Cybersecurity System Administrator

Idaho National Laboratory; Idaho Falls (ID); On-site; USD 57,000 - 112,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company match

Paid time off

Tuition assistance

Relocation

Benefit eligibility subject to factors

Job summary

Idaho National Laboratory is seeking a cybersecurity professional to identify, prioritize, and protect critical cyber defense infrastructure applying defense-in-depth principles. You will develop and maintain technical controls, analyze policies for regulatory compliance, and coordinate threat assessments with intelligence analysts.

The role includes risk and vulnerability assessments, hardware testing, and administration of VPN devices and cyber defense systems.

Qualifications

• Bachelor’s degree required and security certifications or experience as applicable.
• Experience with RMF/SA&A and government/defense regulations is expected.
• Experience assessing cyber defense policies and configurations and ensuring regulatory compliance.

Responsibilities

• Assist in protecting cyber defense infrastructure and resources using defense-in-depth concepts.
• Develop and maintain cyber security controls and operational systems.
• Analyze policies and configurations for regulatory compliance and correlate threat data with analysts.
• Conduct risk and vulnerability assessments of networks, enclaves, and applications.
• Develop cyber security related improvement projects.
• Build, install, configure, test cyber defense hardware and VPN devices.
• Administer test beds, evaluate protections, and manage access controls and rules.
• Update rules/signatures for IDS/IPS, antivirus, and content blacklists.

Skills

Cyber defense

RMF/SA&A

Threat assessment

Vulnerability assessment

Network security

Firewall/IPS

VPN administration

Incident response

Education

Bachelor’s degree

Related technical field preferred

Tools

Splunk

Firewall

Job description

Job Description

• Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources. Employ approved defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, security robustness).
• Develop, implement, and maintain cyber security technical controls and operational systems.
• Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives. Coordinate with intelligence analysts to correlate threat assessment data.
• Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM], TEMPEST countermeasure reviews). Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
• Develop and conduct cyber security related human performance improvement projects.
• Build, install, configure, and test dedicated cyber defense hardware.
• Perform system administration on specialized cyber defense applications and systems (e.g., antivirus, audit, and remediation) or Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup, and restoration.
• Administer test bed(s), and test and evaluate applications, hardware infrastructure, rules/signatures, access controls, and configurations of platforms managed by service provider(s).
• Create, edit, and manage network access control lists on specialized cyber defense systems (e.g., firewalls and intrusion prevention systems). Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
• Coordinate with Cyber Defense Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, antivirus, and content blacklists) for specialized cyber defense applications.
• Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Follow software and systems engineering life cycle standards and processes. Develop applicable metrics and monitor results.
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records.
• Other duties as assigned.

Essential Job Functions and Responsibilities: (Knowledge, skills, and behaviors required for this position.)

• Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources. Employ approved defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, security robustness).
• Develop, implement, and maintain cyber security technical controls and operational systems.
• Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives. Coordinate with intelligence analysts to correlate threat assessment data.
• Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM], TEMPEST countermeasure reviews). Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
• Develop and conduct cyber security related human performance improvement projects.
• Build, install, configure, and test dedicated cyber defense hardware.
• Perform system administration on specialized cyber defense applications and systems (e.g., antivirus, audit, and remediation) or Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup, and restoration.
• Administer test bed(s), and test and evaluate applications, hardware infrastructure, rules/signatures, access controls, and configurations of platforms managed by service provider(s).
• Create, edit, and manage network access control lists on specialized cyber defense systems (e.g., firewalls and intrusion prevention systems). Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
• Coordinate with Cyber Defense Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, antivirus, and content blacklists) for specialized cyber defense applications.
• Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Follow software and systems engineering life cycle standards and processes. Develop applicable metrics and monitor results.
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records.
• Other duties as assigned.

Required

• Bachelor’s degree from an accredited institution.
• Level 1: High School and 6 years of relevant experience or Bachelors Degree Level 2: High School and 8 years of relevant experience or Bachelors Degree and 2 years of experience or Masters Degree
• Experience commensurate with level.
• Must be a US Citizen and have the ability to obtain and maintain a DOE “L” or “Q” clearance. May be required to obtain and maintain additional security clearance level of Human Reliability Program (HRP) certification.

Preferred

• Bachelor's degree in a related technical field including computer science, computer engineering.
• Experience working with AI, Security +, and Splunk general.
• Direct technical experience working in Enhanced Security Environments.

