CACI International Senior Systems Engineer (Cybersecurity Asset Management Tools) in Remote (Any State), Virginia
The CDM Program is managed within the DHS Cybersecurity and Infrastructure Security Agency (CISA) Capability Division, responsible for enhancing the security, resilience, and reliability of the Federal Government cyber and communications infrastructure. The CDM Program mission is to safeguard and secure cyberspace in an environment where the threat of cyber-attack is continuously growing and evolving. The CDM Program defends the United States (U.S.) Federal Information Technology (IT) networks from cybersecurity threats by providing continuous monitoring sensors (tools), diagnosis, mitigation tools, and associated services to strengthen the security posture of Government networks.
What You’ll Get to Do:
A highly technical “Jack of all Trades” where you might be a SME in one or more things, but you’re able to learn and adapt to new challenges and technologies
You will need to work with many teams and interact with customer technical teams
Clearly communicates with both technical and non-technical colleagues, sharing knowledge and insight
Works in a team to integrate systems and solutions, triage issues, and prioritize tasks
Provision, install, configure, monitor and maintain operating systems hardware and software infrastructure (either or both of Windows and Linux)
Creates and manages scripts for managing systems and entire enclaves
Lives primarily in AWS and Azure, but still manages a partial-rack on-prem environment. Logically, it’s all “one” CDM infrastructure
Collaborates in administering databases and network infrastructure
Automates integration with patch management, configuration management, and security/reporting infrastructures
Produces detailed documentation and diagrams regarding the initial lab design/build and the solutions provided to DHS Component environments
Provides key input to the vision and direction of the asset management and network security projects
Recommend engineering policies, processes, procedures, and standards guidelines for development and operations environments
Provide guidance and controls for the application of engineering processes and approaches across delivery projects
You’ll Bring These Qualifications:
US Citizenship required
Must meet eligibility requirements for access to classified information and be clearable to a Department of Homeland Security (DHS) EOD clearance. An EOD is not required to start; however, continued employment is contingent upon successfully obtaining a DHS EOD at the level required.
University Degree (BS), or equivalent years of related experience, and additionally 7+ years of related IT engineering experience required.
Experience integrating, troubleshooting, and automating systems in a Linux/Unix environment (CentOS/RHEL preferred)
Patch management on Linux and Windows systems and production systems; have demonstrated knowledge of the application of patches and security updates to servers, database and web applications
Experience administering Windows Server infrastructure, including software installations, installation/upgrades to operating systems and maintenance/troubleshooting
Experience administering and configuring MS Hyper-V services
Experience configuring and administering AWS and Azure based environments.
Administration with Windows PowerShell
Experience installing and configuring COTS software applications
Strong experience with understanding and implementing STIGs and other vendor-provided hardening guidance.
Experience with log management, network protocols and testing
At least one active certification from the list below:
McAfee Product Specialist - ENS (Endpoint Security)
McAfee Product Specialist - ATD (Advanced Threat Defense)
McAfee Product Specialist - ePO (ePolicy Orchestrator and VirusScan)
McAfee Product Specialist - NSP (Network Security Platform)
McAfee Product Specialist - HIPs
McAfee Product Specialist - DLPe (Data Loss Prevention Endpoint)
McAfee Product Specialist - SIEM (security information and event management)
Tanium Certified Professional Security
Tenable Certified MSSP Engineer
These Qualifications Would be Nice to Have:
Technical degree in Computer Science, Computer Engineering, or a related subject area.
Relevant Technical and/or Security Certifications (e.g. Security+, CISSP, Red Hat Security Engineer)
Experience integrating and troubleshooting systems in Windows and/or Linux environments
Experience with at least three of these technologies and demonstrated ability to learn new technologies: Axonius, AWS, Azure, Forescout, Hyper-V, McAfee, PKI, SCCM, Tanium, Tenable, and other cybersecurity technologies
What We Can Offer You:- We’ve been named a Best Place to Work by the Washington Post.- Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.- We offer competitive benefits and learning and development opportunities.- We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.- For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.
US-Remote (Any State)-VA-
CACI employs a diverse range of talent to create an environment that fuels innovation and fosters continuous improvement and success. At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. CACI is proud to provide dynamic careers for employees worldwide. CACI is an Equal Opportunity Employer - Females/Minorities/Protected Veterans/Individuals with Disabilities.