Systems Engineers with Security Clearance

---

Job description

Systems Engineers Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: Secret Employee Type: Regular Percentage of Travel Required: Up to 25% Type of Travel: Continental US What You'll Get to Do CACI has an exciting and immediate opportunity for the following Systems Engineering specialties to support the USAF Network Operations Security Center (NOSC). Boundary Systems Engineer
Enterprise Patch Management Systems Engineer
Directory Services System Engineer
Enterprise Messaging Systems Engineer
Storage and Virtualization Systems Engineer
These positions work at the customer on-site Tier 3 support location at Shaw Air Force Base in South Carolina. Shaw AFB is conveniently located. A 2-hour drive to the north gets you to Charlotte, NC, to the east is Myrtle Beach, and Charleston, SC is to the south. You'll have access to big city excitement, a quiet beach walk or small town Southern hospitality. If you want to use your advanced IT skills to support national security then this is the job for you. You'll get to use leading edge technology as you sustain and defend the networks our Air Force warfighters use in the CENTCOM theater. From a career perspective, this program provides opportunity for upward and lateral mobility, by moving up to positions of increased responsibility or moving laterally across work centers to apply your expertise in other disciplines. More About the Roles In this role you will: Boundary Systems Engineer Operate and manage the enterprise boundary management server, ensuring it is functional with duplicate configuration at COOP location.
Analyze firewall reports, logs, and other metrics and identify sub-standard network performance, and engineer and implement solutions to counter the identified anomalies.
Operate security devices remotely and locally.
Create custom UNIX scripts to meet task specific requirements.
Research, document, and track outages, trouble calls, and network intrusions to resolution.
Use firewall toolsets to analyze and report on the health of local and deployed firewalls.
Perform enterprise level firewall fault isolation and resolution; troubleshoot firewall issues on Open BSD Operating System.
Configure and maintain DNS and BIND domain name services and manage the full range of the firewall features at an Enterprise level.
Provide On-the-job training to local help desk personnel and engineers on firewall components and solutions.
Implement backup procedures and walk remote users through backup and restoration actions.
Assist with new security device implementations.
Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project-based timeline.
Manage proxy servers, email gateways, and perform external DNS management.
Provide guidance and remote administration of Firewalls and the Enterprise Manager. Enterprise Patch Management Systems Engineer Ensure correct installation, configuration, use and maintenance of Microsoft Systems Center Configuration Manager (SCCM) platform.
Package, test and deploy automated desktop applications installations and patches using the SCCM framework.
Develop user guidance documents and installation instructions.
Test and validate IT systems security patches and hot fixes.
Support the distribution of security patches using Microsoft Systems Center Configuration Manager (SCCM) and Microsoft Security Baseline Analyzer (MSBA).
Provide configuration management for the SCCM distributed enterprise architecture. Provide support to remote local users.
Use data replication software to keep sites up to date.
Track package deployment and provide status updates using on-line trouble ticketing (Remedy) systems.
Develop reports and trend analysis documentation.
Create collections and advertisements for mass software/patch distribution.
Provide support for escalated tickets from Operations Floor.
Provide support to NOSC Information Assurance Vulnerability Management section.
Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project based timeline.
Maintain enterprise Data-At-Rest (DAR) solutions.
Maintain Host Based Security System (HBSS) and all related DISA mandated point products.
Help document the current patch-level of all PCs, servers, and network devices identified in IAVA and TCNOs.
Develop, design, create, write, and modify SCCM queries, collections, packages, and advertisements to distribute enterprise level security patches, hot-fixes, and other software as required.
Work with the Web Development team to maintain the SCCM web page.
Coordinate the dissemination of security vulnerabilities using the Communications Tasking Order (CTO) and/or Notice to Airmen (NOTAM) to deployed sites. Directory Services System Engineer Provide support, implement, and design services for Microsoft Active Directory (AD) and Windows-based systems across the enterprise, including directory and identity management solutions.
Perform daily systems monitoring, verifying the integrity and availability of all systems and key processes.
Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter systems.
Maintain a shared Global Address List (GAL) topology for service components to include federation with external agencies for import/export of contacts.
Monitor the transfer of Global Address information between the USAFCENT enterprise and the AF enterprise.
Manage internal Domain Name Service (DNS) for active directory domains.
Manage Dynamic Host Configuration Protocol (DHCP) for active directory domains.
Develop reports and trend analysis documentation on system use.
Perform PowerShell scripting for AD administration.
Analyze metrics and recognize substandard network performance.
Develop reports and trend analysis documentation on bandwidth and network security incidents. Enterprise Messaging Systems Engineer Provide support for Microsoft Exchange (2013 and later).
Manage e-mail capability of using signed and encrypted technology associated with encryption devices High Grade Service (HGS) and Public Key Infrastructure (PKI) Medium Grade Service (MGS).
Support e-mail capability via enterprise mobile management software for mobile devices (Blackberry, Apple, or Android devices)
Maintain Microsoft Communicator technologies (Office Communication Server or Lync) providing a collaborative tool solution for users.
Develop and maintain system concept of operations (CONOPS), engineering plans, and user guides for Enterprise Messaging Service.
Analyze system metrics to recognize substandard performance.
Develop reports and trend analysis documentation on system use to include account utilization.
Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project-based timeline.
Coordinate with firewall administrators to ensure proper access control lists (ACL) and Internet Protocol (IP) filters are in place for network protection and security. Storage and Virtualization Systems Engineer Install, configure, test, deploy and maintain hosted VMware products, Virtual Storage (Access Control and VMFS data stores) and ESXi Servers.
Maintain enterprise backups.
Develop reports and trend analysis documentation.
Create and manage network Managing Tasks, Events and Alarms.
Use advanced technical writing skills to develop and update IT systems concept of operations and engineering plans.
Provide oral and written briefs, presentations, and professional reports to Government senior leaders and decision makers.
Maintain and troubleshoot enterprise trouble ticketing system.
Assist with enterprise database SQL tasks (i.e., DISA STIGs).
Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project based timeline.
Coordinate and provide direction to users on the implementation of PKI at the user level. All Positions: You will also be required to: Provide on-call support after hours, on weekends and holidays.
Deploy/travel to OCONUS locations in the USCENTCOM AOR to support operations, projects, and training as required (up to 25%).
Travel to CONUS locations as required. You'll Bring These Qualifications All Specialties: Associates in related field and 3 or more years' relevant IT experience OR 5 or more years' of relevant IT experience.
Ability to obtain an Interim Secret clearance prior to start date.
DoD 8570 IAT II Baseline Certification (Security+ CE, CCNA-Sec or equivalent). Additional Requirements by Specialty: Boundary Systems Engineer Relevant experience
Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server 2012 using server images; Experience with implementation of storage solutions, window containers, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments.
Firewall, Unix/Linux experience
Completion of additional Professional Certifications.
Network+ or CCNA
Unix/Linux . click apply for full job details

<!– job description page –>