IAP - INGENUITY AND PURPOSE
WWW.IAPWS.COM
As a leading international services company for more than 65 years, IAP provides a broad spectrum of services and solutions to U.S. and international government agencies, and organizations. A world-class leader in providing seasoned program management, IAP leverages and integrates its capabilities – IT & Communications, Aviation & Engineering Solutions, Power Solutions, Infrastructure & Logistics - to provide safe, innovative, and reliable solutions to meet customers' diverse and complex challenges. With 2,500 team members, IAP operates in more than 110 locations in 27 countries worldwide and maintains offices in the Washington D.C. area, Florida, Maryland, Oklahoma, the United Kingdom, and the Middle East.
SUMMARY:
The Senior Systems Engineer/Cybersecurity Architect designs, engineers, and maintains nation-wide enterprise networks, systems, applications and related Cybersecurity solutions to provide secure and reliable enterprise services for all users. The Sr. Engineer/Architect analyzes requirements, writes and proposes current working solutions and designs that provide complex IT solutions primarily for U.S. Government customers meeting these requirements and leveraging industry leading technology, frameworks and standards. These solutions may include providing visibility, oversight and management of mission critical network command and control infrastructure spanning multiple sites and countries; Cybersecurity controls selection, design and implementation; Identity management (IdM) and Public Key Enablement authentication systems; Enterprise monitoring, auditing and assessment tools; or researching and deploying emerging technologies to optimize networks.
This position may include being involved with the operations and maintenance of multiple datacenter locations, virtualization infrastructure, storage area networks and Enterprise Active Directory forest / domains supporting over 100 remote sites and over 27,000 users. Operating system support may include Microsoft Windows Server (2008 through 2019), Windows 8 / 10, RedHat Enterprise Linux / Solaris or other operating systems including embedded IoT systems.
ESSENTIAL JOB FUNCTIONS:
Provides network solutions, proposals, and engineering support for the Enterprise architecture, design, configuration, implementation, operational management, and troubleshooting of enterprise systems. Works as an integral member of business development, proposal development, and operations teams acting as a Systems and Security SME. Specific tasks include:
- Defining and analyzing statements of work, task objectives, project scope, implementation plans, or organizational impacts of information systems.
- Establishing functional or system standards to ensuring operational requirements, quality requirements, and design constraints are addressed.
- Participates in requirements gathering process to better understand specific system requirements and performs detailed analysis in the development of detailed design specifications. These designs may include elements of system engineering, software engineering, system integration, or distributed system architectures.
- Provides advice on project costs, design concepts, or design optimization to improve computer or information systems performance.
- Develops and documents detailed design specifications, installation instructions, and other system-related information as part of an overall design package including technical specifications or requirements and relevant training materials.
- Verifies security, stability, interoperability, portability, or scalability of current or proposed system architectures and develops systems acceptance and test plans necessary to validate performance.
- Collaborates with engineering and/or software development teams to produce appropriately designed solutions ensuring the compatibility of all system components and comprehensive security architecture applied throughout the design.
- Provides subject matter expert level technical guidance or support for the development or advanced troubleshooting of systems, software, applications, protocols and interfaces between these systems.
- Evaluates current or emerging technologies to consider factors such as cost, portability, compatibility, security, and/or usability including industry paradigm shift enabling technology such as desktop / compute / network virtualization, public / hybrid cloud solutions (AWS / Azure / VMware / Nutanix / Hyper-V, KVM), IaaS, PaaS, SaaS, etc.
- Analyzes RFP (request for proposal) documents and technical exhibits to identify system data, hardware, or software components required to meet requirements and develops compelling solutions that meet or exceed these requirements while minimizing costs. This analysis includes the identification of necessary labor, labor categories, labor descriptions, skillsets, certifications and other information technology project resource requirements to achieve the proposed solution.
- Develops technical and management approach documents in response to RFP requirements and participates in color reviews and development of tables, figures, diagrams and other pre-production elements.
- Provides expert guidance for implementing secure systems to customers or internal E&I teams including proper EFIS&T of Information Assurance / Computer Network Defense (IA/CND) related systems and integration with Defensive Cybersecurity Operations (DCO) solutions and processes.
