Systems Administrator (Network and Security)

Position Responsibilities:

• Administration and oversight of FortiGate firewall implementation including hardware, operating system, security settings, policy and policy objects
• Management and maintenance of Apogee’s Juniper switch hardware and virtual chassis switch configuration 
• Monitoring network performance to diagnose and resolve network faults
• Coordination with project and partner teams to plan, create, configure and troubleshoot external connections to Apogee’s network
• Administration of PBX VOIP server and system
• Oversee SSL VPN configuration and troubleshooting of user client connection issues
• Infrastructure and configuration support for program teams conducting experimental or novel research efforts, including requirements gathering, feasibility evaluation, risk and security assessment and implementation planning and collaboration
• Management of DNS and DHCP servers
• Support for security efforts in conjunction with NIST 800-171 and NIST 800-53 standards compliance, including:
• Routine audits of systems and software, including log analysis
• Patch, configuration, and update management
• Periodic permissions and access assessment
• Administration of Apogee’s OpenStack virtualization environment including troubleshooting VM deployment and uptime
• Assist Systems Administration team in managing a blended Windows/Linux infrastructure environment, including:
• System deployment - OS and permissions configuration and troubleshooting, application deployment, and security hardening
• System maintenance – Upgrades, patching, user management
• System support – Networking configuration issues, system performance and responsiveness, permissions or functionality issues resulting from security hardening 
• System optimization - Monitor system performance and health to identify opportunities for performance improvement, implement system tuning
• Automation - Scripting routine tasks using BASH, Python, Ansible, Kickstart, and PowerShell

Qualifications:

• Bachelor’s Degree in Computer Science or related field or equivalent work experience
• CompTIA Network+ certification or 5 years of in-depth, hands-on experience in network and security management in an enterprise IT environment 
• Experience with multiple distributions of UNIX/Linux (Red Hat, CentOS, Ubuntu) at both a GUI and command line/shell level
• Troubleshooting experience with services and protocols such as TCP/IP, DNS, FTP, SSH, SCP, SSL, HTTP/HTTPS
• Attention to detail, ability to prioritize workload and respond quickly to critical issues
• Self-motivated, enthusiastic, and proactive in seeking out opportunities for personal expertise and skill growth and team support

Preferred Qualifications:

• Familiarity with FortiGate hardware and the FortiOS operating system as well as Juniper hardware and the Junos OS operating system
• Experience with standardized security and compliance control systems, NIST 800-171 and NIST 800-53 experience
• Scripting experience with Java, Python, Ansible, or PowerShell a plus
• Experience configuring and maintaining Confluence, Jira, OpenStack, GitLab on Linux-based systems
• Knowledge of Docker and related swarm-based technology
• Use of DevOps or scripting tools to automate repeatable tasks (i.e., Ansible, GoCD or equivalent)
• Active TS clearance