Network​/System Administrator; Net​/Sys Admin III

Job Overview

Position:
Network/System Administrator (Net/Sys Admin) III

Type of Requisition:
Regular. Job Family: IT Infrastructure and Operations.

Clearance:
Must currently possess Top Secret/SCI clearance and be able to obtain TS/SCI with Continuous Impact (CI) polygraph. Must have 2 years of Special Access Program (SAP) experience.

Citizenship:
United States citizenship required.

• Organize, install, and support the government organization’s computer systems, including LANs, WANs, network segments, intranets, and other data communication systems.
• Architect, design, and analyze network models while participating in decisions about future hardware or software purchases to upgrade the organization’s infrastructure.
• Provide technical support to computer users, troubleshooting and resolving users’ problems.
• Supply day‑to‑day support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.
• Lead the IT operations team in day‑to‑day management and operations of networks, implementing capabilities approved through Cybersecurity, ISSE, and higher headquarters to maintain JSIG/RMF Authority to Operate and Continuous Monitoring programs.
• Manage commercial off‑the‑shelf (COTS) and government off‑the‑shelf (GOTS) products to monitor, display, and remediate automated system security and performance functions and metrics.
• Assist during security assessments of servers, network devices, and security appliances, focusing on accuracy and efficiency.
• Create operational operations and maintenance (O&M) checklists (daily, weekly, monthly, yearly) and develop tactics, techniques, and procedures (TTPs) as well as standard operating procedures (SOPs) related to these checklists.
• Operate monitoring tools and capabilities with enterprise security information and event management (SIEM), tailoring complex event alarms/rules and summary reports.
• Execute cybersecurity operations procedures for daily network management, monitoring output of cybersecurity tools to identify reportable security incidents and residual risk.
• Assist in analyzing technical risk of emerging cybersecurity tools and processes on request.
• Serve as part of a security incident response team as needed and collaborate with ISSM/ISSO/ISSE to integrate and develop new techniques to improve security posture.
• Maintain confidentiality, integrity, and availability for networks and systems operating at various classification levels.
• Demonstrate advanced technical competency in one or more of the following supported platforms:
  Microsoft Windows Server, Active Directory, Red Hat Enterprise Linux, Hyper‑V/VMWare/ESx/Xen Hypervisors, enterprise networking/firewalls/intrusion detection/prevention systems, forensic analysis/vulnerability assessment, group policy management, scripting, BMC Footprints, WSUS, Lumension, Bitlocker, SQL Server 2012, Tom Cat, IIS, Windows Server 2012 r2/2016, Windows 10, Red Hat 6.5, Microsoft Office Toolkits, SEIMs, Log Rhythm, ACAS/Nessus/SCAP, mandatory/role‑based access control concepts (e.g., SELinux, App Armor, Sentris), video teleconferencing/VOIP, Oracle/MS SQL database security, and Apache/IIS web server security.

• Five (5) or more years of related experience.
• Two (2) or more years of SAP experience required.
• Bachelor’s degree or Associate’s degree in a related area plus two years of experience, or equivalent (four years)
• Proficient knowledge of Microsoft Windows desktop and server operating systems, Microsoft Exchange Server, and Red Hat Enterprise Linux administration with associated hardware.
• Strong communication skills and ability to collaborate in a high‑performance team environment.
• Expertise in group policy design and configuration.
• Working knowledge of Cisco networking and switching, virtualization technologies, LAN and WAN technologies, data backup technologies, and COMSEC policies.
• Familiarity with Risk Management Framework (RMF), Common Criteria, and System Security Policy as they relate to assessments and authorization.
• Experience with PL2, PL3, and PL4 network environments/systems and with WSUS and/or YUM patch deployment methodologies.
• Knowledge of DoD policy for…