Apr 15
Public Trust
Mid Level Career (5+ yrs experience)
$125,000 - $150,000
No Traveling
IT - Support
National Gallery of Art, DC (On/Off-Site)
JOB SUMMARY: We are looking for a highly technical engineer to provide hands-on support for the NGA Infrastructure areas which include but are not limited to identity management, servers, virtualization storage, cloud computing, enterprise security compliance, System monitoring, and backups/recovery. Candidate MUST be flexible and available when after-hours remote and/or offsite support for emergency break-fix is required.
The right candidate will serve as technical lead on enterprise compliance, interpret security compliance reports, develop solutions to security findings, ensure systems baseline compliance, and serve as subject matter expert in case of complex compliance issues for endpoint computing services supported by Tier 3. Responding to and mitigating security findings resulting from internal/external security audits.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Provide day-to-day maintenance of servers in a hybrid environment which consists of on-premises, physical, virtual, and cloud-based systems. This maintenance includes but is not limited to admin support, patching, and troubleshooting of the system environments.
Perform system and application upgrades as new major and minor releases become available.
Responsible for the administration of all aspects of virtual server infrastructure.
Administer and manage the organization’s storage infrastructure, including on-premises storage arrays, Azure storage, and AWS S3.
Responsible for all the technology infrastructure supporting Tier 3 services including but not limited to Ivanti, SCCM, Intune, SysTrack, Absolute Software, Active Directory, ADFS, Microsoft Entra Connect, IIS Web and Radius Systems Administration, Applications Single Sign On (SSO) using Active Directory authentication and other integrations.
Manage and Support Gallery’s Microsoft Office 365 and Azure Cloud Environments.
Maintain Password Management System like CyberArk.
Maintain Servers and Endpoint Point Patching Platforms (WSUS and Ivanti)
Coordinate and/or participate in meetings with supported customers.
Research and propose continuous improvements of the managed environments.
Maintain accurate system and technical documentation.
Ensure compliance with operational, security, and organizational processes.
Plan, design, and implement software services.
Perform OS patching utilizing RedHat Satellite servers.
Analyze cyber security vulnerability scan reports and remediate vulnerabilities.
Develop and analyze highly complex system standards, thresholds, and recommendations to maximize system performance.
Serves as an extension of Tier 3 when resolving complex issues on Endpoint Devices (workstations, mobile devices)
Implement and maintain PKI Infrastructures, server certificates, Certificate Authority, Secure DNS (DNS SEC), SSH, PGP, and AWS CLI Access keys.
Perform operating system and VMware vSphere and Microsoft HyperV administration, account management, and provisioning activity.
Install and setup Enterprise Database systems i.e. Oracle, Microsoft SQL Server, MySQL, Amazon RDS, and PostgreSQL databases.
Perform server and device network setup and troubleshooting in a large enterprise environment.
Perform setup, administration, and maintenance of open-source technologies.
Perform changes as required and respond to outage resolution requests promptly.
Provide support to the IT Vendor Manager to perform asset management activities.
Manage Amazon Web Services Cloud Services assets.
Racking/Stacking of hardware
Required Skills: - working knowledge and hands-on experience with the following:
5+ years of experience managing Active Directory in multi-forest, multidomain environments with 2000+ users
5+ years of experience with Active Directory Group Policy design and deployment
5+ years of experience with PowerShell Scripting to achieve complex task goals
5+ years of experience with DNS, and DHCP in a Microsoft-based environment
5+ years of experience with enterprise-wide certificate management and PKI
3+ years of administration experience with Microsoft Enterprise Environment
3+ years of administration experience with Office 365
3+ years of experience managing with Microsoft Azure
3+ years of experience with Microsoft Hyper-V and VMware Technologies
5+ experience with Windows Server 2016, 2019, 20222
3+ years of experience with Enterprise SAN and NAS storage solutions in a clustered HA environment.
3+year of experience with Endpoint Computing technologies Intune, SCCM and/or Ivanti, SysTrack
Experience with enterprise security compliance tools such as Nessus, Tenable, and AD
Experience managing AWS EC2 and S3 environments is preferred.
