Network Security Analyst

The Network Security Analyst position works as a team member along with other Information Services staff in support, security and maintenance of the City's network and server infrastructure.  The Network Security Analyst is expected to have a strong working knowledge of the Microsoft server environment, setup, administration, including HyperV servers; and a strong working knowledge of network protocols, routers, switches, firewalls, vlans, and security.

Ideal Candidate Profile
The ideal candidate will:

• Identify, assess and remediate information security risks across the City's infrastructure.
• Plan, perform and implement information security compliance assessments including the independent analysis of results.
• Perform security monitoring, audits, consulting, and training.
• Serve as part of the Incident response team, lead internal investigations and coordinate responses to external investigations and audits.
• Lead the design, maintenance and exercising of an enterprise Disaster Recovery Plan and Business Continuity Plan for the City.

• To be considered, all applicants must submit a resume and cover letter by attaching them to your electronic application.
• The cover letter must be no more than two pages long and include specific examples of how you meet the Ideal Candidate Profile (above).
• Only electronic applications are accepted.
• Candidates will be evaluated in an on-going basis as applications are received until the position is filled.

The essential functions of this position include but are not limited to:

1. Provides guidance and advanced technical support, and/or responds to trouble reports from co-workers and customers regarding network connectivity, accessibility and performance issues.
2. Programs, configures, tests, and maintains LAN/WAN equipment and related services.
3. Identifies, diagnoses, and resolves network problems, provides advanced guidance to IT staff as required.
4. Inputs work order requests into tracking system and coordinates and resolves upper level technical issues for network and server related issues.
5. Directs and manages network server backups, batch queuing, media storage and rotations to off-site facility.
6. Operates equipment necessary to complete job assignments, i.e., printers, network servers, storage area networks, tape drives, routers, switches, VPN's firewalls, PC's and Laptops.
7. Assists service desk and application analysts with software and firmware upgrades and schedules; inform customers of network service outages and effects of software/hardware upgrades.
8. Operates patch management schedule to apply current Operating System and Application patches as required by product support.
9. Troubleshoots problems with and provides advanced support for servers, storage arrays, SANs, routers, and firewalls and provides remote technical support as necessary; maintains tracking system of equipment problems, including the maintenance of appropriate documentation on equipment provided to City staff.
10. Plans, performs and implements information security compliance assessments including the independent analysis of results.
11. Performs security monitoring, audits, consulting, and training.
12. Serves as part of the Incident response team, leads internal investigations and coordinates responses to external investigations and audits.
13. Reviews systems, projects and software for potential security and privacy issues.
14. Leads the design,maintenance and exercising of an enterprise Disaster Recovery Plan and Business Continuity Plan for the City.
15. Maintains up-to-date baselines for the secure configuration and operation of all network devices.
16. Identifies, assesses and remediates information security risks across the City's infrastructure.
17. Researches and evaluates new and emerging information security technology.
18. Participate in 24/7 on/call support rotation.
19. Obtains and maintains required certification for key vendors, (Microsoft, Cisco)
20. Punctual, regular and reliable attendance is essential for successful job performance.

1. Lift between 5 and 20 pounds approximately 3% of the time.
2. Reach, twist, and/or turn approximately 3% of the time.
3. Look at a computer screen approximately 75% of the time.
4. Use phone communications approximately 10% of the time.
5. Walk approximately 5% of the time.
6. Sit for an extended period of time approximately 75% of the time.
7. Stoop approximately 3% of the time.
8. Bend approximately 3% of the time.
9. Crawl approximately 3% of the time.
10. Drive a vehicle approximately 3% of the time.

Qualification Guidelines:

1. Network Analysts are expected to cross-train and maintain awareness of the work performed in all specialty areas, provide back up and support for absent team members, and maintain flexibility, adaptability, and initiative.
2. The City also considers that, in addition to the unique sets of abilities listed in the UNIFIED COMMUNICATIONS, SECURITY, AND DATABASE sections below, all Network Analyst positions require the abilities described in the SYSTEMS section.

1. Knowledge of Cisco Call Manager, Unity Voice Mail, Presence, UCCX, InformaCast
2. Knowledge of Microsoft Exchange administration
3. Knowledge of Automatic Call Distribution (ACD) Processing
4. Knowledge of 911 E911 Station Translation System
5. Knowledge of Digital and Hybrid Key telephone systems
6. Knowledge of VOIP computer/telephony integration hardware and software.
7. Knowledge of specifications and procedures to operate and document copper and fiber optics cabling systems. 
8. Skill in planning and implementing adds, moves and changes to phone systems.
9. Ability to provide training on the features and use of unified communications systems and equipment.

