Senior Systems Engineer with Security Clearance - San Francisco, United States - GDH

Description

Act as a technical SME within the structure of the larger team, under guidance of the system architect, with a focus on system engineering / administration functions but also assisting with networking tasks.

Support, monitor, and troubleshoot the hardware and software related to the Government owned, supported, infrastructure pertaining to infrastructure technologies currently installed in the lab and installed at customer locations.

The core of the requirement is a Wide Area network (WAN) connecting four sites with carrier-class CISCO routers, and the associated Out-of-Band (OOB) network management system that is air-gapped from all other networks, as well as an almost duplicate system called High Side that hosts other program software but without the networking focus.

Work independently or in small teams, with the rest of the team supporting security, documentation, project management as well as with the Systems Integrator (SI) ManTech and government personnel at the five government locations either remotely or on-site.

Support ongoing patching and accreditation requirements for the systems being supported, as well as documentation requirements related to the monitoring of the systems than make up the WAN and High Side.

• Manages task performance and ensures that tasks under assigned projects are completed to the satisfaction of the PMO, ManTech prime contractor, and Government customers.
• Participate in assigned projects, leading others when applicable, and working independently on projects when appropriate. Work inside of the PMO team structure to accomplish tasks.
• Performs advanced technical tasks in assigned functional areas.
• Schedule and perform system and network maintenance, perform installation configuration and repairs, and support certification and accreditation activities within the DEV system, then establish processes for air-gapped patching through the SIs CM processes to government locations utilizing RHEL 8 satellite 6.
• Work with the on-site SI FTEs for their support of out-of-band management system(s) that are based on RHEL 8 applications within vCenter; support, monitor, test and troubleshoot hardware and software problems pertaining to the overall systems, including Linux debugging.
• Support RHEL operating systems to include maintaining repositories needed for patches to maintain security posture, running scans and correcting security issues found by Nessus scans and STIG processes and resolving issues that might arise due to configuration changes.
• Provide input to the design of the overall system and out-of-band management components, configure and maintain system diagrams and accreditations, and support certification and accreditation activities.
• Maintain RHEL satellite server and other systems to deploy updates to software or configurations to non-network system components.
• Assists in preparation of technical documentation for projects assigned, including but not limited to Visio diagrams, wiring diagrams, logical diagrams, document repositories or technical manuals, patches for systems, etc. Potential assistance with vendor and product evaluations, and other system documents.
• Assist in supporting the Nagios application for how it will collect logs, then report to the customers NOC. Specifically work with the SIs on-site field service representatives (FSRs) with refining this process from testing within the lab, as well as directly on-site when providing Tier-3 support for these functions.
• Test the process for maintaining logs for all devices to provide customer with results from log servers based on query information provided by customer.
• Support the process for routine monitoring of systems, patching, STIG compliance, and documentation related to these tasks to be updated based upon agreed upon requirements with the customer.
• Interacts with customers and on-site teams. Interacts with internal teams daily and with the larger SI program teams weekly or as needed. Develop strong working relationships with customers at all levels, from technicians to senior leadership.
• Interacts with vendors, subcontractors, other agencies, and other client staff on behalf of the PMO team and customer requirements.
• Support mission architecture to include Government owned systems and integrate hardware and software to satisfy ISO 9000 requirements and other DoD/IC regulations. As required by contract requirements.
• Ensures quality assurance of project deliverables, aligned to defined processes and requirements of the PMO team, the SI, and the Government.
• Maintain relevant OEM credentials for system access, training, software access.
• Maintain current knowledge of relevant technologies as assigned.
• Participates in special projects as required.
• Travel to support meetings with the program should be minimal. Visits to the primary customer site in Maryland could monthly but likely only quarterly to support on-site requirements and work with on-site FSRs from the SI. Travel to the other three primary government sites (all US states) will be infrequent but may be required for Tier-3 system support. Routine visits to the government lab location and the lab location could be common to support touch support and work on configurations. While on-site to any location, there is an expectation of interfacing with FSRs and government personnel. Travel beyond 50 miles from home is reimbursable. SECONDARY (ASSISTIVE) DUTIES/RESPONSIBILITIES
• Work with the on-site SI FTEs for their support of of LAN- based applications, IOS-XR routers, Firepower 1150/4125 firewalls, and IOS-XE switching technologies; support, monitor, test and troubleshoot hardware and software problems pertaining to WANs/LANs/.
• Provide input to the design of network architectures, configure and maintain network diagrams and accreditations, and support certification and accreditation activities.
• Help to maintain NSO system to deploy network configuration scripts and backup configurations for disaster recovery for all network devices

• Minimum 9 years (14+ desired) of related experience in assigned functional area(s).
• Bachelors degree in a relevant field of telecommunications, computer science, or information systems required. A Masters degree in the same fields will reduce the total years of experience by two (2) years. An additional 4 years of experience can be substituted for a Bachelors degree.
• Solid technical knowledge of the principles, methods, and techniques involved in system engineering and system support.
• A wide and advanced knowledge base of the principles, methods, and techniques supporting IT installations for networking, compute, and security systems.
• Successful past experience providing holistic support to RHEL systems with customer interaction.
• Experience with LDAP and integrating Authentication, Authorization and Accounting for network and RHEL users and groups and supporting Multi-Factor Authentication (MFA) software.
• Deep knowledge of VMware ESXi hypervisor and vCenter management.
• Intermediate knowledge of Linux operating systems.
• Effective team skills and customer interaction experience.
• Outstanding interpersonal, organization, and technical skills.
• Excellent written and verbal communication skills.
• Self-driven person with a desire to learn and support mission-driven DoD customers.
• Ability to manage multiple tasks concurrently within assigned areas.
• Current CompTia Security+ or the ability to achieve rapidly after hire, this is a DoD requirement (DoD 8570 (CSWF for privileged access to government networks.
• Ability to meet DoD requirements for badging and access, including but not limited to basic annual training, and site-specific access requirements.
• Active / current TS/SCI DoD clearance.
• Primary location will be in and around the Hanover, MD area. Majority of work will be remote, with some amount of weekly access to the physical equipment at the DEV, T&I, and local Production site. PREFERRED QUALIFICATIONS
• Willingness to obtain a CI-Poly if requested by the government. Currently not a requirement, and has not been one over the past several years.
• IC direct experience is a plus.
• Previous military background is a plus.
• Experience with TACLANEs is a plus.
• For the secondary duties to assist with networking technologies and systems: o Successful past experience providing holistic support to network systems with customer interaction. o A wide and advanced knowledge base of the principles, methods, and techniques supporting IT installations for networking, compute, and security systems. Additionally, understanding of network systems and appliances from CISCO and CISCO operating systems are desired. o Knowledge of routing protocols to include OSPF and BGP o Knowledge of network security principles surrounding Site-to-Site VPN, MACSec, and Anyconnect. o Knowledge of Cisco ISE 3.X and use of AAA principals within networking devices. o Knowledge of Cisco ASA and FTD operating systems. o Experience with CISCOs Network Services Orchestrator (NSO). o Certifications related to networking desired. Preference is for vendor agnostic foundational and advanced certifications. Additional certifications and relevant experience should be obtained within reasonable timelines after hire. Recent references desired to validate work experience ethics.