Job Title Subject Matter Expert

No of positions 1

Security Clearance (Y/N) No

Period of Performance Three years

Place of Performance At least 1 business day per week at SNC’s headquarters in Auburn, CA (8:00 AM to 5:00 PM) - Hybrid

Candidate References Required Yes – 3 References

1. JOB DESCRIPTION – (SME TO ASSIST IT STAFF IN THE TECHNOLOGIES )

Minimum Qualifications

i. At least two years of administration support experience with Palo Alto and Cisco ASA

firewalls.

ii. At least three years of experience with complex network environments such as Point to Point,

VPN WAN, and VLAN.

iii. At least three years of experience with server administration such as Windows and Linux.

iv. At least five years of experience with VMware ESXi administration and support.

v. At least five years of Network Attached Storage (NAS) administration and support.

vi. Experience conducting NIST supported security assessments within the past three years.

vii. Good verbal, presentation, and writing skills as demonstrated by the consultant’s response to

Attachment 5, Narrative Technical Response.

viii. Ability to interact well with all staff regardless of end-user IT skills, as demonstrated by

reference checks.

iv. At least three years of experience with Azure.

Desirable Qualifications:

i. Five or more years of administration support experience with Palo Alto and Cisco ASA

firewalls.

ii. Five or more years of experience with complex network environments such as Point to Point,

VPN WAN, and VLAN.

iii. Five or more years of experience with server administration such as Windows and Linux.

iv. Seven or more years of experience with VMware ESXi administration and support.

v. Redhat certification.

vi. VMware certification.

vii. Microsoft Server certification (2016 and above).

viii. Four or more years of experience with Azure.

ix. Experience with EMC VNXe administration.

x. Possess a Cisco Certified Network Professional (CCNP), or higher certification.

xi. Possess a Global Information Assurance Certification (GIAC) and/or a Certified Information

Systems Security Professional (CISSP).

Job Description- SME

xii. Experience working with a California state agency or department to comply with State

Administrative Manual (SAM) 5300 requirements

Job Responsibilities:

a. Provide systems administration support and troubleshooting (Windows server 2016,

2019, and Red Hat Enterprise Linux):

• Perform backup procedures and processes to ensure business continuity

• Assist with disaster recovery planning and testing

• Ensure folder replication across servers and geographical locations

• Ensure Active Directory (AD) replication across multiple server farms

• Implement and monitor group policy management

• Provide AD/Radius Support/802.1X

• Provide Structured Query Language (SQL) Server Support

• Perform patch management

• Perform system hardening to meet state security requirements

• Follow configuration management processes and procedures

• Exercise best practices in troubleshooting and remediation activities

b) Perform Firewall and Virtual Private Network (VPN) Support

• Cisco firewall and VPN (remote access and site-to-site) support,

configuration, and upgrades based on Secure Sockets Layer (SSL) and

Internet Protocol Security (IPSec) standards

• Perform Palo Alto firewall support, monitoring, and configuration

c) Assist with IT security compliance

• Perform periodic vulnerability testing

• Perform security remediation

• Assist with State compliance reporting

• Ensure National Institute of Standards and Technology (NIST) standards are followed

• Installation and operations management of security alert systems (e.g. IDS, syslog,

event correlation, etc.)

• Assist in forensic analysis

• Analyze and monitor the firewall and intrusion prevention service (IPS)

• Development and implementation of recommendations for monitoring security events

• Monitor for potential abnormalities for potential future threats

• Maintain logs, such as windows server event and firewall activity logs

• Design and implement solutions needed to secure confidential data

• Provide support in creating and maintaining IT security policies, procedures, and

security related documentation. These policies shall be created in adherence with State IT

policies and shall meet or exceed federal and state security standards

• Assist with incident management reporting

• Assist with research and recommendations for new security technologies to meet

emerging threats

d) Oversee LAN/WAN/MAN Network operations

Job Description- SME

• Perform Cisco Catalyst and Hewlett Packard (HP) switch administration (Layer 2 and

Layer 3)

• Monitor spanning-tree operations

• Monitor and implement dynamic routing protocols (Open Shortest Path First (OSPF)

routing)

• Perform Virtual LAN (VLAN) management

• Manage IP address assignments (static and dynamic) and IP sub-netting

• Implement and monitor QoS settings

• Implement bandwidth shaping as required by Telco providers

• Perform iSCSI configuration and support for ESX host connectivity to NAS

e) Provide consultation on Area office network design and interconnectivity to Auburn

• Perform cable plant design

• Perform network installation

• Create/update design documentation

f) Provide wireless controller and access point support

• Ubiquiti Cloud Key

• 802.1x authentication

• Dynamic VLAN assignments

g) Monitor enterprise virus protection solutions

h) Assist with Microsoft Office 365 administration and support

i) Perform VMware ESXi and Vcenter design, configuration, and support

j) Perform Network Attached Storage support (EMC Centera /VNXE 3150)

k) Support the Aid and update IT Documentation including:

• Procedures

• Change Control

• Configuration Management

• Security reporting

• State reporting requirements

l) Assist with software, installation, configuration, and support

m) Provide on-going consultation on IT strategic plan

n) Provide consultation and recommendations for hardware and software improvements

o) Aid SNC IT staff in supporting video conferencing and audio/video webcasting solutions

p) Provide support in maintaining compliance with state requirements and reporting

q) Provide technical support for SNC Information Technology (IT) staff

REFERENCE Details of the Candidates

Name of Firm:

Address:

Contact Person:

Phone:

Dates of Service:

Total Cost of Service:

ConsultingWhiz LLC

New Jobs

Subject Matter Expert

Information Technology Specialist