System Administrator 3

System Administrator 3This contract System Administrator 3 position will work within Operational Infrastructure (JOV subgroup within Transmission Technology (J) group in the Transmission Services (J-OT) business line of ***. JOV provides hardware maintenance lifecycle support for the BPA's Control Center systems. JOV also provides General Support System (GSS) infrastructure maintenance, troubleshooting, repair, emergency response, client support, system energization/acceptance testing, and performance analysis and trending. Organization Operational Infrastructure provides agency expert level (Tier 3) support for the GSS infrastructure in the control centers. Services in these support systems include authentication and access, storage and virtualization, malicious code protection, dispatch and scheduling display infrastructure, operating system platforms, vulnerability detection, patch management, network security and configuration management, cabling infrastructure, facilities management systems, and critical area security. Included in these responsibilities are the documentation and compliance activities required to perform these functions.Assignment Responsibilities:With BPA Manager BPA technical lead oversight, use professional level skills/ knowledge to perform system administration of the following systems, including the following:Configuring applicable software and systems, maintaining local documentation, installing/updating/removing software, applying change control processes and procedures, planning and preparing for future growth, trouble-shooting and resolving technical issues, and performing system-related training for the following systems:Server administrationVulnerability Scanning, including Nessus Cyber Vulnerability Assessment and MitigationResearch Implementation, design, and maintenance of least privileged and role based access control modelsPatch Management of network and compute devicesServer Virtualization, i.e. Hyper-V, VMWare vSphereNetwork Virtualization, i.e. VMWare NSX, Cisco ACIAntivirus, antimalware, and malicious code preventionStorage services, i.e. Nexgen, Pure, vSAN, other network-attached storage arraysDisplay infrastructureLaptop and workstation supportSoftware deployment servicesVirtualization infrastructureWindows & Linux operating systemsWindows infrastructure, i.e. active directory, group policy, PKI, et alSupport of in-house developed applicationsNetwork time distributionWindows file servicesLinux infrastructure (deployment services, CentOS)With BPA Manager oversight and approval provide the following support:Research, test and draft / document standardized technical procedures for the deployment of server and workstation computer hardware and associated operating systems; organize, store and dispose of superseded documents in accordance with Information Governance & Lifecycle Management (IGLM) standards.Perform regular assessments of newly discovered vulnerabilities on a wide range of operational network devices, computer systems devices and various software packages.Document patch and vulnerability applicability assessments and recommend vulnerability mitigation options.Report any concerns to the BPA manager.Implement, design, and maintain least privileged and role based access control models.Research, test and document standardized technical procedures for the deployment of server and workstation computer hardware and associated operating systems for final review and approval by BPA manager /staff.Respond to help desk client support calls utilizing change management software to process and complete the tasks necessary for resolution of technical client issues; unusually complex issues may include involvement of the appropriate BPA manager or team lead.Maintain files / filing system(s) in accordance with compliance requirements.File and disperse documents/letters as appropriate.Validate that all official records are accurately maintained for auditing purposes.Maintain file records in accordance with the Information Governance & Lifecycle Management (IGLM) standards and procedures.Provide advice and recommendations for process / procedural changes that may become necessary due to system changes, upgrades, etc. to appropriate BPA manager / team lead / BPA stakeholders.Provide input and recommendations, to the BPA manager, technical lead and staff, regarding computer infrastructure decisions and create tasks to fulfill management-directed goals.Support and assist the BPA team lead and North American Electric Reliability Corporation - Critical Infrastructure Protection (NERC-CIP) subject matter experts (SMEs) with implementing, analyzing, and reporting on the operational compliance of all Control Center cyber assets.Develop, draft and recommend improvements to the Control Center's procedures and processes for compliance with BPA and NERC-CIP standards and policies.Develop, draft and recommend improvements to the Control Center's procedures and processes for BPA's Grid Modernization project, as well as other capital and expense projects.Assist BPA management with the implementation and promotion of approved operational compliance process improvement efforts, specifically as relates to the administration of the above referenced systems.Requirements:Education & Corresponding Experience (required on matrix) A degree in Computer Science, Information Technology, or a directly-related technical discipline is preferred. With an Associate's or Bachelor's degree in applicable fields, 8 years of experience is required. Without an applicable degree, 10 years of experience is required. Experience must include direct work experience in Information Technology performing System Administration.Required Technical Skills & Experience (required on matrix) 2 years' experience with the following:Working knowledge and experience sufficient to successfully support and maintain a virtualized and converged compute environment.Working knowledge and experience sufficient to successfully support, maintain, and troubleshoot enterprise Windows infrastructure using active directory, group policy, Powershell, and other Windows utilities.Preferred Skills & Experience (optional on matrix) Experience setting up and administering an enterprise cyber vulnerability scanning and assessment infrastructure. Experience administering computer systems in a 24/7 high availability operational environment. Administration and maintenance of network systems infrastructure management tools or systems including anti-virus, patch deployment, log management, software deployment and backup and recovery functions. Experience administrating and performing and analyzing scans using Nessus. Experience in researching vulnerabilities and deploying security patches in a large IT infrastructure environment. Windows operating systems packaging, installation, and troubleshooting. Administration of virtualization technologies including VMWare and Hyper-V. Experience with administering both network and host based firewalls. Experience troubleshooting LAN connectivity problems. Experience using specific technologies such as Splunk, Remote Desktop Services, IIS, Wireshark, App-V, Tripwire, Trend Micro, LANDesk, Sysinternals Tools, Puppet Enterprises, Checkpoint Firewall, Veeam backup, Client and Cisco server hardware, KVM hardware, PowerShell.Additional Requirements (not required on matrix) Valid U.S. Driver's License is required. Other Assignment Considerations May be required to carry a BPA supplied cell phone and work non-core hours when requested. BPA-provided mobile devices are to be used solely for BPA purposes. This position will be required to successfully complete NERC-CIP Control Center Training as a condition of this contract assignment. First Tek