ICAM System Administrator

Job Description

ECS is seeking an ICAM
Systems Administrator (Top Secret Cleared with CI-Poly) to work in our Washington, DC office.

ECS is seeking skilled and experienced System Administrators to join our organization. We offer the chance to support the world’s finest law enforcement organization and help the people that keep us safe. In this role, you will support agents, analysts, professionals, and the technology they use to combat terrorism, espionage, cyber-attacks, and major criminal threats. We have multiple positions available across different teams, including Unified Collaboration, ICAM, and Credentials.

As a System Administrator, you will be responsible for providing operational support to enterprise email and communication enabled business processes to include instant messaging, voice – and – video calling, and ad-hoc – and – structured conferences. Support for these tools is across multiple enclaves, Unclassified, Secret, and Top Secret/SCI networks.

Day to day work may include:

• Responding to service requests from the end-user, other IT professionals, and executive management.
• Performing routine monitoring, maintenance, and administration of application servers.
• Implementing database changes in response to changes in the customer’s enterprise computing environment, such as new versions and releases of application software, the introduction of new computing hardware, and the virtualization of computing hardware to host multiple logical servers. At a minimum, the candidate shall be qualified to be a senior level system administrator providing Tier-3 level support.

The candidate shall be proficient in operational support, maintenance, problem – solving, and system administration of enterprise email and communication servers.

Responsibilities:

• Provide guidance regarding changes to the AD schema
• Create and maintain a Group Policy Map to indicate what each group policy does, what resource(s) is (are) affected, and understand the effect of any change to group policy
• Audit changes to accounts, group policy, and other changes to AD with enterprise auditing tools (i.e Dell Active Administrator, Change Auditor, and Recovery Manager).
• Follow the Customer’s Change Management Policy when changing the customer’s IT infrastructure.
• Share knowledge with other members of the full AD team, regardless of whether other members are customer employees or contractors of this or another contractor.
• Provision, modify, and deprovision user and administrator accounts on the four (4) enclaves upon receipt of approved access or deprovisioning request, based upon location, role, or both.
• Make necessary adjustments to security controls to grant only access to IT resources required for job performance.
• Support personnel moves by migrating user profiles and data to data stores associated with new location.
• Follow the customer’s policy and procedures for account management to create, modify, or delete accounts and account permissions.
• Incident and problem resolution
• Documentation creation and updates. Operations and support.
• Manage and maintain standardized Organizational Units (OU) in AD
• Manage and maintain AD custom attributes and security groups
• Manage AD sites and subnets, including site replication
• Manage and maintain group policy, and scripts associated with group policy, to secure the IT infrastructure and grant necessary resources to staff, consistent with job requirements (i.e. workstation, server, common Microsoft products such as Exchange, SharePoint and other group policies as requested)
• Manage the AD database, System Volume (SYSVOL).
• Monitor Domain Controllers to prevent outages and/or restore service in a timely manner, analyze the policies currently monitored, and make recommendations as needed to provide meaningful alerts for action.
• Maintain a listing of all service accounts, the applications and servers which use them, and the unit responsible for the accounts.
• Manage user profiles, including access to share drives, OU assignment, password reset, and general directory cleanup at regular intervals.
• Manage and maintain delegation of permissions.
• System monitoring (using HP Operations Manager for Windows, Replication…