Network Security Officer

Posting number: 09221

Department: Ocala Fiber Network

Job classification: OFN Network Security Officer

Posting type: Open & Promotional

Categories: IT and Computers

Summary

The Network Security Officer will be responsible for maintaining and documenting the security profile of the Department. The security officer will work closely with all aspects of Department sections to ensure tight collaboration and integration of security solutions. The security officer must possess the ability to perform security requirements elicitation, analysis, and specification with a working ability to identify architecturally significant requirements and their ramifications. Develop attack and defense methodologies for high risk computer networks. This position will be responsible for business continuity and continuing operations during a disaster.

Examples of duties

ESSENTIAL DUTIES AND RESPONSIBILITIES

1. Responsible for executing software changes and modifications to the Data Transport and Voice Systems.
2. Monitors and analyzes data and voice network systems for performance and problem indication. Determines causes of problems and initiates corrective action.
3. Researches, evaluates, and recommends methods of enhancing network services to support and fulfill end-user requirements.
4. Inspects, oversees, and monitors contract services and vendors for quality of work and conformance to installation and repair procedures.
5. Responsible for coordinating projects requiring the involvement of the City of Ocala IT staff and projects to provide interconnectivity between the City and other external agencies.
6. Advanced configuration of Internet working devices such as bridges and routers in a multiprotocol environment (TCP/IP, IPX, SPB) using various interior and exterior routing protocols (RIP, OSFP, BGP-4) preferred.
7. Implementation and testing of LAN technologies such as Ethernet, Fast Ethernet and WAN technologies such as T1/T3, MAN, Active Ethernet, GPON and Dark Fiber.
8. Working knowledge with network management using SNMP based platforms
9. Designing and implementing operational and support standards for large network implementations supporting network operating system platforms
10. Research new and emerging security attacks and develop techniques and research solutions to control risks.
11. Evaluate the effectiveness of existing security measures, such as firewalls, password policies and intrusion-detection systems.
12. Make recommendations to improve security based on their assessments and knowledge of current and emerging threats.
13. Monitor system access to ensure compliance with standards and policies.
14. Promote appropriate security best practices and fundamentals in architectural design and implementation.
15. Perform security auditing, assessments, and evaluation vulnerability testing tools and procedures.
16. Develop policies that give managers and employees varying levels of access to applications, systems, and data.
17. Provides service consultation and support towards department related projects and or solutions.
18. Perform enterprise security architecture requirements analysis and design, support/lead engineering and deployment activities.
19. Provide ongoing engineering support for deployed security technologies, support security design reviews for all application and technology rollouts.
20. Review proposed changes in the technology environment for security implications
21. Evaluate and implement new technology for relevancy to the department's overall security strategy and in support of new business requirements/initiatives.
22. Evaluate each control, technology, and gap for potential improvement and refinement.
23. Coordinate with various project teams to communicate the necessity of security requirements and design constraints as part of SDLC.
24. Produce, review, and update designs for security vulnerabilities & gaps.
25. Responsible for maintaining departmental data security using NTFS and Share permissions following Microsoft-recommended best practices to maintain the highest degree of data integrity.
26. Installs server and client virus protection software and ensure updates are applied on a timely basis.
27. Responsible for managing the programming, administration, and support activities for the department's server and client systems, including configuration, performance management, backup and recovery.
28. Leads or commissions suitable information security awareness, training, and educational activities.
29. Responsible for working with the network engineer on firmware updates, patches to all operating systems across all systems.
30. Responsible for developing response plans, continuity of operations plans, and preventative plans for training.
31. Must be able to backfill work tickets for the helpdesk as business needs require.
32. Will work as the local agency security officer for FDLE requirements.
33. Must have experience across VMware, Azure, O365, Windows Operating Systems.
34. Position will require scheduled on call rotations and must be available to work nights, weekends, holidays as needed. Perform any other related duties as required or assigned
35. Perform any other related duties as required or assigned.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty mentioned satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.

EDUCATION AND EXPERIENCE

• Bachelor's degree in Information Technology or equivalent work experience with network architectures, client servers, firewalls, cloud environments, data backup / disaster recovery, Web Servers, etc.
• Possess experience administering security within an Active Directory environment.

REQUIRED CERTIFICATES, LICENSES, REGISTRATIONS

• Must possess and maintain a valid Florida Operators Driver's License with an acceptable driving record.
• Possesses Computer Information Systems Security Professional Certification, (CISSP) or successfully completes the exam for CISSP certification within 3 years of job placement.
• Possesses CompTIA Security Certification or acquire within 1 year of job assignment.

Supplemental information

RESPONSIBILITY FOR FUNDS, PROPERTY and EQUIPMENT
None.

