Job Title: Senior Network Security Engineer
Company: Irving Independent School District
Salary interval: yearly
Salary (min-max): 70857.0 – 97851.0 USD
Job level:
Company industry: Education And Schools
Description:
*Job Description*
**JOB TITLE:** **Senior Network Security Engineer****WAGE/HOUR STATUS:** **Exempt****REPORTS TO:** **Director of Networking & Cybersecurity****PAY GRADE:** **IT -5 (230 Days)****DEPARTMENT:** **IT Technology Services****DATE REVISED:** **07-2024*****A Letter of Assurance will be issued for this position.*****PRIMARY PURPOSE:****The primary purpose of the Network Security Engineer is to architect, design, develop, implement, manage, maintain, and monitor all district Local Area networks (LAN) and Wide Area Networks (WAN), VoIP networks, Cybersecurity Appliances, and End-User devices to ensure that the District’s Technology Infrastructure, Users, and District Data are safe and secure. This position will also be responsible for ensuring that the district’s network infrastructure operates at maximum speed and performance.****The Network Security Engineer will provide leadership to the network and Cybersecurity teams to ensure that comprehensive strategies and plans are in place to continuously protect the district’s network and systems from cyber-attacks. This includes continuously researching the latest network and cybersecurity trends, creating contingency plans, analyzing networking and cybersecurity threats through exploitation analysis, threat analysis, digital forensics, incident response, and vulnerability management.****QUALIFICATIONS:****Education/Certification/Experience:*** **Bachelor’s Degree in a Technology related field, and four (4) years of experience in a Technology supporting role.**
* **Certifications:**
+ **Cisco Certified Network Associate (CCNA) or equivalent required**
+ **CompTIA Security+ preferred**
+ **Systems Security Certified Practitioner (SSCP) or equivalent (recommended)**
+ **Certified Information Systems Security Professional (CISSP) or equivalent (recommended)**
**Special Knowledge/Skills:*** **Experience with network monitoring tools (Sniffer, Cisco Prime, SolarWinds, etc.)**
* **Knowledge of Firewalls (Cisco and Palo Alto) and VPNs.**
* **Experience with intrusion prevention and intrusion detection systems.**
* **Working knowledge of Microsoft Operating Systems in enterprise domain environments, Active Directory domains, LDAP, and remote desktop technologies and protocols.**
* **Working knowledge of web services, web protocols, and web filtering systems (e.g. ContentKeeper)**
* **Working knowledge of virtual environments (VMWare)**
* **Proficiency and experience with TCP/IP networking, and core technologies, such as BGP, OSPF, DNS, HTTP, etc.**
* **Experience in electronics, telecommunications, and local (including both “wired” and “wireless” architectures) and wide area networks.**
* **Knowledge of network facilities and data processing techniques, OSI reference model.,**
* **Significant hands-on troubleshooting abilities with Network products (e.g. Cisco), security software, performance monitoring, capacity management, and network management tools.**
* **Excellent organizational, communication, and interpersonal skills.**
**MAJOR RESPONSIBILITIES AND DUTIES:*** **Architect and Manage (design, develop, implement, manage, maintain, and monitor)** **all district networks (e.g.** **WAN, LAN, WLAN, and VLAN)****. This includes designing the wired and wireless local area networks (LANs) as well as the district’s wide area networks (WAN), and Virtual LANs. The Architecture and overall strategies will include Next Generation firewalls, LAN Security, and ensuring that all technology on the network is updated in a timely fashion. This overall strategy also includes ensuring that all network architecture and design documents stay updated and current.**
* **Provide leadership** **to the Cybersecurity team in the analytical** **analysis and updating of Irving ISD’s Information Security Plan** **and related standards, procedures, and guidelines.**
* **Responsible for assigned network security systems** **that are implemented and supported by the department that provide security for the entire district. This will include various levels of responsibility and coordination for network, core, wireless, internet and intranet access, firewall, web content filter, and server systems.**
* **Drive the utilization and management****of information security analysis tools****, techniques, and control activities to support the requirements of Irving ISD’s Information Security Plan.**
* **Manage (Install, configure, troubleshoot, and maintain****) the ethernet Local Area Network (LAN) infrastructure including but not limited to routers and switches (e.g. Cisco). Drive the design and implementation of new network deployments.**
