Overview

Join Our Stellar Team at Castalia Systems!

Are you ready to skyrocket your career with us? We're on the lookout for ambitious individuals who are eager to make their mark in a diverse and thriving environment.

At Castalia Systems, we're not just another company – we're a certified Woman Owned Small Business (WOSB) and Small Disadvantage Business (SDB) committed to excellence since 2011. Join us in delivering top-tier solutions to the dynamic Defense and Intelligence sector.

As valued members of our team, we prioritize your well-being. Enjoy a comprehensive benefits package, including medical, dental, and vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too.

Responsibilities

Castalia Systems is seeking an ESS Administrator in the Camp Smith, HI area.

An ESS Administrator is responsible for managing the day-to-day operations of Computer Network Defense (CND) Endpoint Security Solutions (ESS) and Comply to Connect (C2C) services at HQ USINDOPACOM. This role involves ensuring the confidentiality, integrity, and availability of information assets by implementing, maintaining, and optimizing ESS and C2C systems. The administrator collaborates with various teams to enhance system security and compliance.

A qualified candidate will perform the following duties and responsibilities, but are not limited to:

• Implement, install, and troubleshoot ESS and C2C systems, including custom content development.
• Monitor system health, perform upgrades/updates, and oversee the operation of physical and virtual appliances.
• Tune ESS and configure C2C per DoD policies and guidance, ensuring compliance with detection signatures, policies, and access control lists.
• Review and respond to alerts from ESS clients continuously on a daily basis.
• Initiate incident response in IAW the HQ USINDOPACOM Cyber Incident Response Plan (CIRP) upon discovering anomalous traffic.
• Ensure assets within HQ USINDOPACOM network enclaves are correctly configured per guidance.
• Install and maintain EBSS components.
• Maintain Host-Based Firewall Rule Sets and Host Intrusion Prevention Signatures.
• Create and implement host firewall rule sets for different system types.
• Assist administrators with troubleshooting HBSS component installations and custom signature deployment.
• Provide weekly EBSS Baseline Report to track system status, module deployments, and event trends.
• Maintain documentation of all configurations and system changes.
• Perform weekly configuration management of EBSS-related systems.
• Ensure compliance with Security Technical Implementation Guide (STIG) requirements and DoD Public Key Infrastructure (PKI) for all assigned systems and applications.
• Analyze processes, systems, and applications for improvements and automation.
• Monitor system security posture using ACAS and create policies as needed.
• Collaborate with cybersecurity professionals and stakeholders to address security issues effectively.
• Develop and implement training and awareness programs for Network Operations staff on ESS and C2C usage.
• Stay updated on the latest cybersecurity threats, trends, and technologies.
• Provide Monthly Status Reports (MSRs) including accomplishments, task status, issues requiring attention, configuration management summaries, status of orders/directives, and recommendations.

Qualifications

Security Clearance Requirement:

Active/current Secret clearance is required.

Required Qualifications:

• High School Diploma.
• At least 4 years of system or network administration and at least one year of CND or SOC experience.
• IAW DoD 8140.03-M, must meet the Intermediate Proficiency Level qualifications.
• Must have experience managing and administering ESS Endpoint Protection Components as a global administrator for multiple sites.
• Must possess expert level knowledge of Windows operating systems and intermediate-level knowledge of Linux operating systems. Certifications a plus.
• Must have experience identifying and applying applicable security requirements (STIGS, IAVAs, and CTOs) to DoD systems.
• Must have at least one year of system administration experience with Forescout, ESS, or other endpoint security systems.
• Must have experience administering ACLs for local and/or network firewalls.
• Demonstrated experience of strong analytical and problem-solving skills
• Forescout and ESS system administrator training certificates of completion are required in the first 60 days of employment.
• Experience using Microsoft Office tools (Word, Excel, PowerPoint, Outlook, and Visio) in preparing analytical reports, information papers, and briefings for executive level recipients.
• Must have one or more relevant CND certifications; CISSP, CASP, OSCP, CySA , CEH, or GCIH.
• IAM-II Certification.

Preferred Qualifications:

• Splunk or other SIEM experience preferred.
• CISM
• CISSP (OR ASSOCIATE)
• GSLC
• CCISO
• CAP
• CASP CE
• HCISSP

Castalia Systems is an equal employment opportunity and affirmative action employer and strives to comply with all applicable laws prohibiting discrimination based on race, color, creed, sex, sexual orientation, age, national origin, or ancestry, physical or mental disability, veteran status, marital status, HIV-positive status, as well as any other category protected by federal, state, or local laws. All such discrimination is unlawful, and all persons involved in the operations of the company are prohibited from engaging in this type of conduct.