Senior Infrastructure Engineer

📋 Description

• • As a Senior Infrastructure Engineer at Guidehouse Inc., you will play a pivotal role in managing and evolving complex IT infrastructure, ensuring its reliability, security, and performance. This position is crucial for supporting critical government workloads, demanding a high level of technical expertise and a commitment to stringent compliance standards.
• • You will be instrumental in the migration of virtual machines from on-premises VMware environments, specifically VxRail clusters, to AWS Elastic VMware Service (EVS). This involves meticulous planning and execution of VM conversion, intricate networking reconfiguration, and precise storage adjustments to ensure a seamless transition to the cloud.
• • A core responsibility includes the administration and ongoing maintenance of robust VMware vSphere environments. This encompasses managing ESXi hosts, vCenter, Site Recovery Manager (SRM), and vSAN/VxRail storage solutions, ensuring optimal performance and availability.
• • You will configure and manage a suite of essential AWS services, including EC2 for compute, VPC for networking, Route 53 for DNS, IAM for access control, S3 for storage, and CloudWatch for monitoring, all in direct support of vital SBA workloads.
• • Your expertise will be called upon to assist in the design and implementation of AWS networking architecture. This includes managing route advertisements, configuring Transit Gateway for inter-VPC connectivity, and establishing secure hybrid connectivity between on-premises data centers and the AWS cloud environment.
• • You will be responsible for the administration of both Red Hat Enterprise Linux (RHEL) and Microsoft Windows Server operating systems (versions 2016, 2019, and 2022). This includes rigorous patching, security hardening, and performance tuning to maintain a secure and efficient server infrastructure.
• • A key aspect of your role will be to author and maintain security baselines for all operating systems. You will customize Tenable audit files to ensure compliance with security scanning requirements and regulatory mandates.
• • You will manage the integration of Microsoft Active Directory and Red Hat Directory Server, facilitating single sign-on capabilities and robust identity services across the enterprise.
• • Support will be provided for Windows Server API security hardening initiatives and the configuration and management of Group Policies to enforce security standards and operational consistency.
• • You will provide critical support for ColdFusion application servers, overseeing their deployment, managing SSL/TLS certificates, and troubleshooting connectivity issues with external services, such as Treasury DNP web services.
• • Assistance will be required for Oracle database infrastructure, including proactive performance monitoring, managing backup and recovery processes, and close coordination with dedicated DBA staff.
• • You will configure and manage F5 BIG-IP load balancers, a vital component for application availability and performance. This includes setting up SSL bridging, defining virtual server configurations, and implementing health monitors to ensure service continuity.
• • A significant focus will be placed on cybersecurity and compliance. You will execute vulnerability remediation tasks within strict Service Level Agreement (SLA) requirements (15-day for critical, 30-day for high vulnerabilities), utilizing Tenable for scanning and tracking remediation progress.
• • You will support endpoint protection operations using SentinelOne and contribute to cloud security posture management through the use of Wiz.
• • Assistance will be provided in managing Plans of Action & Milestones (POA&Ms), collecting audit evidence, and preparing responses for Government Accountability Office (GAO) and Inspector General (IG) audits.
• • Maintaining compliance with federal security frameworks such as FISMA, FedRAMP, and NIST 800-53 is paramount to this role.
• • You will support the deployment and configuration of Dynatrace, a leading application performance monitoring and observability tool, ensuring deep insights into the performance of the SBA environment.
• • Administration of backup solutions, including Cohesity and Veeam Backup & Replication, will be a key responsibility. This involves managing backup schedules, performing restores, and conducting capacity planning.
• • You will maintain and rigorously test disaster recovery procedures between the Sterling and Irvine sites, utilizing VMware Site Recovery Manager to ensure business continuity.
• • Infrastructure-related work will be managed within Atlassian tools, specifically Jira and Confluence, within a FedRAMP-compliant Atlassian Government Cloud instance.
• • You will create and update ServiceNow records to support portfolio reporting, streamline change management processes, and track incidents effectively.
• • Collaboration with cross-functional teams across various program offices, including OCA, OCFO, and OCIO, will be essential for project success.
• • Producing clear, detailed, and accurate technical documentation, including runbooks, architecture diagrams, and standard operating procedures, is a critical output of this role.