System Administrator - Server/Network/Security

System Administrative Services

Remote

• Create a holistic approach to cybersecurity for the entire CJIS environment. Develop a modern, thorough Cybersecurity Plan that details concrete actions that can be implemented to enhance the cybersecurity of New Mexico's CJIS environment.
• Isolate and better protect key subsets of the DPS network by completing the process of segmenting the DPS network. Network segmentation will reduce the vulnerability of network resources should the network perimeter become breached by a threat actor.
• Reduce the "attack surface" within the DPS network by replacing out-of-date and often-end-of life network and server equipment that have been identified to be risks to the security of the DPS network.
• Implement a more thorough and strategic approach to patch management and implement advanced patch management tools.
• Implement Federal Bureau of Investigation (FBI) recommended advanced authentication by integrating multi-factor authentication (MFA) throughout the DPS network infrastructure, including network switches, routers, firewalls, Virtual Private Network (VPN) solutions, servers, access points and applications.
• Increase the ability for DPS to conduct thorough cybersecurity forensic analysis by significantly enhancing logging of events, access, and errors related to the DPS network and servers. Significantly increase the length of time logs are stored and backed up.
• Implement a proactive approach to cybersecurity by implementing advanced network monitoring and alerting systems.
• Implement a security awareness campaign to reduce instances caused by the actions of end-users.
  
  

This CJIS Enhanced Cybersecurity project involves the implementation of a variety of hardware (including new switches, storage and Multi-Factor Authentication (MFA) tokens) and software components (including log consolidation and management, MFA management and Netapp software.) Some new components will be added as part of this project that do not currently exist in DPS's environment and some components will replace already existing out-of-date components. Most of these components will be hosted in the DPS data center in Santa Fe and the backup DPS data center in Las Cruces.

The DPS is specifically seeking expertise to assist setting up a new network domain. This includes the following:

• Server migration;
• User and workstation migration; and
• Application migration.
• Network configuration;
• Security systems implementation upgrades;
  
  

System Administrative Services

Task Item

Sub Tasks

Description

1.0 Move, rebuild and upgrade servers on new network

• Contractor will rebuild servers on new network domain.
• Contractor will identify and apply upgrades to servers.
• Contractor will upgrade and install software on servers.
• Contractor will work with vendors to migrate applications.
• Contractor will migrate Databases.
• Contractor will provide documentation of work completed.
  
  

1.1 Migrate users and workstations

• Contractor will migrate user accounts into new Active Directory structure.
• Contractor will apply authentication solutions as defined by procuring agency.
• Contractor will re-configure user workstations to work on new network domain.
• Contractor will provide documentation of work completed.
  
  

1.2 Rebuild applications on servers in new network

• Contractor will re-deploy applications on servers in new network domain.
• Contractor will work with vendors to install and upgrade software on servers and workstations.
• Contractor will migrate files from VNX to new storage system(s) (e.g., cloud storage versus file servers).
• Contractor will provide documentation of work completed.
  
  

1.3 Network Configuration

• Contractor will replace and install switches and routers.
• Contractor will adjust network configurations as defined by procuring agency.
• Contractor will provide documentation of work completed.
  
  

1.4 Security systems up implementation upgrades

• Contractor will install applications.
• Contractor will onboard users to security systems.
• Contractor will work with log files in Security Information and Event Management (SIEM) solution.
• Contractor will provide documentation of work completed.
  
  

1.3 Procuring Agency Acceptance

• Task completion will be subject to review, approval, and acceptance by the Procuring Agency. Acceptance shall result in a signed Deliverable Acceptance Form.