Visual Connections

Compensation

Full Description

Email Resume Interested in applying? Click button or email our HR department at HumanResources@visualconnections.net. Visual Connections, LLC is seeking an experienced System Administrator to drive the architecture, deployment, and ongoing operational administration of DTEX Systems (UEBA/Insider Threat platform) across a large-scale federal enterprise environment. This position requires deep expertise in enterprise Endpoint Detection and Response (EDR)/User and Entity Behavior Analytics (UEBA) platform rollouts, federal security compliance frameworks, and infrastructure management across hybrid on-premises and multi-cloud architectures. Key Responsibilities • Platform Architecture & Deployment: Support the technical deployment, endpoint agent distribution, and system configuration of the DTEX platform across tens of thousands of federal endpoints. • Systems & Data Integration: Configure integrations between DTEX and centralized Enterprise SIEM/SOAR platforms (e.g., Elastic, Splunk Cortex XSIAM, Microsoft Sentinel), identity providers (Active Directory, Okta, Entra ID), and ticketing tools (ServiceNow). • Policy & Rule Tuning: Design, test, and refine behavioral detection rules, risk-scoring models, and data loss prevention (DLP) policies to minimize false positives while maintaining visibility into insider risks. • Agent Infrastructure Management: Oversee agent health, perform automated updates, resolve endpoint agent conflicts, and ensure minimal CPU/memory impact on host endpoints. • Federal Security Compliance: Maintain alignment with NIST SP 800-53 (Rev. 5) controls, NIST RMF, Continuous Diagnostics and Mitigation (CDM) requirements, and relevant federal privacy guidelines governing user monitoring. • Troubleshooting & Tier 3 Support: Serve as the primary subject matter expert for complex platform failures, ingestion pipeline disruptions, and endpoint connectivity issues. • Documentation & Operations: Develop standard operating procedures (SOPs), system architecture diagrams, agent deployment runbooks, and operational handoff guides for SOC analysts. Required Qualifications and Experience • Experience: 3-5+ years of dedicated System Administration experience in large federal or enterprise IT environments, with direct experience implementing and managing enterprise UEBA or similar insider threat solutions. Experience with DTEX tools is a plus. • Endpoint Management: Proven success managing large-scale agent deployments across mixed OS environments (Windows Server/10/11, RHEL/Linux) via GPO, SCCM/MECM, or Microsoft Intune. Linux OS experience is necessary. • Log Pipeline & SIEM: Strong working knowledge of log forwarding, Syslog/HEC, JSON formatting, and REST API integrations for ingesting telemetry into enterprise SIEMs. • Networking & Infrastructure: Solid understanding of enterprise networking (TLS/SSL, proxy configurations, DNS, firewall rules) and virtual/cloud environments (AWS, Azure, VMware). • Federal Clearance: Ability to obtain/maintain an Agency-level Public Trust / Suitability determination. Preferred Qualifications • Preferred Certifications: CISSP, Security+, Network+, Microsoft Certified: Enterprise Administrator, or vendor-specific DTEX certification. • Familiarity with federal insider threat program requirements (e.g., Executive Order 13587, NISPOM Conforming Change 2). • Hands-on scripting capability in PowerShell, Python, or Bash for automated agent health checks and reporting. • Strong knowledge of the Linux OS. Visual Connections, LLC offers a full benefits package including: • Full Medical, Dental, Prescription and Vision health care • 11 Paid Holidays annually • Paid time off • Short Term, Long Term Disability and Life Insurance • Employee Assistance Program (EAP) Training and Development opportunities including professional certification and educational reimbursement Visual Connections, LLC provides employment opportunities for all employees and applicants in accordance with applicable federal, state and local laws. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. We are a Service-Disabled, Veteran-Owned Small Business; and a Certified Maryland Business Enterprise. We were established in 2007 to provide public and private sector clients with robust web-based applications, Health IT and Portfolio and Program Management services. We have proven ourselves to be valuable partners who can deliver both qualitative and quantitative results to our clients. Our versatile, efficient and experienced team has a stellar record of past performance, working with the Department of Defense (DoD), Department of Health and Human Services (DHHS), Veterans Health Administration (VHA), Centers for Medicare and Medicaid Services (CMS),Centers for Disease Control and Prevention (CDC) and , Blue Cross Blue Shield (BCBS). With an employee base well versed in different disciplines, we are able to deliver high quality customizable solutions. VC Accessibility & Compliance with Section 508 Visual Connections is committed to making its electronic and information technologies accessible to people with disabilities. To meet this commitment, our web pages have been designed to meet or exceed the Section 508 of the Rehabilitation Act (29 U.S.C. 794d), as amended in 1998 and to conform to the W3C Web Content Accessibility Guidelines (WCAG) 2.0, Level AA. If you require assistance or wish to report an issue related to the accessibility of any content on this website, please contact our Section 508 Team dtano@visualconnections.net to help us better serve you.