Counter Insider Threat Engineering Specialist - System Administrator TS/SCI Required

Computer and Network Security Investigators: conduct administrative investigations (i.e. computer misuse, unauthorized disclosures of sensitive or classified information, mishandling sensitive or classified information, etc.); provide computer and network forensic analysis support to SII and Agency investigators; directly support the NGA Cyber Security Operations Cell (CSOC) during responses to computer and network security incidents; and perform other duties as assigned.

Primary Responsibilities

• Provide operational support and performance tuning of all virtual Windows systems and applications; perform daily, weekly, and monthly maintenance tasks
• Manage user accounts and settings
• Administers the virtual server environment using VMWare
• Hardens Windows systems in support of Assessment and Authorization milestones, apply OS updates and patches, and manages the underlying hardware
• Mitigate all vulnerability findings and update the Plan of Action/Mitigation (POA&M)
• Install, configure, and maintain third-party applications
• Manage security and policy through the application of Global Policy Objects (GPO)
• Ensure system redundancy and backups
• Manage additional domain services to include remote access, DNS, Active Directory, WSUS, Windows SCCM, and HBSS.
• Participate in multi-functional teams and manage work through JIRA

Basic Qualifications

All applicants must have an active TS/SCI clearance and agree to undergo a Polygraph examination to be considered for this position.

• Bachelor's degree (computer science, math, science, engineering or other technical discipline desired) or equivalent experience within related field.
• 3 years of experience administering with a Windows Domain environment
• DoD 8570 IAT Level 2 or 3
• Proficient in the installation and sustainment of Windows Domains and systems
• Experience maintaining and updating server hardware

Years of experience: Minimum 5 years of technical experience working in a client/server environment. The applicant should have knowledge in the proper use of computer forensics and security compliance tools, and experience conducting network based incident investigations. The applicant should have experience with Guidance Software toolsets to include EnCase Forensics and EnCase Enterprise, and have demonstrated understanding of client/server architecture and TCP/IP protocols. The applicant should have knowledge of modern Windows Server platforms and desktop operating systems. The applicant should have experience maintaining "chain of custody" by following standard rules of digital evidence. The candidate should have an in-depth working knowledge in DOD and IC intelligence regulations, be familiar with intelligence oversight principles, must possess superior writing and briefing skills, and be capable of providing polished analysis documentation.

Preferred Qualifications:

• Scripting experience (for task automation, data transfer, etc.)
• Experience with VMWare and maintaining virtualized systems
• Experience configuring and provisioning SAN storage
• Experience applying STIGS and hardening Windows systems

This position has a target range for compensation of 91,000 - 101,000. This is a firm fixed price contract and does not allow for negotiations outside of this target range