- Designs, Develops, Deploys, Operates and Maintains advanced enterprise monitoring systems to proactively detect potential problems or performance related issues.
- Investigates system component suitability for specified purposes and makes recommendations regarding component or product family use for compute, storage, and network device interoperability.
- Performs ongoing hardware and software maintenance operations, lifecycle management, and other tasks including installing or upgrading hardware or software when necessary.
- Develops or approves detailed project plans, engineering implementation plans, system security plans, project schedules / plans, work break down structures, site survey reports, and other professional level documents including CDRLs.
- Communicates project information effectively through presentations, technical reports or white papers and briefs leadership and customers appropriately.
- Utilizes virtualization, modelling, and simulation tools to analyze or predict system performance under different operating conditions such as Wide Area Network emulation or load simulation.
DESIRED SKILLSETS:
Microsoft Active Directory (Enterprise / Architect)
- Directory Replication / Schema / LDAP
- Migration and Federation
Identity Management (IdM)
- Public Key Infrastructure
- Multifactor Authentication Systems
Microsoft Exchange
- Message Routing and Mailbox Roles
- Global Address List Synchronization
- Message Security
Microsoft Operating Systems (Windows Server / Windows 10)
Unix / RedHat Linux / Solaris Operating Systems
- Docker / Puppet / System D / SELinux
Microsoft System Center Configuration Manager
- Application Packaging / Advertisements
- Operating System Deployment (One Touch / Zero Touch)
- Task Sequences / Secure Baselines
Microsoft System Center Operations Manager
Monitoring Systems – SolarWinds, WhatsUp Gold, OpenView, etc.
Microsoft SharePoint Services
Microsoft Office Applications
Enterprise Applications / ERP, etc.
Virtualization Technology - VMware, Nutanix, AHV, VDI, Hyper Convergence, HA/FT Clustering, etc.
Storage Area Networks – EMC, NetApp, Dell SAN solutions, FC, FCoE, NFS, iSCSI, VSAN
Server Hardware – Standalone, Blade Servers, hyper converged, Cisco UCS, etc.
Scripting / Programming - PowerShell / Perl / Bash / Python / Regular Expressions, etc.
Tenable SC ACAS / NESSUS / SAINT compliance scanning and assessment tools
IDS/IPS – Snort/Suricata, SourceFIRE, McAfee NPS, TippingPoint, Netscout, etc.
End-Point Security Products – McAfee ePO / VSE, Comodo ITSM, StellarCyber, enSilo, Tanium, CarbonBlack, Cylance, CrowdStrike, etc.
SIEM Solutions – Splunk, ArcSight, AlienVault, LogRhythm, QRadar, etc.
NIST SP 800-RMF Series / Accreditation / Six Phases
ITIL ™ Change Management (3 / 4)
QUALIFICATIONS:
- Maintains DoD 8570.01-M compliance for IAT Level III.
- Demonstrates at least five (5) years’ enterprise-level experience collectively in each of the following areas:
- Microsoft Active Directory and Operating Systems
- Configuration Management & Monitoring Systems (SCCM, SCOM, SolarWinds, etc.)
- Network Security Systems (IDS/IPS, Firewalls, SIEM systems, etc.)
- Virtualization Technology (VMware and SAN shared storage solutions)
- Thorough understanding of OSI model and ability to troubleshoot various applications at all levels as networking extends into the virtual datacenter environment.
LICENSES & CERTIFICATIONS:
MCSE Preferred
KNOWLEDGE & SKILLS:
Fluent with Microsoft Office Suite (Word, PowerPoint, Excel, and Visio).
PHYSICAL DEMANDS/WORKING ENVIRONMENT:
- Must be medically qualified for deployment.
- Must be able to lift heavy objects > 50lbs.
TRAVEL:
International travel may be required.
SECRET CLEARANCE:
U.S. SECRET.
“IAP IS AN EEO/AA/MINORITY/FEMALE/DISABILITY/VETERAN EMPLOYER”
Required Skills
Required Experience