Standard Job Description

The Work:
Provides support for implementation, troubleshooting and maintenance of Information Technology (IT) systems. Provides Tier 1 (Help Desk) and Tier 2 (Escalation) problem identification, diagnosis and resolution of problems. Supports the escalation and communication of status to agency management and internal customers, as well as the dispatch system and hardware problems and remains involved in the resolution process. Configures and manages UNIX and Windows operating systems and installs/loads operating system software, troubleshoots, maintains integrity and configures network components along with implementing operating systems enhancements to improve reliability and performance

Configuration management
•  Maintains the configuration baseline of the information system. Responsible for the proper configuration management, implementation, and sustainment of compliance with applicable system security controls. The SA directly communicates with the ISSO and ISO in regards to changes on the system as part of the system’s change and Configuration Management Process.
Vulnerability management
•  Performs periodic vulnerability scans in accordance with the Customer’s Continuous Monitoring Program, policy and requirements.
Account Management
•  Performs account management, e.g. establishing, activating, modifying, disabling, and removing accounts.
Information Assurance Vulnerability Management
•   Supports the ISO and ISSO in Information Assurance Vulnerability Management (IAVM). Coordinates with the ISSO and ISO to ensure the current patch status is accurately recorded in enterprise monitoring systems.
Security Authorization POA&Ms
•   Supports the ISO by completing required milestones of the Plan of Action & Milestones (POA&Ms) as directed by the ISO until the weaknesses are mitigated. The SA is responsible for coordinating completion status with the ISSO so their status is reflected within the Source System of Record for Security Authorizations
Ongoing Awareness
•   The SA keeps the rest of the ISST aware of the system’s status. The SA coordinates with all members of the ISST
Identity and Access Control Management
•   Responsible for ensuring IT assets remain compliant with Customer’s Policy. This is especially important for web servers.
Security Access Enforcement
•   Works with the ISSO to ensure individuals holding access to the system have the correct PRIVAC credentials for their level of access and that level of access is current.

Software Assurance
•    Implements best practices when building IT systems in support of the Risk Management Framework. Highly recommended and encouraged that S.A.F.E.R and CS2 are used.
Malware Protection & Incident Response
•    Supports the ISO and ISSO in Incident Prevention by ensuring malware protections are in place and up to date on an information system, in addition to Incident Response by reporting any suspected or actual incidents to the ISSO in accordance with policy.
Event Management
•    Works with their ISSO to ensure new resources (equipment, VMs, nodes, etc.) are available and enabled for auditing. This includes ensuring that updates to inventory information are done correctly and in a timely manner, configuration of resources to log and collect security events necessary is in accordance with Customer policy, and forwarding logs to enterprise audit reduction services.

Basic Qualifications

Ten (10) years of experience as a SA in programs and contracts of similar scope, type, and complexity is required. Bachelor’s degree in a technical discipline from an accredited college or university is required. Five (5) years of additional SA experience may be substituted for a bachelor’s degree

Required Skills:

• Windows System Administration
• Configuration, Vulnerability, Account, Event and IAVM management
• Identity and Access Control
• Work with ISO and ISSO’s
• Security and Access Enforcement

Desired Skills