Information Systems Security Engineer with Security Clearance

San Antonio, TX, United States

Location: Lackland AFB (San Antonio, TX) Job Description: MicroHealth is seeking an Information Systems Security Engineer for our contract providing information technology support and technical services for our customer in San Antonio, TX. Responsible for all aspects of system and network administration including servers, desktop systems, communications hardware/software, and office systems. Systems Engineer/Systems Administrator performs as a network administrator (including backup, security management, user account management, internal network access, office systems, and applications support). Working with the ISSM and ISSO, the Systems Engineer/Systems Administrator shall assist with fulfilling the requirements to attain and maintain the Authorization to Operate (ATO) and the Authorization to Connect (ATC). Development of technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks. Supports server, network, and desktop hardware, software, and applications. Plans, implements, and supports the network and computing infrastructure plan.

Assists with technology planning through ongoing research. Comply with established DDRP and AFDTL plans and schedules for backup and recovery and maintenance and also coordinate with the Government to schedule any out–of–cycle system and database backups, rotation of backup data to the off–site security location, and downtime related to anticipated hardware and/or software upgrades. Diagnose and analyze any network functional server hardware and software problems and provide recommended solutions to the Government for resolution. Provide oversight of the AFDTL functional servers and systems, and report and document any security incidents to the appropriate AFDTL Government personnel. Perform vulnerability management, to include installing and managing server and application security to include; Notice to Airman (NOTAMs), STIGS, Security Content Automation Protocol (SCAPs), MPTOs, Time Compliance Network Order (TCNOs), scanning, and audit log monitoring. Perform patch management security updates to ESXI Servers. Be knowledgeable with the third party product (currently Ivanti Security Controls) used for patch management of the AFDTL Servers. Configure security groups to grant/restrict network access to authorized users and processes. Create and delete user accounts on the functional systems as well as implement and oversee system security. Implement/troubleshoot/maintain Group Policies for AFDTL.

Install and upgrade new and replacement systems, hardware, software, and operating systems. Assess network requirements, parameters, interface configuration, and regulatory compliance for new or changing IT requirements. Identify system failures and equipment problems and take appropriate action within predetermined time frames in accordance with operational instructions and/or equipment operating manuals. Create, maintain, and update as required, AFDTL Trusted Facility Manuals, Standard Operating Procedures, End User How–to Guides. Run required AFDTL Leadership LIMS Reports. Coordinate with system administration personnel to ensure proper prioritization and execution of software development projects. Perform patch management of DHA/Windows 10 Long Term Servicing Channel (LTSC) Operating System Image on the GC/MS, LC/MS, Rapid Fire, and Hamilton Systems. Be knowledgeable with the third party product (currently Ivanti Security Controls) used for patch management of the AFDTL Forensic Workstations. Provide touch maintenance support with Forensic Toxicology Drug Testing Laboratory personnel (FTDTL) for the Solaris equipment within the AFDTL Server Room to include switching back–up media.

Coordinate with DHA NIWC Engineers to troubleshoot network connections with the Laboratory Switches (Cisco or Brocade) and Network Firewall (Palo Alto). Provide touch maintenance of switches when requested. Provide customer/user support for HQ AFDTL as Customer Support Technicians. Monitor Multifunction Devices for malfunctions and sufficient printing supplies (paper and toner). Troubleshoot malfunctions and restock printer supplies as needed. Configure Multifunction Devices to DISA Security Standards. Assist with Automated Data Processing Equipment (ADPE) custodian duties. Assist with Telephone Control Officer (TCO) duties. Perform patch management of End User Desktops (EUDs) and coordinate with DISA Enterprise and DHA–DDRP enclave System Administrators. Be knowledgeable of Microsoft Endpoint Manager for patch management of EUDs.

Use the baseline standard DISA EUD image to prepare workstations for use. Attend all necessary DHA and DDRP Teams Meetings to ensure awareness of upcoming changes, patches, and Enterprise/DDRP wide issues. Contribute to developing, implementing and maintaining building security architecture.

Assist in the managing, reviewing, and administration of the security videos, as well as maintain the Beginning of Day logs (daily) IAW AFDTL OI 44–031. Create, print, issue, and inventory personal access control cards as per the AFDTL OI. Assign and modify access to the labs sections, as requested. Maintain all related access control badge logs. Requirements: Five (5) years of experience with installing computer system hardware and associated software, security patches, and maintenance upgrades. Troubleshooting techniques used to diagnose and resolve desktop, printer, and other computer systems issues. Five (5) years of documented current work experience; as an Administrator on a small–sized network of servers, desktop systems, and communications devices using current technologies. A working knowledge of current communications devices and protocols, server, and desktop technologies. Five (5) years of experience in hardware and software troubleshooting techniques needed to perform computer system recovery, backup and system security auditing. Two (2) years of experience is required in the following Operating Systems: Windows Server 2008–R2 & 12 and Windows 7& 10; Solaris 10, 11 (or newer or similar), and RedHat/Linux 6 and Relational Database Management Systems: Oracle 11g or 12g with special emphasis on: PL/SQL and SOL Plus, forms and reports (newer or similar). Active Secret Clearance IAT Level II Certification is a MUST Physical Demands: While performing the duties of this job, the employee is regularly required to sit. The employee frequently is required to walk; use hands to finger, handle or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand. The employee will rarely lift or move objects. Specific vision abilities required by this job include close vision, distance vision, color vision, and ability to adjust focus. MicroHealth will recruit, hire, train, and promote persons in all job titles, and ensure that all other personnel actions are administered without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, disability, or status as a protected veteran and ensure that all employment decisions are based only on valid job requirements. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. If you need a reasonable accommodation due to a disability for any part of the employment process, please send an e–mail to with your request and contact information.

#J-18808-Ljbffr