Network Administrator - Principal

About Agile Defense   At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.   Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests. Requisition #: 1372 Job Title: Network Administrator - Principal Location: Fort Huachuca Clearance Level: Top Secret/SCI Required Certification(s): Sec+, CCNA *This position is contingent upon funding. SUMMARY Establishes, configures, maintains, and supports internal and/or external networks for the organization. Develops and maintains all systems, applications, security, and network configurations. Conducts network capacity and performance analysis. Recommends upgrades, patches, and new applications and equipment. Directs and supports activities of the network control function of the organization. Determines service quality levels for network transmission and performance and ensures the established levels are met. Troubleshoots network performance issues and recommends corrective actions. Identifies and resolves problems associated with server hardware/software and ensures scalability and appropriate integration with other systems. Provides technical support and guidance to network users. Optimizes the functionality of networks and systems, and diagnoses and recovers failed systems. Ensures appropriate network security measures are in place. Responsible for backup or recovery procedures. Creates and maintains a disaster recovery plan. May be responsible for directing the work of system administrators who provide the day-to-day system administration to include system and resource optimization, and user assistance. JOB DUTIES AND RESPONSIBILITIES The position entails implementation, management, configuration and sustaining the respective network routers, data switches, voice switches, (i.e., Avaya CE2100 Multi-Function Soft Switch, Avaya AS5300 Multi-Function Soft Switch, Cisco Unified Call Manager) and security appliances, firewalls and intrusion protection/detection systems utilized to provision the respective network gateway premise systems and that and that distribute the classified and unclassified DoDIN Networks and capabilities consisting of (DREN, SDREN, NIPRNet, SIPRNet, DSN, CFBLNet, NATO and FVEY initiative enclaves, Commercial Internet Service Provider (CISP) premise systems and the associated distribution network to include the connected Wi-Fi domain and access points, DODIN and other authorized Virtual Private Networks (VPN) and protected test enclaves to include any associated COMSEC equipment. Perform network administration of the information systems that establish the JITC Fort Huachuca, AZ instance of the Joint Worldwide Intelligence Communication System (JWICS) Network. Implement, manage, configure, and sustain the network routers, data switches, security appliances, firewalls, intrusion protection/detection systems and COMSEC equipment utilized to the JWICS network premise distribution (VPN) and protected test enclaves to include any associated. Perform system administration of the network systems and applications applied to this enclave with respect to the distinctive guidance established within the JWICS Security Classification Guide (SCG), respective Directives and Issuances from DISA, the Director National Intelligence (DNI) and the Defense intelligence Agency (DIA). Utilize authorized tools and applications (Solar Winds, Wire-Shark, SNORT, SIEM, BURP, etc.) to monitor network health and performance, conduct trend analysis and provide mitigation strategy recommendations, identify performance degradation, and restore outages identified and provide minimum monthly reports. Monitor SIEM and other system logs to identify potential issues with connected computer systems to conduct network threat analysis. This may require the contractor to trouble-shoot reported problems against documented system baseline configurations and open incident tickets in the local work-order Jira ticketing system. Provide the Tier II and Tier III incident response for issues impacting baseline performance of JITC Network resources and coordinate escalation with DISA Network Operations. POAM Sustain the established baseline network system architecture and perform change management per the established JITC Configuration Management Plan and Change Management process leveraging the designated IT Service Management System. {Perform system updates, Access Control Logs (ACL), issue and track IP Space network and host assignment, Domain Name Service change requests, scheduled maintenance, system back-up and restoration procedures of network systems equipment. Perform integration of new technologies into existing network environments in accordance with U.S. DoD U.S. Cyber Command (US CYBERCOM) Information Assurance Vulnerability Management (IAVM) Program, Information Assurance Vulnerability Alerts (IAVA), Security Technical Implementation Guide (STIG) / Security Requirements Guide (SRG), Bulletins, and Technical Advisory (TA) issuances. Provide response to technical queries and support data-calls from the JITC Command Information Systems Security Manger (ISSM) or designated Information Security Systems Officer (ISSO). Reports to Network Engineer or Task Lead QUALIFICATIONS Recommended Certifications Sec +, CCNA Education, Background, and Years of Experience Requires a Master’s degree; or a Bachelor’s degree with at least 4 years of experience; or an Associate’s and at least 6 years of