Network Security Administrator, Sr

Serves as a member of the Network and Infrastructure Services (NIS) team collectively responsible for the installation, maintenance and overall technical administration of College network and server systems. Ensures the 24/7 availability, integrity, security and reliability of all Network Systems.

Oversees design, implementation and execution of the network security hardware/software maintenance and upgrades. Responsible for infrastructure engineering, maintenance, and support of complex network security systems and tools used to protect and support a multi-campus, geographically distributed enterprise network.

Essential Job Functions

• Develops and executes planning and implementation of network security systems and processes.
• Implements and maintains next-generation firewalls, intrusion detection/prevention systems, network access control systems, networking access control lists, and secure remote access technologies (e.g., VPNs).
• Designs and implements standards, policies, procedures and documentation to assure appropriate access, use, support, back-up/recovery, security and overall administration of network systems.
• Ensures physical and virtual security of network systems in collaboration with the NISS leadership. Monitors security events for security incidents, investigates causes, and develops reports to document findings and recommend risk mitigations to prevent or reduce future incidents.
• Performs periodic analysis of network security threats and vulnerabilities and provides recommendations to mitigate network security risks. Provide security awareness topics and training to IT staff and other technical staff as needed.
• Provides higher-tier technical support, performs detailed and well-documented fault investigation, and takes timely and appropriate corrective action to address network and system incidents.
• Manages, maintains and supports network systems, including, but not limited to network, directory/authentication systems, anti-spam/anti-virus systems, security systems, DNS, DHCP, VPN, clustering, and load balancing.
• Manages, supports, and ensures operating capability of both the wireless and wired LAN/WAN networks are up for all hours of operation. Supports network systems configuration of switches, routers and WAN technologies including Ethernet over Dark Fiber.
• Supports specification, installation and management of network hardware, including set-up, operating system installation and updates, and troubleshooting. Participates in the administration and implementation of network strategies and upgrade of network devices.
• Monitors network systems performance, logs and health, including management of alerts from commercial, open source, and locally developed monitoring tools.
• Collaborates with other Information Technology areas and other College constituencies to assess functional needs, and propose and implement timely, cost-effective, and innovative solutions.
• Support the administration for network management systems and back-up/recovery systems; including business continuity planning, testing and support to ensure all systems are backed up and can be restored in the event of a system failure or loss.
• Resolves system outages, problems and help desk incidents. Initiates contact and leverages relationships with vendors to resolve problems and installations in a timely manner.
• Continuously updates job knowledge by participating in educational opportunities, reading professional publications, maintaining personal networks and participating in professional organizations. Actively works with fellow team members to increase team knowledge and skills and impart industry knowledge.
• Ensures communication and responsiveness at all time. Recommends, initiates, and implements improvements to IT operations and processes. Contributes constructive suggestions for change or improvement in other areas.
• Performs other departmental duties as required.

Qualifications

• Bachelor's degree from a regionally accredited institution or equivalent experience and/or equivalent combination of education and experience [required].
• Experience with layer 7 firewalls and related configuration optimization (PaloAlto, SonicWall) [required].
• Experience with core routers and edge switch support (i.e. Extreme and Cisco Switches)[required].
• Experience with protocols/technologies such as TCP/IP, RIP, OSPF, MPLS, EIGRP, IPSLA, BGP, HSRP, TFTP, Telnet, NAT, VPN [required].
• Experience with network and server administration processes and best practices with a strong security awareness and focus, including defense-in-depth principles. [required].
• Experience in the following areas are preferred:
• Networking, load balancing and clustering equipment to include, but not limited to, Cisco, Extreme, F-5 platforms.
• Network security systems and best practices.
• TCP/IP, LAN and WAN familiarity and analytical skills in an enterprise environment.
• DNS/DHCP familiarity as well as troubleshooting of same.
• Systems management, monitoring and tuning tools and processes to include but not limited to, What’s Up Gold, Solarwinds, etc.
• Security Incident and Event Management (SIEM) tools, such as Splunk or LogRhythm, to monitor, verify and improve upon in-place architectures, as well as capture tools such as Wireshark.
• Systems integration including operating systems, and networks.
• Identification and resolution of network os/firmware/hardware interface problems.
• Scripting and other programming languages to perform and automate routine tasks.
• Help in analyzing network system logs and tread dumps.
• Disaster recovery concepts and best practices.
• Experience working within a formal project management and change management methodology.
• Understanding of common enterprise services as it intersects with large scale corporate networks.

• CCNA or CCNP, SSCP, CISSP, Security+, or GSEC certification desired.
• A demonstrated commitment to equity and inclusion.
• Must be able to perform all of the essential functions of the job with or without reasonable accommodation.

Knowledge Skills Abilities

• Understanding of common enterprise services as it intersects with large scale corporate networks.
• Knowledge of Cloud technologies, with emphasis on transition of physical security architectures to cloud based, software defined network constructs.
• Ability to interpret security and compliance policies into executable requirements.
• Ability to work with minimal supervision both independently and as a member of a team.
• Ability to work in a typical computing environment, requiring walking, standing, lifting and bending for brief periods may be necessary.
• Ability to work irregular hours may be a regular requirement for this position in order to provide 24 hour on-call support for mission critical systems.
• Ability to travel between campuses may be required on an occasional basis.
• Excellent interpersonal and communications skills.
• Ability to effectively present information and respond to questions from managers, clients and the College community.
• Ability to define problems, collects data, establish facts and draw valid conclusions.
• Strong troubleshooting skills and ability to effectively resolve or escalate issues to management or vendor support as necessary.
• Ability to write reports, documentation, business correspondence and procedure manuals.
• Ability and willingness to learn new technologies, systems and software and adapt to change on an ongoing basis.
• Ability to handle multiple assignments through prioritization and time management, and effectively document and communicate status of projects and issues to management and Information Technology personnel.
• Ability to meet deadlines, ability to achieve and maintain expected productivity levels.
• Ability to work effectively in a diverse community and meet the needs of diverse student populations.