Tool Administrator and Lab Manager

Omniscius Consulting • Fort Bragg, NC

19d • Onsite

About The Position

The Tool Administrator and Lab Manager supports the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. The role sustains cyber defense sensors, SIEM infrastructure, logging pipelines, and approved test environments, maintaining reliable, documented configurations and supporting safe testing of cyber tools.

The position administers and monitors SIEM, sensors, log collection, data-source onboarding, and parsing; troubleshoots faults; coordinates maintenance; applies approved patches and configuration baselines; and documents changes. It manages tool authorization records, STIG or SRG implementation, upgrade testing and rollback, and lifecycle planning. The role also maintains an isolated Government-approved DCO lab, including its access controls, separation, inventory, backups, and operating procedures, and supports authorized malware-analysis and OSINT tools within approved network boundaries.

The Tool Administrator and Lab Manager coordinates with Blue Team, CTI, and Government platform owners regarding outages, enhancements, and technical risks. The position has no formal supervisory responsibilities, but coordinates technical work and lab access within assigned authority. Occasional local, CONUS, or OCONUS travel may be required for authorized mission activities, exercises, assessments, or conferences.

Requirements

• Minimum 3 years of documented relevant experience in areas such as sensor and SIEM sustainment, systems administration, cyber tooling, configuration management, and test lab experience.
• DoD Cyber Workforce Framework (DCWF) 521, Cyber Defense Infrastructure Support Specialist, Intermediate proficiency.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work.
• Document work-role appointment and qualification; maintain required residential qualification and continuing learning.
• A current matrix-listed certification option for 521 Intermediate: CEH, Cloud+, CySA+, GMON, GRID, GSEC, PenTest+, SSCP, or Security+.
• Knowledge of cyber defense infrastructure, SIEM and sensor sustainment, configuration management, logging, secure lab operations, and change control.
• Proficiency with SIEM and sensor platforms, operating systems, virtualization, logging pipelines, STIG tools, and lab management systems appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.
• Active SECRET clearance and ability to maintain assigned system access.
• U.S. citizenship.
• Ability to perform sustained computer-based analysis or coordination, communicate effectively, and support operational activities outside standard business hours when assigned.

Nice To Haves

• Experience with isolated cyber labs, tool authorization, and upgrade rollback.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Responsibilities

• Administer SIEM, sensors, log collection, data-source onboarding, parsing, and platform health monitoring.
• Troubleshoot faults, coordinate maintenance, apply approved patches and configuration baselines, and document changes.
• Manage tool authorization records, STIG or SRG implementation, upgrade testing, rollback, and lifecycle planning.
• Maintain an isolated Government-approved DCO lab with documented access, separation, inventory, backup, and operating procedures.
• Support authorized malware-analysis and OSINT tooling in the lab without crossing approved network boundaries.
• Coordinate with Blue Team, CTI, and Government platform owners on outages, enhancements, and technical risks.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.
• Coordinate technical work and lab access within assigned authority.
• Travel occasionally for authorized mission activities, exercises, assessments, or conferences, as required.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed