Systems Admin - Cisco Email / Messaging Security / Ironport - Active Top Secret required

Systems Administrator – Cisco Email/Messaging Security/SPLUNK/Ironport – Active Top Secret

Seize your opportunity to make a personal impact as a SYSTEMS Administrator with GDIT. A career in systems administration means connecting and enhancing the systems that matter most. You will configure and maintain email security for message traffic that can reach 5000,000 messages and thousands of malicious attempts a day.  At GDIT you’ll be at the forefront of innovation and play a meaningful part in improving how agencies operate.

At GDIT, people are our differentiator. As a Systems Administrator, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Systems Administrator joining our team to bring professionalism and initiative to a fast-paced environment that offers extensive options for training, certification, and career advancement. When we succeed, you succeed and together our best becomes better.

HOW A SYSTEMS ADMINISTRATOR WILL MAKE AN IMPACT:

• Configure and maintain the email security solution to provide protection against spam, viruses, phishing attacks and other threats using email as the vector of attack.

• Develop and write Content and Message filters for specific security requirements. Background in SPF, DKIM, DMARC, and TLS

• Maintain a 99.99% fully mission capable rate/ uptime for the email security platform. The mission capable rate shall be measured by the Government provided monitoring solution. The current monitoring platform is Solarwinds Orion and SPLUNK. The mission capable rate shall be calculated on a monthly basis and shall be included with each submission of the Monthly Status Report.

• Provide a status and configuration assessment of the ESA platforms, to include message delivery counts, malicious message quarantine estimates and platform operational status. The assessment shall be submitted quarterly.

• Maintain a 90% compliance rate for vulnerability management and security compliance. Provide a quarterly vulnerability and security compliance status reports based on scans provided by internal sources, currently Tenable Nessus, citing the current vulnerability levels and security guidance compliance.

• Within 90 days of a new release, provide a service migration plan. The service migration plan shall include hardware and software requirements, update or upgrade requirements, risk and mitigations, test plan with timeline, and overall recommendations. 

WHAT YOU’LL NEED TO SUCCEED:

• Education: Bachelor's preferred

• Required Experience: Understanding of using SPLUNK as a trouble shooting tool and the creation of dashboards and early warning alerts. ESA basic level course taught by Cisco. A med-level understanding of scripting and regular expression to create ESA filters. Background in Linux. Ironport experience

• Required Technical Skills: DOD 8570-compliant cert (Sec+, Net+, CISSP, etc.); understanding of using SPLUNK as a trouble shooting tool and the creation of dashboards and early warning alerts; ESA basic level course taught by Cisco; a med-level understanding of scripting and regular expression to create ESA filters; background in Linux; Ironport experience

• Security Clearance Level: Active Top Secret with SSBI conducted within the last 5 years is required.

• Required Skills and Abilities: Splunk, Linux, Ironport

• Preferred Skills: Certification in Admin SPLUNK

• Required Certification: DOD 8570-compliant cert (Sec+, Net+, CISSP, etc.)

• Location: Washington, District of Columbia; limited telework may be available

GDIT IS YOUR PLACE:

• Partial-flex work week to own your priorities at work and at home

• 401K with company match

• Comprehensive health and wellness packages

• Internal mobility team dedicated to helping you own your career

• Professional growth opportunities including paid education and certifications

• Cutting-edge technology you can learn from

• Rest and recharge with paid vacation and holidays