Sys Admin) III

GD Information Technology•Peabody, MA

1d•Onsite

About The Position

The primary function of this role is to organize, install, and support government organization’s computer systems, including local area networks (LANs), wide area networks (WANs), network segments, intranets, and other data communication systems. This will also include helping architect, design and analyze network models. It will require participation in decisions about buying future hardware or software to upgrade organization’s infrastructure. This position might be called upon to provide technical support to computer users to help solve users’ problems. This position will support activities within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. The role requires the ability to perform self-sustaining work with little to no oversight and to lead IT ops teams in the day-to-day management and operations of Networks. This includes implementing capabilities vetted through Cybersecurity, ISSE and higher headquarters to maintain JSIG/RMF Authority to Operate and maintain Continuous Monitoring tools and processes. The role involves managing COTS & GOTS products to collect, display and remediate security and operations/performance functions and metrics, assisting during security assessments, and creating operational checklists and Standard Operating Processes (SOPs). Additionally, the role requires managing and operating monitoring tools within the enterprise security information and event management (SIEM), executing cybersecurity operations procedures, monitoring/analyzing cybersecurity tool output for security incidents, and assisting in analyzing technical risk of emerging cybersecurity tools and processes. The position may involve working as part of a security incident response team and assisting with the integration/development of new techniques to improve Confidentiality, Integrity, and Availability for networks/systems operating at various classification levels. Advanced technical competency in specific platforms is required.

Requirements

5+ years of related experience.
2+ years of SAP experience required.
Top Secret/SCI Clearance Must Currently Possess.
Must be able to obtain Top Secret SCI + Polygraph.
US Citizenship Required.
Advanced technical competency in one or more of the following supported platforms: Microsoft Windows Server, Active Directory Red Hat Enterprise Linux servers, MS Hyper-V/VMWare/ESx/Xen Hypervisors, Enterprise networking/firewalls/intrusion detection/prevention systems, forensic analysis/vulnerability assessment, Group Policy management and configuration, Scripting, BMC Footprints, WSUS, Lumension, Bitlocker, SQL Server 2012, TomCat, IIS, Windows Server 2012r2/2016, Win 10, Red Hat 6.5, Microsoft Office Toolkits, SEIMs, Logrhythm, ACAS/Nessus/SCAP, mandatory/role-based access control concepts (e.g. SE Linux extensions to RHEL, PitBull, AppArmor, and Sentris), video teleconferencing/VOIP, Oracle/MS SQL database security, and Apache/IIS Web server security.
Thorough knowledge of Microsoft Windows desktop and server operating systems, Microsoft Exchange Server, and as needed RHEL operating systems administration and associated hardware.
Experience in effective communication and collaborating in a high-performance team environment.
Group Policy design and configuration.
Working knowledge of CISCO network and switching and virtualization technologies.
Working knowledge of virtualization as it applies to user environments, operating systems, and network appliances.
Working knowledge of Local Area Network (LAN) and Wide Area Network (WAN) technologies and data backup technologies.
Working knowledge communications security (COMSEC) policies and integration.
Working knowledge of Risk Management Framework, Common Criteria, and System Security Policy as they relate to assessments and authorization.
Working knowledge and current relevant experience with PL2, PL3, and PL4 network environments/systems.
Working knowledge of WSUS and/or YUM patch deployment methodologies.
Must be familiar with DoD policy as it applies to implementing and executing system and network administration.
Working knowledge of Risk Management Framework and how to apply it to network/information system environments.
Bachelor’s degree OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).
IAT Level III (CISSP, CASP+ CE, CCNP Security, CISA, etc.) certification.

Nice To Haves

Skills: Network Administrator, Network Architecture, Network Engineering
Certifications: None listed as required, but IAT Level III certifications are listed under requirements.

Responsibilities

Organize, install, and support computer systems, including LANs, WANs, network segments, intranets, and other data communication systems.
Architect, design, and analyze network models.
Participate in decisions regarding future hardware or software purchases for infrastructure upgrades.
Provide technical support to computer users to resolve problems.
Provide day-to-day support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.
Lead IT ops team on day-to-day management and operations of Networks.
Implement capabilities vetted through Cybersecurity, ISSE and higher headquarters to maintain JSIG/RMF Authority to Operate.
Maintain Continuous Monitoring tools and processes.
Manage COTS & GOTS products to collect, display and remediate security and operations/performance functions and metrics.
Assist during security assessments of servers/network devices/security appliances.
Assist during security assessments with regard to accuracy and efficiency.
Assist with the creation of operational Operations and Maintenance (O&M) checklists and build Tactics, Techniques and Processes (TTPs) and Standard Operating Processes (SOPs).
Manage and operate monitoring tools/capabilities within the enterprise security information and event management (SIEM).
Create/tailor complex event alarms/rules and summary reports.
Execute cybersecurity operations procedures for day-to-day network management, operations and maintenance.
Monitor/analyze output of cybersecurity related tools for reportable security incidents and residual risk.
Assist in analyzing technical risk, upon request, of emerging cybersecurity tools and processes.
Work as part of a security incident response team as needed.
Assist ISSM/ISSO/ISSE with the Integration/Development new techniques to improve Confidentiality, Integrity, and Availability for networks/systems operating at various classification levels.

Benefits

Variety of medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
Full flex work weeks where possible
Variety of paid time off plans, including vacation, sick and personal time, holidays
Paid parental leave
Military leave
Bereavement leave
Jury duty leave
Short and long-term disability benefits
Life insurance
Accidental death and dismemberment insurance
Personal accident insurance
Critical illness insurance
Business travel and accident insurance