Cloud Windows Systems Engineer, Senior

Job Description

The CDM Program is managed within the DHS Cybersecurity and Infrastructure Security Agency, CISA/Office of Cybersecurity and Communications (CS&C)/Network Security Deployment (NSD) Division, responsible for enhancing the security, resilience, and reliability of the Nation’s cyber and communications infrastructure. The DHS CDM Program mission is to safeguard and secure cyberspace in an environment where the threat of cyber-attack is continuously growing and evolving. The CDM Program defends the United States (U.S.) Federal Information Technology (IT) networks from cybersecurity threats by providing continuous monitoring sensors (tools), diagnosis, mitigation tools, and associated services to strengthen the security posture of Government networks.

What You’ll Get to Do:

In our small Lab Team, you’ll be responsible for providing a multi-tenant, multi-cloud, cloud and on-prem IT lab environment solution to enable solutions development and operations teams the necessary sandboxes within which to execute their assigned missions, while providing needed/wanted “common services” to reduce redundancy, and still enabling specific communication between sandboxes as needed. You won’t be living in a confined stovepipe or swim-lane. Although the overall contract consists of one base year and five option years, you’ll participate in enabling multiple approximately six-month solution-integration project efforts which may be similar with others, or they may be completely unique. Flexibility and adaptability are ways of life here on the CDM team. Although this is a high-pace environment, be assured you’d be joining a people-oriented team and overall community that’s just as flexible as we’re hoping you to be.

Although this is a high-pace environment, be assured you’d be joining a high-tech people-oriented team and overall community that’s just as flexible as we’re hoping you to be.

More About the Role:

• A highly technical “Jack of all Trades”, but stronger in the Windows ecosystem than Linux. You might be a true SME in one or more things, or not, but you’re able to rapidly learn and adapt to new challenges and technologies.
• The ability to communicate well with both “techies” and “non-techies” in-order-to share knowledge and insight is a must. Technical team discussions can happen anywhere, plus with possible impromptu interactions with customers – you’re an upbeat personality and your strong communication skills (especially on dry-erase boards) will stand-out. Those who can “talk the talk” to both groups in an effective manner will excel in delivering CDMs objectives and overall mission.
• Strong, upbeat, fun personalities will become part of the high-tech team that is already there to support you – as you help to support them.
• Function as a member of a small team tasked with developing, deploying, and maintaining a multi-tenant, multi-platform, infrastructure to provide lab IT enclaves.
• You are not required to be a subject matter expert (SME) with any particular software/hardware, but someone with a desire to learn and who can pick up concepts quickly and can prove “above the ordinary” technical knowledge/skills, will go a long way in this role.
• Familiarity with common cybersecurity tools is greatly desired. Our mission to support DHS in their cybersecurity needs, inclusive of identifying and preventing culprits from accessing systems/data that they shouldn’t is a high priority focus for our team (let’s keep everything safe and secure).
• Integrate, Secure, and Operate lab enclaves across Azure, AWS, and on-premises vSphere.
• At this time, we are focusing on candidates with Microsoft Azure, AWS cloud integration/engineering. Linux, Windows, Active Directory, and ADFS integration with Azure Active Directory a strong plus. If you are an expert in all these areas variations, perfect; however, do not think that this job isn’t for you. We probably have a place for you too.
• In the lab core services enclaves, you might provision, install, configure, monitor and maintain applications, platform services, and/or operating systems (either or both of Windows and Linux) on both public and private VM infrastructures, in order to implement, manage, and maintain the envisioned security model and provide certain centralized services to tenants.
• Create and manages scripts.
• Produce and review detailed documentation and diagrams regarding the solution being integrated.
• Participate in the internal Engineering Review process.
• Provide technical cross-training/coaching of more junior colleagues.

Wow, there is a lot here! Why are we listing a lot of things? Because we want to make sure this is an interesting long-term job for you – as well as one that you can handle.

You’ll Bring These Qualifications:

• US Citizenship required.
• There is no clearance requirement to begin employment. However, as a requirement of continued employment in this position you must meet eligibility requirements for access to classified information and be successfully obtain to a Department of Homeland Security (DHS) EOD authorization.
• Understands and intuits "why things work", not just the ability to follow installation and configuration guides.
• Strong experience integrating and troubleshooting systems in a Windows Server environment.
• Strong experience integrating, securing, and making useful one or more of the following Microsoft platform services: Microsoft Active Directory (at an advanced level), Windows AD-integrated PKI (at an advanced level), MS SQL Server, IIS.
• Strong experience installing and configuring COTS software applications.
• Strong experience with securing systems following STIGs, best practices, and government/compliance requirements (NIST 800-53, FISMA, etc).
• Moderate to Strong experience creating and analyzing PowerShell and/or Command Shell scripts.
• Moderately strong understanding network communication fundamentals.
• Experience engineering in highly structured, segmented/partitioned networks.
• Experience with log management, network firewalls, and testing.
• University Degree (BS), or equivalent years of related experience, and additionally 7+ years of related IT engineering experience required.
• Azure and/or AWS certification within 6 months of hire.

These Qualifications Would be Nice to Have:

• Active DoD clearance preferred but not required.
• Relevant Technical and/or Security Certifications (e.g. CISSP, Microsoft, AWS, VMware, etc.).
• Moderate experience integrating and troubleshooting systems in a Linux environment (CentOS/RHEL preferred).
• Relevant Technical and/or Security Certifications (e.g. CISSP, Security plus, CCNA, CCDA, CCNA-Security, Microsoft, AWS, Azure, VMware, etc.).
• Experience/strong familiarity with the Microsoft Azure suite of technologies (IaaS through SaaS).
• In-depth system admin level understanding of Windows and/or Linux environments (MCSE or RHCE equivalence).
• Strong experience creating and analyzing PowerShell and/or Command Shell scripts.
• Strong experience integrating, securing, and making useful one or more of the following CyberSecurity Tools: CiscoISE, ServiceNow Discovery, Tanium, Carbon Black, Microsoft AppLocker/Defender ATP, etc.
• Experience with any or all of these products or technologies: PostGRE SQL, Red Hat Satellite, Nagios, McAfee ePO, Tanium, IPSEC, ForeScout, CyberARK, CA PAM/Xceedium, SailPoint, Ansible, Puppet, Chef, Splunk, AMQP (RabbitMQ), Nessus, Phantom, Swimlane, ServiceNow, Qualys, SCCM, BigFix, MDM solutions.
• Technical degree in Computer Science, Computer Engineering, or a related subject area.

What We Can Offer You:

• We’ve been named a Best Place to Work by the Washington Post.
• Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
• We offer competitive benefits and learning and development opportunities.
• We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.
• For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.

CDMHP

Job Location

US-Chantilly-VA-VIRGINIA SUBURBAN

CACI employs a diverse range of talent to create an environment that fuels innovation and fosters continuous improvement and success. At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. CACI is proud to provide dynamic careers for employees worldwide. CACI is an Equal Opportunity Employer - Females/Minorities/Protected Veterans/Individuals with Disabilities.