System Engineer

iCallidus is seeking Systems Engineers to support client’s hardware and software environment in an Azure Cloud environment.

Key Responsibilities:

·      Establish and operate a server operations and maintenance program that provides program management, systems administration, maintenance, computer security, and support for environments on all client networks (On-site and Azure cloud environment), as well as those at the Continuity of Operations (COOP) facilities (Equinix sites in Chicago, Illinois and Dallas, Texas) in support of IT Continuity Management.

·      Troubleshooting and fixing IT hardware & software issues (network servers, routers/switches, circuits, and other infrastructure.

·      Coordinating with vendor/manufacturer for hardware break fix replacement through RMA process. Maintaining video teleconference equipment and also includes scheduling, follow-ups, and coordinating with users.

·      Maintaining and performing break-fix for the soft phone system that utilizes VOIP technology.

·      Providing support and break-fix for the enterprise Exchange/email in the cloud-based infrastructure.

·      Maintaining and performing break-fix for an on-prem Storage Area Network and Data Backup and Restore.

·      Maintaining compliance and performing mitigation for all aspects of IT security vulnerabilities. Maintaining and performing break-fix for privilege access management system.

·      Maintaining and performing break-fix for the virtualization environment utilizing VMWare.

·      Installation, operation, monitoring, provisioning, and maintenance of virtual environments (VMWare, Azure cloud, Active Directory Federation Service - ADFS and/or other cloud services), SAN/Network- Attached Storage (NAS).

·      Perform and document periodic maintenance to keep the virtual environment and network storage components operating within functional and design specifications.

·      Perform hardware upgrades to include installing additional memory, peripheral devices, processors, storage, and hardware reconfiguration.

·      Troubleshoot the environment to correct malfunctions and restore operations in coordination with Incident Management processes.

·      Implement all relevant firmware upgrades, security patches, and measures for virtual environments, hardware, operating systems, and software.

·      Monitor servers, applications, and services to facilitate the early detection of incidents, impending outages, or degradations.

·      Maintain master operating system configuration and server patching capability.

·      Develop and maintain hardware and software documentation in coordination with Configuration and Change Management policies and procedures.

·      The contractor shall advise client regarding any required modifications or upgrades to equipment and software.

·      Ensure the appropriate cloud capacity is available to meet demands on the environment.

·      Perform and provide network infrastructure support for all network components (wide area network) within client’s premise for all onsite/remote network topologies including, but not limited, routers, switches, firewalls, wireless network components.

·      Perform and document hardware maintenance to keep the network environment operating within functional and design specifications.

·      Perform hardware upgrades, system patches/update to include IOS upgrade, router/ switch configuration update, additional memory, and peripheral devices.

·      Troubleshoot the environment to correct malfunctions and restore operations in coordination with Incident Management processes.

·      Implement all relevant firmware upgrades and security patches.

·      Monitor all network components including, but not limited to, routers, switches, firewall and wireless controllers to facilitate the early detection of incidents, impending outages, or degradations.

·      Maintain operational status of the network.

·      Maintain and perform break-fix for the virtualization environment utilizing VMWare.

·      Operate, maintain, and administer hardware and software on network devices: firewalls, routers, switches, and wireless equipment. The contractor shall respond to, troubleshoot, and fix all problems.

·      Provide weekly reports on network availability and utilization. The contractor shall provide administrative support for the acquisition of IT equipment for the RRB networks.

·      Responsible for upgrades and enhancements to the network infrastructure equipment. Upgrades and enhancements with the Engineering and IT Security branches. After obtaining client’s approval, the contractor shall make the upgrades and enhancements.

·      Operate and maintain connectivity to Enterprise Active Directory, Lightweight Directory Access Protocol (LDAP), and Identity Access Management (IAM) services (e.g., Active Directory following ITIL best practices for Access Management).

·      Support access reviews and audits as required.

·      Manage permissions as authorized and prescribed by the client.

