Network Engineer - AMERICAN CYBER SYSTEMS INC
SALT LAKE CITY, UT
About the Job
It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business.
SUMMARY
The WDTC Data Sciences Division (DSD) is responsible for providing Information System (IS) services and Information Technology (IT) services to WDTC Divisions and Department of Defense (DOD) customers. DSD Systems Architecture Branch is comprised of Cybersecurity team, System Administration team, Network Administration team, Operational Support team and Software Development team. All contractor IT staff are part of DOD Cyber Workforce Framework (DCWF). This contract is to provide IS Services; to configure IT in accordance with (IAW) Department of Defense (DOD) Secure Recommendation Guides (SRGs) and Secure Technical Implementation Guides (STIGs). Operate IAW DOD, US Army and WDTC Security Policies and Plans. Document IAW DOD, US Army and WDTC Configuration Control Board (CCB) requirements. Test, troubleshoot and maintain IS operations for DPG/WDTC. Monitor IS and IT implementation, configuration, and cybersecurity requirements. Primary place of performance is Dugway Proving Groun d, UT. IS and IT services may also be required for DPG alternate locations in SLC and along the Wasatch Front.
The Network Engineer works to serve the needs of the DPG/WDTC data science support contract with a required skillset of SNMP, Cisco, and NAC.
ESSENTIAL REQUIREMENTS
Current/Valid Driver's License
IAT-IIMust be able to pass a customer background check for access to facilities, equipment and property. This Homeland Security Investigation requires U.S. Citizenship.
Must have a minimum of one (1) qualifying baseline certification: GSEC, Security+ Ce, SSCP, CCNA-Security, CISSP (or Associate), CISA, GCIH, GCED, or CASP CE
Must have a minimum of one (1) qualifying computing environment below or other relevant computing environment certification(s):
Cisco Certified Network
Administrator (CCNA) (Any track)
Cisco Certified Network
Professional (CCNP) (Any track)
Cisco Certified Internetwork Expert
(CCIE) (Any track)
Cisco Certified Architect (CCAr)
McAfee Certified Product Specialist (MCPS)
McAfee Certified Assessment Specialist
(MCAS)
ForeScout Certified
Administrator (FSCA)
ForeScout Advanced
Administrator (FSAA)
ForeScout Certified
Engineer (FSCE)
Network+
KEY DUTIES AND RESPONSIBILITIES
Essential Duties and responsibilities include the following. Other duties may be assigned.
Oversees network administration and network management operations for DPG.
Logs all requests for assistance and all deficiencies upon discovery, and track solutions, in the Government approved trouble ticketing system. Complete monthly a minimum of 80% of all change/trouble tickets in each trouble ticket priority (Low, Medium or High). Low is defined as assigned within 24 hours; completed within 48 hours of being assigned. Medium is assigned within 4 hours; completed within 8 hours of being assigned. High is assigned within 1 hour; completed within 2 hours of being assigned. A status update for each open ticket will be annotated in the ticket database upon a change of status, or if no change of status occurs, monthly. Include an explanation of ticket status for tickets remaining open from one month to the next in the contractor's monthly status report. Deviation from required timelines shall be coordinated with and approved by Contracting Officer's Representative (COR). The Government estimates a total of approximately 175 - 225 tickets per year.
Monitors system traffic and rate of data flows, manage and plan system capacity. As potentia
l system performance improvements become evident, identify and recommend implementation to the Chief Information Officer (CIO). If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Provides monitoring, operations, aintenance, troubleshooting and repair of routers, switches, Advanced Security Appliance (ASA) and Wide Area Network (WAN) Optimizers. Tools provided by the Government include, but are not limited to: Solar Winds, Forescout, McAfee, and Websense. If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Monitors and evaluates systems to include policies and procedures to protect clients, networks, data systems and databases from unauthorized activity. Make recommendations for improvements to the CIO. If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Employs hardware and software tools to install, monitor and direct information protection and defensive measures and provide network security. Tools provided by the Government include, but are not limited to: Solar Winds, Forescout, McAfee, and Websense. If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Manages implementation and project installation and ensure architecture, configuration, and integration conformity. Supported devices include Cisco routers, Cisco Switches, Cisco ASAs, Cisco Access Points, Forescout Network Access control, and the McAfee Intrusion prevention system.
