The Cybersecurity Program Analyst (Technical Lead) holds a pivotal senior technical position, overseeing the management, maintenance, and protection of the specialized Information Technology (IT) and cyber infrastructure that powers the DOE-SR EM Cybersecurity Team. As the leading technical expert, this role is entrusted with the smooth operation of key facilities, including the Cyber Lab (730-B), the Cyber Security Operations Center (CSOC) in 730-2B, and critical assets housed within the Central Computing Facility (CCF) in 703-44A.
In addition, this position serves as the trusted backup to the Cybersecurity Program Analyst (Team Lead), playing a vital role in safeguarding the availability, integrity, and confidentiality of the hardware and software systems essential for cybersecurity assessments, incident response, and forensic analysis.
Requirements
- Manage the complete lifecycle of network infrastructure, including firewalls, switches, and routers, that support the cybersecurity team's facilities.
- Administer server hardware, including physical installation, configuration, and ongoing maintenance.
- Oversee the virtualization environment, including the creation, management, and security of virtual machines and hosts.
- Manage and maintain all workstation hardware and associated peripherals within the Cyber Lab and CSOC.
- Ensure all infrastructure components are patched, hardened, and configured in accordance with DOE policies, NIST guidelines, and vendor best practices.
- Develop and maintain comprehensive documentation for all managed infrastructure, including network diagrams, configuration guides, and asset inventories.
- Serve as the designated backup for the Cybersecurity Program Analyst (Team Lead), assuming leadership duties as required.
- Provide advanced technical support and troubleshooting for all cybersecurity team infrastructure and systems.
- Lead technical projects related to infrastructure upgrades, technology refresh cycles, and the implementation of new tools or capabilities.
- Collaborate with other IT and security teams to ensure proper integration and interoperability of systems.
- Implement and manage security controls for the team's infrastructure to prevent unauthorized access and ensure compliance with security policies.
- Conduct regular vulnerability scanning and configuration audits of all managed assets.
- Assist the CSAT by providing technical expertise on infrastructure security during assessments and audits.
- Maintain the operational readiness of the Cyber Lab and CSOC to support forensic analysis, incident response, and malware analysis activities.
- Provide technical recommendations to leadership for future technology investments and architectural improvements.
- Stay current on emerging trends and advancements in infrastructure technology, virtualization, and network security.
- Assist in developing technical training materials and mentoring junior team members on infrastructure management and security.
- Take direction from the assigned team lead and government tasking as a member of the Cyber Security team.
- Maintain accountability and security of assigned government equipment.
- Perform additional responsibilities and tasks, as directed, to support team objectives and organizational goals.
Clearance
- Must possess (or be able to obtain) a “Q” level security clearance.
Education
- Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field; or an equivalent combination of education and experience.
Experience
- Minimum of 7 years of hands-on experience in IT infrastructure management, network administration, or systems engineering.
- Demonstrated experience managing enterprise-level firewalls (e.g., Palo Alto, Cisco, Fortinet), including rule-set management, traffic analysis, and policy enforcement.
- Proven expertise in managing and maintaining server hardware (e.g., Dell, HP) and virtualization platforms (e.g., VMware vSphere).
- Strong background in network administration, including configuring and managing switches, routers, and VLANs.
- Experience with system administration for both Windows and Linux-based operating systems.
- Experience implementing and managing security tools such as vulnerability scanners (e.g., Tenable Nessus) and log management solutions (e.g., Splunk).
- Up-to-date knowledge of cybersecurity threats and mitigation strategies.
Certifications
- Networking certifications such as CompTIA Network+ or Cisco Certified Network Associate (CCNA).
- Security certifications such as CompTIA Security+, GIAC Certified Incident Handler (GCIH), or Certified Information Systems Security Professional (CISSP).
- Vendor-specific certifications such as VMware Certified Professional (VCP), Microsoft Certified: Azure Administrator Associate, or similar vendor credentials.
Benefits
- Covers 100% of employee benefit premiums, including Medical (PPO or HDHP Option), Vision, Dental
- Matching 401K
- Short- and Long-Term Disability
- Pet Insurance
- Professional Development/Education Reimbursement
- Parking and Transit Benefits for NY, NJ, ATL, and DC Metro areas
Other Duties:
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.