IT Systems Administrator

1.0 BACKGROUND



The United States African Development Foundation (USADF) is an independent Federal agency

established to support African-designed and African-driven solutions that address grassroots economic and social problems. USADF provides grants directly to under-served and marginalized community groups and enterprises. The grants help organizations create tangible benefits such as increasing or sustaining the number of jobs in a community, improving income levels, and addressing social development needs. USADF is a public corporation with a seven-member Board of Directors who are nominated by the President and confirmed by the United States Senate.

USADF is a Federal grant-making public corporation and can be characterized as a micro-agency with 50 staff members in Washington. Washington staff communicates with approximately 70 contractors and partners in 20 countries in Africa via email and telephone. USADF's annual budget is approximately $30 million per year.



2.0 SCOPE



USADF has a need for an IT Senior Systems Engineer in the Office of the Information Technology

(Client)/Finance and Administration to support the agency's IT operations, infrastructure and security operations.



7.0 REQUIREMENTS



The Contractor shall work cooperatively with the USADF IT Chief in completing the following

requirements.



7.1 Major Duties



The Contractor serves as the Information Technology Systems Administrator in the Office of Information Technology and provides the following services.



7.1.1. IT Operations



The Contractor shall ensure running operations of the Agency's network servers and Microsoft Office 365 Cloud server infrastructure to include but not limited to the following:

On-premise Active Directory Servers

Foundation's data center servers to include operational functioning of the following:

o Domain Name Servers (DNS)

o Dynamic Host Configuration Protocol (DHCP servers)

Maintenance to most recent Operating System (OS) and vendor version of the following security related systems

o McAfee EPolicy Orchestrator software

o Up-to-date Software repository of the EPO server

o Up-to-date Anti-Virus/Malware software and proper distribution across the Foundation's IT Infrastructure platform

o Ivanti Patch Management System

Operational Maintenance of Core Security components such as Cisco Meraki Core, Distribution and Access Level switches

Operational configuration of Network and Systems Vulnerability scanning system such as Nessus or any other system in use

Maintenance and upgrade of the Agency's firewalls and its components such as Intrusion Prevention Systems and Firepower

Administration of Single Sign-On system (Okta)

Administration of Microsoft Office 365 cloud and related components

as follows:

o Microsoft Azure

o Exchange Online

o SharePoint Online

o Microsoft Intune

o Microsoft Teams

o One Drive for Business

Administration, configuration and upgrade of the Foundation's VoiceOver-IP (VOIP)

Infrastructure and Operations to include the following:



o Cisco Unified Messaging Communication (CUCM)

o Cisco Unity Connection Voicemail Messaging

o Cisco Voice Gateway

Administration of the Foundation's Log Management system and other security devices such as Web Filters

Administrative support for the Foundation's Public Website (www.usadf.gov) Content Management platform

Administrative Support of the Foundation's Grant Management System with the following activities:

o Adding new users with roles and permissions

o Remove/Disable employees who have departed/resigned/terminated

o Work with product support or product vendor's technical support to resolve pending technical issues to include incident escalation.

Deliverable

Maintain running operations of on-premise active directory

Perform systems administration duties on Microsoft Azure and on-premise active directory servers

Perform systems administration duties of the following

o Microsoft Exchange Online

o SharePoint Online

o Teams

o Intune

o One Drive for Business

Perform systems administration duties of voice gateway, CUCM and Cisco Unity Connection

Maintain foundation's log management systems and Foundation's Grant Management System

7.1.2. IT Security

The Contractor shall provide the following in support of the Office of Information Technology:

Assist the Chief Information/Chief Information Security Officer in the accomplishing the following FISMA (Federal Information Security Management Act) activities:

o Prepare and review NIST related security controls and work in coordination with the security analyst to ensure the controls have been addressed through preparedness

o Work with IT Security Analyst to ensure IT Systems Continuous Monitoring metrics and addresses per metrics scheduled and proper documentation and evidentiary reports are met

o Conduct monthly vulnerability, scanning of agency's computer devices, review vulnerability reports and plan effective process for timely remediation of those vulnerabilities. Document the remediation status

o Provide lead for Client activities to include Continuous Diagnostics and Mitigation implementation

o Assist the Chief Information Security Officer in preparing, reviewing with security contractor Security Assessments and Accreditation (SA&A) of USADF Information Systems

o Management of Okta Identity Management and Single Sign-on platform

o Ensure proper server configuration and monitoring of the following security systems

o McAfee EPO for anti-virus and malware

o Patch Management Server

o SIEM Event Logs

o Audit Manager and audit reports

o Review, Analyze Continuous Monitoring reports for accuracy and document vulnerabilities for corrective action to be taken

Deliverable:

Produce monthly reports from the following security systems

o McAfee EPO

o Microsoft Cloud Defender

o Microsoft SIEM cloud-managed and devices

o OKTA

o Patch Management

o Nessus vulnerability scans and remediation plans

Assist in security assessment and accreditation of USADF GSS

Assist in preparing Continuous monitoring monthly reports

Assist in updating agency security policies, NIST security controls

testing and updating the IT Security Policy Handbook





7.1.3. IT Infrastructure

The Contractor shall provide the following activities in support of the Foundation's Information Technology infrastructure.



Provide an updated Standard Operating Procedure (SOP) documentation and design of operations and infrastructure of the following:

Deliverable:

o Network Diagram Up-to-date

o Manage Hypervisor infrastructure to include planning for hardware upgrade with proper change control management procedures, planning and coordination

Update network diagram when there are changes on the network

Update/upgrade network devices (firewall, switches, routers) when there are new patches or newly releases

Manage and upgrade VOIP infrastructure as needed

Plan for new voice rollout

Manage Hypervisor infrastructure

Complete a SOP for network infrastructure



13.0 MINIMUM QUALIFICATIONS



The Contractor shall have the following minimum qualifications:



13.1 Minimum of five (5) years of experience working with Microsoft Windows Servers

(2008/2012/2016) in an enterprise environment

13.2 A minimum of three (3) years working and administering Microsoft Office 365 cloud

and Microsoft Azure

13.3 A minimum of three (3) years working and providing administration of the following

Microsoft Office 365 cloud components

i. SharePoint Online

ii. Exchange Online

iii. Office 2016 Professional or for Business

iv. Microsoft Teams

v. Microsoft Azure

vi. Skype for Business

vii. One Drive for Business

13.4 Working knowledge of Identity Access Management Systems and Single Sign-On

13.5 Minimum three (3) years of experience Administering Unified Messaging Communications and Voice Messaging Systems to include Backups, Add-Move-Change

13.6 Knowledge of McAfee EPO

13.7 Working knowledge of Patch Management Systems

13.8 Minimum three (3) years of experience with network vulnerability scanning and

analysis

13.9 Knowledge of Log Management

13.10 Excellent Troubleshooting skills

13.11 Working knowledge of Microsoft SQL server

13.12 Working knowledge of Web content publishing