Coordinates with Network Enterprise Center (NEC) on cable and fiber plant.
Installs, configures, monitors, administers and maintains wired/wireless network equipment, and network management systems. This will include IT support of WDTC field tests.
Troubleshoots problems with network nodes to include computers, servers, printers, digital senders, hubs, switches and routers utilizing network analyzers and troubleshooting software.
Installs, configures, monitors, and administers intrusion detection devices within the Enterprise, and Dynamic Host Configuration Protocol (DHCP) and managed Internet Protocol (IP) addresses, to include all Hardware/Software (HW/SW). Immediately report any suspected intrusions or violations to the Information Systems Security Manager (ISSM) and the CIO.
On a monthly basis, inspects the router/switch audit logs for suspected intrusions or violations. If suspected intrusions or violations occurred, prepare a summary report, and submit to the ISSM and CIO by the 4th duty day of the following month. Contractor format for the report is acceptable. This information will also be included in the monthly status report submitted to the COR.
Creates, configures, and maintains tunnels and certifications for all personnel needing access for Virtual Private Network (VPN). There are approximately 125 - 150 VPN users.
Configures and maintains routers and Access Control Lists (ACL) ensuring appropriate network access to authorized users and processes.
Operates and maintains DPG Defense Research and Engineering Network/Secure Defense Research and Engineering Network (DREN/SDREN) boundary devices to include existing and new firewall appliances, proxy appliances, and interfaces to routers/switches connecting the firewall appliances to the internal and external network operations centers.
Creates or modifies to keep current, and manage network documentation, including configurations and backup procedures.
Performs monthly audits of system configurations and communicate potential security issues and incidents to the ISSM and CIO within 1 duty day of discovery.
Configures and maintains system installation records, files, and indexes.
Configures and maintains
monitoring, operations and maintenance of all base web proxy and caching servers.
Upon the discovery of any malicious traffic and any unplanned or malicious changes to the network, implements authorized controls to identify and prevent any unauthorized activity, and return the network to a secure and authorized state. Notify the ISSM and CIO of the circumstances as soon as possible.
Installs, configu
We're committed to bringing passion and customer focus to the business.
SUMMARY
The WDTC Data Sciences Division (DSD) is responsible for providing Information System (IS) services and Information Technology (IT) services to WDTC Divisions and Department of Defense (DOD) customers. DSD Systems Architecture Branch is comprised of Cybersecurity team, System Administration team, Network Administration team, Operational Support team and Software Development team. All contractor IT staff are part of DOD Cyber Workforce Framework (DCWF). This contract is to provide IS Services; to configure IT in accordance with (IAW) Department of Defense (DOD) Secure Recommendation Guides (SRGs) and Secure Technical Implementation Guides (STIGs). Operate IAW DOD, US Army and WDTC Security Policies and Plans. Document IAW DOD, US Army and WDTC Configuration Control Board (CCB) requirements. Test, troubleshoot and maintain IS operations for DPG/WDTC. Monitor IS and IT implementation, configuration, and cybersecurity requirements. Primary place of performance is Dugway Proving Groun d, UT. IS and IT services may also be required for DPG alternate locations in SLC and along the Wasatch Front.
The Network Engineer works to serve the needs of the DPG/WDTC data science support contract with a required skillset of SNMP, Cisco, and NAC.
ESSENTIAL REQUIREMENTS
Current/Valid Driver's License
IAT-IIMust be able to pass a customer background check for access to facilities, equipment and property. This Homeland Security Investigation requires U.S. Citizenship.
Must have a minimum of one (1) qualifying baseline certification: GSEC, Security+ Ce, SSCP, CCNA-Security, CISSP (or Associate), CISA, GCIH, GCED, or CASP CE
Must have a minimum of one (1) qualifying computing environment below or other relevant computing environment certification(s):
Cisco Certified Network
Administrator (CCNA) (Any track)
Cisco Certified Network
Professional (CCNP) (Any track)
Cisco Certified Internetwork Expert
(CCIE) (Any track)
Cisco Certified Architect (CCAr)
McAfee Certified Product Specialist (MCPS)
McAfee Certified Assessment Specialist
(MCAS)
ForeScout Certified
Administrator (FSCA)
ForeScout Advanced
Administrator (FSAA)
ForeScout Certified
Engineer (FSCE)
Network+
KEY DUTIES AND RESPONSIBILITIES
Essential Duties and responsibilities include the following. Other duties may be assigned.