·      Perform health check.

·      Provide metrics on performance.

·      Provide application/system support.

·      Maintain policy servers.

·      Troubleshoot and resolve incidents.

The contractor will provide after-hours support on an on-call basis with the SLA guidelines.

·      The Contractor shall review, implement, and support the existing process as documented.

·      Operate and maintain items such as servers (physical and virtual), firmware, operating systems (e.g., Microsoft Windows, Red Hat Linux) and application software. Systems and networks within the scope of this task are located at client's HQ and Azure cloud.

·      Monday through Friday, the Contractor shall provide on-site support hours from 6:00 AM to 6:30 PM central time.

·      For off-hour, weekends and holidays, the contractor shall provide on-call support and respond within the specified time.

·      Monitor, maintain, and optimize operating systems, applications, and vendor specific software supporting the servers and/or peripheral equipment.

·      Maintain system accounts, perform account, and access management for servers and specified applications and databases.

·      Creation of accounts, issuance of passwords, and resetting locked user accounts within one (1) business day after receipt of request during normal business hours.

·      Activate, deactivate, stop, and start services, reboot servers, identify and correct system problems, recover system files when necessary, and perform monitoring and tuning of the servers and services.

·      Plan, implement, install, and monitor system backup capabilities. The contractor shall perform system backups at the primary site. The contractor shall recover and restore computer files within two (2) hours for high priority requests and 24 hours for standard requests.

·      Support certification/recertification actions and advise on operational impacts of network/system expansions, additions, upgrades, and reconfigurations of hardware and software suites.

·      Review audit logs and report suspicious activity.

·      Archive audit logs to external storage as specified by the client.

·      Perform and verify backups of all applicable systems to client’s specified locations.

·      Perform restorations from backups as directed by the client.

·      Track, monitor, and report system performance and activity.

·      Monitor system resources and report incidents and events.

·      Perform physical checks of hardware for fault lights and take corrective action.

·      Update anti-virus signature files.

·      Compare system configuration files against a baseline for changes.

·      Maintain compliance of approved configurations for system components (virtual and physical), (e.g., run Defense Information).

·      Systems Agency (DISA) STIGs against systems).

·      Apply operating system upgrades and service packs.

·      Create and store emergency recovery passwords.

·      Isolate and resolve system issues.

·      Perform system configuration changes per supplied and approved documentation.

·      The contractor shall respond to hardware or software problems within the proposed SLA and its guideline during on-site hours and on an on-call basis after duty hours.

Qualifications and Requirements:

·      Education: Associate degree or higher (Desired) in Computer Engineering, Information Systems or related field.

·      Certification: Microsoft Certified Systems Administrator or Microsoft Certified Solutions Expert or Specialized Certification in VMWare and MCSA. (Required).

·      Certification: Cisco Certified Network Professional CCNP) or Cisco Certified Internetwork Expert (CCIE). (Required).

·      Enhancing or changing SAN automated deployment process.

·      Responds to system outages or critical events in a timely manner with a sense of urgency.

·      Maintains Active Directory and GPO account management.

·      5 years of experience with Cisco Identity Services Engine (ISE). This includes configuring, managing, and troubleshooting Cisco ISE’s TACACS, RADIUS, RULES, Policy Sets, Posture, Authentication/Authorization for Wired/Wireless networks etc.

·      5 years of experience in configuring, managing, and troubleshooting Express Routes connections to Microsoft AZURE Cloud.

·      5 years of experience with network monitoring and management tools such as Solarwinds and Cisco DNA center.

·      5 years of experience with Cisco VoIP infrastructure, operations and IVR technologies.

·      3 to 5 years of experience with Managed Trusted Internet Protocol Service (MTIPS) and Public IP infrastructure, including configuration and troubleshooting circuits with public IPs.

·      3 to 5 years of general Windows Server Operating System experience with hands-on experience working and understanding of Microsoft Active Directory, DNS and DHCP.