Network Security Engineer

Norfolk, Virginia is America's most authentic and urban waterfront city. Home to the world's largest naval station and the business, arts, and cultural center of Coastal Virginia, Norfolk has been rated a top place to live, work, play, and raise a family by numerous publications. Working for the City of Norfolk is an opportunity to make a real difference in the lives of others. With our commitment to competitive pay and a strong retirement package, you can do good for your community and do well for yourself. Join a caring workplace that proudly celebrates uniqueness, authenticity, and a shared commitment to improving the lives of our residents. The Department of Information Technology (IT) plays a key role in driving customer-focused innovation initiatives. It is comprised of four technical bureaus, which are Business Enablement, Customer Success and Productivity, Technology Infrastructure and Cybersecurity. There is a continual need for technological solutions that meet business function and organizational needs, while balancing security and support requirements. IT sets technology policy direction for the enterprise, identifying, recommending, implementing, and maintaining technology and solutions to support the City’s business needs. Collectively, the 95 IT staff members work together to provide essential services and technical support to all City staff and business functions while maintaining a supportive, respectful, and inclusive culture in the department. The Department of Information Technology seeks a Network Engineer III to administer and support the City’s enterprise firewall and network security infrastructure. This position focuses on next-generation firewalls, secure connectivity, VPN technologies, threat prevention, and enterprise troubleshooting while working collaboratively with infrastructure and cyber security team members This position manages the following areas of responsibility: Analytical & Problem Solving Diagnose and resolve complex cybersecurity and network issues. Investigate and remediate web browsing threats, malware infections, and intrusion attempts. Apply analytical reasoning to balance customer needs, operational realities, and technical constraints. Diagnose complex firewall, routing, VPN, NAT and connectivity issues Perform packet capture and log analysis to determine root cause Balance security requirements with operational needs Network & Cybersecurity Systems Management Design, specify, and implement new cybersecurity hardware, software, and services. Manage and maintain firewalls, intrusion prevention systems (IPS), web content filtering, email protection, and endpoint detection and response (EDR) platforms. Monitor, analyze, and fine-tune security infrastructure for performance, resilience, and compliance. Implement firewall policy changes through formal change management Perform software upgrades during maintenance windows Coordinate with vendors during complex incidents Maintain technical documentation and standard operating procedures Participate in 24x7 on-call rotation and emergency response Administer enterprise NFGW platforms, VPNs, IPS, URL Filtering and SSL Inspection Support SIEM integration and security event investigations Project Participation Collaborate with cross departmental teams to deliver secure and scalable technological solutions. Contribute security expertise to technology initiatives, from planning through implementation and support. Communication & Customer Support. Communicate complex technical issues clearly to both technical and non-technical audiences. Produce accurate and concise documentation, memos, reports, and user guides. Deliver outstanding customer service to City agencies and staff, ensuring timely and effective support. Update and maintain technical documentation and automated work management systems. Core Technologies Proficient with server hardware, Microsoft Server OS, and major Linux distributions (RedHat, CentOS, Ubuntu, etc.). Familiarity with Microsoft Office Suite (Outlook, Teams, Word, Excel, SharePoint, PowerPoint, Visio). Working knowledge of vulnerability management and offensive security principles. Cybersecurity Tools & Platforms Hands on experience with cybersecurity incident handling, digital forensics, and full disk encryption. Support, investigate and validate the implementation of security policies such as Conditional Access, Insider-Risk Management, DSPM for AI, Data Loss Prevention Information Protection, and endpoint/server security compliance. Experience with one or more of the following: Next-Generation Firewalls (NGFW) Endpoint Detection and Response (EDR) Data Loss Prevention Microsoft Exchange and Office 365 Single Sign-On (SSO) and Identity Federation technologies such as SAML, OAuth2, or OpenID Multi-Factor Authentication (MFA) systems Microsoft Active Directory Tenable Vulnerability Management Privileged Access Management (PAM) Perform other cybersecurity functions as assigned by the Chief Information Security Officer. High School graduate or equivalent; specific vocational, administrative, or technical knowledge obtainable through six months to one year of advanced study or training past the high school level (through either city in-house training or an outside educational institution). Required: Three (3) years of experience in an Information Technology related field or an equivalent combination of education and experience. Preferred: Bachelor’s degree with coursework in Cybersecurity, Information Assurance or a related discipline. Five (5) years of IT experience. Three (3) or more years supporting enterprise network security technologies. Valid driver's license required. Must successfully pass a background check. Must be capable of working independently and collaboratively within a team. Work Schedule: This position works forty-hours per week to accommodate City operating hours. This position is an Essential position, which requires attendance during emergencies, delayed city openings and special weather events. Report during emergencies, natural disasters, and nonstandard shifts as directed. Be available for a 24-hour on-call rotation and emergency response as required. #J-18808-Ljbffr