Oversees network administration and network management operations for DPG.
Logs all requests for assistance and all deficiencies upon discovery, and track solutions, in the Government approved trouble ticketing system. Complete monthly a minimum of 80% of all change/trouble tickets in each trouble ticket priority (Low, Medium or High). Low is defined as assigned within 24 hours; completed within 48 hours of being assigned. Medium is assigned within 4 hours; completed within 8 hours of being assigned. High is assigned within 1 hour; completed within 2 hours of being assigned. A status update for each open ticket will be annotated in the ticket database upon a change of status, or if no change of status occurs, monthly. Include an explanation of ticket status for tickets remaining open from one month to the next in the contractor's monthly status report. Deviation from required timelines shall be coordinated with and approved by Contracting Officer's Representative (COR). The Government estimates a total of approximately 175 - 225 tickets per year.
Monitors system traffic and rate of data flows, manage and plan system capacity. As potentia
l system performance improvements become evident, identify and recommend implementation to the Chief Information Officer (CIO). If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Provides monitoring, operations, aintenance, troubleshooting and repair of routers, switches, Advanced Security Appliance (ASA) and Wide Area Network (WAN) Optimizers. Tools provided by the Government include, but are not limited to: Solar Winds, Forescout, McAfee, and Websense. If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Monitors and evaluates systems to include policies and procedures to protect clients, networks, data systems and databases from unauthorized activity. Make recommendations for improvements to the CIO. If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Employs hardware and software tools to install, monitor and direct information protection and defensive measures and provide network security. Tools provided by the Government include, but are not limited to: Solar Winds, Forescout, McAfee, and Websense. If monitoring identifies a deficiency in the existing system, the Contractor shall perform troubleshooting and repair.
Manages implementation and project installation and ensure architecture, configuration, and integration conformity. Supported devices include Cisco routers, Cisco Switches, Cisco ASAs, Cisco Access Points, Forescout Network Access control, and the McAfee Intrusion prevention system.
Coordinates with Network Enterprise Center (NEC) on cable and fiber plant.
Installs, configures, monitors, administers and maintains wired/wireless network equipment, and network management systems. This will include IT support of WDTC field tests.
Troubleshoots problems with network nodes to include computers, servers, printers, digital senders, hubs, switches and routers utilizing network analyzers and troubleshooting software.
Installs, configures, monitors, and administers intrusion detection devices within the Enterprise, and Dynamic Host Configuration Protocol (DHCP) and managed Internet Protocol (IP) addresses, to include all Hardware/Software (HW/SW). Immediately report any suspected intrusions or violations to the Information Systems Security Manager (ISSM) and the CIO.
On a monthly basis, inspects the router/switch audit logs for suspected intrusions or violations. If suspected intrusions or violations occurred, prepare a summary report, and submit to the ISSM and CIO by the 4th duty day of the following month. Contractor format for the report is acceptable. This information will also be included in the monthly status report submitted to the COR.
Creates, configures, and maintains tunnels and certifications for all personnel needing access for Virtual Private Network (VPN). There are approximately 125 - 150 VPN users.
Configures and maintains routers and Access Control Lists (ACL) ensuring appropriate network access to authorized users and processes.
Operates and maintains DPG Defense Research and Engineering Network/Secure Defense Research and Engineering Network (DREN/SDREN) boundary devices to include existing and new firewall appliances, proxy appliances, and interfaces to routers/switches connecting the firewall appliances to the internal and external network operations centers.
Creates or modifies to keep current, and manage network documentation, including configurations and backup procedures.
Performs monthly audits of system configurations and communicate potential security issues and incidents to the ISSM and CIO within 1 duty day of discovery.
Configures and maintains system installation records, files, and indexes.
Configures and maintains
monitoring, operations and maintenance of all base web proxy and caching servers.
Upon the discovery of any malicious traffic and any unplanned or malicious changes to the network, implements authorized controls to identify and prevent any unauthorized activity, and return the network to a secure and authorized state. Notify the ISSM and CIO of the circumstances as soon as possible.
Installs, configu
Source : AMERICAN CYBER SYSTEMS INC
