Systems Engineers Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: Secret Employee Type: Regular Percentage of Travel Required: Up to 25% Type of Travel: Continental US * * * **What You’ll Get to Do** CACI has an exciting and immediate opportunity for the following Systems Engineering specialties to support the USAF Network Operations Security Center (NOSC). + Boundary Systems Engineer + Enterprise Patch Management Systems Engineer + Directory Services System Engineer + Enterprise Messaging Systems Engineer + Storage and Virtualization Systems Engineer These positions work at the customer on-site Tier 3 support location at Shaw Air Force Base in South Carolina. Shaw AFB is conveniently located. A 2-hour drive to the north gets you to Charlotte, NC, to the east is Myrtle Beach, and Charleston, SC is to the south. You’ll have access to big city excitement, a quiet beach walk or small town Southern hospitality. If you want to use your advanced IT skills to support national security then this is the job for you. You’ll get to use leading edge technology as you sustain and defend the networks our Air Force warfighters use in the CENTCOM theater. From a career perspective, this program provides opportunity for upward and lateral mobility, by moving up to positions of increased responsibility or moving laterally across work centers to apply your expertise in other disciplines. **More About the Roles** In this role you will: Boundary Systems Engineer + Operate and manage the enterprise boundary management server, ensuring it is functional with duplicate configuration at COOP location. + Analyze firewall reports, logs, and other metrics and identify sub-standard network performance, and engineer and implement solutions to counter the identified anomalies. + Operate security devices remotely and locally. + Create custom UNIX scripts to meet task specific requirements. + Research, document, and track outages, trouble calls, and network intrusions to resolution. + Use firewall toolsets to analyze and report on the health of local and deployed firewalls. + Perform enterprise level firewall fault isolation and resolution; troubleshoot firewall issues on Open BSD Operating System. + Configure and maintain DNS and BIND domain name services and manage the full range of the firewall features at an Enterprise level. + Provide On-the-job training to local help desk personnel and engineers on firewall components and solutions. + Implement backup procedures and walk remote users through backup and restoration actions. + Assist with new security device implementations. + Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project-based timeline. + Manage proxy servers, email gateways, and perform external DNS management. + Provide guidance and remote administration of Firewalls and the Enterprise Manager. Enterprise Patch Management Systems Engineer + Ensure correct installation, configuration, use and maintenance of Microsoft Systems Center Configuration Manager (SCCM) platform. + Package, test and deploy automated desktop applications installations and patches using the SCCM framework. + Develop user guidance documents and installation instructions. + Test and validate IT systems security patches and hot fixes. + Support the distribution of security patches using Microsoft Systems Center Configuration Manager (SCCM) and Microsoft Security Baseline Analyzer (MSBA). + Provide configuration management for the SCCM distributed enterprise architecture. Provide support to remote local users. + Use data replication software to keep sites up to date. + Track package deployment and provide status updates using on-line trouble ticketing (Remedy) systems. + Develop reports and trend analysis documentation. + Create collections and advertisements for mass software/patch distribution. + Provide support for escalated tickets from Operations Floor. + Provide support to NOSC Information Assurance Vulnerability Management section. + Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project based timeline. + Maintain enterprise Data-At-Rest (DAR) solutions. + Maintain Host Based Security System (HBSS) and all related DISA mandated point products. + Help document the current patch-level of all PCs, servers, and network devices identified in IAVA and TCNOs. + Develop, design, create, write, and modify SCCM queries, collections, packages, and advertisements to distribute enterprise level security patches, hot-fixes, and other software as required. + Work with the Web Development team to maintain the SCCM web page. + Coordinate the dissemination of security vulnerabilities using the Communications Tasking Order (CTO) and/or Notice to Airmen (NOTAM) to deployed sites. Directory Services System Engineer + Provide support, implement, and design services for Microsoft Active Directory (AD) and Windows-based systems across the enterprise, including directory and identity management solutions. + Perform daily systems monitoring, verifying the integrity and availability of all systems and key processes. + Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter systems. + Maintain a shared Global Address List (GAL) topology for service components to include federation with external agencies for import/export of contacts. + Monitor the transfer of Global Address information between the USAFCENT enterprise and the AF enterprise. + Manage internal Domain Name Service (DNS) for active directory domains. + Manage Dynamic Host Configuration Protocol (DHCP) for active directory domains. + Develop reports and trend analysis documentation on system use. + Perform PowerShell scripting for AD administration. + Analyze metrics and recognize substandard network performance. + Develop reports and trend analysis documentation on bandwidth and network security incidents. Enterprise Messaging Systems Engineer + Provide support for Microsoft Exchange (2013 and later). + Manage e-mail capability of using signed and encrypted technology associated with encryption devices High Grade Service (HGS) and Public Key Infrastructure (PKI) Medium Grade Service (MGS). + Support e-mail capability via enterprise mobile management software for mobile devices (Blackberry, Apple, or Android devices) + Maintain Microsoft Communicator technologies (Office Communication Server or Lync) providing a collaborative tool solution for users. + Develop and maintain system concept of operations (CONOPS), engineering plans, and user guides for Enterprise Messaging Service. + Analyze system metrics to recognize substandard performance. + Develop reports and trend analysis documentation on system use to include account utilization. + Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project-based timeline. + Coordinate with firewall