Senior Information Systems Security Administrator

Job Posting Title:

Senior Information Systems Security Administrator

----

Hiring Department:

Applied Research Laboratories

----

Position Open To:

All Applicants

----

Weekly Scheduled Hours:

40

----

FLSA Status:

Exempt

----

Earliest Start Date:

Immediately

----

Position Duration:

Expected to Continue

----

Location:

PICKLE RESEARCH CAMPUS

----

Job Details:

Purpose

Design, build and administer computer security systems to meet Risk Management Framework requirements for National Security computing environments as defined by the National Institute of Standards and Technology 800-Series, Committee on National Security Systems Instructions, Intelligence Community Directives, and Joint Special Access Programs Implementation Guide for the Advanced Technology Laboratory (ATL).
 

Responsibilities

• Under general supervision, perform computer systems installation, configuration, administration, maintenance, trouble shooting, and end-user support for servers, workstations, laptops, and virtual machines.

• Assist in deployment and maintenance of engineering/scientific software applications on servers and end-user computer systems.

• Develop and maintain system security plans, system configurations, contingency plans, and change management for DoD classified information systems within Advanced Technology Labs.

• Prepare and conduct physical and information system security training for users who require access to classified information systems.

• Participate in identification, deployment, and assessment of system safeguards and program elements during the system development life cycle.

• Perform audits, vulnerability scans, security reviews, and assessments to identify security vulnerabilities in system configurations resulting in recommendations for mitigation.

• Ensure that Plans of Actions and Milestones or remediation plans are in place for vulnerabilities identified during risk assessment.

• Interface with ARL and Government assessors during formal security reviews.

• Document computer system configurations and inventories.

• Other related functions as assigned.

Required Qualifications

• HS/GED

• Four or more years of related experience.

• Working knowledge of commonly used concepts, practices, and procedures used in maintaining a Linux infrastructure:  RedHat or CentOS Linux versions 6, 7 or 8.

• Working knowledge of operating systems to include: Window 10, Red Hat Linux 6, 7 , & 8, and other versions of Linux.

• Knowledge of networking and computer security concepts.

• Candidate will need to obtain a DoD 8570.1 IAT Level II Certification, such as Security+, within 6 months of hire date.

• Excellent problem-solving, written and oral communication skills.

• Excellent organizational abilities and very detail oriented.

• Ability to present technical information in both written and verbal forms.

• Must have a professional demeanor, be punctual and have the ability to work with little or no supervision.

• Able to work under pressure and accept supervision.

• Equivalent combination of relevant education and experience may be substituted as appropriate.

US Citizen. Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information at the level appropriate to the project requirements of the position.

Preferred Qualifications

• Bachelor's Degree: Computer Science, Information Systems Management, or related field.

• 5 or more years experience in Linux systems administration.

• Experience with network and host-based security monitoring.

• Red Hat Certified Engineer (RHCE) or higher official certification for the Red Hat Linux family of operating systems.

• Working knowledge of DoD Risk Management Framework (RMF) CyberSecurity accreditation process.

• Possess a current CompTIA Network+ and/or IAT Level II certification (Security+ or better).

• Experience with DAAPM, NIPSOM, NIST 800-53, and developing and maintaining security process documentation.

• Practical experience implementing DISA STIGs on various operating systems, devices, and applications for security hardening and compliance.

• Experience with vulnerability and compliance scanning tools (SPLUNK, ACAS/NESSUS, SCAP, etc.)

• Knowledge of system configuration management tools such as Puppet.

• Knowledge of shell scripting:  Perl, Python, PHP, Ruby, Bash or similar.

• Knowledge