Clearance Required: Candidate must be a US Citizen, and have at least a SECRET clearance.

Job Description: The United States Army Training and Doctrine Command (TRADOC) is a major command of the United States Army headquartered at Fort Eustis, Virginia. It is charged with overseeing the training of Army forces and the development of operational doctrine. TRADOC recruits, trains, educates, develops, and builds the Army, establishes standards, drives improvement, and leads change to ensure the Army can deter, fight, and win on any battlefield now and into the future. The objective of the TRADOC Cloud & Ancillary Support Services (TCASS) contract is to support cloud migration planning services including Inventory (Users, Applications, Infrastructure, Security & Privacy, Services Management); Application Mapping and Assessment; Migration Planning, Migration Services, and Cloud Support Services, Operations & Maintenance (CSS-O&M). This effort also includes the benefit of serving as an integrated solution provider to support the TRADOC DCS G6 as it executes the Army’s directives for cloud migration, data center consolidation, data management, portfolio management, risk management framework, and information system continuous monitoring.

Description of Duties:

• Manage Mission Owner issues, and escalations, and be involved in other Mission Owner interactions via tickets AESD (ServiceNow).

• Lead a group of engineers in support of daily cloud operations integral to TRADOC.

• Maintain a thorough understanding of the current cloud architecture, standards, and future technology plans, and recommend emerging trends for both hardware and software infrastructure according to their research;

• Be able to provide direction to cloud activities and assess system designs to ensure that solutions will perform satisfactorily regarding security, maintainability, and scalability;
• Implement, monitor and maintain Microsoft Azure solutions, including major services related to Compute, Storage, Network and Security;
• Perform Backup, Restore, Recovery and high availability strategies for Microsoft Azure environments;
• Build Windows Server VMs and assist with SQL database creation, configuration, upgrade, migration and patching; monitor, identify, and troubleshoot issues associated with VMs and SQL database related CPU, memory, I/O, disk space and other resources;
• Maintain Secure Azure infrastructure using different approaches, i.e., STIG VMs, STIG applications, STIG databases, STIG IIS/Apache, use of SELinux, Network Security Groups, Firewalls, and F5 appliance;
• Use Microsoft Defender for Endpoint, Microsoft Sentinel, and ACAS for vulnerability assessment and monitoring; investigate and mitigate issues identified by Vulnerability Disclosure Program (VDP) reports;
• Provide subject matter expertise on the ACAS Tenable.sc and Nessus products, to train cyber security on use and backend support;
• Troubleshoot and resolve Azure environment performance issues, connectivity issues, security issues, etc.;
• Be able to work independently with a complex Active Directory/Azure Active Directory, LDAP and establish/follow the mandatory standards, procedures, and processes to ensure the security and continuity of business operation;
• Consult with and advise stakeholder on access, work directly with users to resolve data conflicts and inappropriate data usage, and direct the maintenance and use of the enterprise architecture encyclopedia;
• Be responsible for the installation, maintenance, configuration, and integrity of SA;
• Work with system administrator, database analyst, web developers and software developers to schedule installations and upgrades and maintain them in accordance with established IT policies and procedures;
• Develop appropriate process documentation, document cloud architectures, and assist in writing technical artifacts;
• Support Azure DevOps projects as assigned.

Required Skills:

• Strong experience in implementing, monitoring and maintaining Microsoft Azure solutions, including major services related to Compute, Storage, Network and Security.
• Exposure in developing and designing the Azure Platform (Cloud, Compute, Network, Storage, Caching, Security, Backup/Restore & troubleshooting) for servers and databases.
• Strong knowledge of Backup, Restore, Recovery and high availability strategies for Microsoft Azure environments.
• Advanced knowledge of DNS, DHCP, Kerberos and Windows Authentication;
• Strong knowledge of IaaS and PaaS services;
• Be able to thoroughly understand and have experience with the Software Development Life Cycle (SDLC)’
• Experience with IT service management (ITSM) and Information Technology Infrastructure Library (ITIL).

Desired Skills:

• Basic knowledge in open-source frameworks such as ASP.NET and programming languages such as JavaScript, SQL Server, and HTML5 is preferable
• Prior experience in Google Cloud or AWS can be useful

Education:

• 10+ years of relevant experience (with MA/MS).
• 12+ years’ experience (with BA/BS).

Certifications:

• Must hold current or obtain within 90 days of start date: IASAE Level II (CASP+ CE, CISSP (or Associate), CSSLP)
• Microsoft certified Azure Administration

Clearance Required: Candidate must be a US Citizen, and have at least a SECRET clearance