IT SysAdmin and Forensics Specialist/Sr IT SysAdmin and Forensics Specialist- 90412583 - Washington

****PLEASE NOTE: **** Amtrak OIG is not a Federal agency. Our employment opportunities are not federal jobs. Join with the Inspector General to help make America’s railroad operate more efficiently and effectively. Our team provides independent oversight of Amtrak’s programs and operations and works diligently to prevent and detect fraud, waste, and abuse by Amtrak employees, contractors, or vendors. This work not only helps to improve the efficiency and effectiveness of Amtrak, but it also informs decision-making by Amtrak’s Board of Directors, Amtrak management, and Congress. We employ a diverse team of auditors, special agents, analysts, forensic examiners, lawyers, and support staff to complete our exciting mission. Join us as we continue toward our goal of building a model OIG centered on independence, teamwork, diversity, work-life balance, and oversight that makes a difference! This job posting is intended to attract qualified candidates for either a IT SysAdmin and Forensics Specialist or Sr IT SysAdmin and Forensics Specialist role. The requirements below reflect then IT SysAdmin hiring level; the actual hiring level will be determined based on the selected candidate’s demonstrated knowledge, experience, and skills. SUMMARY OF DUTIES The IT SysAdmin and Forensics Specialist/Sr IT SysAdmin and Forensics Specialist supports the Digital Investigations Unit (DIU), the division responsible for complex cybercrime investigations and for supporting field investigations through digital forensic examinations and technical operations. The incumbent helps operate and secure the DIU's self-contained forensic network, a purpose-built environment of physical and virtualized systems maintained in-house and provides server and workstation administration; network and security support; identity, device, and access management; data protection and recovery; and customer support for DIU and Office of Investigations (OI) users nationwide. ESSENTIAL FUNCTIONS Serves as Information Security Specialist providing system administration, management, and support for the DIU network. Works with DIU staff to resolve customer questions and problems concerning automation systems, software/hardware issues. Performs upgrade of hardware to include memory, fixed storage, and installation of network interface cards (NIC) or enhancement cards. Installs new software versions and updates to DIU servers. Manages systems that meet current and future business requirements and apply and extend, enhance, or optimize the existing architecture. Manages assigned projects. Communicates technical requirements to non-technical personnel. As needed, prepares and presents briefings to senior management officials. Implements networked computer forensics architecture. Develops and uses automated methods to recover evidentiary data from Microsoft, UNIX, Linux, Macintosh, and other network-based systems penetrated by unauthorized parties. Analyzes, designs, develops, customizes, and implements a wide range of hardware and software to support large-scale LAN/WAN systems, including protocols, simple mail transfer protocol (SMTP) management systems, communications controllers, bridges. routers, firewalls, and other network devices that support DIU activities. Participates in audit reviews, security risk assessment tests and evaluation, and other accreditation activities to ensure that systems are fully accredited and comply with security standards. Evaluates system controls to determine compliance with applicable agency policies and requirements. Conducts maintenance, long-range planning, and configuration of LAN systems under the control of the DIU. Provides technical advice to senior management concerning network management issues. Performs work such as identifying and controlling DIU hardware and software configurations, and following technical standards and procedures for LAN development, implementation, and management. Establishes performance management metrics and evaluates overall network performance against relevant standards Installs new software versions and updates, creates and configures Virtual Machine (VM) systems for effective use by Special Agents and investigators. Interacts with users to ensure proper operation of VMs, hardware, and software. Performs acceptance tests, integration tests, maintenance, diagnostic tests, and helps analyze system failures as indicated by the different tests. Provides technical assistance in the resolution of problems as reported by users and detected by monitoring systems. Analyzes system performance of new and existing equipment to improve system and network configurations. Diagnoses and solves complex systems problems. Analyzes solutions for minimizing downtime to provide a stable, consistent systems environment. Collaborates with Criminal Investigators in gathering and analyzing digital evidence from computers, mobile devices, body worn media, vehicle systems, and other electronic devices in support of criminal and non-criminal cases. Conducts computer and mobile forensic examinations that are consistent with those standards established by Amtrak OIG, as well as reflective of current trends and techniques within the law enforcement, OIG, and professional communities. MINIMUM REQUIREMENTS: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Digital Forensics, Information Systems, or a related field; or an equivalent combination of education, specialized training, and work experience. Must have at least five years of progressively increasing experience administering, configuring, and maintaining Windows and/or Linux server environments, including managing system accounts, permissions, and authentication controls, and performing system patching, updates, and performance monitoring. Experience providing customer-focused end-user support, including diagnosing and resolving hardware, software, account, and connectivity problems. Networking knowledge at the CCNA level, to include working with VLANs, routing, and access control lists (ACLs), and the ability to troubleshoot connectivity and access issues across firewalls, VPNs, and segmented or restricted networks. Experience implementing controls to protect sensitive data, managing backups and recovery processes, and maintaining system integrity, auditability, and availability. Experience supporting IT systems that process sensitive, confidential, or legally protected information. Strong written and verbal communication skills, including the ability to explain technical issues clearly to non-technical users. Strong customer service orientation, with patience and professionalism when supporting end users. Proven reliability and ownership: able to take assigned tasks and deliverables and complete them by agreed deadlines with minimal follow-up or supervision. Strong troubleshooting and problem-solving instincts, with the persistence to track issues to root cause and restore service quickly when systems go down. Ability to work independently as well as in a team environment with minimal supervision. Ability to multitask and manage competing priorities with attention to detail. Ability to maintain composure in stressful situations and to safeguard the confidentiality of sensitive information. Ability to cooperate across organizational boundaries to reach shared goals. Creativity, flexibility, and the ability to work in a fast-paced environment with changing priorities. Analytical, problem solving, and basic project management skills. PREFERRED: Relevant certifications, such as CompTIA Security+, Network+, or A+; Cisco CCNA; Microsoft, Red Hat, or Linux administration certifications; virtualization certifications; and security certifications such as CySA+, GCED, CISSP, or CISM. Digital forensics certifications or coursework, such as GCFE, GCFA, EnCE, CFCE, or ACE, or comparable hands-on forensic training. Experience with clustered or hyperconverged virtualization platforms.