IT Systems Administrator
Apply NowCompany: Abacus Service Corporation
Location: Washington, DC 20011
Description:
1.0 BACKGROUND
The United States African Development Foundation (USADF) is an independent Federal agency
established to support African-designed and African-driven solutions that address grassroots economic and social problems. USADF provides grants directly to under-served and marginalized community groups and enterprises. The grants help organizations create tangible benefits such as increasing or sustaining the number of jobs in a community, improving income levels, and addressing social development needs. USADF is a public corporation with a seven-member Board of Directors who are nominated by the President and confirmed by the United States Senate.
USADF is a Federal grant-making public corporation and can be characterized as a micro-agency with 50 staff members in Washington. Washington staff communicates with approximately 70 contractors and partners in 20 countries in Africa via email and telephone. USADF's annual budget is approximately $30 million per year.
2.0 SCOPE
USADF has a need for an IT Senior Systems Engineer in the Office of the Information Technology
(Client)/Finance and Administration to support the agency's IT operations, infrastructure and security operations.
7.0 REQUIREMENTS
The Contractor shall work cooperatively with the USADF IT Chief in completing the following
requirements.
7.1 Major Duties
The Contractor serves as the Information Technology Systems Administrator in the Office of Information Technology and provides the following services.
7.1.1. IT Operations
The Contractor shall ensure running operations of the Agency's network servers and Microsoft Office 365 Cloud server infrastructure to include but not limited to the following:
On-premise Active Directory Servers
Foundation's data center servers to include operational functioning of the following:
o Domain Name Servers (DNS)
o Dynamic Host Configuration Protocol (DHCP servers)
Maintenance to most recent Operating System (OS) and vendor version of the following security related systems
o McAfee EPolicy Orchestrator software
o Up-to-date Software repository of the EPO server
o Up-to-date Anti-Virus/Malware software and proper distribution across the Foundation's IT Infrastructure platform
o Ivanti Patch Management System
Operational Maintenance of Core Security components such as Cisco Meraki Core, Distribution and Access Level switches
Operational configuration of Network and Systems Vulnerability scanning system such as Nessus or any other system in use
Maintenance and upgrade of the Agency's firewalls and its components such as Intrusion Prevention Systems and Firepower
Administration of Single Sign-On system (Okta)
Administration of Microsoft Office 365 cloud and related components
s follows:
o Microsoft Azure
o Exchange Online
o SharePoint Online
o Microsoft Intune
o Microsoft Teams
o One Drive for Business
Administration, configuration and upgrade of the Foundation's VoiceOver-IP (VOIP)
Infrastructure and Operations to include the following:
o Cisco Unified Messaging Communication (CUCM)
o Cisco Unity Connection - Voicemail Messaging
o Cisco Voice Gateway
Administration of the Foundation's Log Management system and other security devices such as Web Filters
Administrative support for the Foundation's Public Website (www.usadf.gov) Content Management platform
Administrative Support of the Foundation's Grant Management System with the following activities:
o Adding new users with roles and permissions
o Remove/Disable employees who have departed/resigned/terminated
o Work with product support or product vendor's technical support to resolve pending technical issues to include incident escalation.
Deliverable
Maintain running operations of on-premise active directory
Perform systems administration duties on Microsoft Azure and on-premise active directory servers
Perform systems administration duties of the following
o Microsoft Exchange Online
o SharePoint Online
o Teams
o Intune
o One Drive for Business
Perform systems administration duties of voice gateway, CUCM and Cisco Unity Connection
Maintain foundation's log management systems and Foundation's Grant Management System
7.1.2. IT Security
The Contractor shall provide the following in support of the Office of Information Technology:
ssist the Chief Information/Chief Information Security Officer in the accomplishing the following FISMA (Federal Information Security Management Act) activities:
o Prepare and review NIST related security controls and work in coordination with the security analyst to ensure the controls have been addressed through preparedness
o Work with IT Security Analyst to ensure IT Systems Continuous Monitoring metrics and addresses per metrics scheduled and proper documentation and evidentiary reports are met
o Conduct monthly vulnerability, scanning of agency's computer devices, review vulnerability reports and plan effective process for timely remediation of those vulnerabilities. Document the remediation status
o Provide lead for Client activities to include Continuous Diagnostics and Mitigation implementation
o Assist the Chief Information Security Officer in preparing, reviewing with security contractor Security Assessments and Accreditation (SA&A) of USADF Information Systems
o Management of Okta Identity Management and Single Sign-on platform
o Ensure proper server configuration and monitoring of the following security systems
o McAfee EPO for anti-virus and malware
o Patch Management Server
o SIEM Event Logs
o Audit Manager and audit reports
o Review, Analyze Continuous Monitoring reports for accuracy and document vulnerabilities for corrective action to be taken
Deliverable:
Produce monthly reports from the following security systems
o McAfee EPO
o Microsoft Cloud Defender
o Microsoft SIEM - cloud-managed and devices
o OKTA
o Patch Management
o Nessus vulnerability scans and remediation plans
Assist in security assessment and accreditation of USADF GSS
Assist in preparing Continuous monitoring monthly reports
Assist in updating agency security policies, NIST security controls
testing and updating the IT Security Policy Handbook
7.1.3. IT Infrastructure
The Contractor shall provide the following activities in support of the Foundation's Information Technology infrastructure.
