II. Supports the department in implementing the strategy established by management.

Transcription

1 Position Description: Network Security Engineer Department: Information Technology Division: Information Technology FLSA: Exempt Location: Griffiss Revised: January 2016 Overview: The Network Security Engineer role is to ensure the stable operation of enterprise data, voice and video networks and maintaining multiple remote locations networks, enforcing the network security policy and complying with requirements of external security audits and recommendations. This includes planning, developing, installing, configuring, maintaining, supporting, and optimizing all network hardware and communication links. Purpose: I. Supports the administration and operation of IT policies and programs that support and further the goals of the Credit Union. Supports the implementation, maintenance, and integration of the corporate WAN, LAN and server architecture. This individual will also be responsible for implementation and administration of network security hardware and software. Assists and implements new solutions after hours and on weekends as needed to reduce the impact during production hours. Will work with new technology often in an effort to strengthen their skill sets and maximize their career path opportunities. II. Supports the department in implementing the strategy established by management. Roles and Responsibilities: A. Network Administration: Designs, develops, implements and support day to day operational systems that provide the necessary metrics for monitoring our environment proactively. B. Provides high-level support and technical expertise in networking technology, including LAN/WAN hardware, hubs, bridges and routers network management protocols, networking architecture, authentication practices and security administration. C. Works with vendors, clients, carriers and technical staff on network implementation, optimization and ongoing management. D. Implements network security policies and procedures. E. Administers, monitor sand maintains firewalls, VPN access and IPSs. F. Monitors security advisory groups to ensure all necessary network security updates, patches and preventive measures are in place. G. Performs intrusion detection analysis and prevention, detects intrusion.

2 H. Develops technical solutions and new security tools to help mitigate security vulnerabilities and automates repeatable tasks. I. Maintains and updates Network Access Control, Data Loss Prevention solution and Multifactor authentication solution. J. Maintains and updates Security Event and Incident Management, Web Security and Secure Appliances. K. Asset management: Designs, develops, implements and maintains the asset inventory database. Prepares all assets with appropriate information and maintains and tracks this information within the asset management database. This includes hardware, software, licensing, contract information, contract terminations and lifecycle management of all systems. L. Communication Systems: Assists in the design, development and implementation of communication services. Troubleshoots communication services for all voice and data needs. This includes phone service, WAN Communications and PB services. M. Disaster recovery services: Assists in the design, development and implementation of necessary disaster recovery services. Supports the daily operational components of all disaster recovery services to confirm the smooth operation of all hardware and software throughout the environment. N. Applies superior troubleshooting skills on all helpdesk services received from Tier 1 and Tier 2 technicians, in a timely fashion. Supports all IT user request and repairs that are issued to end users. Follows through on tracking of helpdesk requests and provides support and incident resolution within a timely fashion as determined by IT SLA s. Follows up on all incidents and contact end users to perform quality measurements that assist in tracking IT SLA s. Schedules and tracks business partner resolution for any incidents that need to go outside of the company for resolution. Assists in incident management and works to resolve problems in a timely fashion with thorough follow up to end users to confirm problems have been resolved. This position will be responsible for creating and modifying existing or nonexistent procedures for any incidents that don t currently have one. O. Service Level Requirements: Is required to maintain an agreed to level of response times for all requests. Tracks and reports back to the IT Manager when response and resolution SLA requirements are in jeopardy. Maintains an agreed to uptime of application systems throughout the organization. Plans, designs and implements new tools for the purpose of supporting current or new IT SLA s. P. Security: Assists in the operations of security by constantly reviewing day to day activities of individuals, processes and procedures. Responsible for support of compliance operational tasks. Responsible for operationally reviewing automated requests and disseminating the information to resolve or escalate appropriately. Responsible in the configuration and management of the operational systems that log all security activity and incidents. Q. Project Management: Works effectively as a resource on projects as assigned by the Information Technology Director to support Balanced Scorecard initiatives. May be assigned the lead on internal Information Technology projects. Requires the ability to prioritize and handle multiple work tracks at the same time.

