Security System Administrator
Bethesda, MD

Job Description

Job Description

Triumph Enterprises is currently looking for a Security System Administrator to join a Security Operations organization on a contract with a federal government client with an important mission. You will have the opportunity to design large enterprise architectures, implement new sensor technologies, and assist in maintenance strategies. This is an exciting opportunity to work across a diverse set of stakeholders to understand threats and vulnerabilities associated with a large enterprise and develop approaches for mitigation. Members of this team are highly motivated, self-driven, and given great latitude to bring forth new ideas for managing risk.

Responsibilities

* Provide engineering support for Security Operations, including deployment, operation and maintenance, and full documentation of security tools
* Assist in deploying, managing, and troubleshooting multiple endpoint security agent products across multiple organizational components of a civilian federal government client
* Plan and implement upgrades, patching, and system enhancements
* Develop and implement testing strategies and documenting results
* Provide system/equipment/specialized training and technical guidance
* Serve as liaison with clients, participating in meetings to ensure client needs are met
* Communicate with customers and teammates clearly and concisely
* Provide engineering support for the SOC Operations and system administration for Security Operations
* Provide on-call emergency support of systems and agents managed by the Security Program to address mission impacting issues, such as network outages & core system performance
* Deploy and maintain adequate test capabilities and environment for systems and agents managed by the SOC
* Research, identify, and implement Proof of Concepts for emerging and innovative technologies in support of Security Operations and Incident Response
* Ensure adherence to Change Management practices for systems and agents managed by the SOC, and maintain awareness of related Change Management of other teams
* Implement, manage and proactively monitor central logging feeds to enterprise SIEM for all systems and agents managed by the SOC
* Ensure proactive health and performance monitoring of systems & agents managed by the SOC, addressing all significant issues with thorough documented root cause analysis
* Participating in special projects as required
* Additional duties as assigned

Qualifications / Requirements

* Credentials
* BS/BA degree o Five or more years of related work experience


* Knowledge
* Network technology and common protocols
* IT system engineering methods and best practices
* IT system administration methods and best demonstrated practices
* Strong knowledge of agent deployment, including scripting, deployment, and general system administration
* Knowledge of patch management tools, such as: IBM BigFix, Altiris, SCCM, or LANDesk
* Knowledge of deployment tools, such as: Chef, Puppet, Salt, or Ansible


* Experience, Skills and Abilities
* Strong experience with Windows and Linux administration and extensive Active Directory and Group Policy management
* Familiar with systems life cycle management
* Experience in deploying cyber security systems, tools, sensors and scanners
* Experience in implementing firewalls and IDS/IPS tools
* At least 2 years of experience in integrating, configuring, and system administration on any of the following: Tenable Security Center, FireEye HX, Carbon Black, PhishMe, McAfee Vulnerability Manager, McAfee ePO, IBM BigFix, ForeScout, BRO/ZEEK, CoreLight, Cisco, or Palo Alto firewalls
* Experience with backup/restore products
* Hands-on experience in VMWare, VSphere, ESXi 6.5/6.7
* Experience deploying and managing SAN
* Experience with network monitoring tools such as Nagios, OpsView, SolarWinds, Manage Engine, and others
* Experience in using Jira and Agile methodology
* Experience deploying and managing SIEM products, to include proactive monitoring of SIEM data feeds and ingest
* Experience with engineering, system administration or use of SIEM systems
* Experience with basic Scripting and Windows PowerShell
* Strong critical thinking, problem solving, and organization skills



Preferred Qualifications and Experience

* 10+ years of overall IT experience
* One or more certifications in information security in information security or networking: (such as GCIA, GCIH, CEH, CISSP, Sec+, ScrumMaster, SSCP, MCSE, Certified Linux Administrator etc.)
* Enterprise level server administration experience
* Excellent teamwork skills and ability to collaborate with a diverse team of skilled cybersecurity professionals
* Federal government or federal contracting experience

Company Overview

Triumph is an employee-owned information technology (IT) company specializing in Program Management, Administrative Services, and Network and IT Support Services. Incorporated in Virginia in 2005, Triumph has risen to meet the Federal Government's growing need for mission-critical Cybersecurity, Business Intelligence, Analytics, Data Visualization; and Program Management expertise and cultivated a track record of success. Our pursuit of excellence is driven by an emphasis on Client Focus, Integrity, Imagination, and Employee Engagement - the Core Values that motivate and inspire our leadership, business practices, and company culture. Triumph participates in e-Verify. We provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 Form to confirm work authorization. Triumph is an equal opportunity employer and gives consideration for employment to qualified applicants without regard to race, color, religion, sex, national origin, disability, protected veteran status or any other status defined by law. Go to www.triumph-enterprises.com to learn more about Triumph.