3098 Satcom System Manager

SATCOM Management
- STIG Compliance
- Database Analysis and Management

**Required Security Clearance**: NATO SECRET

**SCOPE OF WORK**
The contractor will provide System Management Services supporting the SATCOM Operations Team at NCI Agency in Mons, Belgium, focusing on server and network infrastructure, cybersecurity compliance, and operational readiness.

Tasks and Responsibilities
- Administer and maintain Microsoft infrastructure, including: Active Directory, DNS/DHCP, WSUS, Group Policy, and legacy Windows Server environments.
- Support the lifecycle of Cisco-based network infrastructure, including, but not limited: VLAN configuration, VPN Configuration, routing/switching, port security, device backups, and firmware updates.
- Manage patching, system updates, and software baselines across supported infrastructure.
- Conduct system performance monitoring, fault analysis, and troubleshooting of critical issues.
- Maintain configuration documentation and ensure alignment with approved baselines.
- Support and maintain security accreditation posture, ensuring system compliance with NCIA security policies and STIGs (Security Technical Implementation Guides).
- Assist with security audit preparations and follow-up actions, including corrective measures and control evidence gathering.
- Monitor system logs and event management tools; escalate security events as per agency protocols.
- Coordinate with cybersecurity, engineering, and operations teams on changes and upgrades.
- Participate in service improvement initiatives, including modernization of existing systems.
- Manage Agency backup solutions, ensuring successful execution, integrity checks, and recovery readiness.

Deliverables
The contractor shall produce the following deliverables:

- Infrastructure Configuration Documentation - Baseline system and network configurations.
- Monthly System Health Reports - Including patch status, fault resolution, and performance.
- Security Compliance Reports - Accreditation evidence, vulnerability remediation actions.
- Audit Support Package - Records prepared in advance of internal or external security audits.
- Incident and Change Logs - Documented activities and escalations affecting infrastructure.
- Final Handover Report - Detailing operational state, risks, and forward recommendations.

Objective KPI01: System Uptime
- Standard: % of Completion
- Performance Threshold: 99.9% of the measured period
- Penalty (if under performance threshold): 1%
- Method of Report: Monthly Report

Objective KPI02: Patch and update compliance
- Standard: % of Completion
- Performance Threshold: 100% of critical updates
- Penalty (if under performance threshold): 1%
- Method of Report: Monthly Report

Objective KPI03: Network infrastructure Availability
- Standard: % of Completion
- Performance Threshold: 99.9% of the measured period
- Penalty (if under performance threshold): 1%
- Method of Report: Monthly Report

Objective KPI04: Security accreditation support
- Standard: % of Completion
- Performance Threshold: 99.9% of the measured period
- Penalty (if under performance threshold): 1%
- Method of Report: Audit Preparation documentation

Objective KPI05: Audit Follow up completion
- Standard: % of Completion
- Performance Threshold: 99.9% of the measured period
- Penalty (if under performance threshold): 1%
- Method of Report: Corrective Action Reports

**SKILL, KNOWLEDGE & EXPERIENCE**
The Contractor’s personnel should fulfil the following requirements:

- Security Clearance: The Contractor shall possess valid NATO-SECRET Personal Security Clearances for the duration of the Contract performance.
- Language Proficiency: English: C1

Qualifications:
It is envisioned the services will be provided by a System Manager with experience in Microsoft-based server infrastructure and Cisco network platforms meeting the following requirements:

- Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
- Minimum 5 years of experience in system and network administration.
- Expertise in Windows Server platforms, Active Directory, WSUS, and backup solutions. Proficiency in Cisco Solutions, including knowledge of Cisco authentication technologies.
- Experience with security accreditation, STIG compliance, or audit remediation activities.
- Familiarity with ITIL practices and working in mission-critical or classified environments.
- Database management, data analysis, and troubleshooting.