Support Technician 3

Deliverables:

• Migration plans and timelines for legacy systems. Weekly upgrades should be scheduled with change control.
• Backup and disaster recovery strategies for RHEL and Windows systems.
• Post-migration system configurations and updates.
• Regular migration status reports and post-migration review reports.
• System documentation SOPs and internal training materials.
• EOL systems focus should be a minimum of 3 servers a week to be addressed for conversion (planning/testing/delivery). It is expected to have a minimum to have one EOL system converted/lifted per week per FTE through change control

Roles/Responsibilities:

• System Assessment & Planning:
  • Assess Legacy Systems: Conduct detailed assessments of existing EOL systems including Windows Server (2012 and older) and Red Hat Enterprise Linux (RHEL 5 67 and newer).
  • Identify Priorities: Prioritize migration based on system criticality security risks and operational needs.
  • Develop Migration Strategy: Create a comprehensive plan for transitioning legacy RHEL and Windows systems to supported versions including risk assessments upgrade paths and timelines.
• System Migration:
  • Legacy OS Migration: Migrate RHEL 5/6 and older Windows Server systems to newer supported OS versions (RHEL 8/9 Windows Server 2022/2025).
  • Upgrade Path Planning: Perform in-place upgrades as last resort. Primary job is to preform a reinstallation following best practices to ensure compatibility and minimize downtime.
  • Data Backup & Recovery: Implement data backup and recovery strategies before during and after the migration with a focus on reducing potential data loss during the upgrade process.
  • Post-Upgrade Validation: Validate the systems functionality after the upgrade (e.g. performance checks compatibility testing of critical applications system services and networking configurations).
• Configuration Management:

• System Reconfiguration: Reconfigure system services and settings (e.g. networking storage security settings) after OS upgrade.
• Configuration Management Tools: Utilize tools like Ansible for RHEL configurations and PowerShell for Windows configurations to maintain consistency across systems.
• Automation Scripting: Write and maintain automation scripts for repetitive tasks across both Windows and Linux systems.

• Security Enhancements:
  • System Hardening: Perform system hardening tasks on RHEL and Windows Server systems before and after migration to mitigate security risks.
  • Patch Management: Apply security patches and updates for both RHEL and Windows servers. Ensure that legacy systems are brought up to current patch levels before the upgrade.
  • Vulnerability Remediation: Run vulnerability scans and perform security updates to address any issues uncovered during the migration process.
  • Compliance Assurance: Ensure all systems meet internal security policies compliance regulations and industry standards (e.g. CIS Benchmarks NIST).
• Troubleshooting and Support:
  • Issue Resolution: Act as the point of escalation for system issues encountered during the migration process especially for legacy RHEL 5/6 and older Windows versions.
  • Post-Migration Support: Provide ongoing support for both Windows Server and RHEL systems after migration addressing system issues performance concerns or compatibility problems.
  • Problem Solving: Troubleshoot OS-level issues and application problems on both Windows and RHEL systems post-migration ensuring high availability and reliability.
• Documentation and Reporting:
  • Migration Documentation: Maintain detailed documentation of the migration process including steps taken configurations changed and any issues encountered and resolved.
  • System Configuration Records: Update system configuration records post-migration to reflect the new OS and environment. This will be reflected in the CMDB as well as the TRP list.
  • Progress Reporting: Provide regular updates and reports to stakeholders on migration status challenges and milestones achieved.
• Collaboration and Coordination:
  • Cross-Functional Collaboration: Work closely with other IT teams (e.g. networking database admins application owners) to ensure smooth integration of migrated systems.
  • Vendor Coordination: Coordinate with third-party vendors or support services as needed especially for issues related to legacy systems or proprietary software running on older OS versions.
  • End-User Communication: Communicate with end-users and stakeholders about any system downtime changes or disruptions during the migration process.
• Training and Knowledge Transfer:
  • Documentation for Internal Teams: Create detailed user manuals and internal documentation on managing updated systems.
  • Knowledge Sharing: Share insights and lessons learned from the migration process to help other teams with similar future upgrades or transitions.
• Backup & Disaster Recovery:
  • Backup Solutions: Ensure that backup solutions are in place for both Windows and RHEL systems
  • Disaster Recovery Planning: Update disaster recovery plans for systems post-migration and test recovery procedures to ensure business continuity.
• Post-Implementation Review:
  • System Audits: Conduct post-migration audits to verify that all systems are fully functional secure and compliant.
  • Post-Migration Optimization: Identify any post-migration system performance improvements optimizations or further enhancements needed.

Mandatory Skills:

Candidate Skills Qualifications & Experience (add the required skills and corresponding minimum required number of years). You may also add any preferred skills with the corresponding number of years) 8 years hands on upgrades of systems is needed for both windows and RHEL. 98% of our systems will be VM upgrades

1. System Hardening & STIG Compliance:
   1. STIG-based Hardening: Experience in implementing STIG (Security Technical Implementation Guide) recommendations to harden both RHEL (5/6/7/8/9) and Windows Server systems ensuring systems are configured to meet Department of Defense (DoD) security standards and best practices.
   2. RHEL STIG Compliance: Proficient in applying RHEL-specific STIG guidelines to harden Linux systems including configuring SELinux firewall rules user permissions and audit logs.
   3. Windows STIG Compliance: Hands-on experience ensuring Windows Server systems (2012/2016/2019/2022) adhere to Windows STIGs including configuring Group Policy settings Windows Defender and local security policies to secure the OS.
   4. Audit and Security Log Management: Ability to configure auditd for RHEL and Event Log for Windows to ensure that security events are logged and monitored in compliance with STIGs.
   5. Mitigating Common Vulnerabilities: Address vulnerabilities related to CIS Benchmarks STIGs and other security frameworks ensuring that systems are hardened against common threats and attacks.
   6. Automated Hardening and Remediation: Utilize automation tools such as Ansible Puppet or PowerShell scripts to ensure continuous compliance with STIGs across multiple systems.
2. STIG Remediation & Patch Management:
   1. Proficiency in running vulnerability scans (e.g. using Nessus OpenVAS or SCAP scanners) to check for compliance with STIGs and then applying necessary patches and configuration changes to remediate vulnerabilities.
   2. Implement continuous STIG compliance checks in production environments to ensure systems remain secure as patches and updates are applied.
3. Security Hardening Automation:
   1. Expertise in automating STIG compliance tasks using tools like OpenSCAP Ansible or custom scripts to ensure that both RHEL and Windows systems are consistently hardening to meet required security standards without manual intervention.

Desirable Skills: N/A