Provide an updated Standard Operating Procedure (SOP) documentation and design of operations and infrastructure of the following:
Deliverable:
o Network Diagram - Up-to-date
o Manage Hypervisor infrastructure to include planning for hardware upgrade with proper change control management procedures, planning and coordination
Update network diagram when there are changes on the network
Update/upgrade network devices (firewall, switches, routers) when there are new patches or newly releases
Manage and upgrade VOIP infrastructure as needed
Plan for new voice rollout
Manage Hypervisor infrastructure
Complete a SOP for network infrastructure
13.0 MINIMUM QUALIFICATIONS
The Contractor shall have the following minimum qualifications:
13.1 Minimum of five (5) years of experience working with Microsoft Windows Servers
(2008/2012/2016) in an enterprise environment
13.2 A minimum of three (3) years working and administering Microsoft Office 365 cloud
nd Microsoft Azure
13.3 A minimum of three (3) years working and providing administration of the following
Microsoft Office 365 cloud components
i. SharePoint Online
ii. Exchange Online
iii. Office 2016 Professional or for Business
iv. Microsoft Teams
v. Microsoft Azure
vi. Skype for Business
vii. One Drive for Business
13.4 Working knowledge of Identity Access Management Systems and Single Sign-On
13.5 Minimum three (3) years of experience Administering Unified Messaging Communications and Voice Messaging Systems to include Backups, Add-Move-Change
13.6 Knowledge of McAfee EPO
13.7 Working knowledge of Patch Management Systems
13.8 Minimum three (3) years of experience with network vulnerability scanning and
nalysis
13.9 Knowledge of Log Management
13.10 Excellent Troubleshooting skills
13.11 Working knowledge of Microsoft SQL server
13.12 Working knowledge of Web content publishing
The United States African Development Foundation (USADF) is an independent Federal agency
established to support African-designed and African-driven solutions that address grassroots economic and social problems. USADF provides grants directly to under-served and marginalized community groups and enterprises. The grants help organizations create tangible benefits such as increasing or sustaining the number of jobs in a community, improving income levels, and addressing social development needs. USADF is a public corporation with a seven-member Board of Directors who are nominated by the President and confirmed by the United States Senate.
USADF is a Federal grant-making public corporation and can be characterized as a micro-agency with 50 staff members in Washington. Washington staff communicates with approximately 70 contractors and partners in 20 countries in Africa via email and telephone. USADF's annual budget is approximately $30 million per year.
2.0 SCOPE
USADF has a need for an IT Senior Systems Engineer in the Office of the Information Technology
(Client)/Finance and Administration to support the agency's IT operations, infrastructure and security operations.
7.0 REQUIREMENTS
The Contractor shall work cooperatively with the USADF IT Chief in completing the following
requirements.
7.1 Major Duties
The Contractor serves as the Information Technology Systems Administrator in the Office of Information Technology and provides the following services.
7.1.1. IT Operations
The Contractor shall ensure running operations of the Agency's network servers and Microsoft Office 365 Cloud server infrastructure to include but not limited to the following:
On-premise Active Directory Servers
Foundation's data center servers to include operational functioning of the following:
o Domain Name Servers (DNS)
o Dynamic Host Configuration Protocol (DHCP servers)
Maintenance to most recent Operating System (OS) and vendor version of the following security related systems
o McAfee EPolicy Orchestrator software
o Up-to-date Software repository of the EPO server
o Up-to-date Anti-Virus/Malware software and proper distribution across the Foundation's IT Infrastructure platform
o Ivanti Patch Management System
Operational Maintenance of Core Security components such as Cisco Meraki Core, Distribution and Access Level switches
Operational configuration of Network and Systems Vulnerability scanning system such as Nessus or any other system in use
Maintenance and upgrade of the Agency's firewalls and its components such as Intrusion Prevention Systems and Firepower
Administration of Single Sign-On system (Okta)
Administration of Microsoft Office 365 cloud and related components
s follows:
o Microsoft Azure
o Exchange Online
o SharePoint Online
o Microsoft Intune
o Microsoft Teams
o One Drive for Business
Administration, configuration and upgrade of the Foundation's VoiceOver-IP (VOIP)
Infrastructure and Operations to include the following:
o Cisco Unified Messaging Communication (CUCM)
o Cisco Unity Connection - Voicemail Messaging
o Cisco Voice Gateway
Administration of the Foundation's Log Management system and other security devices such as Web Filters
Administrative support for the Foundation's Public Website (www.usadf.gov) Content Management platform
Administrative Support of the Foundation's Grant Management System with the following activities:
o Adding new users with roles and permissions
o Remove/Disable employees who have departed/resigned/terminated
o Work with product support or product vendor's technical support to resolve pending technical issues to include incident escalation.
