and services. Develop processes and provide support across all SOC task areas for next-generation security automation tools to streamline response and enhance overall cyber resilience. Support the virtualization of services as requested, using VMWare vCenter for management and VMWare vSphere for the Virtual Machine.

Requirements

3+ years of experience supporting security solutions, such as EDR, NTA, or vulnerability management (VM), and system administration tasks and tools for performing backup, automation, and system monitoring
Experience supporting RHEL servers and hosted applications in on-prem and cloud environments
Experience supporting virtualized environments using technologies such as VMware vCenter, vSphere, Hyper-V, or Citrix Hypervisor
Experience in creating and maintaining standardized documentation, including asset inventory records, such as SOC software licenses, and support agreements
Knowledge of foundational security concepts associated with access control, such as PoLP, SoD, or RBAC, in performing routine support functions, such as account provisioning and permissions modification
Ability to travel to on-site data centers in NoVA, MD, and DC areas 10% of the time
Ability to obtain a Secret clearance
Bachelor's degree

Nice To Haves

Experience working in a SOC or cyber operations environment
Experience supporting OSS and in-house developed software
Knowledge of NIST 800-53 and other federal cybersecurity frameworks
Secret clearance
CySA+, SSCP, GMON, GCIA, and Security+ or system-administration certifications, such as Red Hat Certified System Administrator (RHCSA), Microsoft Azure Administrator Associate, or AWS SysOps Administrator - Associate certification

Responsibilities

Deploy, configure, troubleshoot, and optimize the infrastructure and security solutions housed in the SOC enclave
Support and optimize a mix of open source, commercial, and in-house developed security applications
Perform systems administration, tuning, and troubleshooting of SOC systems, servers, virtual machines, and hosted applications adhering to agency policies and relevant NIST guidance
Deploy, configure, troubleshoot, and maintain virtualized infrastructure supporting hosted SOC applications
Ensure all routine and ad hoc system changes are tested, validated, and approved prior to implementation in the production environment in alignment with the agency's enterprise change management process
Track, maintain, and update all operating system and hardware costs in accordance with agency-defined equipment lifecycles to support continuous and optimal operations of SOC systems, with a focus on identifying cost-saving initiatives
Create standardized reporting templates, dashboards, and operating procedures
Perform testing and documentation of new hardware, software, products, and services
Develop processes and provide support across all SOC task areas for next-generation security automation tools to streamline response and enhance overall cyber resilience
Support the virtualization of services as requested, using VMWare vCenter for management and VMWare vSphere for the Virtual Machine.