Cybersecurity System Administrator

Essential Job Functions and Responsibilities: (Knowledge, skills, and behaviors required for this position.)

• Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources. Employ approved defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, security robustness).
• Develop, implement, and maintain cyber security technical controls and operational systems.
• Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives. Coordinate with intelligence analysts to correlate threat assessment data.
• Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM], TEMPEST countermeasure reviews). Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
• Develop and conduct cyber security related human performance improvement projects.
• Build, install, configure, and test dedicated cyber defense hardware.
• Perform system administration on specialized cyber defense applications and systems (e.g., antivirus, audit, and remediation) or Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup, and restoration.
• Administer test bed(s), and test and evaluate applications, hardware infrastructure, rules/signatures, access controls, and configurations of platforms managed by service provider(s).
• Create, edit, and manage network access control lists on specialized cyber defense systems (e.g., firewalls and intrusion prevention systems). Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
• Coordinate with Cyber Defense Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, antivirus, and content blacklists) for specialized cyber defense applications.
• Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Follow software and systems engineering life cycle standards and processes. Develop applicable metrics and monitor results.
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records.
• Other duties as assigned.

Education, Credentials, and Work Experience:

Required

• Bachelor’s degree from an accredited institution.
• Level 1: High School and 6 years of relevant experience or Bachelors Degree Level 2: High School and 8 years of relevant experience or Bachelors Degree and 2 years of experience or Masters Degree
• Experience commensurate with level.
• Must be a US Citizen and have the ability to obtain and maintain a DOE “L” or “Q” clearance. May be required to obtain and maintain additional security clearance level of Human Reliability Program (HRP) certification.

Preferred

• Bachelor's degree in a related technical field including computer science, computer engineering.
• Experience working with AI, Security +, and Splunk general.
• Direct technical experience working in Enhanced Security Environments.

Physical Requirements:

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office and laboratory environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires the operation of job-related equipment and driving a vehicle. The employee must occasionally lift and/or move up to 50 pounds without assistance. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with the public is required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Job Information:

• The pay range for this position is Level 1 $57,444-$112,068 / Level $66,504-$136,356 . At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.

• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.

• A preferred internal candidate has been identified for this opening. However, all qualified internal candidates who are interested in the role are welcome to apply and will be considered in accordance with the laboratory's hiring process.

Working Conditions:

Incumbent of the position performs in a typical office setting with appropriate climate controls with laboratory field work subjected to variable weather. The noise level is generally moderate, with some exposure to high noises (>85 dB). Periodic travel required in normal course of job performance. Position may include exposure to mechanical, electrical, pressure, temperature, and other potential hazards. Periodic safety training is necessary. Position may occasionally be required to work special shifts or weekends in support of programs. Incumbents will work shifts greater than 8 hours/day and may work alone.

The above statements are intended to describe the general nature and levels of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Security and Privacy Language:
This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206.1A. Position must complete initial and annual role-specific training as required. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non-compliance may result in sanctions.

Level Definers

EX1 – Entry:

• Knowledge: Limited use and/or application of professional principles, theories, and concepts to well defined assignments of limited scope where causal relationships can be identified, and precedence exists.
• Problem Solving: Develops solutions to routine problems of limited scope. Follows standard practices and procedures. Builds stable working relationships internally.
• Discretion and Latitude: Work is closely supervised. Follows specific, detailed work instructions. Works on assignments that are initially routine in nature, requiring limited judgment and decision making.
• Impacts: Contributes to completion of routine tasks. Failure to achieve results can normally be overcome without serious effect on schedules and programs.
• Liaison: Contacts are primarily with immediate supervisor, leaders, and/or other professionals in the section or group.
• Education/Experience: Bachelor’s and 0 years of experience.

EX2 – Intermediate:

• Knowledge: Developing professional expertise. Applies company policies and procedures to resolve a variety of issues. Frequent use and application of standards, principles, theories, concepts, and techniques.
• Problem Solving: Provides solutions to a variety of problems of moderate scope and complexity. Exercises judgment within defined procedures and practices to determine appropriate action.
• Discretion and Latitude: Works under general supervision on routine work, detailed instructions on new projects/assignments. Follows established procedures. Work is reviewed for soundness of judgment, overall adequacy, and accuracy.
• Impacts: Contributes to completion of milestones associated with specific work assignments. Failure to achieve results or erroneous decisions or recommendations may cause delays in program work.
• Liaison: Primarily internal company contacts. Infrequent interorganizational and outside customer contacts on routine matters.
• Education/Experience: Bachelor’s and 2 years of experience. Master’s and 0. PhD and 0.