By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Position OverviewBy Light is supporting the Managed Information Technology Service (MITS) Enterprise Support Managed Services effort for the United States Transportation Command (USTRANSCOM). The USTC Managed Information Technology Services (MITS) contract is intended to provide strategic, technical, and program management guidance and support services to facilitate the operations and modernization of the combatant command’s infrastructure, systems, and applications. This support will be provided to the USTC Command, Control, Communications & Cyber Systems Directorate (TCJ6).
The successful candidate initiates, supervises, and/or develops requirements from a project’s inception to conclusion for complex to extremely complex programs; Provides strategic advice, technical guidance and expertise to program and project staff; Provides detailed analysis, evaluation and recommendations for improvements, optimization development, and/or maintenance efforts for client-specific or mission critical challenges/issues; Consults with client to define needs or problems, supervises studies and leads surveys to collect and analyze data to provide advice and recommend solutions.
This position is for Monday through Friday, normal business hours. However, employee may be required to provide after-hours and weekend support during planned or emergency events.
Responsibilities- Providing technical leadership and hands-on development and implementation of commercial cloud solution architectures that modernize the way our customers architect, deploy, and use cloud technology, focusing on security, scalability, and resiliency
- Planning, designing, and managing the migration, re-platforming, integration, implementation and operation of our client's complex cloud environments enabling managed shared services
- Ensuring commercial cloud service offerings (CSO) adhere to DoD Cloud Computing policy/guidelines
- Providing specific, detailed information for hardware and software selection, cloud service provider selection, implementation techniques, application data migration techniques and tools for the most efficient solution to meet business needs, including present and future capacity requirements
- Developing and conducting testing of cloud and virtualization systems
- Maintaining technical expertise relevant industry standards and in cloud computing and virtualization technologies such as cloud service provider architecture, design, and configuration; cloud deployment models including public, community, private, and hybrid; cloud service delivery models including infrastructure-, platform-, and software-as-a-service; automation; hypervisors; containers; virtual compute, storage, and networks; virtual infrastructure management; self-provisioning; and scaling
- Evaluating and reporting on new cloud and virtualization technologies to enhance capabilities of cloud-based and virtualized services
- May also provide systems engineering activities such as: Concept of Operations Formulation, Requirements Definition, Analysis and Engineering, System Architecting, System Analysis and Design, Interface and Data Architectures, Validation and Verification, System Integration, System Op. Performance Analysis, Lifecycle Cost Analysis Estimation, Decision Analysis and Physical Configuration Analysis (PCA)
- Participating with senior managers to establish strategic plans and objectives
- Recommending/making decisions on administrative or project work matters and ensures effective achievement of program, project, or organizational objectives
- Bachelor's degree and ten (10) years or more experience
- IAT Level III certifications (CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH)
- Computing Environment (CE) certification or certificate for the technical area of responsibility for Cloud or virtualization (e.g., Azure, AWS, oracle, IBM, etc.) with a preference in Azure.
- Proven track record of work experience as a cloud architect, designing and deploying cloud solutions
- Proficient knowledge of Redhat Enterprise Linux operating system and command line administration.
- Expertise in next generation firewall (Palo Alto) deployment, configuration and management
- In-depth understanding of, and experience as a cloud engineer with AWS, Networking, VPNs
- Understanding of layer three routing protocols, emphahisis on BGP.
- Experience troubleshooting end to end connectivity issues within DOD networking infrastructure
- Ability to utilize a variety of tools like Git, Jenkins, Groovy, YML, and AWS security capabilities (WAF, GuardDuty, Security Groups, IAM, etc.).
- General knowledge of AWS EC2, S3, System Manager, CloudFormation, CloudTrail, Lambda, IAM
- Exposure to AWS Workspaces or experience deploying VDI solutions to AWS Cloud
- Experience with Route 53 deployment and management within AWS GovCloud environment
- Experience with Zero trust architectures
- Administration of multiple networking devices, i.e. firewalls, F5 with networking configuration management tools such as Panorama, Big IQ, etc..
