Cyber Tool Systems Administrator, Mid

Booz Allen Hamilton•Usa, DC

8d•$62,000 - $141,000

About The Position

Cyber Tool Systems Administrator, Mid Key Role: Deploy, configure, troubleshoot, and optimize the infrastructure and security solutions housed in the SOC enclave. Support and optimize a mix of open source, commer cia l, and in-house developed security applications. Perform systems administration, tuning, and troubleshooting of SOC systems, servers, virtual machines, and hosted applications adhering to agency policies and relevant NIST guidance. Deploy, configure, troubleshoot, and maintain virtualized infrastructure supporting hosted SOC applications. Ensure all routine and ad hoc system changes are tested, validated, and approved prior to implementation in the production environment in alignment with the agency’s enterprise change management process. Track, maintain, and update all operating system and hardware costs in accordance with agency-defined equipment lifecycles to support continuous and optimal operations of SOC systems, with a focus on identifying cost-saving initiatives. Create standardized reporting templates, dashboards, and operating procedures. Perform testing and documentation of new hardware, sof tware, products, and services. Develop processes and provide support across all SOC task areas for next-generation security automation tools to streamline response and enhance overall cyber resilience. Support the virtualization of services as requested, using VMWare v Center for management and VMWare vSphere for the Virtual Machine.

Requirements

Experience supporting RHEL servers and hosted applications in on-prem and cloud environments
Experience supporting virtualized environments using technologies such as VMware v Center , vSphere, Hyper-V, or Citrix Hypervisor
Experience creating and maintaining standardized documentation, including asset inventory records such as SOC sof tware licenses, and support agreements
Knowledge of foundational security concepts asso cia ted with access control such as PoLP, SoD, or RBAC, in performing routine support functions such as account provisioning and permissions modification
Ability to travel domestically to on-site data center s up to 10% of the time
Secret clearance
Bachelor’s degree and 3+ years of experience supporting security solutions such as EDR, NTA, or vulnerability management ( VM ) , and system administration tasks and tools for performing backup, automation, and system monitoring, or 6+ years of experience supporting security solutions such as EDR, NTA, or VM, and system administration tasks and tools for performing backup, automation, and system monitoring in lieu of a degree

Nice To Haves

Experience with MISP, Snort, and Zeek
Experience with MacBook administration
Experience working in a SOC or cyber operations environment
Experience supporting OSS and in-house developed sof tware
Knowledge of NIST 800-53 and other federal cybersecurity frameworks
CySA+, SSCP, GMON, G CIA , and Security+ or System-Administration Certifications such as Red Hat Certified System Administrator ( RHCSA ) , Micro sof t Azure Administrator Asso cia te, or AWS SysOps Administrator - Asso cia te Certification

Responsibilities

Deploy, configure, troubleshoot, and optimize the infrastructure and security solutions housed in the SOC enclave.
Support and optimize a mix of open source, commer cia l, and in-house developed security applications.
Perform systems administration, tuning, and troubleshooting of SOC systems, servers, virtual machines, and hosted applications adhering to agency policies and relevant NIST guidance.
Deploy, configure, troubleshoot, and maintain virtualized infrastructure supporting hosted SOC applications.
Ensure all routine and ad hoc system changes are tested, validated, and approved prior to implementation in the production environment in alignment with the agency’s enterprise change management process.
Track, maintain, and update all operating system and hardware costs in accordance with agency-defined equipment lifecycles to support continuous and optimal operations of SOC systems, with a focus on identifying cost-saving initiatives.
Create standardized reporting templates, dashboards, and operating procedures.
Perform testing and documentation of new hardware, sof tware, products, and services.
Develop processes and provide support across all SOC task areas for next-generation security automation tools to streamline response and enhance overall cyber resilience.
Support the virtualization of services as requested, using VMWare v Center for management and VMWare vSphere for the Virtual Machine.