* **Manage (Install, configure, troubleshoot, and maintain****) all Wide Area Network (WAN) related equipment (firewall, internet web filter, Intrusion Prevention System, Core switch, external DNS).**
* **Manage****(Install, configure, troubleshoot, and maintain****) the district’s 802.11x wireless network infrastructure including but not limited to wireless access points and Wireless LAN (WLAN).**
* **Manage (Install, configure, troubleshoot, and maintain) the districts network and voice solutions VoIP systems. Coordinate all aspects of network/****VoIP availability and security to minimize downtime.**
* **Manage the installation, configuration, and maintenance** **of network security appliances (Cisco ISE, Palo Alto Firewall) including but not limited to VPN services and VPN client installation.**
* **Manage (install, configure, and use)** **the district’s network management and monitoring software (SolarWinds Orion, Cisco Meraki Dash Boards, and packet capture software). This includes using these applications to monitor and maintain network performance. This also includes evaluating network management systems and making purchasing recommendations.**
* **Maintain expertise** **with current networking equipment and cybersecurity appliances to successfully perform the duties of this position. Stay current with emerging and next-generation networks and cybersecurity technologies to ensure that the district’s technology solutions are “future proof” and do not become obsolete.**
* **Provide technical supervision** **of all network technicians and assist all other technical staff in resolving network and security related issues that are beyond their level of expertise.**
* **Provide leadership and training** **to the networking and cybersecurity teams in leading-edge networking technologies such as s Domain Name Server (DNS), Dynamic Host Configuration Protocol (DHCP), and web content filtering applications.**
* **Manage all network** **planning, design, upgrade, and detailed documentation**
* **Collaborate with other departments** **to ensure successful project implementation.**
* **Manage customer problems and requests to ensure that they are resolved in a timely fashion.** **This includes using the appropriate work order system to assign and track work orders.**
* **Work in collaboration with departments** **that provide client support to determine best practices and direction for securing client device access security.**
* **Monitor and respond** **to service ticket requests for network security-related issues and provide related information as needed.**
* **Provide** **on-call services on****weekends, evenings,** **and** **holidays** **as needed.**
* **Perform other duties** **as directed by supervisor.**
* **Manage Contractors (Cabling and Equipment)** **to ensure that contracted work is completed in accordance with applicable standards and in a timely fashion.**
* **Perform all traffic routing activities** **required to maintain effective and efficient services across the district’s wide area network.**
* **Create and manage all documentation** **regarding the District’s Network Design and Equipment Inventory.**
**SUPERVISORY RESPONSIBILITIES:****Although supervisory responsibilities remain with the Director of Networking & Cybersecurity the Network Security Engineer must serve as team leader of the Network and Cybersecurity teams collaboratively to resolve network/cybersecurity problems.****WORKING CONDITIONS:****Mental Demands /Physical Demands/Enviromental Factors :** **Must maintain emotional control and exercise reasoning and problem solving skills while under stress. Must demonstrate ability to communicate effectively (verbal and written). Should be able to interpret procedures and analyze data for decision-making. Frequent in-district and occasional in-state or national travel. Occasional prolonged and irregular hours.****Safety:** **Perform all duties in a safe and responsible manner. Observe all safety precautions.*****The information contained in this job description is for compliance with the Americans with Disabilities Act (ADA) and foregoing statements describe the general purpose and responsibilities assigned to this job and are not an exhaustive list of all responsibilities, duties, and skills that may be required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.******Contribute to the prevention of accidents and injuries by observing safety rules and District policy, practicing the principles and skills taught in safety training, wearing personal protective equipment as required, reporting injuries and incidences immediately to supervisor, and being proactive in the ongoing efforts to improve workplace safety.***
*Primary Location* **Technology Services & Information Systems**
*Salary Range* **$70,857.00 – $97,851.00 / Per Year**
*Shift Type* **Full-Time**
