JOB SUMMARY: We are looking for a highly technical Systems Infrastructure Solutions Engineer to provide hands-on support for the NGA Infrastructure areas which include but not limited to identity management, servers, virtualization storage, cloud computing, enterprise security compliance, System monitoring, and backups/recovery. Candidate MUST be flexible and available when after-hours remote and/or offsite support for emergency break-fix is required.

The right candidate will serve as technical lead on enterprise compliance, interprets security compliance reports, develops solutions to security findings, ensures systems baseline compliance, serves as subject matter expert in case of complex compliance issues for endpoint computing services supported by Tier 3. Responding to and mitigating security findings resulting from internal/external security audits.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Provide day to day maintenance of servers in a hybrid environment which consists of on-premises, physical, virtual, and cloud-based systems. This maintenance includes but is not limited to admin support, patching, and troubleshooting of the systems environments.
• Perform system and application upgrades as new major and minor releases become available.
• Responsible for administration of all aspects of virtual server infrastructure.
• Administer and manage the organization’s storage infrastructure, including on-premises storage arrays, Azure storage, and AWS S3.
• Responsible for all the technology infrastructure supporting Tier 3 services to include but not limited to Ivanti, SCCM, Intune, SysTrack, Absolute Software, Active Directory, ADFS, Microsoft Entra Connect, IIS Web and Radius Systems Administration, Applications Single Sign On (SSO) using Active Directory authentication and other integrations.
• Manage and Support Gallery’s Microsoft Office 365 and Azure Cloud Environments.
• Maintain Password Management System like CyberArk.
• Maintain Servers and Endpoint Point Patching Platforms (WSUS and Ivanti)
• Coordinate and/or participate in meetings with supported customers.
• Research and propose continuous improvements of the managed environments.
• Maintain accurate system and technical documentation.
• Ensure compliance with operational, security and organizational processes.
• Plan, design and implement software services.
• Perform OS patching utilizing RedHat Satellite servers.
• Analyze cyber security vulnerability scan reports and remediate vulnerabilities.
• Develop and analyze highly complex system standards, thresholds, and recommendations to maximize system performance.
• Serves as an extension of Tier 3 when resolve complex issues on Endpoint Devices (workstations, mobile devices)
• Implement and maintain PKI Infrastructures, server certificates, Certificate Authority, Secure DNS (DNS SEC), SSH, PGP, and AWS CLI Access keys.
• Perform operating system and VMware vSphere and Microsoft HyperV administration, account management and provisioning activity.
• Install and setup of Enterprise Database systems i.e. Oracle, Microsoft SQL Server, MySQL, Amazon RDS, and PostgreSQL databases.
• Perform server and device network setup and troubleshooting in a large enterprise environment.
• Perform setup, administration and maintenance of open-source technologies.
• Perform changes as required and respond to outage resolution requests promptly.
• Provide support to IT Vendor Manager to perform asset management activities.
• Manage Amazon Web Services Cloud Services assets.
• Racking/Stacking of hardware

Required Skills: - working knowledge and hands-on experience with the following:

• 5+ years of experience managing Active Directory in multi-forest, multidomain environments with 2000+ users
• 5+ years of experience with Active Directory Group Policy design and deployment
• 5+ years of experience with PowerShell Scripting to achieve complex task goals
• 5+ years of experience with DNS, DHCP in Microsoft-based environment
• 5+ years of experience with enterprise-wide certificate management and PKI
• 3+ years of administration experience with Microsoft Enterprise Environment
• 3+ years of administration experience with Office 365
• 3+ years of experience managing with Microsoft Azure
• 3+ years of experience with Microsoft Hyper-V and VMware Technologies
• 5+ experience with Windows Server 2016, 2019, 20222
• 3+ years of experience with Enterprise SAN and NAS storage solutions in a clustered HA environment.
• 3+year of experience with Endpoint Computing technologies Intune, SCCM and/or Ivanti, SysTrack
• Experience with enterprise security compliance tools such as Nessus, Tenable.AD
• Experience managing AWS EC2 and S3 environments is preferred.
• Experience with Infoblox, CyberArk Privileged Access Security is preferred.
• Experience with SolarWinds, Azure Sentinel, WhatUp Gold and Nagios is preferred.

• Certifications in the core technologies preferred.