Information Technology Specialist

Summary

This position is located in the Division of Administration (DA) and responsible for directing the innovative internal management of the Commodity Futures Trading Commission's (CFTC or Commission) business, human resources, financial, technological, security, and strategic operational resources. DA works efficiently and effectively to ensure the fulfillment of the Commission's mission through continued success in continuity of operations.

Duties

As an Information Technology Specialist (Network) within the Network Operations section, the incumbent collaborates closely with and functions as a technical advisor to the Network Operations Manager in carrying out the agency's responsibilities for implementing a robust and effective enterprise IT program that supports the mission, goals, and objectives of the CFTC. At the full performance level, the duties include: Design, deploy, administer, troubleshoot, and monitor a hybrid network infrastructure including LAN, WAN, SDWAN, VLANs, IPv4/IPv6, MPLS, and data center networks using routers, switches, firewalls, VPNs, and other network technologies. Ensuring the rigorous application of information security/information assurance policies, principles, and practices in the delivery of network services. Design, deploy, administer, troubleshoot, and monitor virtual cloud networks (VCN) within the Azure and Aws Government Commercial Cloud (GCC) environments. Collaborate strategically with cross‐functional teams—including IT Operations, Cloud, and Security—to architect, synchronize, and optimize enterprise network capabilities across the agency's integrated physical and virtual infrastructures. This includes driving alignment of hybrid architectures, enforcing security and interoperability standards, and ensuring cohesive end‐to‐end operational performance across all network environments Manage, administer, and troubleshooting M365 technologies including Entra ID, Exchange, Purview, Teams, and OneDrive. Install, test, maintain, and upgrade various network operating systems (Windows/Linux) and software; Supporting other teams on policies, procedures, or technology solutions that have an impact on network infrastructure. Design, engineer, orchestrate, and continuously optimize highly complex virtual cloud network infrastructures (VCN) across AWS and Azure (GCC) environments. This includes architecting and governing Azure VNETs, network security groups, route tables, virtual firewalls, virtual WANs, ExpressRoute/Direct Connect integrations, and the full suite of enterprise-grade virtual network services—ensuring resilient, scalable, secure, and mission‐aligned cloud network architectures. Requirements

Experience must be IT-related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions, individuals must have IT-related experience demonstrating each of the four competencies listed below. Project Management: Knowledge of the principles, methods, or tools for developing, scheduling, coordinating, and managing projects and resources, including monitoring and inspecting costs, work, and contractor performance. Written Communication – Writes in a clear, concise, organized, and convincing manner for the intended audience. Technical Competence/Expertise - Uses knowledge that is acquired through formal training or extensive on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. Incidence Response and Customer Service- Demonstrates the ability to detect and handle network computer incidents demonstrating technical skill and the ability to follow procedures, and works with clients and customers who use or receive the services or products that your work unit produces. Critical Thinking – Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. Qualifications

In addition to these basic requirements, you must also possess one year of specialized experience at least equivalent to the next lower grade level in the Federal service. To qualify for the CT-13 level, you must have at least one year of specialized experience equivalent to the next lower grade (GS/CT-12 level). Specialized experience includes but is not limited to: Experience with designing and engineering full cycle secure hybrid (Cloud/Physical) network infrastructures using various network protocols such as LAN, WAN, SDWAN, VLANs, IPv4/IPv6, MPLS. Manage and administer the enterprise-grade CFTC Public Key Infrastructure (PKI) ecosystem spanning on-premises Hardware Security Module (HSM) devices and Azure Key Vault, ensuring cryptographic integrity across the enterprise. Architect, engineer, and spearhead enterprise-wide Zero Trust Architecture (ZTA) transformations, leading cross-functional project teams through the full lifecycle of strategy, design, deployment, and continuous optimization of comprehensive Zero Trust frameworks aligned with NIST SP 800-207 and industry best practices. Leverage various network/server monitoring tools, interpret packet captures, perform flow analysis, and provide detailed reports on enterprise infrastructure performance. This position is being filled at the CT-13 grade level with promotion potential to the CT-14. Bachelor's degree or higher in computer science or a related field, such as information systems, cybersecurity, data science, or mathematics Preferred certifications include Microsoft 365 Administrator, Azure Administrator Associate, or Cisco Certified Network Associate (CCNA), or higher

