Physical Security System Administrator - TS/SCI Required

Buffalo Horse Inc

3d•Onsite

About The Position

Buffalo Horse Inc. is seeking a Physical Security System Administrator to support USSOUTHCOM J2 Physical Security Services. The primary place of performance is Doral, FL. This is a Full-Time, Salaried, Exempt position requiring a Top Secret/SCI Security Clearance.

Requirements

5 years of related experience.
Knowledge of the Federal Enterprise Architecture (FEA) and Department of Defense (DoD) Enterprise Architecture framework (e.g., SIPR, NIPR and Joint Worldwide Intelligence Communications Systems (JWICS) networks), and the Information Technology (IT)/Cybersecurity rules and regulatory authorities to develop and implement policies and planning concepts, and project management methods.
Knowledge of governing laws, regulations, precedents, and directives governing DoD security programs (e.g. information, personnel, physical, industrial, etc.)
Knowledge and perspective of the operational, procedural, and technical standards that achieve interoperability with other non-DoD Federal Government agencies
Proficient using basic Microsoft Office software applications (e.g., Word, PowerPoint, Excel, and Access).
Proficient in using personnel security processing tools, including the DoD personnel security system of record (e.g., DISS, etc.) and National Background Investigation System (NBIS).
Must possess a current CompTIA Security + (SEC+) or equivalent certification.
Must possess a current CISCO Certified Network Associate (CCNA) certification or equivalent.
Active TS/SCI (within 5 years)

Nice To Haves

Bachelor's degree in a related field, preferred
Lenel Certified Professional (LGE-Core, LGE-Access, and LGE- Enterprise), preferred

Responsibilities

Operate the LENEL system and perform system administrator functions.
Provide IT Tier 2 Service, including assisting Tier I personnel and investigating elevated issues.
Provide internal and external IPv4 primary and secondary DNS services for USSOUTHCOM security ESS network.
Operate and maintain enterprise applications and devices for network Authentication, Authorization, and Accounting (AAA), port authentication, network end-device compliance, device profiling, and policy compliance.
Configure and maintain all network equipment for log collection and retention according to applicable policies and regulations, including SIEM tools for detection, response, and prevention of incidents.
Analyze and fine-tune rule sets within SIEM to reduce false positives.
Manage, update, and troubleshoot all Storage Area Network (SAN) and other storage technology devices across the USSOUTHCOM Security ESS network.
Provide backup services including file-level and system-level recovery services, and develop a Backup Plan with testing schedules and results.
Provide services for virtualized platforms and systems, including automated system provisioning, deployment, and servicing of multiple physical and virtual enclaves.
Provide all AD management services including DNS, DHCP, group policy, and certificates.
Provide services covering engineering, installation, and O&M of various applications and their operating environments.
Provide systems operations services including manual and automated processes for imaging, patching, application deployment, system monitoring, application monitoring, and service operations.
Provide engineering, installation, and O&M services for multiple end-user device types, including provisioning/de-provisioning, thin/zero client services, imaging, monitoring, patching, and application virtualization.
Engineer, install, operate, and maintain a password management system.
Provide Tier 3 IT problem solving solutions, identifying, documenting, and resolving major problems.
Operate, monitor, alert, manage, maintain, install, and troubleshoot USSOUTHCOM Security ESS network infrastructure devices and services.
Provide services for all aspects of network management and operations, including technical support for policy development, procedures, implementation, technology integration, and guidance for maintenance.
Conduct monthly scans to identify vulnerabilities in the ESS network and recommend corrective actions.
Provide daily monitoring, review, analysis, and evaluation of ESS process and technology, and recommend upgrades.
Apply OS patches and/or STIGs and upgrades, upgrade administrative tools and utilities, configure and add new services, perform periodic performance reporting, tuning, hardware upgrades, and resource optimization.
Provide daily, weekly, monthly reports on system health, accuracy, operations, and other metrics.
Respond to critical ESS failures after duty hours, on holidays, or weekends, and maintain a standby roster for after/off duty hours response (within 2 hours).
Assist with the sustainment and maintenance of all ESS and CCTV network infrastructure.
Integrate ESS hardware with ESS network infrastructure.
Establish and annually update a written preventative maintenance plan for all security systems.
Train users on equipment operation and maintenance, generate and dispense user codes, and provide end-user training documentation.
Adhere to incident reporting requirements and handling procedures.
Develop and establish a system to track maintenance agreements with various software/hardware components.
Update status on Weekly Activity Report (WAR).
Provide Physical Security support including customer service, X-Ray machine relocation/maintenance, and Autocrib relocation/maintenance.
Research, advise, and provide recommendations/quotes for all ESS and Physical Security enhancements procurements.