- Experience working in a team environment with the ability to mentor junior team members
- Proactively identify and resolve operational, tooling and process inefficiencies
- Master's degree
- 15 or more years of experience
- AWS Cloud Solutions Architect Professional Certification
- ITIL V4 Foundations Certification
- Experience with F5 Big-IP devices specificially the LTM and ASM modules
- Experience with AWS networking and AWS Transit Gateway
- Experience with Palo Alto FWs specifically managing security policy, NAT policy, and BGP routing.
- Experience with Juniper and Cisco virtual cloud routers
- Experience with BGP routing in a DoD environment.
- Familiarty with AWS Site-to-Site Connections
- Experience with Azure commercial cloud services.
- Knowledge of Route53 DNS
- DoD Secret clearance; TS/SCI preferred
Skills Required
- Bachelor's degree
- Ten or more years of experience
- IAT Level III certification: CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, or GCIH
- Computing Environment certification or certificate in cloud or virtualization technologies
- Cloud architecture experience designing and deploying cloud solutions
- Red Hat Enterprise Linux and command-line administration experience
- Palo Alto next-generation firewall deployment, configuration, and management experience
- AWS cloud engineering, networking, and VPN experience
- Layer 3 routing experience, particularly BGP
- Experience troubleshooting end-to-end connectivity issues in DoD networking infrastructure
- Experience with Git, Jenkins, Groovy, YAML, and AWS security capabilities
- Knowledge of AWS EC2, S3, Systems Manager, CloudFormation, CloudTrail, Lambda, and IAM
- AWS WorkSpaces or AWS-based VDI deployment experience
- AWS Route 53 deployment and management in AWS GovCloud
- Zero Trust architecture experience
- Administration of firewalls, F5 devices, and network configuration management tools
- Teamwork and ability to mentor junior team members
- Master's degree
- Fifteen or more years of experience
- AWS Cloud Solutions Architect Professional certification
- ITIL V4 Foundations certification
- F5 BIG-IP LTM and ASM experience
- AWS networking and AWS Transit Gateway experience
- Palo Alto security policy, NAT policy, and BGP routing experience
- Juniper and Cisco virtual cloud router experience
- BGP routing experience in a DoD environment
- AWS Site-to-Site Connections experience
- Azure commercial cloud services experience
- Route 53 DNS knowledge
- DoD Secret security clearance
- TS/SCI security clearance
What We Do
By Light Professional IT Services LLC (By Light) provides a full range of hardware and software engineering services to defense, civilian, and commercial customers worldwide. Driven by a management team that leverages real-world expertise from the defense, intelligence, federal healthcare, and commercial sectors, we provide reliable, efficient, and cost-effective IT solutions. Some of our successes include: • Completion of 80+ Global Information Grid Bandwidth Expansion (GIG-BE) sites both CONUS & OCONUS. Provided Optical Network Engineering, Implementation, & Project Control Worldwide. • Provided timely completion of ATM to IP Migration, Legacy Network Optimization, & VOIP Implementation of 47 CONUS Sites for the United States Special Operations Command (USSOCOM) SCAMPI Network. • Supporting the AMC CIO/G6 in the Depot Modernization Program, implementing CONUS wide 802.11/a/b/g/n wireless networks, Area Processing Center Migration, DISN Optimization, and a 40,000 user, enterprise-wide SharePoint Implementation. • Completion of 2,000 Plus Legacy Circuit Migrations to DISN Transport for DISN Transition Program. • Delivered Communications Support & Staff Augmentation for Deployed DoD Forces under the Program Executive Office Enterprise Information Systems Technology Applications Office (PEO EIS TAO). • Successful Implementation of Secure Intelligent Video Systems (IVS) for the Intelligence Community. • Supporting major international carriers in the modernization and expansion of Data Center Facilities. • Engineering new Turnkey “Cloud Services,” including Hosting, Managed Services, COOP, and Data Storage and Archival.
