Adversary Emulation Tool Management Support Service

Essential Qualifications/Experience:

·       Bachelor's degree in Computer Science, Information Technology, or related field or at least 6 years of experience

·       3+ years of relevant experience in IT security, with a focus on System Administration, Security Tools Management in large organisations

·       Relevant and proven experience acquired during the 3+ years time:

ü  Linux Systems administration(Install/configure/maintain Linux based servers, apply system updates/patches, monitor system performance/logs, manage users/permissions/settings of the platform)

ü  Docker management (maintain Docker containers, troubleshoot Docker based applications and volumes)

ü  Strong understanding of security best practices

ü  IP switching and routing, experience in network troubleshooting  Virtual Infrastructure understanding based on VMWare technologies

ü  Good engineering skills including programming and/or scripting knowledge (python, shell scripting, PowerShell)

ü  Demonstrable experience of analysing and interpreting logs in order to diagnose faults and spot abnormal behaviours

ü  Experience in Proxy management (Configure/maintain proxy, implement routing rules/access control)

·       In addition, the tool manager should have a good understanding of:

ü  NATO organization and its IT infrastructure

ü  Service Management, monitoring and reporting tools, such as Solarwinds

ü  ITIL Service Management

ü  System instrumentation solutions such as Ansible

ü  Certifications such as CISSP, CISM, or CISA, or equivalent

ü  An international environment comprising both military and civilian elements

DUTIES/ROLE:

·       System administration, monitoring and reporting:

ü  Install, configure, update Linux operating systems

ü  Manage user accounts, permissions and security

ü  Configure network service (DNS, DHCP, NFS, SSH)

ü  Proactively review logs and alerts to identify any technical issues, errors, or failures in the monitoring process

ü  Produce and distribute reports related to system health, monitoring activities, and compliance status (e.g., audit logs, system performance metrics)

ü  Daily: Verify the system is healthy (Check CPU, memory, disk usage, etc.), if not resolve the issues to make system up and running

ü  Daily: Review logs for errors or anomalies

ü  Daily: Respond quickly to outages or system alerts

ü  Daily: Check ITSM and take an action for requests, changes and incidents

·       System Documentation:

ü  Document configuration and changes: Keep up-to-date documentation of all configurations, integration steps, troubleshooting procedures, and system maintenance tasks

ü  Maintain an inventory: Keep track of all integrated identity sources, IAM systems, and external tools

ü  Weekly: Do the maintenance (Schedule and apply updates, check system resources, etc.)

ü  Weekly: Periodically test backup restores to ensure data integrity

ü  Weekly: Identify and resolve performance bottlenecks or capacity issues

·       Automation and Scripting

ü  Improve system efficiency: Identify areas where automation could reduce manual intervention and improve operational efficiency

ü  Monthly: Analyse trends in resource usage and plan for upgrades

ü  Monthly: Ensure service levels are met; report to stakeholders

ü  Monthly: Verify and update hardware/software inventory