Network Engineer

The Office of Information Technology is seeking a Senior Network Engineer to play a key role in assisting with the establishment of new integration methods and standards, along with implementing system integrations according to those established methods and standards.

Duties and Responsibilities will include but are not limited to:

1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Check Point, and GlobalProtect VPNs.

2. Perform firewall deployments, rule migrations, firewall administration, and conversion of existing rule-based policies onto new platforms.

3. Work with critical core network infrastructure devices such as Next-Generation Firewalls, VPNs, log collectors, and monitoring systems that play a crucial role in IT security.

4. Work with cloud network infrastructure to configure firewalls, security policies, and monitor network traffic.

5. Develop and maintain documentation following NIST guidelines.

6. Project management.

7. Data administration.

8. Education

Bachelor's Degree in Computer Science, Information Systems, or another related field, or equivalent work experience.

Preferred Certifications: PCNSE, CISSP, CCNP, CCIE

6. Experience

7. Typically 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design, and administration.

8. Three to five years of experience with information security tools based on NIST standards.

9. Knowledge of security issues, techniques, and implications across existing computer platforms. Preference given for experience with NGFW Palo Alto or Check Point security products.

10. Experience using schematic diagramming tools to map infrastructure layouts.

11. Primary Job Duties / Tasks

Senior Network Engineer – Job Duties

1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and web-based services.
2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation.
3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments.
4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations.
5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency.
6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues.
7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support.
8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure.
9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions.
10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries.
11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks.
12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements.
13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions.
14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities.

Senior-Level Requirements

Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership.

The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls.

8. Job Specific Skills and Abilities (KSAs)

Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff.

9. General Knowledge Skills and Abilities (KSAs)

The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas:

1. Communication: Ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings.
2. Customer Service: Works well with clients and customers and is able to assess customer needs, provide information or assistance, satisfy expectations, and resolve problems.
3. Decision Making: Makes sound, well-informed, and objective decisions.
4. Flexibility: Open to change, new processes, process improvement, and new information; able to adapt to changing conditions and unexpected obstacles.
5. Interpersonal: Shows friendliness, courtesy, understanding, and politeness to others.
6. Leadership: Motivates, encourages, and challenges others and adapts leadership styles to different situations.
7. Problem Solving: Able to identify, evaluate, and use sound judgment to generate and evaluate alternative actions and make recommendations.
8. Team Building: Encourages, inspires, and guides others toward accomplishing common goals.
9. Quality Assurance: Knowledge of quality assurance and control ideologies, techniques, and tools, with the ability to put them into practice.