Experience with Infoblox, and CyberArk Privileged Access Security is preferred.
Experience with SolarWinds, Azure Sentinel, WhatsUp Gold, and Nagios is preferred.
* Certifications in the core technologies preferred.
The right candidate will serve as technical lead on enterprise compliance, interpret security compliance reports, develop solutions to security findings, ensure systems baseline compliance, and serve as subject matter expert in case of complex compliance issues for endpoint computing services supported by Tier 3. Responding to and mitigating security findings resulting from internal/external security audits.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Provide day-to-day maintenance of servers in a hybrid environment which consists of on-premises, physical, virtual, and cloud-based systems. This maintenance includes but is not limited to admin support, patching, and troubleshooting of the system environments.
Perform system and application upgrades as new major and minor releases become available.
Responsible for the administration of all aspects of virtual server infrastructure.
Administer and manage the organization’s storage infrastructure, including on-premises storage arrays, Azure storage, and AWS S3.
Responsible for all the technology infrastructure supporting Tier 3 services including but not limited to Ivanti, SCCM, Intune, SysTrack, Absolute Software, Active Directory, ADFS, Microsoft Entra Connect, IIS Web and Radius Systems Administration, Applications Single Sign On (SSO) using Active Directory authentication and other integrations.
Manage and Support Gallery’s Microsoft Office 365 and Azure Cloud Environments.
Maintain Password Management System like CyberArk.
Maintain Servers and Endpoint Point Patching Platforms (WSUS and Ivanti)
Coordinate and/or participate in meetings with supported customers.
Research and propose continuous improvements of the managed environments.
Maintain accurate system and technical documentation.
Ensure compliance with operational, security, and organizational processes.
Plan, design, and implement software services.
Perform OS patching utilizing RedHat Satellite servers.
Analyze cyber security vulnerability scan reports and remediate vulnerabilities.
Develop and analyze highly complex system standards, thresholds, and recommendations to maximize system performance.
Serves as an extension of Tier 3 when resolving complex issues on Endpoint Devices (workstations, mobile devices)
Implement and maintain PKI Infrastructures, server certificates, Certificate Authority, Secure DNS (DNS SEC), SSH, PGP, and AWS CLI Access keys.
Perform operating system and VMware vSphere and Microsoft HyperV administration, account management, and provisioning activity.
Install and setup Enterprise Database systems i.e. Oracle, Microsoft SQL Server, MySQL, Amazon RDS, and PostgreSQL databases.
Perform server and device network setup and troubleshooting in a large enterprise environment.
Perform setup, administration, and maintenance of open-source technologies.
Perform changes as required and respond to outage resolution requests promptly.
Provide support to the IT Vendor Manager to perform asset management activities.
Manage Amazon Web Services Cloud Services assets.
Racking/Stacking of hardware
Required Skills: - working knowledge and hands-on experience with the following:
5+ years of experience managing Active Directory in multi-forest, multidomain environments with 2000+ users
5+ years of experience with Active Directory Group Policy design and deployment
5+ years of experience with PowerShell Scripting to achieve complex task goals
5+ years of experience with DNS, and DHCP in a Microsoft-based environment
5+ years of experience with enterprise-wide certificate management and PKI
3+ years of administration experience with Microsoft Enterprise Environment
3+ years of administration experience with Office 365
3+ years of experience managing with Microsoft Azure
3+ years of experience with Microsoft Hyper-V and VMware Technologies
5+ experience with Windows Server 2016, 2019, 20222
3+ years of experience with Enterprise SAN and NAS storage solutions in a clustered HA environment.
3+year of experience with Endpoint Computing technologies Intune, SCCM and/or Ivanti, SysTrack
Experience with enterprise security compliance tools such as Nessus, Tenable, and AD
Experience managing AWS EC2 and S3 environments is preferred.
Experience with Infoblox, and CyberArk Privileged Access Security is preferred.
Experience with SolarWinds, Azure Sentinel, WhatsUp Gold, and Nagios is preferred.
* Certifications in the core technologies preferred.
group id: 10118147
