Network/System Administrator III

System High Corporation•San Antonio, TX

About The Position

System High Corporation is hiring a Network/System Administrator III to organize, install, and support government computer systems, including LANs, WANs, network segments, intranets, and other data communications systems. The role also contributes to architecting, designing, and analyzing network models, and participates in decisions about future hardware and software upgrades. It may provide technical support to users troubleshooting computer problems. The position supports Department of Defense agency activities within Special Access Programs, including efforts involving HQ Air Force, the Office of the Secretary of Defense, and Military Compartments. It provides day-to-day support for Collateral, SCI, and SAP activities. The administrator is expected to work independently with little oversight and lead the IT operations team’s daily network management and operations. The role implements capabilities vetted through Cybersecurity, ISSE, and higher headquarters to support JSIG/RMF Authority to Operate and continuous monitoring. The administrator manages commercial and government off-the-shelf products used to collect, display, and remediate system security and operational performance metrics. The role operates monitoring tools and SIEM capabilities, configures complex event alarms and rules, produces summary reports, carries out cybersecurity operations procedures, monitors tools for reportable incidents and residual risk, and supports security assessments, risk analysis, incident response, and improvements to the confidentiality, integrity, and availability of systems across classification levels. Candidates must have a current Top Secret clearance with SCI eligibility, be eligible for SAP access, and be willing to submit to a counterintelligence polygraph. A bachelor’s degree in a related area or equivalent experience is required, along with 5–7 years of related experience and the ability to meet DoD IAT Level III certification requirements within six months of hire. The role requires regularly lifting up to 50 pounds.

Requirements

5–7 years of related experience.
Bachelor’s degree in a related area or equivalent experience (four years).
Meet DoD Directive 8570.01-M Information Assurance Technician Level III (IAT III) position and certification requirements within six months of hire.
Current Top Secret clearance with SCI eligibility.
Eligibility for access to Special Access Program information.
Willingness to submit to a counterintelligence polygraph.
Thorough knowledge of Microsoft Windows desktop and server operating systems, Microsoft Exchange Server, and, as needed, RHEL operating systems administration and associated hardware.
Experience communicating effectively and collaborating in a high-performance team environment.
Knowledge of Group Policy design and configuration.
Working knowledge of Cisco networking and switching and virtualization technologies.
Working knowledge of virtualization as it applies to user environments, operating systems, and network appliances.
Working knowledge of LAN and WAN technologies and data backup technologies.
Working knowledge of COMSEC policies and integration.
Working knowledge of Risk Management Framework, Common Criteria, and System Security Policy as they relate to assessments and authorization.
Working knowledge and current relevant experience with PL2, PL3, and PL4 network environments and systems.
Working knowledge of WSUS and/or YUM patch deployment methodologies.
Familiarity with DoD policy applicable to system and network administration.
Working knowledge of the Risk Management Framework and its application to network and information system environments.
Ability to regularly lift up to 50 pounds.
Advanced technical competency in one or more supported platforms or technologies, such as Microsoft Windows Server, Active Directory, Red Hat Enterprise Linux servers, Hyper-V/VMware/ESX/Xen hypervisors, enterprise networking, firewalls, intrusion detection and prevention systems, forensic analysis, vulnerability assessment, Group Policy, scripting, BMC Footprints, WSUS, Lumension, BitLocker, SQL Server, Tomcat, IIS, Windows Server, Windows 10, Red Hat, Microsoft Office, SIEMs including LogRhythm, ACAS/Nessus/SCAP, mandatory and role-based access controls, video teleconferencing/VoIP, Oracle or MS SQL database security, and Apache/IIS web server security.

Responsibilities

Organize, install, and support government computer systems, including LANs, WANs, network segments, intranets, and other data communication systems.
Help architect, design, and analyze network models and participate in hardware and software upgrade decisions.
Provide technical support to computer users to help resolve problems, as needed.
Provide day-to-day support for Collateral, SCI, and SAP activities supporting DoD agency programs.
Work independently with little to no oversight and lead the IT operations team’s day-to-day network management and operations.
Implement capabilities vetted through Cybersecurity, ISSE, and higher headquarters to maintain JSIG/RMF Authority to Operate and continuous monitoring tools and processes.
Manage COTS and GOTS products used to collect, display, and remediate system security and system operations or performance functions and metrics.
Assist with security assessments of servers, network devices, and security appliances, including review of assessment accuracy and efficiency.
Create operational O&M checklists and develop related TTPs and SOPs.
Operate enterprise SIEM monitoring tools and capabilities; create or tailor complex event alarms and rules and produce summary reports.
Execute cybersecurity procedures for day-to-day network management, operations, and maintenance.
Monitor and analyze cybersecurity tool output for reportable security incidents and residual risk.
Assist with technical risk analysis of emerging cybersecurity tools and processes, upon request.
Participate in a security incident response team as needed.
Assist ISSM, ISSO, and ISSE personnel with integrating and developing techniques to improve confidentiality, integrity, and availability across systems and networks at varying classification levels.