AWS Cloud Engineer/System AdministratorDirect Hire

Job Description:The AWS Cloud Engineer/System Administrator will lead and work with a team of Tier III system administrators to manage the Army Geospatial Center's (AGC) current and future cloud-based applications, including Platform as a Service (PaaS) and Software as a Service (SaaS) solutions hosted in the GovCloud (cArmy AWS IL4) environment, as well as lead the migration of data and applications.This AWS Cloud Engineer/System Administrator will also provide Tier III support for other AGC-supported on-premises systems and networks as needed, collaborate closely with the cross-functional team comprised of cybersecurity, system administrators, and desktop support to perform and report on continuous monitoring, vulnerability management and remediation, review, maintain and update security controls, POAM milestones, and compliance, ensure application of DISA quarterly STIG releases and STIG results analysis.Chenega IT Enterprise Services (CITES) offers forward-thinking technology solutions to federal agencies and the DoD. Formed in 2016 to serve federal customers CONUS, CITES has grown quickly into a best practices leader for the modern federal enterprise.

Job Responsibilities:Perform system administration support and cloud engineering to support AGC's Impact Level 4 systems hosted in the GovCloud environmentDevelop and maintain architecture requirements, evaluation of candidate cloud services, metrics, supporting documentation, and final reference architecture documentsWork with the IA team to obtain cloud accreditation approval under the Risk Management Framework (RMF)Perform technical reviews of architecture and design artifacts for consistency with United States Army, DoD, and NIST policy, as well as alignment with system requirementsInstall, support, and maintain hardware and software infrastructure according to best practices, industry standards, and/or customer/organizational requirements, including firewalls/security groups, servers, and storage systemsApply appropriate Security Technical Implementation Guides (STIGs) and provide the check reports with explanations of the results in a government-approved format by DoD and apply and maintain IAVM, SARs, CTO, and other applicable directive compliance by timelines as specifiedSupport and maintain the operating systems, patches, upgrades, and apply Cyber Security requirements for systemsDiagnose problems, solve issues, and provide lessons learnedImplement the necessary controls and procedures to protect information systems assets from intentional or inadvertent modification, disclosure, destruction, or security compromiseProvide network and host-based security, incident response, and log collection and analysis as neededPerform regular patches of supported systems and remediate open vulnerabilitiesAssist in the development of guidelines and procedures for administration and security best practicesMonitor resource usage, anticipate problems, and suggest solutionsManage production systems and provide higher-level technical support (Tier III) to clients when neededWork closely with colleagues to meet team goals and improve processes and practicesCreate and maintain documentation of the systemsManaged, operated, maintained, and administered Windows IIS and SQL database, bastion host firewall production, test and staging environments, including configuration, deployment, troubleshooting, and maintenanceProvide software and hardware support to the customer development teamSetup offsite disaster recovery environmentReview system and security logs and report to the team regarding incidents or potential threats to the network environment, systems, users, or infrastructureMonitor the production environment and report any code/security-related issues to the development teamOpen and close service requests and act as the primary interface with Army technical support to resolve technical problems in the GovCloud environmentOther duties as assigned

Qualifications:BA or BS degree in Information Technology or similar ORHigh school diploma or GED equivalent and 8+ years of related experience or an equivalent combination of education and experience may be substitutedAWS Solutions Architect certification preferred, or other similar AWS certifications are required within 90 days of hireDoD 8140/8570.01-M Baseline IA at IAT II or higher: CCNA Security, CySA+, GICSP, GSE, Security+ CE or SSCPActive Top Secret/SCI clearance

Knowledge, Skills, and Abilities:Ability to work 100% on customer site (no telework)AWS hands-on engineering experience and formal training in AWS cloud solutions are requiredKnowledgeable in application transport and network infrastructure protocols (SSL/TLS, DNS, DHCP, NTP, SSH, HTTP/S, SMTP, and Microsoft AD), and possess an understanding of how to support these applications/protocolsPossess computing environment training or certification in any of the following: Windows Server, Next Generation Firewall, Microsoft, Red Hat, NetApp, VMware, Broadcom, or CiscoExperience in application of DISA STIGs and SRGs, DoD, Army, and IC policies and proceduresExperience with creating POAM milestones, and compliance and ensuring application of DISA quarterly STIG releases and STIG results analysisAbility to understand IAVAs and remediate issues as neededExperience in building, operating, and maintaining Windows SQL Server 2019, Windows Server 2019, RHEL, and CentOS 7/8/9 serversConfigure and manage MS SQL and PostgreSQL databases and apply and/or assess database STIGs or SRGExperience in managing Active Directory, configuring, and managing Windows Network Policy Server, configuring Group Policy Objects (GPO), applying and/or assessing operating system, web server, and web application STIGs and SRGsExperience with AWS load balancing, fail-over, and data replication technologiesOperational experience with NIPR, SIPR, JWICS, DDTE, DREN, SDREN, AWS, AWS GovCloud (US), cArmy, milCloud, SC2S, and/or C2SKnowledgeable with SCCM, WSUS, SHAVLIK, and other AWS security cloud tools and patching toolsExperience with NetApp storage products and cloud storage such as AWS EBS, EFS, S3, S3 IA, FSx, and GlacierExperience with systems and data encryptionFamiliarity with configuring both CISCO and Brocade Fibre Channel switchesFamiliarity with DISA NIPR Cloud SRG and IL4 landing zonesOutgoing team player and self-motivated individual with excellent communication skills with the ability and desire to interact with all users and work closely with other technical staff or independentlyDemonstrated ability to multi-task effectively under pressure with the ability to frequently re-assess priorities for multiple tasks or projectsStrong time management and resource management capabilitiesMust have advanced working knowledge of a variety of computer software applications used with Office 365 such as MS Teams, Word, PowerPoint, Excel, Visio, Outlook, MS Project, SharePointOutgoing team player and self-motivated individual with excellent communication skills with the ability and desire to interact with all users and work closely with other technical staff or independently

Benefits:Medical, Vision, and Dental Insurance Plans401k Retirement Fund

About The Company:Our parent company Chenega Corporation is ranked as the most successful Alaska Native village corporation. They continues to deliver value and innovative solutions to their customers while building equity and providing benefits to their Native shareholders. With the mission to achieve sustainable growth in our businesses to support shareholders in their journey to self-sufficiency, actively manage our lands, and uphold our cultural traditions and values.Chenega has positions across the US and several foreign countries, as well. Learn more about how you can join our diverse group of over 7,000 employees.#gtthcr#LI-GTT

#J-18808-Ljbffr