Reference #: 3899Responsibilities

　　Sabre Systems, Inc. is hiring a Computer Systems Engineer Architect Subject Matter Expert to provide enterprise directory services & operational support services to the Department of the Interior (DOI), Office of the Chief Information Officer (OCIO). Serving as a member of the Information Technology (IT) Directory Support team for the DOI, you will be a part of a team who ensures compliance within all IT Directory operations, Support Operations, and the IT Directory of one of the largest U.S. Government Departments. The DOI programs cover a broad spectrum of activities that are performed by ten (10) bureaus and multiple offices, each with a unique mission and set of responsibilities. The DOI OCIO, Enterprise Services Division, End User Services Branch, Enterprise Services Section, supports the mission by providing operational support of IT environments and its associated component services.The selected candidate will support a broad range of requirements, including but not limited to the following:Directory Services: Provide expert technical services in architecting, designing, implementing, and operational management of the DOI Enterprise Active Directory Services environment comprised of Microsoft Windows 2012 R2 through current release versions, Active Directory, Azure Active Directory, and various component services. This support includes expert technical services necessary to manage a secure role-based enterprise administration solution, provide operational security management services, support the A-130 certification and accreditation of the EDS, and to develop and provide incident and problem management. These services are located both on premise and in the Departments contracted Cloud hosting facilities.Continual review, maintenance and daily focus on operational security risks and best practices.EDS Operations, consolidation planning, and oversight.Monitor Performance of EDS related services level agreements.Manage EDS service-level management processes.Develop, maintain, and track new optimization and standardization requirements to meet Bureau, DOI, and Federal requirements.Assist in the development and execution of new IT initiatives directly and indirectly associated with the Department's implementation of EDS.Provide program support on behalf of the OCIO to external programs requiring the adoption or integration of EDS related components.Ensure replication between the domains of the EDS participant domains.Monitor event logs from forest root domain controllers using MOM, NetIQ, or other software tools.Monitor and maintain operating system, software service packs, and patches for EDS systems per departmental policy and guidance. Test service packs and patches for release and distribution to domain controllers within the EDS domains using Microsoft Systems Management Server and/or Windows Software Update Services (System Center Configuration Manager/WSUS), or appropriate distribution method.Operate and maintain all EDS related components in DOI Test and Development Lab.Operate and Maintain hardware associated with EDS system as appropriate.Maintain Security posture including appropriate security patching, anti-virus and definition files, and various other mandated security services and programs.Maintain any Department required monitoring programs.Operate and maintain the EDS PKI services to include online and offline certification authorities and Hardware Storage Module(s) (HSM).Monitor EDS Device PKI subordinates and online certificate status protocol (OCSP) responders to ensure the correct Certificate Revocation List(s) (CRL) are published, updated, and available to all Departmental users.Maintain the EDS Root namespace (doi.net).Operate and maintain all EDS DNS servers and services.Maintain the Forest Schema and implement only approved changes.Maintain sites, services, and subnets as required by the EDS Participants.Maintain br dgehead servers as required.Maintain enterprise licensing and inventory reporting as required.Operate and Maintain Active Directory Federation Services (ADFS) servers and Azure Federation Services, and appropriate proxy devices and hardware load balancers.Operate and maintain additional lightweight directory access protocol (LDAP) Directory services.Operate and maintain Directory Synchronization services.Maintain the EDS Support domains for Enterprise infrastructure, applications services, test lab, and development lab.Test disaster recovery operations to include a full restore of the EDS to a disconnected test network status quarterly.Serve as a liaison to the Enterprise Services Network and ad hoc teams to ensure connectivity to and between the various Active Directory services.Serve as a liaison to the Enterprise Messaging Service Team serving the EDS.Serve as primary configuration management control for the EDS. Prepare change control documentation and ensure compliance with Change Control Guidance.Perform day-to-day research ensuring technology and best practice guidance are applied and used appropriately within the EDS.Provide general technical and operational expert consultation and maintenance on security assertion markup language (SAML) 2.0, OAuth, and other Federation Services.Provide general technical and operational expert consultation on Microsoft Windows Server 2012R2 through current release versions, Active Directory and related Microsoft and other support and monitoring systems.Develop project plans to transition, administration and operations necessary to support this requirement.Install, Deploy, Migrate and Test Bureau DCs in the DOI EDS environmentTest, document and perform migration of File and Print servers in the DOI EDS environment. (Note that this migration is from on premise to the cloud.)Work with bureau Points of Contact to develop specific Group Policy Object (GPO) extensions or Configuration Service Provider (CSP) settings using the DOI GPOs as the baseline.Provide expert level development and assistance of required scripts and/or procedures using PowerShell or other as necessary.Provide training on systems administration to necessary personnel.IT Infrastructure Planning, Architectural Design, And Implementation Services: Support the centralization of the hardware, software, and dependent services for the EDS to increase the reliability and security of the DOI EDS services and to provide enterprise support and compliance with OMB, NIST and other applicable regulatory agencies.Operations and Maintenance for Servers and DOI EDS: Track change requests, provide estimated levels of effort associated with each, and incorporate approved changes into the system. Maintain a published and approved release schedule with proper version control on all source code and documentation. On-site support may be required.Operational Support Services: Provide expert technical services in supporting, designing, implementing, and operational management of the DOI End User Services (EUS), Enterprise Services Branch (ESB) environment comprised of Microsoft Windows operating systems, and various component services. This includes expert technical services necessary to manage various operational security management services and provide incident and problem management.Continual review, maintenance and daily focus on operational security risks and best operations, consolidation planning, and oversight.Monitor performance of related service level agreements.Develop, maintain, and track new optimization and standardization requirements to meet Bureau, DOI, and Federal requirements.