About the role
Concept Plus is seeking a Tier 3 Level Enterprise Management (EM) Administration Support Services to Support information and system security client Risk Management Framework (RMF), the Certificate of Net worthiness (CoN) and Risk Assessments. They will scan assigned servers to determine vulnerability status and maintain inspection-related documentation. Create, update, and maintain plan of actions and milestones (POA&Ms) and POA&M deviation requests (waiver/exception). Assist Systems Administrators to conduct detailed analysis of missing patches, report findings to the Cyber Security Office on a weekly basis. Enforce security and ensure proper security and system access authorizations are granted. Provide documentation to achieve and maintain ATO according to applicable client requirements. Provide architectural/boundary diagrams for accreditations and Risk Assessments.
What you'll do
- Support and maintain Active Directory and Entra ID architecture to provide authentication, synchronization, user provisioning, and authorization services for AD and cloud user accounts.
- Validate data encryption services on desktops and laptops for adherence with client regulations and policies; support deployment and maintenance of new government-approved data encryption solutions as they become available.
- Manage and monitor Data Encryption services to ensure systems and all supported devices are updated; create, deploy, upgrade, and install data encryption client packages, files, and policies in accordance with maintenance window policies; and provide data encryption services status reports.
- Collaborate and support future data encryption projects initiated by client.
- Using MS SCOM, monitor system uptime availability and maintain the framework for new and existing applications, servers, and services that require monitoring at the enterprise level.
- Analyze client's current enterprise system monitoring implementation and provide a status report before and after remediation actions are engineered and executed.
- Shall customize enterprise monitoring rules, alerting, and reporting functions for applicable client applications and servers, and produce reports depicting the performance indicators for these applications and servers, such as “uptime” and “downtime.”
- Maintain disaster recovery capability and procedures and ensure all enterprise monitoring servers are compliant to the latest appropriate DISA STIGs.
- Implement digital signature and encryption requirements specified in DoDI 8520.02, “Public Key Infrastructure (PKI) and Public Key (PK) Enabling.” Manage, and maintain Public Key Encryption (PKE) and Public Key Infrastructure (PKI) in a Windows environment for compliance.
- Support installation and maintenance of physical and virtual servers, enhance efficiency of critical systems, and ensure compliancy with applicable client and industry guidelines and policies .
- Develop, validate, and document Disaster Recovery (DR) procedures for all supported device types within the on-premises enterprise.
- Produce/update checklists, guides and/or standard operating procedures for enterprise monitoring and preventative maintenance.
- As necessary, prepare After Action Reports for submitted SITREPs, EXSUMs and UDRs.
- Manage, maintain, and support the client's Exchange Online environment. This includes tasks such as administering and configuring mailboxes, distribution lists, mail flow, and shared mailboxes.
- Monitor and troubleshoot email service performance and availability to ensure high reliability and uptime. Support and troubleshoot by providing Tier 3 support for Exchange Online-related issues and coordinating with client Engineers and Microsoft support for unresolved problems. They will also collaborate with other IT teams to integrate Exchange Online with enterprise systems and services, and to support migration projects.
- Generate regular reports on email service performance and maintain detailed documentation of all configurations, changes, and troubleshooting activities.
- Manage the eDiscovery processes within the client Tenant to ensure compliance with legal and regulatory requirements. This involves handling data collection, preservation, processing, review, and production for litigation, investigations, and audits. Coordinates the eDiscovery process, develops and implements policies and procedures, and ensures data integrity and security throughout the lifecycle of electronically stored information (ESI).
- Manages review platforms and tools, assists legal teams with data analysis, and produces ESI in response to legal requests. Ensures that eDiscovery practices adhere to legal and regulatory standards, provide training, and support to internal teams, and continuously seek to improve the efficiency and effectiveness of the eDiscovery program.
- Responsible for managing and mitigating risks associated with data spillage and leakage, the eDiscovery Administrator will monitor, identify, and respond to incidents involving unauthorized data exposure, ensuring containment and remediation measures are implemented.
- Address phishing attacks and other cybersecurity threats by coordinating with the security team to investigate, resolve, and prevent such incidents.
Required Qualifications