Deliverable
Maintain running operations of on-premise active directory
Perform systems administration duties on Microsoft Azure and on-premise active directory servers
Perform systems administration duties of the following
o Microsoft Exchange Online
o SharePoint Online
o Teams
o Intune
o One Drive for Business
Perform systems administration duties of voice gateway, CUCM and Cisco Unity Connection
Maintain foundation's log management systems and Foundation's Grant Management System
7.1.2. IT Security
The Contractor shall provide the following in support of the Office of Information Technology:
ssist the Chief Information/Chief Information Security Officer in the accomplishing the following FISMA (Federal Information Security Management Act) activities:
o Prepare and review NIST related security controls and work in coordination with the security analyst to ensure the controls have been addressed through preparedness
o Work with IT Security Analyst to ensure IT Systems Continuous Monitoring metrics and addresses per metrics scheduled and proper documentation and evidentiary reports are met
o Conduct monthly vulnerability, scanning of agency's computer devices, review vulnerability reports and plan effective process for timely remediation of those vulnerabilities. Document the remediation status
o Provide lead for Client activities to include Continuous Diagnostics and Mitigation implementation
o Assist the Chief Information Security Officer in preparing, reviewing with security contractor Security Assessments and Accreditation (SA&A) of USADF Information Systems
o Management of Okta Identity Management and Single Sign-on platform
o Ensure proper server configuration and monitoring of the following security systems
o McAfee EPO for anti-virus and malware
o Patch Management Server
o SIEM Event Logs
o Audit Manager and audit reports
o Review, Analyze Continuous Monitoring reports for accuracy and document vulnerabilities for corrective action to be taken
Deliverable:
Produce monthly reports from the following security systems
o McAfee EPO
o Microsoft Cloud Defender
o Microsoft SIEM - cloud-managed and devices
o OKTA
o Patch Management
o Nessus vulnerability scans and remediation plans
Assist in security assessment and accreditation of USADF GSS
Assist in preparing Continuous monitoring monthly reports
Assist in updating agency security policies, NIST security controls
testing and updating the IT Security Policy Handbook
7.1.3. IT Infrastructure
The Contractor shall provide the following activities in support of the Foundation's Information Technology infrastructure.
Provide an updated Standard Operating Procedure (SOP) documentation and design of operations and infrastructure of the following:
Deliverable:
o Network Diagram - Up-to-date
o Manage Hypervisor infrastructure to include planning for hardware upgrade with proper change control management procedures, planning and coordination
Update network diagram when there are changes on the network
Update/upgrade network devices (firewall, switches, routers) when there are new patches or newly releases
Manage and upgrade VOIP infrastructure as needed
Plan for new voice rollout
Manage Hypervisor infrastructure
Complete a SOP for network infrastructure
13.0 MINIMUM QUALIFICATIONS
The Contractor shall have the following minimum qualifications:
13.1 Minimum of five (5) years of experience working with Microsoft Windows Servers
(2008/2012/2016) in an enterprise environment
13.2 A minimum of three (3) years working and administering Microsoft Office 365 cloud
nd Microsoft Azure
13.3 A minimum of three (3) years working and providing administration of the following
Microsoft Office 365 cloud components
i. SharePoint Online
ii. Exchange Online
iii. Office 2016 Professional or for Business
iv. Microsoft Teams
v. Microsoft Azure
vi. Skype for Business
vii. One Drive for Business
13.4 Working knowledge of Identity Access Management Systems and Single Sign-On
13.5 Minimum three (3) years of experience Administering Unified Messaging Communications and Voice Messaging Systems to include Backups, Add-Move-Change
13.6 Knowledge of McAfee EPO
13.7 Working knowledge of Patch Management Systems
13.8 Minimum three (3) years of experience with network vulnerability scanning and
nalysis
13.9 Knowledge of Log Management
13.10 Excellent Troubleshooting skills
13.11 Working knowledge of Microsoft SQL server
13.12 Working knowledge of Web content publishing