SUPERVISORY RESPONSIBILITIES
Directly supervises 0 subordinate supervisor(s) who supervise(s) a total of 0 employee(s). Supervises 0 non-supervisory employee(s). Carries out supervisory responsibilities in accordance with the organizations policies and applicable laws. Responsibilities include interviewing, hiring and training employees; planning, assigning and directing work; appraising performance, rewarding and disciplining employees; addressing complaints and resolving problems.

COMMUNICATION SKILLS
Ability to read and understand simple instructions, short correspondence, notes, letters and memos; Ability to write simple correspondence. Ability to read and understand documents such as policy manuals, safety rules, operating and maintenance instructions, and procedure manuals; Ability to write routine reports and correspondence. Ability to effectively communicate information and respond to questions in person-to-person and small group situations with customers, clients, general public and other employees of the organization. Ability to read, analyze, and understand general business/company related articles and professional journals; Ability to speak effectively before groups of customers or employees.

MATHEMATICAL SKILLS
Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to prepare and interpret bar graphs.

CRITICAL THINKING SKILLS
Ability to solve practical problems and deal with a variety of known variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, or diagram formats.

SUPERVISION RECEIVED
Under direction where a definite objective is set up and the employee plans and arranges own work, referring only unusual cases to supervisor.

PLANNING
Considerable responsibility with regard to general assignments in planning time, method, manner, and/or sequence of performance of own work, in addition, the work operations of a group of employees, all performing basically the same type of work.

DECISION MAKING
Performs work operations which permit frequent opportunity for decision-making of minor importance and also frequent opportunity for decision-making of major importance, either of which would affect the work operations of medium organizational component and the organization's clientele.

MENTAL DEMAND
Close mental demand. Operations requiring close and continuous attention for control of operations. Operations requiring intermittent direct thinking to determine or select the most applicable way of handling situations regarding the organization's administration and operations; also to determine or select material and equipment where highly variable sequences are involved.

ANALYTICAL ABILITY / PROBLEM SOLVING
Moderately directed. Activities covered by wide-ranging policies and courses of action, and generally directed as to execution and review. High order of analytical, interpretative, and/or constructive thinking in varied situations.

USE OF MACHINES, EQUIPMENT AND/OR COMPUTERS
Regular use of highly complex machines and equipment; specialized or advanced software programs.

ACCURACY
Probable errors of internal and external scope would have a moderate effect on the operational efficiency of the organizational component concerned. Errors might possibly go undetected for a considerable period of time, thereby creating an inaccurate picture of an existing situation. Could cause further errors, losses, or embarrassment to the organization. The possibility for error is always present due to requirements of the job.

PUBLIC CONTACT
Extensive contacts with various diversified sectors of the public environment; wherein, the contacts are of extreme importance and failure to exercise proper judgment can lead to substantial losses to the organization.

EMPLOYEE CONTACT
Contacts with other departments or offices and also frequently with individuals in middle level positions; consulting on problems which necessitate judgment and tact in presentation to obtain cooperation or approval of action to be taken. Also, important contacts with associates as required in advanced supervisory jobs.

SOFTWARE SKILLS REQUIRED
Advanced: 10-Key, Alphanumeric Data Entry, Spreadsheet
Intermediate: Word Processing/Typing

ADDITIONAL SOFTWARE SKILLS
Not indicated.

OTHER SKILLS
Excellent customer service and verbal communication skills
Excellent written communications and problem-solving skills
Excellent organizational skills with ability to team with others to develop and implement complex projects
Ability to work a variety of projects with limited supervision
Solid analytical skills to troubleshoot high-level, complex and technical problems
Knowledge of industry security standards such as ISO27001/ISO27002, NIST, etc.
Knowledge of common IT architectures, cryptography, encryption, ciphers, certificate and key based technologies, TCP/IP protocol suite
Knowledge of operating system design and principles
Knowledge in Microsoft Excel, PowerPoint, Visio and Word
Knowledge of continuity of operations plans

PHYSICAL ACTIVITIES
The following physical activities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and expectations.

While performing the functions of this job, the employee is continuously required to sit, use hands to finger, handle, or feel, talk or hear; regularly required to reach with hands and arms; occasionally required to stand, walk, stoop, kneel, crouch, or crawl.

The employee must occasionally lift and/or move up to 10 pounds, occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision.

ENVIRONMENTAL CONDITIONS
There are no harmful environmental conditions that are present for this position. The noise level in the work environment is usually moderate.

ADDITIONAL INFORMATION
Residency Requirement

This is not necessarily an exhaustive list of all responsibilities, skills, duties, requirements, efforts, or working conditions associated with the job. While this is intended to be an accurate reflection of the current job, management reserves the right to revise the job or to require that other or different tasks be performed when circumstances change (e.g., emergencies, changes in personnel, workload, rush jobs, or technological developments).