• Systems Engineer (Host Guardian / Virtualization) – Subject Matter Expert

    Job ID 2019-3243
    Job Locations
    US-AZ-Fort Huachuca
    Engineering (non IT)
    Regular Full-Time
  • Overview

    NCI is a leading provider of enterprise solutions and services to U.S. defense, intelligence, health and civilian government agencies. Coupled with a refined focus on strategic partnerships, we are successfully bridging the gap between commercial best practices and mission-critical government processes. Core competencies include:

    • Artificial intelligence
    • Agile digital transformation
    • Advanced analytics
    • Hyperconverged infrastructure solutions
    • Cyber security and information assurance
    • Fraud, waste and abuse
    • Engineering and logistics


    NCI has been designated a 2018 Military Friendly Employer by MilitaryFriendly.com 


    Headquartered in Reston, Virginia, NCI has approximately 2,000 employees operating at more than 100 locations worldwide.


    As an Systems Engineer (Host Guardian / Virtualization) – Subject Matter Expert (GEF Surge Support), you will provide services in support of the U.S. Army Network Enterprise Technology Command (NETCOM). In support of the NETCOM Global Enterprise Fabric (GEF). You will provide operational and technical engineering support for the implementation, testing, integration, interoperability, and sustainment of information technologies support that support the GEF Army/NETCOM Enterprise.


    Highlights of responsibilities

    • As a Global Enterprise Fabric Systems (GEF) Engineer – Subject Matter Expert (SME) providing support to the U.S. Army Network Enterprise Technology Command (NETCOM).  Your efforts will be concentrated on the engineering, integration and management of the GEF VMware Virtualized Datacenters and associated components and services.
    • Provide expert advice and support on datacenter design, engineering, implementation and management issues.
    • Cultivate and maintain effective working relationships with a variety of stakeholders, including end-users, project managers, engineers and senior staff members.
    • Translate subject matter terminology into business terms and recommend alternatives to both senior management and engineering teams.
    • Execute Host Guardian Service (HGS) a server role introduced in Windows Server 2016 for configuring guarded hosts and running shielded VMs (shielded virtual machines) in Windows Server and System Center Virtual Machine Manager.
    • The Host Guardian Service Role specifically provides Attestation and Key Protections services that are needed to enable Hyper-V to run Shielded VMs. The Attestation services validate a Hyper-V host as a "guarded host," which then enables the Key Protection service to provide the transport key required to unlock and subsequently run Shielded VMs.
    • Have a strong foundation and understanding of VMware virtualization, architectures, networking and design using the latest virtualization, storage and cloud technologies.
    • Have a solid background and expertise in enterprise NetOps management tools to include:  Systems Management System (SYSMAN), CA Spectrum, System Center Configuration Manager (SCCM), System Center Operations Manager (SCOM), VRA, VROPS
    • Hands-on experience on how VMWare Cloud products and tools interrelate to ensure the secured configuration of multiple virtual data centers on the same physical infrastructure.
    • Provide configuration, integration, and Tier III support.
    • Knowledge and experience with Linux operating systems.
    • Provide engineering solutions and support to the LWN/Army DoDIN and Joint Information Environment (JIE) architecture and UC efforts related to BMS/GEF engineering, integration, testing and monitoring.
    • Provide engineering support during system configuration, integrations, and stabilization of security mitigations and intrusion control mechanisms at Army Post/Camp/Station.
    • Establish and perform engineering trend and traffic analysis.
    • Provide engineering support to NETCOM engineers for current and planned implementations.
    • Analyze engineering data to support network performance, security, and capacity planning in accordance with Army regulations, directives, and policies.
    • Provide engineering support to equipment in the LWN/Army DoDIN such as encryption, Remote client access, NAC, VPNs, Dynamic Host Configurations Protocol (DHCP) controllers, performance analyzers, EoIP, VoIP, and VTC.
    • Provide engineering solutions and engineering deployment documentation, such as; Service Design Plans (SDP); System Test Plans (STP); Enterprise Technical Procedures (ETP); Systems Validation Traceability Matrix; Systems Build Guides; Engineering Implementation Plans (EIP); Functional Requirements Document (FRD); draft list of materials (LOM) for acquisition; packaging for deployment; Risk Management Framework (RMF) Security Plan.
    • Establish system software and hardware baseline.
    • Provide configuration management support.



    • Current Information Assurance (IA) certification (required at performance start date): IAT II (CCNA Security, CySA+, GICSP, GSEC, Security+CE, SSCP). IA Certification Category and Level (IAW DoD 8570.10-M and BBP 05-PR-M-0002).
    • Clearance (required at performance start date): IT Level II (in accordance with AR 25-2) Secret.
    • Bachelor’s Degree 10 – 15 years’ experience.
    • Current Computing Environment (CE) certification: Host Guardian certification, Cisco Certified Network Professional or VMware Certified Professional6-Network Virtualization (VCP6) certification or equivilant.
    • Have a strong foundation and understanding of VMware virtualization, architectures, networking and design using the latest virtualization, storage, and cloud technologies.
    • Have a solid background and expertise in enterprise NetOps management tools I.E. Systems Management System (SYSMAN), CA Spectrum, System Center Configuration Manager (SCCM), System Center Operations Manager (SCOM).
    • Experience in all aspects of CyberSecurity in a VMWare and HyperV virtual environment and working knowledge of the following operating systems and applications: Linux, Microsoft.
    • Experience in Host Guardian deployment.


    Preferred Education and Experience

    • Additional Computing environment certification (MCSE, CCNA-Security, CCSP, CCNP-Security, CEH, etc).
    • Experience with and a working knowledge of CX-I and SIPRNET data center operations and functions such as but not limited to IT continuity of operations and disaster recovery (COOP/DR) strategies and planning and service delivery.
    • Experience in Microsoft Windows and Linux operating systems, virtual machines (VM) and stand-alone servers to include directory services, messaging, access control processes, and integrating application servers into the GMN Black Core environment.Experience with virtualization technologies in Operating Systems (OS), Network, Storage Area Network (SAN), and security devices.




    This position requires the ability to perform the below essential functions:

    • Sitting for long periods
    • Standing for long periods
    • Ambulate throughout an office
    • Ambulate between several buildings
    • Stoop, kneel, crouch, or crawl as required
    • Travel by land or air transportation 25%


    Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
    Share on your newsfeed

    Connect With Us!

    Not ready to apply? Connect with us for general consideration.