Network Security Engineer

Network Engineer IIINorfolk, Virginia is America's most authentic and urban waterfront city. Home to the world's largest naval station and the business, arts, and cultural center of Coastal Virginia, Norfolk has been rated a top place to live, work, play, and raise a family by numerous publications. Working for the City of Norfolk is an opportunity to make a real difference in the lives of others. With our commitment to competitive pay and a strong retirement package, you can do good for your community and do well for yourself. Join a caring workplace that proudly celebrates uniqueness, authenticity, and a shared commitment to improving the lives of our residents.The Department of Information Technology (IT) plays a key role in driving customer-focused innovation initiatives. It is comprised of four technical bureaus, which are Business Enablement, Customer Success and Productivity, Technology Infrastructure and Cybersecurity. There is a continual need for technological solutions that meet business function and organizational needs, while balancing security and support requirements. IT sets technology policy direction for the enterprise, identifying, recommending, implementing, and maintaining technology and solutions to support the City's business needs. Collectively, the 95 IT staff members work together to provide essential services and technical support to all City staff and business functions while maintaining a supportive, respectful, and inclusive culture in the department.The Department of Information Technology seeks a Network Engineer III to administer and support the City's enterprise firewall and network security infrastructure. This position focuses on next-generation firewalls, secure connectivity, VPN technologies, threat prevention, and enterprise troubleshooting while working collaboratively with infrastructure and cyber security team members.Essential FunctionsThis position manages the following areas of responsibility:Analytical & Problem SolvingDiagnose and resolve complex cybersecurity and network issues.Investigate and remediate web browsing threats, malware infections, and intrusion attempts.Apply analytical reasoning to balance customer needs, operational realities, and technical constraints.Diagnose complex firewall, routing, VPN, NAT and connectivity issuesPerform packet capture and log analysis to determine root causeBalance security requirements with operational needsNetwork & Cybersecurity Systems ManagementDesign, specify, and implement new cybersecurity hardware, software, and services.Manage and maintain firewalls, intrusion prevention systems (IPS), web content filtering, email protection, and endpoint detection and response (EDR) platforms.Monitor, analyze, and fine-tune security infrastructure for performance, resilience, and compliance.Implement firewall policy changes through formal change managementPerform software upgrades during maintenance windowsCoordinate with vendors during complex incidentsMaintain technical documentation and standard operating proceduresParticipate in 24x7 on-call rotation and emergency responseAdminister enterprise NFGW platforms, VPNs, IPS, URL Filtering and SSL InspectionSupport SIEM integration and security event investigationsProject ParticipationCollaborate with cross departmental teams to deliver secure and scalable technological solutions.Contribute security expertise to technology initiatives, from planning through implementation and support.Communication & Customer Support.Communicate complex technical issues clearly to both technical and non-technical audiences.Produce accurate and concise documentation, memos, reports, and user guides.Deliver outstanding customer service to City agencies and staff, ensuring timely and effective support.Update and maintain technical documentation and automated work management systems.The person in this position must demonstrate technical expertise in the following areas:Core TechnologiesProficient with server hardware, Microsoft Server OS, and major Linux distributions (Red Hat, CentOS, Ubuntu, etc.).Familiarity with Microsoft Office Suite (Outlook, Teams, Word, Excel, SharePoint, PowerPoint, Visio).Working knowledge of vulnerability management and offensive security principles.Cybersecurity Tools & PlatformsHands on experience with cybersecurity incident handling, digital forensics, and full disk encryption.Support, investigate and validate the implementation of security policies such as Conditional Access, Insider-Risk Management, DSPM for AI, Data Loss Prevention Information Protection, and endpoint/server security compliance.Experience with one or more of the following:Next-Generation Firewalls (NGFW)Endpoint Detection and Response (EDR)Data Loss PreventionMicrosoft Exchange and Office 365Single Sign-On (SSO) and Identity Federation technologies such as SAML, OAuth2, or OpenIDMulti-Factor Authentication (MFA) systemsMicrosoft Active DirectoryTenable Vulnerability ManagementPrivileged Access Management (PAM)Perform other cybersecurity functions as assigned by the Chief Information Security Officer.Education/ExperienceHigh School graduate or equivalent; specific vocational, administrative, or technical knowledge obtainable through six months to one year of advanced study or training past the high school level (through either city in-house training or an outside educational institution). Required:Three (3) years of experience in an Information Technology related field or an equivalent combination of education and experience.Preferred:Bachelor's degree with coursework in Cybersecurity, Information Assurance or a related discipline.Five (5) years of IT experience.Three (3) or more years supporting enterprise network security technologies.Additional Information & RequirementsValid driver's license required.Must successfully pass a background check.Must be capable of working independently and collaboratively within a team.Work Schedule:This position works forty-hours per week to accommodate City operating hours.This position is an Essential position, which requires attendance during emergencies, delayed city openings and special weather events.Report during emergencies, natural disasters, and nonstandard shifts as directed.Be available for a 24-hour on-call rotation and emergency response as required.