Virtualization Engineer (VMWare/VDI) with Security Clearance

---

Job description

SMS is seeking a Virtualization Engineer (VMWare/VDI) to support all aspects of Air Force Intranet Control Support (AFINC) enterprise operations, to include technical planning, design, development, integration, assessment, and requirements analysis, as well as future capability needs (near and long-term) to drive the design and maintenance an IT Enterprise. Responsibilities
A Subject Matter Expert that has experience in supporting and designing the VMware ESX infrastructure, systems and network services in a data center environment. Virtualization Engineers must be able to exhibit strong communication, collaboration, as well as time and project management skills. This position focuses on customer-facing production systems infrastructure. - Lead the design, implementation, and management of VMware virtual environment infrastructure with a key focused concentration on storage technologies, Fibre Channel Switch (FCS) fabric and Out-of-Band Management technologies (e.g. iLO, iDRAC, IMM, CIMC)
- Deploy and oversee Enterprise of Things (EoT) appliances such as iLO Amplifier Pack for HPe OOBM nodes; CMCNE for FCS config, Unisphere Central for EMC SAN management, F5 BIG-IQ for BIG-IP devices, KVMs.
- Develop and maintain technical documentation including design documents, standard operating procedures, best practices, checklists, diagrams, inventory, system security plans (SSP), DIDR, and routine deliverables.
- Participate in the development and implementation of IT policies, procedures, and standards.
- Stay up to date with the latest VMware, virtual, OOBM, and storage technologies and trends.
- Provide input and feedback recommendations for improvements, features, and enhancements for the IT Enterprise.
- Administratively manage a team assigning tasks, providing feedback, and ensuring that team members are meeting project deadlines.
- Provide periodic report of system status to include uptime, incidents and problems, and open issues.
- Audit, remediate, maintain, and collect related document security artifacts for Defense Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIG) and DoD Security Requirements Guide (SRG) checklists applicable for Non-classified or Secret Internet Protocol (IP) Router Network (NIPRNet, SIPRNet) environment systems for OS, virtual machines (VMs), storage, applications, database or web target endpoints utilizing vendor procedures, best practices, or hardening security guidance
- Evaluate scan report data from ACAS Tenable.SC or Tenable Nessus Scanner, Evaluate-STIG, Security Content Automation Protocol (SCAP) Compliance Checker benchmarks; participate in the review and response phases of the Vulnerability Management Security (VMS) life cycle.
- Primary support provisional installation, configuration, operation, and maintenance of server systems hardware (Dell PowerEdge, HPe ProLiant, etc.), and utilize related infrastructure devices such as KVMs, out-of-band management (OOBM) tools like integrated lights-out (ILO), iLO Amplifier, integrated Dell Remote Access Controller (iDRAC) or Open Managed Enterprise (OME) appliances.
- Utilize and/or implement technical solutions based on defined mission scope and using approved software tools such as PowerShell, SecureCRT, Remote Desktop Protocol (RDP), NotePad , etc.
- Ensures networks receive periodic updates from AFCYBER-released software patches, updates, and upgrades via Time Compliance Technical Orders (TCTO), Time Compliance Network Orders (TCNO), Maintenance Tasking Order (MTO) and Notices to Airman (NOTAMs)
- Assist AF Cyber personnel with Information Assurance Vulnerability Management (IAVM) programs, directives, cybersecurity toolsets, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support, RMF/ATO artifacts, plan of actions milestones (POAMs)
- Support customer requirements in a 24/7/365 IT enterprise operations environment.
- Troubleshoot technology issues, using various internal and external resources.
- Document technical problems, resolutions, and processes for assigned tasks and projects.
- Participate in testing and evaluation of new technologies to ensure compatibility and functionality. Qualifications
- 8+ years of experience in designing, implementing, and managing virtual and/or storage infrastructure.
- Expert knowledge of VMware vSphere data center, vCenter Server Appliance (vCSA), ESXi hypervisor, PhotonOS, vSphere Update Manager (vUM) or Lifecyle Manager (vLM), VM Hardware version, VMTools, VM Remote Console (VMRC), High Availability (HA), and Distributed Resource Scheduler (DRS)
- Skilled with datastores, OVFTool, RVTools, VM templates, VM snapshots, content library subscriptions, cloning, role-based access controlled (RBAC) groups, privileges, and enterprise tier 2 support for VM system owners.
- Strong knowledge using Storage Area Networks (SAN), Disk Array Enclosures (DAEs), Fiber Channel fabric OS, Ethernet/KVM switch port technologies, vSphere Standard Switches (vSS) or Distributed Switches (vDS)
- Aptitude to test and interact with new software technologies in environment with 3rd party monitoring tools to track overall health and availability of apps: Splunk Enterprise, SolarWinds Orion platform, especially Virtual Manager (VMan), Trellix/McAfee Endpoint Security Solutions (ESS) for host IDS/IPS, Microsoft Endpoint Configuration Manager (MECM), WSUS, ForeScout Comply-to-Connect (C2C), NAGIOS, Veritas NetBackup, etc.
- Experience with server rack mounted hardware (preferably HPE or Dell), software, firmware, drivers, BIOS/UEFI, Trusted Platform Modules (TPM) devices, FIPS 140-2 chipsets, secure boot
- Strong problem-solving and troubleshooting skills, with the ability to resolve complex technical issues related to VMware and storage technologies.
- Strong knowledge of scripting with PowerShell, VMware PowerCLI, Bash.
- Expert knowledge of vSphere products and abilities, Out-of-Band Products, and SAN access and capabilities.
- Applicant must possess refined critical thinking skills, should be a self-starter, may direct the activities of other team members, diplomatic, multi-task capable, adaptive to a dynamic environment, dependable and reliable. - Prior experience in a government consulting services environment is required. - Position may require up to 20% travel. Education/Certification(s):
- Associate or Bachelor's degree in a Business Management or MIS related field. Advanced degree is preferred.
- Requires a DoD 8570.01-M Information Assurance Technical (IAT) Level II certification: CompTIA Security+ CE or higher.
- Requires VMware Certified Professional (VCP)- Data center Virtualization or any VMWare Certified Advanced Professional Certification Clearance:
Active DoD Secret required SMS is a dynamic systems integrator established in 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers' missions for more than 47 years. Our ability to hire and retain quality people in a rapidly evolving IT market is proven through our employee retention rate averaging over 3 years. At SMS, we place a high value on quality of service, customer satisfaction, and best-of-breed policies and practices, resulting in CMMI Level 3 certification and ISO registrations including 9001:2015, 20000-1:2018, and ISO/IEC 27001:2013. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States.
SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

<!– job description page –>