IT Operations Manager

Job Description

Leidos has an immediate need for an IT Operations Manager to support our National Oceanic and Atmospheric Administration (NOAA) Cyber Security Center (NCSC) Engineering & Operations team.  As an IT Operations Manager, you will play a valuable part in supporting the NCSC’s mission to protect NOAA networks, computers, programs and data from cyber-attack damage and unauthorized access. This boundary is responsible for approximately 1000 assets including Windows, Linux, and network devices in on-premises data centers. The ideal candidate would have prior experience managing a well-executed IT operations team and transforming culture and processes to improve operational rigor.

Responsibilities Include but are not limited to:

• Implementation of Information Technology Infrastructure Library (ITIL) Framework (IT service lifecycle: service strategy, service design, service transition, service operation and continual service improvement.)
• Recommend and/or support customer strategic planning to modernize the IT infrastructure to enable more mature SOC capabilities.
• Plan and manage tech refresh and modernization projects. 
• Oversee support operations, service requests, maintain activities, and administer networks including hardware, systems software, applications software, patching, updates, maintenance activities, and all configurations.
• Collaborate across multiple disciplines and levels of the organization.
• Lead the coordinating of issue remediation and activities to ensure Service Level Agreement (SLA) for service quality and service availability are met.
• Provide metrics and reports customer to SLAs are met.
• Experience planning and coordinating program activities to include installation and upgrading of hardware and software (utilization of cloud services), programming and systems design, development, or modification of IT networks,
• Manage Staff and their performance to include training, professional development, performance management and evaluation.
• Advise and participate in recruiting and onboarding activities for new staff.
• Manage Staff and their performance.
• Support the ISSO in ensuring operations and security of the environment is compliant with the System Security Plan, agency, and federal mandates to maintain ATO.

Required Experience, Skills, and Education:

• Bachelor’s degree in computer science, Engineering, Information Technology, Cybersecurity, or a related field with 12+ years of prior relevant experience. Experience in lieu of degree may be acceptable.
• Generally has 2+ years of experience supervising or leading teams or projects.
• (ISC)² Certified Information Systems Security Professional (CISSP) Certification or equivalent certification
• Knowledge of security system design tools, methods, and techniques
• Knowledge of key concepts in security management (e.g., Release Management, Patch Management)
• Knowledge of network design processes, to include understanding of security objectives, operational objectives, and trade-offs.
• Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of capabilities and requirements analysis.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Knowledge of basic system, network, and OS hardening techniques.
• Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.
• Skill in identifying systemic security issues based on the analysis of vulnerability and configuration data.
• Skill in troubleshooting and diagnosing cyber defense infrastructure and application anomalies and work through resolution.
• Skill in applying and incorporating information technologies into proposed solutions.
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Skill in recognizing vulnerabilities in security systems. (e.g., vulnerability and compliance scanning).
• Skill in developing and applying security system access controls.
• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• Skill in independently making configuration updates to ensure system availability requirements.
• Skill in system, network, and OS hardening techniques. (e.g., remove unnecess