Physical Requirements

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office and laboratory environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires the operation of job-related equipment and driving a vehicle. The employee must occasionally lift and/or move up to 50 pounds without assistance. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with the public is required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Job Information

• The pay range for this position is Level 1 $57,444-$112,068 / Level 2 $66,504-$136,356 . At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.
• A preferred internal candidate has been identified for this opening. However, all qualified internal candidates who are interested in the role are welcome to apply and will be considered in accordance with the laboratory's hiring process.

Working Conditions

Incumbent of the position performs in a typical office setting with appropriate climate controls with laboratory field work subjected to variable weather. The noise level is generally moderate, with some exposure to high noises (>85 dB). Periodic travel required in normal course of job performance. Position may include exposure to mechanical, electrical, pressure, temperature, and other potential hazards. Periodic safety training is necessary. Position may occasionally be required to work special shifts or weekends in support of programs. Incumbents will work shifts greater than 8 hours/day and may work alone.

Security And Privacy Language

This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206.1A. Position must complete initial and annual role-specific training as required. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non-compliance may result in sanctions.

LevelDefiners

EX1 – Entry

• Knowledge: Limited use and/or application of professional principles, theories, and concepts to well defined assignments of limited scope where causal relationships can be identified, and precedence exists.
• Problem Solving: Develops solutions to routine problems of limited scope. Follow specific, detailed work instructions. Works on assignments that are initially routine in nature, requiring limited judgment and decision making.
• Discretion and Latitude: Work is closely supervised. Follows specific, detailed work instructions. Works on assignments that are initially routine.
• Impacts: Contributes to completion of routine tasks. Failure to achieve results can normally be overcome without serious effect on schedules and programs.
• Liaison: Contacts are primarily with immediate supervisor, leaders, and/or other professionals in the section or group.
• Education/Experience: Bachelor’s and 0 years of experience.

EX2 – Intermediate

• Knowledge: Developing professional expertise. Applies company policies and procedures to resolve a variety of issues. Frequent use and application of standards, principles, theories, concepts, and techniques.
• Problem Solving: Provides solutions to a variety of problems of moderate scope and complexity. Exercises judgment within defined procedures and practices to determine appropriate action.
• Discretion and Latitude: Works under general supervision on routine work, detailed instructions on new projects/assignments. Follows established procedures. Work is reviewed for soundness of judgment, overall adequacy, and accuracy.
• Impacts: Contributes to completion of milestones associated with specific work assignments. Failure to achieve results or erroneous decisions or recommendations may cause delays in program work.
• Liaison: Primarily internal company contacts. Infrequent interorganizational and outside customer contacts on routine matters.
• Education/Experience: Bachelor’s and 2 years of experience. Master’s and 0. PhD and 0.

About Us

INL is a science-based, applied engineering national laboratory dedicated to supporting the U.S. Department of Energy's mission in nuclear energy research, science, and national defense. With more than 6,300 scientists, researchers, and support staff, the laboratory works with national and international governments, universities and industry partners to change the world's energy future and secure our nation's critical infrastructure.

Benefits and Relocation

• Medical, Dental, Vision, and Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match (regular positions) or self-contribute access (postdoctoral positions)
• Paid time off (personal leave)
• Employee Education Program (tuition assistance for eligible positions)
• Comprehensive Relocation Package
• Benefit eligibility subject to multiple factors, including employment status and position classification.

At this time, BEA will not sponsor any H1-B visas obtained outside of the United States of America (U.S.A.), including consular visas.

INL Mission

Our mission is to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure.

INL Vision

Our vision is to change the world's energy future and secure our nation's critical infrastructure.

Selective Service Requirements

To be eligible for employment at INL males born after December 31, 1959 must have registered with the Selective Service System (SSS). For more information see www.sss.gov .

Equal Employment Opportunity

Idaho National Laboratory (INL) is an Equal Employment Opportunity (EEO) employer. It is the policy of INL to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Reasonable Accommodation

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at [e-mail] to request accommodation.

Other Information

When applying to positions please provide a resume and answer all questions on the following screens. Applicants, who fail to provide a resume or answer the questions, may be deemed ineligible for consideration.

INL does not accept resumes from third party vendors unsolicited.