IT Network Security Engineer

Job Summary:

The IT Network Security Engineer will be supervised by the IT Manager. The Network Security Engineer will be responsible for network security monitoring, incident response, administering and maintaining all aspects of the IT security infrastructure. This also includes network related security requirements; planning, implementing and testing of network and security systems. In addition, this position is responsible for responding to direct inquiries from users on subjects of security and networking connectivity performance issues. This individual will prepare network and any related security standards, policies, and procedures. The Network Engineer will also work closely with IT Manager and IT infrastructure supervisor on various network security projects and initiatives.

Principal Duties and Responsibilities:

• The Network Security Engineer will be responsible for providing proactive network security monitoring, analyzing the network for problems and vulnerabilities, creating incident response, operation support, and desktop support as necessary.

• The City of West Haven Network Security Engineer will be responsible for determining network and related security requirements; planning, implementing and testing of network and security systems, preparing network and related security standards, policies, procedures; and performing associated operational support duties

• Research and evaluates current network and related security systems to propose and implement network system enhancements on Network Switches, Routers, Internet Firewall Services, VPN and other Network Management devices

• The Network Security Engineer will conduct periodic vulnerability and security risk assessments for all remote location with other City of West Haven entities on information Security issues

• Designs, installs, supports, and maintain new network and related security hardware and software infrastructure

• The Network Security Engineer will be responsible for public cloud security, design and implement technologies for enforcement of security controls using cloud security Posture Management and Workload Protection Platforms

• Work as part of a small team providing technical support for The City of West Haven distributed Windows desktops and Laptops, Windows Active Directory, Office365, Ruckus LAN, Fortigate , Nutanix AHV Server 2019, ShoreTel IP Telephony, Comcast/CrownCastle managed network.

• Schedule after hours support duties for network and infrastructure maintenance patches and upgrades

• Develop network and related security documentation, including diagrams and work instructions

• In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. LogRhythm/McAfee Enterprise Security Manager, FortiSiem, QRadar, LogPoint, Splunk)

Required / Desired Knowledge, Experiences and Skills:

• 3+ years of network security experience engineering solutions for Windows Desktop operating systems; e.g. Windows 7 - Windows 10 is required

• Experience working with Active Directory in a distributed environment is required

• Thorough understanding of enterprise datacenter technologies including Networking, Security, TCP/IP and DNS

• Experience with Malware, Anti-virus, Endpoint Detection and Response (EDR), and Network Detection and Response (NDR) solutions

• 3+ years of technical and troubleshooting experience working Microsoft Windows desktop OS and Microsoft Office is required

• 3+ years of experience in virtualization, managing MS Windows environment, network performance tuning, network design and implementation

• 3+ years of experience with Office 365 platforms including Intune, and Azure AD, SharePoint

• Experience with AWS and Azure is a plus

• Strong project management skills required

• Experience documenting IT processes and standards is a must

• Experience with Microsoft Visio is a required

• Experience with network, IP Phones, T1Circuits, data center and manufacturing vendor as needed to address networking or security related issues

• Strong working knowledge of LAN and WAN connectivity issues and support in a Windows Server, Active Directory environment is preferred

• Experience with ShoreTel Voice over IP products including ShoreTel Communications Manager (Call Manager), voice gateway routers, and IP Telephony endpoints is desirable

• Experience working with virtualized environments such as Nutanix,VMware, is a strong plus

• Expertise in understanding threat models to better protect against attacks or detect new vectors

• Experience evaluating and testing all cloud and in house platforms network initiatives for security issues

• Experience managing desktop environment using Microsoft Active Directory Group Policy Objects (GPOs) is required

• Experience working in Municipality is preferred

• Experience leading network efforts to prevent, mitigate and investigate security incidents

• Support experience and good organizational skills are required

• This position directly impacts the availability of all production systems for the City of West Haven. On-call support and a willingness to work off-hours and weekends as needed is required

Minimum Qualifications:

• Bachelor's degree in Computer Science, Computer Engineering, relevant technical field, or equivalent practical experience.

• CCNA,CCNP, Network+, Security+, Security Certifications

Special Requirement:

• Must have a valid Connecticut driver's license

• Must have experience with Next Generation Firewall (Fortinet & Palo Alto)

• Must have experience with basic scripting language (Powershell,python,etc)