Sr Cyber Systems Administrator

Job Title:

Senior Cyber Systems Administrator
MD-Crownsville-Hybrid
Must be US Citizen per client

Duties and Responsibilities:

Configuration management and control of maintenance architectural/design/functional changes to Splunk Enterprise, ES and SOAR.
Provide knowledge and execution of platform hardening using standards such as STIGs or CIS Benchmarks.
Coordinate with various system owner support groups to gather and analyze requirements, propose implementation and integrations solutions, and plan and coordinate/execute system deployment tasks/projects to successful closure.
Gap assessment and analysis of security solutions and recommendation of improvement initiatives.
Architecture and design with future growth in mind to ensure a balance between scalability, performance, stability, reliability, and agility.
Implementation, administration, maintenance, troubleshooting, root cause analysis, and break-fix support of security tools.
Defense in-depth gap analysis and improvement recommendations of the security architecture and posture of the SOC infrastructure and environment.
Development and implementation of secure configurations standards of SOC tools.
Configuration management and control of maintenance architectural/design/functional changes to Splunk ES and Phantom.
Monitoring system updates and planning, reviewing, and executing patch/upgrade deployments.
Analyze system operational requirements and define, design, develop, and maintain/improve health and performance monitoring dashboards, alerts, and reports etc.
Operations monitoring of SOC tool to ensure proactive issue identification and resolution.
Analyze business requirements, research and recommend what tools should be used to complete the Cybersecurity vision (i.e. PAM, Forensic, DevSecOps, Defense-in-Depth, Zero-Trust).
Plan, define, and implement an effective and efficient data backup strategy.
Plan, define, and implement an effective and efficient data archiving strategy.
Defining, developing, implementing, and improving processes and procedures for to support and maintain SOC tools.
Experience engineering and administration of enterprise EDR systems.

Qualifications:

Education and Years of Experience:
At least ten (10) years of hands-on experience in LAN/Network Administration.
At least five (5) years of Technical Lead experience on system management /deployment projects with a focus on Linux based OS.
At least five (5) years of progressive experience in enterprise and security architecture, design, implementation, and support.
Bachelor's degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering or related scientific or technical discipline.
Industry recognized security certification, IAT Level II/III (preferred).

Required Skills/Certifications:
Self-starter, able to gather requirements, plan, execute system deployment efforts.
Able to perform gap analysis and initiate and execute architectural and design improvements.
System architecture, engineering, or administration experience.
Customer-oriented with excellent issue follow-through and resolution abilities.
Excellent written and oral communication, and presentation skills.
Ability to effectively work both autonomously as well as on a team.
Outstanding interpersonal skills, strong work ethic, and self-motivated.
Utilize tools and analytical skills to plan and execute technical changes.

Desired Skills:
Experience with the following tools: Splunk/ES/Phantom, Palo Alto Panorama, Tanium, Thycotic Secret Server, Shodan, RiskSense, Security IQ, ServiceNow, Tenable SC/ TenableIO, Plixer Scrutinizer.
Experience architecting and multi-tier system/applications i.e Splunk ES and Phantom.
Experience analyzing and implement security architecture best practices.
Experience with Windows, Linux, Database, and Web Apps system administration.
Scripting in Pearl/Python/Bash/PowerShell etc.
Experience in project task technical analysis, planning, and estimation.
Experience with technology capabilities market research, technical analysis/review, and recommendation.

#J-18808-Ljbffr