Net/Sys Admin II - Network/System Administrator

Watermark Risk Management International; Bedford (MA); On-site; USD 75,000 - 110,000; Full time

Benefits offered by this job

100% employer-paid medical insurance

Paid leave

Employee assistance program

Competitive 401k savings plan

Job summary

Watermark Risk Management International seeks a Network/Systems Administrator II to organize, install, and support government networks including LANs/WANs, intranets, and security devices. You will help architect and analyze network models and support DoD SAP/SCI programs.

You will lead ops on day-to-day network management, manage security tools, assist with risk assessments, and develop O&M SOPs. A TS/SCI with polygraph readiness is required.

Qualifications

• 3-5 years related experience.
• Bachelor’s degree in a related area OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).
• Must meet position and certification requirements outlined in DoD Directive 8570.01-M Information Assurance Technician Level 2 within 6 months of hire
• Top Secret Clearance with SCI Eligibility and willingness for polygraph

Responsibilities

• Lead IT ops team on day-to-day management and operations of Networks and implement capabilities vetted through Cybersecurity and RMF governance.
• Manage COTS & GOTS products to collect, display and remediate security and performance metrics.
• Assist during security assessments of servers, network devices, and security appliances.
• Assist with creating O&M checklists and SOPs to maintain services.
• Manage and operate monitoring tools and SIEM to generate alerts and reports.
• Execute cybersecurity operations procedures for day-to-day network management and maintenance.
• Monitor and analyze outputs of cybersecurity tools for incidents and residual risk.
• Support ISSM/ISSO/ISSE in integrating new techniques to improve confidentiality, integrity, and availability.

Skills

Network administration

Windows Server

Active Directory

Linux administration

VMware/Hyper-V

Education

Bachelor's degree in related area

Associate degree + 2 years experience

Tools

LogRhythm

ACAS

Nessus

SCAP

YUM

VMware

Hyper-V

Job description

Come make your mark with Watermark!

FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business. SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements. OUR CORE VALUES drive every action we take as a company. We strive to exhibit PERSPECTIVE, PASSION, COMMUNICATION, INTEGRITY AND ETHICS, and BALANCE in all we do.

COMPETITIVE BENEFITS PACKAGE to address our employees’ physical, mental, emotional, and financial well-being. This includes 100% employer-paid medical insurance, ample paid leave, a free employee assistance program, and a competitive 401k savings plan. At Watermark, our people come first!

Network/Systems Administrator II

The primary function will be to organize, install, and support government organization’s computer systems, including local area networks (LANs), wide area networks (WANs), network segments, intranets, and other data communication systems. This will also include helping architect, design and analyze network models. It will require participation in decisions about buying future hardware or software to upgrade organization’s infrastructure. This position might be called upon to provide technical support to computer users to help solve users’ problems. This position will support activities within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.

In this role you will….

• Lead IT ops team on day-to-day management and operations of Networks and implement capabilities vetted through Cybersecurity, ISSE and higher headquarters to maintain JSIG/RMF Authority to Operate and maintain Continuous Monitoring tools and processes
• Manage COTS & GOTS products to collect, display and remediate a variety of automated system security and system operations/performance functions and metrics.
• Assist during security assessments of servers/network devices/security appliances
• Assist during security assessments with regard to accuracy and efficiency
• Assist with Creation of operational Operations and Maintenance (O&M) checklists to maintain the service (daily, weekly, monthly, yearly O&M checklists); build Tactics, Techniques and Processes (TTPs) and Standard Operating Processes (SOPs) associated with service checklists
• Manage and operate monitoring tools/capabilities with the enterprise security information and event management (SIEM) and create/tailor complex event alarms/rules and summary reports
• Execute cybersecurity operations procedures for day to day network management, operations and maintenance
• Monitor/analyze output of cybersecurity related tools for reportable security incidents and residual risk
• Assist in analyzing technical risk, upon request, of emerging cybersecurity tools and processes
• Work as part of a security incident response team as needed
• Assist ISSM/ISSO/ISSE with the Integration/Development new techniques to improve Confidentiality, Integrity, and Availability for networks/systems operating at various classification levels
• Advanced technical competency in one or more of the following supported platforms: Microsoft Windows Server, Active Directory Red Hat Enterprise Linux servers, MS Hyper-V/VMWare/ESx/Xen Hypervisors, Enterprise networking/firewalls/intrusion detection/prevention systems, forensic analysis/vulnerability assessment, Group Policy management and configuration, Scripting, BMC Footprints, WSUS, , Lumension, Bitlocker, SQL Server 2012, TomCat, IIS, Windows Server 2012r2/2016, Win 10, Red Hat 6.5, Microsoft Office
• Toolkits, SEIMs, Logrhythm, ACAS/Nessus/SCAP, mandatory/role-based access control concepts (e.g. SE Linux extensions to RHEL, PitBull, AppArmor, and Sentris), video teleconferencing/VOIP,Oracle/MS SQL database security, and Apache/IIS Web server security
• Additional duties as assigned

Experience Requirements:

• 3-5 years related experience

Education Requirements:

• Bachelor’s degree in a related area OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years)

Certification Requirements:

• Must meet position and certification requirements outlined in DoD Directive 8570.01-M Information Assurance Technician Level 2 within 6 months of the date of hire
• Prefer an IAT Level III certification (i.e. CASP, CISSP, etc).

Security Clearance Requirements:

• Top Secret Clearance with SCI Eligibility
• Eligibility for access to Special Access Program Information
• Willingness to submit to a Counterintelligence polygraph

Other Requirements:

• Thorough knowledge of Microsoft Windows desktop and server operating systems, Microsoft Exchange Server, and as needed RHEL operating systems administration and associated hardware
• Experience in effective communication and collaborating in a high performance team environment.
• Group Policy design and configuration
• Working knowledge of CISCO network and switching and virtualization technologies
• Working knowledge of virtualization as it applies to users environments, operating systems, and network appliances
• Working knowledge of Local Area Network (LAN) and Wide Area Network (WAN) technologies and data backup technologies
• Working knowledge communication security (COMSEC) policies and integration
• Working knowledge of Risk Management Framework, Common Criteria, and System Security Policy as they relate to assessments and authorization
• Working knowledge and current relevant experience with PL2, PL3, and PL4 network environments/systems
• Working knowledge of WSUS and/or YUM patch deployment methodologies
• Must be familiar with DoD policy as it applies to implementing and executing system and network administration
• Working knowledge of Risk Management Framework and how to apply it to network/information system environments
• Must be able to regularly lift up to 50 lbs.
• May require sedentary work at least 50% of the time
• Reports to a physical location which occasionally requires the ability to traverse between buildings
• Ability to manage stress with a high degree of maturity/professionalism
• Demonstrated critical thinking and leadership skills and the ability to work well with others
• Effective verbal and written communication skills

• All Level I & Level II positions - candidate should possess some Special Access Program (SAP) experience
• All Level III positions -candidate should possess 2+ years of Special Access Program (SAP) experience

Watermark provides salary ranges with job postings in states where it is legally required; any other salary ranges associated with our postings are third party estimates and may not be an accurate reflection of Watermark’s total compensation package. Multiple considerations are taken into account when determining the final salary/hourly rate, including but not limited to, Contract Wage Determination, education and certifications, relevant work experience, related skills and competencies, as well as Federal Government Contract Labor Categories. Central to Watermark’s employment philosophy is the wellbeing of our employees which is why we offer a robust benefits package and wellness program alongside of annual base compensation.

Watermark is an equal opportunity employer. All terms and conditions of employment are established without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, veteran status, or any other protected category under applicable federal, state, and local laws.