System Engineer (Cloud)

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Position Overview

By Light is supporting the Managed Information Technology Service (MITS) Enterprise Support Managed Services effort for the United States Transportation Command (USTRANSCOM). The USTC Managed Information Technology Services (MITS) contract is intended to provide strategic, technical, and program management guidance and support services to facilitate the operations and modernization of the combatant command’s infrastructure, systems, and applications. This support will be provided to the USTC Command, Control, Communications & Cyber Systems Directorate (TCJ6). 

The successful candidate will perform systems engineering work to maintain, configure, and reliably operate network servers, server virtualization systems, laptops, desktops, VDI, and supporting software/hardware. 

This position is for Monday through Friday, normal business hours.  However, employee may be required to provide after-hours and weekend support during planned or emergency events.

Responsibilities

• Managing and monitoring all installed systems and infrastructure
• Installing, configuring, testing, and maintaining operating systems, application software and system management tools
• Proactively ensure the highest levels of systems and infrastructure availability
• Monitor and test application performance for potential bottlenecks, identify possible solutions, and work with developers to implement those fixes
• Maintain security, backup, and redundancy strategies
• Participate in the design of information and operational support systems
• Provide 2nd and 3rd level support
• Liaise with vendors and other IT personnel for problem resolution
• System vulnerability remediation and reporting.
• System configuration and compliance
• Proven working experience in installing, configuring, and troubleshooting UNIX/Linux/RedHat based environments.

Required Experience/Qualifications

• Bachelors degree and ten (10) years or more experience
• IAT Level III certifications (CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH)
• Computing Environment (CE) certification or certificate for the technical area of responsibility for Cloud or virtualization (e.g., Azure, AWS, oracle, IBM, etc.) with a preference in Azure.
• Proven track record of work experience as a cloud architect, designing and deploying cloud solutions
• Proficient knowledge of Redhat Enterprise Linux operating system and command line administration.
• Expertise in next generation firewall (Palo Alto) deployment, configuration and management
• In-depth understanding of, and experience as a cloud engineer with AWS, Networking, VPNs
• Understanding of layer three routing protocols, emphahisis on BGP.
• Experience troubleshooting end to end connectivity issues within DOD networking infrastructure
• Ability to utilize a variety of tools like Git, Jenkins, Groovy, YML, and AWS security capabilities (WAF, GuardDuty, Security Groups, IAM, etc.).
• General knowledge of AWS EC2, S3, System Manager, CloudFormation, CloudTrail, Lambda, IAM
• Exposure to AWS Workspaces or experience deploying VDI solutions to AWS Cloud
• Experience with Route 53 deployment and management within AWS GovCloud environment
• Experience with Zero trust architectures
• Administration of multiple networking devices, i.e. firewalls, F5 with networking configuration management tools such as Panorama, Big IQ, etc..
• Experience working in a team environment with the ability to mentor junior team members
• Proactively identify and resolve operational, tooling and process inefficiencies

Preferred Experience/Qualifications

• Masters degree
• 15 or more years of experience
• AWS Cloud Solutions Architect Professional Certification
• ITIL V4 Foundations Certification
• Experience with F5 Big-IP devices specificially the LTM and ASM modules
• Experience with AWS networking and AWS Transit Gateway
• Experience with Palo Alto FWs specifically managing security policy, NAT policy, and BGP routing.
• Experience with Juniper and Cisco virtual cloud routers
• Experience with BGP routing in a DoD environment.
• Familiarty with AWS Site-to-Site Connections
• Experience with Azure commercial cloud services.
• Knowledge of Route53 DNS

Special Requirements/Security Clearance

• DoD Secret clearance; TS/SCI preferred

By Light recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:

• Medical, Dental & Vision Coverage
• Wellness Program
• 401(k) Matching
• Disability (Short Term & Long Term)
• Employee Assistance Program
• Life Insurance
• Education & Training
• Generous Leave Policy (11 Federal Holidays, PTO, and Military Leave)

By Light is an Equal Opportunity and Affirmative Action Employer. All qualified candidates will receive consideration regardless of gender, race, veteran status, disability, and any other protected class in accordance with federal, state and local laws.