administrators to ensure proper access control lists (ACL) and Internet Protocol (IP) filters are in place for network protection and security. Storage and Virtualization Systems Engineer + Install, configure, test, deploy and maintain hosted VMware products, Virtual Storage (Access Control and VMFS data stores) and ESXi Servers. + Maintain enterprise backups. + Develop reports and trend analysis documentation. + Create and manage network Managing Tasks, Events and Alarms. + Use advanced technical writing skills to develop and update IT systems concept of operations and engineering plans. + Provide oral and written briefs, presentations, and professional reports to Government senior leaders and decision makers. + Maintain and troubleshoot enterprise trouble ticketing system. + Assist with enterprise database SQL tasks (i.e., DISA STIGs). + Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project based timeline. + Coordinate and provide direction to users on the implementation of PKI at the user level. All Positions: You will also be required to: + Provide on-call support after hours, on weekends and holidays. + Deploy/travel to OCONUS locations in the USCENTCOM AOR to support operations, projects, and training as required (up to 25%). + Travel to CONUS locations as required. **You’ll Bring These Qualifications** All Specialties: + Associates in related field and 3 or more years’ relevant IT experience OR 5 or more years’ of relevant IT experience. + Ability to obtain an Interim Secret clearance prior to start date. + DoD 8570 IAT II Baseline Certification (Security+ CE, CCNA-Sec or equivalent). Additional Requirements by Specialty: + Boundary Systems Engineer + Relevant experience + Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server 2012 using server images; Experience with implementation of storage solutions, window containers, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments. + Firewall, Unix/Linux experience + Completion of additional Professional Certifications. + Network+ or CCNA + Unix/Linux + ITIL Foundation within 60 days of start date + Enterprise Patch Management Systems Engineer + Relevant experience + Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server 2012 using server images; Experience with implementation of storage solutions, window containers, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments. + Must possess experience and demonstrate an understanding with managing Microsoft users and permissions, creating active directory domain services (AD DS) forests, designing server infrastructure, troubleshooting networks, and protecting network and user data. + Unix/Linux and HBSS experience + Completion of additional Professional Certifications. + Network+ or CCNA + Unix/Linux + ITIL Foundation within 60 days of start date + Directory Services System Engineer + Relevant experience + Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server 2012 using server images; Experience with implementation of storage solutions, window containers, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments. + Must possess experience and demonstrate an understanding with managing Microsoft users and permissions, creating active directory domain services (AD DS) forests, designing server infrastructure, troubleshooting networks, and protecting network and user data. + Firewall experience + Completion of additional Professional Certifications. + Network+ or CCNA + ITIL Foundation within 60 days of start date + Enterprise Messaging Systems Engineer + Relevant experience + Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server 2012 using server images; Experience with implementation of storage solutions, window containers, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments. + Must possess experience and demonstrate an understanding with managing Microsoft users and permissions, creating active directory domain services (AD DS) forests, designing server infrastructure, troubleshooting networks, and protecting network and user data. + Firewall experience + Possess a broad range of expertise in Commercial Electronic mail technologies. + Completion of additional Professional Certifications. + Network+ or CCNA + ITIL Foundation within 60 days of start date + Storage and Virtualization Systems Engineer + Relevant experience + Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server 2012 using server images; Experience with implementation of storage solutions, window containers, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments. + Must possess experience and demonstrate an understanding with managing Microsoft users and permissions, creating active directory domain services (AD DS) forests, designing server infrastructure, troubleshooting networks, and protecting network and user data. + Strong background in SAN Storage and IT Support. + Working knowledge of High availability, Clustering, VMotion, and Storage VMotion. + Completion of additional Professional Certifications within 6 months of your start date to remain on the program. CACI will cover the cost of these certifications. + VMware Certified Technical Associate (VCTA) + Network+ ITIL Foundation within 60 days of start date **These Qualifications Would Be Nice to Have** + Experience working in DoD, Air Force, and local base environments **What We Can Offer You:** + We’ve been named a Best Place to Work by the Washington Post. + Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. + We offer competitive benefits and learning and development opportunities. + We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities. + For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success. This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI. ______________________________________________________________________________ **What You Can Expect:** **A culture of integrity.** At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. **An environment of trust.** CACI takes pride in fostering a diverse and accessible culture where every individual feels supported to chart their own path. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. **A focus on continuous growth.** Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy. **Your potential is limitless.** So is ours. Learn more about CACI here. (https://careers.caci.com/global/en/life-at-caci) ______________________________________________________________________________ **Pay Range** : There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here (https://careers.caci.com/global/en/employee-benefits) . The proposed salary range for this position is: $61,600 - $129,300 _CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, disability, status as a protected veteran, or any other protected characteristic._