Desktop Administrator

SMS Data Products Group, Inc.•Fort Belvoir, VA

About The Position

SMS is seeking a skilled Systems Administrator to join the I3TS team supporting DTRA. This role supports federal clients in maintaining compliance with the Department of Defense (DoD) and other federal cybersecurity standards. The I3TS program provides enterprise-wide IT support to enable DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA’s internal and external mission partners operating in CONUS and OCONUS locations. ning, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity. SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers’ missions for more than 45 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com. Submit your resume today!

Requirements

BS bachelor’s degree with 6-8 years’ experience or 10+ years of IA experience without a degree.
A Current DoD 8570 baseline certification
Understanding of the Risk Management Framework (RMF), NIST, ICD, and CNSS standards.
Familiarity with network technologies (LAN & WAN) and best practices within a classified environment to include crypto and key management.
STIG compliance, SCC and STIG Viewer experience, and ACAS expertise.
Expert with Microsoft Windows, Linux, and system virtualization in a secure network environment.
Must be able to work in a constantly changing regulatory environment with short-, mid-, and long-term timelines for remediating any non-compliance.
Must be able to work well within a team environment and able to adapt quickly to change.
Must be able to work in a high-energy environment and adapt to shifting priorities.
Good writing and verbal presentation skills
Excellent communications skills, both verbal and written.
Must possess an active DoD Top Secret/SCI Clearance

Nice To Haves

DoD IS knowledge and experience preferred

Responsibilities

Responsible for ensuring the security and integrity of IT systems by applying Security Technical Implementation Guides (STIGs), managing system patches, and overseeing vulnerability management processes.
Responsible for identifying points of vulnerability, non-compliance with established Information Assurance (IA) guidelines and regulations and recommend mitigation strategies, along with assisting users as needed in a classified computing environment. The selected candidate must be able to work independently as well as with a team of IT analysts, administrators, and engineers.
Continuous upkeep, monitoring, analysis, and response to Information System, network and security events.
STIG Application and Compliance:
Implement and maintain Security Technical Implementation Guides (STIGs) across various systems and applications.
Conduct regular STIG compliance checks using tools like SCAP Compliance Checker and STIG Viewer.
Document STIG configurations and remediation actions to ensure audit readiness.
Patching and System Updates:
Manage and deploy operating systems and application patches in accordance with federal patch management policies.
Coordinate patch schedules to minimize operational impact while meeting compliance deadlines.\Verify patch deployment success and troubleshoot any issues arising from updates.
Vulnerability Management:
Perform regular vulnerability scans using tools such as Nessus, OpenVAS, or similar platforms.
Administration of Endpoint Detection and Response (EDR) systems, including Trellix
Analyze scan results, prioritize vulnerabilities based on risk, and develop mitigation strategies.
Track and report on vulnerability remediation progress to ensure compliance with federal standards.
System Hardening:
Harden systems by applying best practices and federal security guidelines to reduce attack surfaces.
Maintain configuration baselines and ensure systems adhere to DoD and NIST standards.
Incident Response Support:
Participates in internal/external security audits/inspections; performs risk assessments and Continuous Monitoring.
Assist in identifying and responding to security incidents related to vulnerabilities or misconfigurations.
Document incidents and contribute to after-action reports for continuous improvement.
Collaboration and Reporting:
Work closely with system administrators, engineering staff, and compliance teams to ensure cohesive security operations.
Prepare detailed reports and briefings for federal clients on STIG compliance, patching status, and vulnerability management efforts.
Develop, implement and enforce Information Security Policies and Procedures.
Tool Utilization:
Utilize STIGViewer and Evaluate STIG for desktop compliance.
Leverage tools such as WSUS, SCCM/MECM, or Ansible for patch management.
Use vulnerability management platforms and ticketing systems to track and resolve issues.