1. Advanced knowledge of security best practices and regulatory requirements, (HIPPA, CJIS, NIST, PCI, ISO, etc.)  
2. Knowledge of security breach disaster recovery plans and procedures.
3. Skill in auditing, monitoring and testing security implementations.
4. Skill in configuring secure network equipment, firewalls, and servers.
5. Skill in planning and implementing security projects.
6. Skill in testing and implementing hardware and software security patches on servers and network hardware.
7. Ability to serve as the primary information security resource for the City. 
8. Ability to work as a member of a team to evaluate and pro-actively manage security risks at acceptable levels in all aspects of network and computer system security.
9. Ability to work as a member of a change management team.
10. Ability to maintain records and document all changes made to equipment and configurations.

1. Knowledge of database administration.
2. Knowledge of managing and supporting Storage Area Network (SAN).
3. Knowledge of database standards.
4. Knowledge of optimizing data systems and functionality.
5. Knowledge of using software and data migration techniques to manage large data volumes from various sources.
6. Knowledge of Microsoft SQL databases and tools.
7. Skill in developing and maintaining databases linked to web services.

Knowledge/Skills/Abilities - SYSTEMS

1. Knowledge of network and internet protocols
2. Knowledge of current and emerging technology and application to municipal operations and services.
3. Knowledge of Microsoft networking components such as MS Server 2008, DHCP, System Center, Configuration Manager, HyperV, IIS, SQL server, Exchange, and client server applications. 
4. Knowledge of network backup methods and emergency/disaster recovery for Windows servers.
5. Skill in anti-virus protection, detection, removal, and prevention.
6. Skill in the documentation of network topologies, systems, process, procedures and security.
7. Ability to create and apply scripts (Powershell).
8. Ability to troubleshoot and resolve network and client hardware and software problems.
9. Ability to install, configure and upgrade routers, switches, and wireless access points.
10. Ability to use network tools to configure hardware, monitor performance and diagnose system problems. 
11. Ability to transport, move, and install a variety of network equipment, servers, and components.
12. Ability to create and update software and hardware procedures and changes.

Experience/Education:

1. Associates's degree in Computer science or Computer network administration, or certifications and a minimum of three years of increasingly responsible experience in the design, analysis, implementation, security and support of network systems.
2. Network administration and security experience preferred.
3. The following certifications for are not required but highly desirable:
   1. Network +
   2. Security +, CISSP or CISM
   3. A+
   4. Microsoft Certified Solutions Associate (MCSA)
   5. Microsoft Certified Solutions Expert (MCSE)
   6. Cisco CCNA or Coursework
4. In place of the above, candidates may demonstrate the equivalent and relevant combinations of experience, education, and training that demonstrates knowledge of the skills, and abilities listed above.

Special Requirements:
 

1. Washington State Driver's License or evidence of equivalent mobility required.
2. A Criminal History and background check is required and must be successfully completed prior to employment.
3. Must be able to perform on call pager duty.

Contacts:

1. The Network Analyst has frequent contacts with City staff at all levels, Information Services staff members, employees of other public agencies, technical specialists, manufacturer's representatives, contractors, vendors, and suppliers of goods and services.

Supervision:

1. Under supervision, may participate in, lead, direct, or monitor the work of project teams, independent contractors, installers, repair technicians or vendors.

Accountability:

1. The Network Analyst is accountable for all administrative, operational and technical aspects of the network and telecommunications system.

Working Conditions:

1. The Network Analyst works mostly indoors, with occasional outdoor work on system engineering and installation projects.
2. Incumbents must travel to work locations all over the City on a regular basis.
3. Positions in this classification are exposed to electrical shock hazard and must exercise caution and observe strict safety standards.
4. Heavy network and computer system components must be lifted, moved, installed, packed, unpacked, or transported on a regular basis.
5. Work is frequently performed in cramped areas where access and mobility are limited and lighting/visibility may be poor.
6. Work may be performed while on ladders, water tanks, or in underground vaults.
7. Projects and assignments may be performed under stressful conditions such as demanding deadlines, high volume workloads, or responding to emergency system failures.
8. Work such as major installations or software upgrades must frequently be done during evenings, weekends, or holidays to minimize disruptions.
9. A Network Analyst may be called in to work with short notice in emergency conditions.