3 R. Documentation: Documents all relevant information in regards to Policies, Procedures and information on IT tasks. Performs documentation and tracking of all requests to department. S. Business Partner Management: Administrator will take an active role in holding business partners to agree to SLA s. Administrator is responsible for operational support of SLA management with all business partners and may assist in the maintenance of the relationship with entry level responsibilities. T. Change Management: Follows all change management processes and procedures as required and makes recommendations for improvement to the Change Management process. U. Training: Is required to maintain a strong level of expertise throughout the calendar year. Requirements are development each year to support existing and new technologies. V. Performs other duties as assigned. TEAMWORK: Builds and maintains an effective working relationship with all peers. Coordinates and integrates departmental work activities with co-workers' work activities. Positively contributes to teams and other work groups to carry out departmental projects. PERFORMANCE MANAGEMENT: Positively contributes to the performance management process by setting goals, completing the self-evaluation and actively participating in quarterly performance management feedback sessions. E-COMMERCE: Supports and operates within e-commerce strategy maximizing the use of technology whenever possible. Is familiar with technology applicable to the System Administrator position and is proficient is using existing technology. Positively contributes to e- commerce activities by identifying processes or procedures that can be streamlined and/or automated. COMMUNICATION: Actively participates in weekly staff meetings. Provides information to coworkers and manager/supervisor in a timely manner. Models communication actions consistent with department communication commitments. COMPLIANCE: Acquires and maintains the necessary working knowledge of Federal and State laws and regulations and Credit Union bylaws and policies, in order to ensure compliance when selling Credit Union services and products. Work is subject to review and/or audit on a no-notice basis by Management, Supervisory Committee, auditors and/or examiners. PROFESSIONALISM: Must display a pleasant, professional manner and positive attitude on the job and follow guidelines established in the Credit Union's Policy Manual, including the Code of Ethics, Telecommunications Policy, dress code and attendance areas. SAFETY: Works safely and uses safety/ergonomic equipment provided. Reports defects in work area, or equipment promptly. Keeps equipment in proper working order to maintain a safe work environment. Reports To: This position reports directly to the Manager, Network Services.

4 Qualifications: EDUCATION: o Candidate should have completed a B.S. Degree in computer science, telecommunications or related degree. o Cisco Certified Network Associate, or Cisco Certified Network Professional certificate preferred. o Strong verbal and written communication skills. EPERIENCE: 5-7 years experience with switching, routing, network systems, and telecommunications preferred. o Experienced in switching and routing hardware o Experienced in Firewall, IPS o Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc o Experience with network technologies and with system, security, and network monitoring tools o Thorough understanding of the latest security principles, techniques, and protocols HOURS: Must be able to work odd hours and on call as needed to provide support for production systems. Will be required to mitigate production impact by performing design, implementation and configuration work on assigned projects during off hours and on weekends. PHYSICAL REQUIREMENTS: Must be able to lift items up to 75 Pounds. Must climb ladders and be able to work sitting on ground. OTHER: Valid Driver s License and automobile required Physical Requirements: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. How much on-the-job time is spent in the following physical activities? Standing Walking Sitting Talking, Hearing Feeling, Grasping Climbing, Balancing Crouching, Crawling, Kneeling Reaching with Hands & Arms Tasting, Smelling Keyboarding / Data Entry Driving 30-7 x 70-9

5 Does this job require that weight be lifted or force be exerted? Up to 10 pounds Up to 50 pounds Up to 100 pounds More than 100 pounds Does this job have any special vision requirements? Looking at Computer Screen Color Vision (identify and distinguish colors) Peripheral, Depth Perception Ability to Adjust Focus x How much exposure does this job have to the following environmental conditions? Toxic Chemicals Moving Parts Electrical Shock Risk Explosives Fumes Blood, Body Fluids Extreme Heat (non-weather) Extreme Cold (non-weather) Severe Hot Weather Severe Cold Weather How much noise is typical for this job s work environment? (Bold the text of your selection) Very Quiet Example: Forest trail, isolation booth for hearing test. Quiet Example: Library, private office. Moderate Noise Example: Business office w/ typewriters / printers, light traffic. Loud Example: Metal can manufacturing, large earth moving equipment. Very Loud Noise Example: Jack hammer work, front row rock concert..