Systems Administrator

Description

Leidos is seeking a System Administrator for the enterprise PKI program, and their associated cloud infrastructures located on a secure network. The System Administrator will work with a team of engineers, developers, cybersecurity engineers, system architects, and testers.

Core business hours are typically from 9 AM - 3 PM, five days a week. Hours can be flexible for either early arrivals, and/or late departures. Some after hours or weekend work may be required to accommodate system deployments and upgrades.

While not required, it is highly desirable for the Candidate to have knowledge of Public Key Infrastructure (PKI) and understand key concepts like digital certificates, Certificate Authorities (CAs), Registration Authorities (RAs), key management practices, cryptographic algorithms, certificate revocation procedures, and trust models. Additionally, the ability to follow standard operating procedures to manage a robust system to issue, manage, and revoke digital certificates while ensuring the integrity and authenticity of users and entities within a network is desirable. Candidates who do not have all these abilities, but have the ability to learn them, will be considered.

Primary Responsibilities

• Performing regular maintenance of cloud infrastructure resources, to include patching, configuration, upgrading as needed
• Security Patching
• Working with the team's security engineer to address, mitigate security findings stemming from system security scans
• Support of Servers in an AWS environment
• Monitor CloudWatch dashboards other tools to ensure systems are performing as designed
• Ensures the mission critical application remains operational 24/7

• Must have an active TS/SCI with Polygraph
• BS degree and at least 8 years of relevant experience
• Experience in using Linux-based operating systems
• Experience running Bash scripts - will be expected to become proficient in updating existing bash scripts and writing additional bash scripts
• Must have experience with security accreditation process
• Must have experience with the Cloud / Amazon Web Services
• Must be able to support System Administration/Privileged Access duties including an on-call rotation for a week approximately every two months
• Excellent oral and written communications skills
• Detail-oriented mindset
• Experience interacting with cross functional project teams including Software Development, System Engineering/ Verification and Validation, Security, Compliance and Quality Assurance
• Experience working in Agile environments
• Experience with GitHub
• Experience with AWS Console
• Ability to read and perform complex software and infrastructure deployment instructions

• Experience with Public Key Infrastructure (PKI) and understand key concepts like digital certificates, Certificate Authorities (CAs), Registration Authorities (RAs), key management practices, cryptographic algorithms, certificate revocation procedures, and trust models
• Experience with LDAP technologies
• Experience with Elastic tools (Elasticsearch, Logstash, Kibana, and Beats)
• Experience working with DevOps CI/CD related technologies (Github, Jenkins, Puppet, Docker, Rundeck, etc.)
• Experience with AWS CLI, and manage services utilizing cloud services to build infrastructure as a code in an automated fashion
• Network engineering troubleshooting between Cloud environments and non-Cloud environments
• Solid understanding of Web Application Firewall (WAF) configuration and management
• Experience with networking (e.g., ports, routing tables, subnets, VPNs, firewalls, routers, etc.) to include design, integration and troubleshooting issues
• Minimum of one AWS Certification from the AWS Associate level (AWS Certified Architect Associate, AWS Certified Developer Associate, or AWS Certified SysOps Administrator Associate)
• 2+ years of C2S experience
• Cloud formation
• Managing complex Sponsor relationships and requirements gathering
• Experience with IAM / IdAM / ICAM delivery systems, Authentication, Authorization, and/or Attributes
• Experience with Tomcat
• Experience with Container implementations
• Experience managing HSMs