experience. One year of experience can be substituted by 15 semester hours completed towards a Bachelor’s or Master’s degree. Additional certifications (other than those required for the position) in the area of specialization may be substituted for experience but varies by certification. The degree must be in a relevant technical curriculum and experience must be related to the job duties. ADDITIONAL SKILLS & QUALIFICATIONS Required Skills Establishes, configures, maintains, and supports internal and/or external networks for the organization. Develops and maintains all systems, applications, security, and network configurations. Conducts network capacity and performance analysis. Recommends upgrades, patches, and new applications and equipment. Directs and supports activities of the network control function of the organization. Determines service quality levels for network transmission and performance and ensures the established levels are met. Troubleshoots network performance issues and recommends corrective actions. Identifies and resolves problems associated with server hardware/software and ensures scalability and appropriate integration with other systems. Provides technical support and guidance to network users. Optimizes the functionality of networks and systems, and diagnoses and recovers failed systems. Ensures appropriate network security measures are in place. Responsible for backup or recovery procedures. Creates and maintains a disaster recovery plan. May be responsible for directing the work of system administrators who provide the day-to-day system administration to include system and resource optimization, and user assistance. JOB DUTIES AND RESPONSIBILITIES The position entails implementation, management, configuration and sustaining the respective network routers, data switches, voice switches, and security appliances, firewalls and intrusion protection/detection systems utilized to provision the respective network gateway premise systems and that and that distribute the classified and unclassified DoDIN Networks and capabilities consisting of (DREN, SDREN, NIPRNet, SIPRNet, DSN, CFBLNet, NATO and FVEY initiative enclaves, Commercial Internet Service Provider (CISP) premise systems and the associated distribution network to include the connected Wi-Fi domain and access points, DODIN and other authorized Virtual Private Networks (VPN) and protected test enclaves to include any associated COMSEC equipment. Perform network administration of the information systems that establish the JITC Fort Huachuca, AZ instance of the Joint Worldwide Intelligence Communication System (JWICS) Network. Implement, manage, configure, and sustain the network routers, data switches, security appliances, firewalls, intrusion protection/detection systems and COMSEC equipment utilized to the JWICS network premise distribution (VPN) and protected test enclaves to include any associated. Perform system administration of the network systems and applications applied to this enclave with respect to the distinctive guidance established within the JWICS Security Classification Guide (SCG), respective Directives and Issuances from DISA, the Director National Intelligence (DNI) and the Defense intelligence Agency (DIA). Utilize authorized tools and applications (Solar Winds, Wire-Shark, SNORT, SIEM, BURP, etc.) to monitor network health and performance, conduct trend analysis and provide mitigation strategy recommendations, identify performance degradation, and restore outages identified and provide minimum monthly reports. Monitor SIEM and other system logs to identify potential issues with connected computer systems to conduct network threat analysis. This may require the contractor to trouble-shoot reported problems against documented system baseline configurations and open incident tickets in the local work-order Jira ticketing system. Provide the Tier II and Tier III incident response for issues impacting baseline performance of JITC Network resources and coordinate escalation with DISA Network Operations. POAM Sustain the established baseline network system architecture and perform change management per the established JITC Configuration Management Plan and Change Management process leveraging the designated IT Service Management System. {Perform system updates, Access Control Logs (ACL), issue and track IP Space network and host assignment, Domain Name Service change requests, scheduled maintenance, system back-up and restoration procedures of network systems equipment. Perform integration of new technologies into existing network environments in accordance with U.S. DoD U.S. Cyber Command (US CYBERCOM) Information Assurance Vulnerability Management (IAVM) Program, Information Assurance Vulnerability Alerts (IAVA), Security Technical Implementation Guide (STIG) / Security Requirements Guide (SRG), Bulletins, and Technical Advisory (TA) issuances. Provide response to technical queries and support data-calls from the JITC Command Information Systems Security Manger (ISSM) or designated Information Security Systems Officer (ISSO). Reports to Network Engineer or Task Lead Preferred Skills Familiarity and knowledge of Cisco Network switches, Solar Winds, Wire-Shark, SNORT, SIEM, BURP WORKING CONDITIONS Environmental Conditions Indoor atmosphere Strength Demands Minimal possible occasional lift requirements Physical Requirements Sit, stand, climb stairs, repetitive motion