Description:
Penetration testing will be done in a non-destructive manner and will only go far enough to prove the possibility of exploit without exercising exploit or compromising systems. All exploits and compromises will be captured via screenshot or other methods and reported accordingly. Should the contractor find a critical vulnerability that has potential for immediate impact, contractor will notify the proper organizational personnel as soon as proof is obtained and risk is assessed, which may be sooner than the formal report is produced.
Monthly server patching assignments.
Monthly assesses needs and schedule quarterly VMware Security Review and patching if necessary.
Monthly DR assessments and planned quarterly DR recovery.
SIEM SOC assessment and review.
Agency networking devices, firewall assessment and review.
Agency data storage support.
Agency security remediation.
Include services in the Weekly Activity Report, if applicable.
New hardware installations.
Network device installations.
Network, configuration, issue identification and resolutions.
Datacenter configuration, issue identification and resolutions.
SQL Server configuration, issue identification and resolutions.
Include project updates in the Weekly Activity Report, if applicable.
Technology / Technical Requirements
Windows and Linux Servers
VMware and ESXi hosts
HPE and Cisco switches.
Veeam Backup and Recovery
HPE Storage Arrays
Cybersecurity compliance review (including but not limited to the items in this section).
Skills Required:
Proven experience in providing network management services, with a track record of successful client engagements.
Demonstrated expertise in configuring, monitoring, and maintaining network devices, including routers, switches, firewalls, and access points.
In-depth knowledge of network protocols, security practices, and performance optimization techniques.
Experience with supporting technology hosted in the State Datacenters.
Experience with the client network environment.
Experience with the client security policies, procedures, and controls.
A strong background in network security, including experience in identifying and mitigating security threats and vulnerabilities.
A history of implementing and managing robust security measures to protect network infrastructure and data.
Experience working with a range of network technologies, including but not limited to Cisco, Check Point, HPE, and other industry-standard equipment and software.
Proven ability to design and implement scalable network solutions to accommodate an organization’s growth and evolving technology requirements.
Experience in capacity planning to ensure network resources are effectively allocated.
A record of efficient incident response, including rapid issue identification, troubleshooting, and resolution, minimizing network downtime.
Proficiency in using advanced network monitoring tools and software to provide real-time insights and proactive network management.
Familiarity with industry-specific regulations and compliance standards, ensuring network management practices align with legal requirements.
Experience conducting thorough penetration tests to identify security vulnerabilities, along with implementing effective remediation strategies to mitigate risks and strengthen the network.
Strong client references from organizations of a similar size and industry, showcasing successful network management implementations and client satisfaction.
Other Requirements:
Preference given to vendors with the below skills/experience. Must also meet minimum requirements.
On-site and remote support is preferred.
After-hours availability is preferred (including nights, weekends, and holidays).
Previous State government experience preferred.
VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status