Network Engineer III - Security

Full-Time and Permanent; 7.5 Hours/Day; 252 Days/Year; 12 Months/Year; Grade E

DEFINITION

Reviews operations on the network impacting on the integrity and confidentiality of data in Norfolk Public School information systems. Reviews network security issues and evaluates preventive or corrective actions. Identifies security tools and techniques for implementation and establishes practices and procedures on installation of these tools. Educates administrators on the technical aspects of information assurance and network security.

SUPERVISION

The incumbent reports to the Senior Director, Information Technology for policy and direction and to the Network Service Manager for daily assignments.

DISTINGUISHING CHARACTERISTICS

This position requires technical competence in network operating systems and a broad experience base in network security tools and techniques. This is an administrative position under the general direction of the Senior Director, Information Technology and is responsible for overseeing the network security of all Norfolk Public Schools information systems. This position resides in the Information Technology Department, and the incumbent will work with Network Services technical personnel to identify a set of appropriate strategies to protect and defend the data from both internal and external security threats.

ESSENTIAL FUNCTIONS OF THE CLASS (May not include all duties performed by each position in the class).

Follows policies, standards and procedures relating to technical configurations of operating systems and applications.

Maintains the procedures manual for all systems supported by the Information Technology Department.

Reviews audit logs of security software for anomalies, and prepare reports for Management.

Evaluates software and hardware for compatibility with existing systems and monitors industry publications for vulnerabilities.

Stays abreast of security vulnerabilities in network operating systems and email.

Conducts security awareness education for Site Engineers and others.

Evaluates security breaches and makes recommendations for remedial action and preventive measures.

Conducts security vulnerability scans on all servers, and makes recommendations for remedial actions and preventive measures.

Verifies functionality of network firewalls, web filtering, and proxy services for the district.

Assists in maintaining the IT disaster recovery plan.

Assists with the design, implementation, and administration of backup procedures for NPS information systems.

Assists in developing contingency plans for all critical systems, e.g. financial and student information systems.

Develops and monitors accountability indicators in support of District and Division goals, e.g., virus and ransomware prevention, internet filtering, spam reduction.

Evaluates information on new security technology, compiles data and drafts alternatives for consideration by senior management.

Assists in the design of system wide standards in regards to security and best practices.

Design, implementation, and administration of remote access solution for school employees, and required third party vendors.

Performs related duties as assigned.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES


Knowledge of State and Federal regulations governing privacy data. FERPA, COPPA, CIPA, FOIA.

Ability to communicate orally and in writing.

Work well within a Team of diverse individuals.

Ability to make presentations to non-technical professionals.

Experience in configuring and managing enterprise level firewalls.

Understanding of cloud based web filtering.

Ability to identify bottlenecks and barriers and seek out innovative technological or procedural solutions.

MINIMUM EDUCATION, EXPERIENCE AND TRAINING REQUIREMENTS

Bachelor's degree in information technology or a related field. Additional security and other technology certifications are encouraged. 5+ years' experience in network operating system security with involvement in policy-making duties. Knowledge of, Linux Server operating systems, Windows desktop and server operating systems, and Office365 email Cisco systems; either education in or experience with Public Key Infrastructure (PKI), Virtual Private Networks (VPN) and digital signature certificates.

LICENSE

Valid Driver's license.

PHYSICAL ATTRIBUTES

Ability to lift desktop computers, cables, other equipment.

HAZARDS

Work involved exposure to normal, everyday risks

Work requires sustained use of VDTs

UNUSUAL DEMANDS

Due to the nature of the position, it may entail overtime and on call response on a 7 day 24 hour basis.