Systems Administrator 2

WHAT YOU WILL BE DOING

• Assisting with defining security requirements and designing solutions, providing guidance and implementing direction related to security technologies in secure, classified facilities.
• Applying Risk Management Framework (RMF) and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 controls to obtain and/or maintain Authority to Operate (ATO) for information systems (Linux/Windows) within government contractor environments.
• Performing network and system security administration, including operating system security configuration, performance monitoring, and account management best practices for MS Servers/Windows and Linux.
• Configuring and maintaining user account management interfaces and system supports, including direct customer interface in secure settings.
• Utilizing security management capabilities and ensuring a secure, DoD-compliant service and system architecture.
• Participating in the development of technical and/or management controls and implementing services in accordance with NIST SP 800-171 requirements for protecting the Confidentiality of Controlled Unclassified Information (CUI).
• Identifying and implementing security designs, preparing and maintaining engineering and security-related documentation tailored to government contractor standards.
• Providing technical advice related to system security, vulnerabilities, security architecture, and security policies in classified environments.
• Ensuring the rigorous application of information security and information assurance policies and procedures.
• Working knowledge of classified environments and oversight on vulnerability assessments; defining, negotiating, and executing Assessment and Authorization (A&A) events.
• Supporting the scheduling, performing, and maintaining of records for required information system auditing, patching, maintenance, software/hardware changes, and malware scanning based on evolving threats/vulnerabilities and compliance requirements.
• Building servers (physical and virtual) and workstations (Windows/Linux), both physical and virtual, in secure facilities.
• Managing networking switches, routers, and firewalls, including configuration, monitoring, and troubleshooting in DoD-compliant environments to ensure secure data flow and network integrity.

WHAT YOU HAVE DONE

• Minimum 4 years of hands-on experience with Linux and Windows system administration in mid-level roles, preferably in secure settings.
• Experience with security features and/or vulnerabilities of various operating systems as defined by NSA, NIST, DISA (STIGs), and/or USCYBERCOM.
• Experience with network and system security administration, including operating system security configuration and account management best practices for MS Windows and Linux.
• Optimized system operations and resource utilization, performing system capacity analysis and planning.
• Experience with Information Assurance (IA) vulnerability identification/remediation/testing and related network and system test tools (e.g., Security Content Automation Protocol (SCAP)).
• Experience with information security toolsets such as anti-virus, Security Information and Event Management (SIEM), and/or Host-based Intrusion Detection Systems/Network Intrusion Detection Systems (HIDS/NIDS).
• Experience with VMware virtualization technologies, both server and desktop environments.
• Hands-on experience managing firewalls, network switches, and routers in secure environments.
• Self-starter requiring limited direction and supervision, with a proven ability to work independently in classified facilities.
• Experience implementing DoD and Federal Risk Management Framework, IA Certification and Accreditation Processes, IA controls, and developing/maintaining associated certification and accreditation documentation.
• Assisted in the implementation of required government policies (e.g., DAAPM, NISPOM, JSIG), made recommendations on process tailoring, participated in and documented process activities.
• Applied Defense Counterintelligence and Security Agency (DCSA) processes and National Industrial Security Program Operating Manual (32 CFR/NISPOM) requirements, Intelligence Community Directive (ICD)-503 publications, and the Committee on National Security Systems Instruction (CNSSI) 1253 to new or existing information systems.
•