Education

Please refer to the OPM Qualification Standard Competency-Based Qualification Standard for the Information Technology Management Series, 2210 for the specific Education/Experience requirements for this position. Please refer to the requirements section of the announcement. How You Will Be Evaluated

This recruitment will utilize the following assessment tools: Accomplishment Record and Structured Evaluative Review Accomplishment Record: You will be required to submit an Accomplishment Record as part of your assessment. This requires you to provide written narratives detailing your past achievements as it relates to the specific experience. An SME will evaluate your narratives against your qualifications to determine a rating. The SME will score your responses as the first hurdle of the review process. If you pass the accomplishment record hurdle, your application will be forwarded and evaluated through the 2nd hurdle of the SME Evaluative Review. Please respond to the following questions to complete the Accomplishment Record and upload them with your application package. Failure to provide the required document, the Accomplishment Record, will consider you ineligible and will not be considered for the position. The Accomplishment Record is required at the time of application. Please provide short answers to the following questions: 1. Provide an example of a complex M365 (e.g. Exchange, Teams, OneDrive) migration/deployment project you significantly contributed to with hands-on configuration/administration. 2. Describe a time when you successfully planned, configured and implemented a router or switch upgrade/change. 3. Provide a specific instance where you were responsible for manually provisioning and configuring a virtual server within the Azure environment. 4. Describe a time when you used switching and routing technologies, to create an internal and external public facing network with access to both environments. 5. Describe how you have used scripting to improve PKI certificate management. The SME Evaluative Review. Subject Matter Experts (SME) will independently review your resume and other supporting document to assess how well your experience demonstrates the required competencies for this position. SMEs will assign scores based on the strength, relevance, and clarity of the information provided in your resume. These individual evaluations will then be combined to determine your final score or rating category. When the application process is complete, we will review your resume and other supporting documentation, to ensure you meet the hiring eligibility and qualification requirements listed in this announcement. If you are found qualified, you may be referred to the Structured Interview process. Structured Interview: During the structured interview panel, you will be rated on your resume and other supporting documents in your application package. You will be rated on the following competencies (listed in the "Qualifications:" section): Project Management Written Communication Technical Competence/Expertise Incidence Response and Customer Service- Critical Thinking You may preview questions for this vacancy. Other Information

This is a Bargaining Unit Position located in the National Treasury Employee Union (NTEU) Chapter 337. Relocation: Relocation expenses will not be paid. Probationary/Trial Period: As a condition of employment for accepting this position, you may be required to serve a 1-year probationary or a 2-year trial period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: Your performance and conduct; The needs and interests of the agency; Whether your continued employment would advance organizational goals of the agency or the Government; and Whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary/trial period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. Time-in-Grade: You must meet time-in-grade requirements within 30 days of the closing date of this announcement, if applicable. More than the number of positions listed may be filled through this vacancy announcement. The overall salary range is provided for informational purposes as it represents the full range that is applicable to current employees in this occupation/grade. A new hire's direct and overall experience are critical factors in determining a salary offer, therefore, it is important that your resume fully reflects all of your work experience. Note that the upper end of each range is typically applicable only to candidates with significant years of work experience and qualifications Please review the CFTC Compensation Program website for additional information. The law prohibits public officials from appointing, promoting, or recommending their relatives. The law prohibits requesting, making, transmitting, accepting, or considering political recommendations for employment or other personnel actions for non-political positions. This includes recommendations from Members of Congress, Congressional employees, elected state or local officials, and political party officials and any recommendation based on party affiliation. Content of Resume: Your resume or other written form you choose to describe your job-related experiences are used to verify your qualifications. Therefore, it is important that your resume accurately reflects the duties and responsibilities under each position you have held with each employer. In describing your experience, please be clear and specific. It is your responsibility to make sure your resume states complete information for each job entry (beginning and ending dates of employment stated as MM/YYYY to MM/YYYY; and total number of hours worked per week). If your resume does not provide enough information regarding your work history for us to make a creditable qualification determination, your application package may be rendered disqualified, and you will no longer be considered for this position. To assist you in sending in a complete resume, use the checklist at: https://www.usajobs.gov/Help/faq/application/documents/resume/what-to-include