Certified Network Administrator (LAN/WAN)

Cityofnewyork; New York (NY); On-site; USD 100,000 - 140,000; Full time

Job summary

The New York City Department of Design and Construction, Technology & Innovation Division, is seeking a Certified Network Administrator (LAN/WAN) to manage and secure the agency's network infrastructure in a full-time role at 30-30 Thomson Avenue, LIC, NY 11101.

Authorities require permanent status on the Open-Competitive List (Exam #1111) and a Notice of Results/Receipt of Filing or proof of permanent work authorization.

Qualifications

• U.S. work authorization required.
• Two years of LAN/WAN planning, design, configuration, installation, troubleshooting and security management or
• Six years of full-time equivalent experience with a high school diploma as described in the listing.

Responsibilities

• Design, install, configure, and maintain network infrastructure and security controls.
• Monitor performance, troubleshoot issues, and perform updates across LAN/WAN environments.
• Lead projects including office setups, hardware refreshes, and cloud-based solutions.
• Maintain documentation of network architecture, configurations, and security protocols.

Skills

LAN/WAN networking

Network security

Incident response

Scripting

Education

Bachelor's degree

High school diploma

Tools

PowerShell

Active Directory

VM systems

Imaging tools

Job description

Hours: Full-Time Position - 35 Hours

Work Location: 30-30 Thomson Avenue, LIC, NY 11101

Only candidates who are permanent in the Certified IT Administrator (LAN/WAN) title, reachable on the Open-Competitive List (Exam #1111) may apply. Please include a copy of your Notice of Results card, Receipt of Filing or indicate if you are already permanent.

CERTIFIED IT ADMINISTRATOR (LA - 13652)

The New York City Department of Design and Construction, Technology & Innovation Division, is seeking an experienced and security-minded Certified Network Administrator (LAN/WAN) to manage and secure the agency's network infrastructure. This role is responsible for the design, administration, and continuous improvement of DDC's local and wide area networks, ensuring high availability, performance, and resilience across all systems and sites. The ideal candidate brings deep technical expertise in network infrastructure and cybersecurity, a proactive approach to threat mitigation, and the ability to lead IT projects that support agency-wide operations and modernization initiatives.

The responsibilities include:

• Design, install, configure, and maintain network infrastructure, including routers, switches, firewalls, SAN/NAS, and wireless access points.
• Monitor network performance and implement improvements to optimize reliability and efficiency; perform regular maintenance and firmware updates.
• Troubleshoot and resolve network issues, outages, and connectivity problems in a timely manner.
• Maintain strong working knowledge of Active Directory, TCP/IP, DNS, DHCP, VLANs, virtual machine systems, backups, and deployment/imaging tools.
• Implement and enforce network security policies, including access controls, threat mitigation, and configuration of enterprise firewalls, VPNs, and Intrusion Detection/Prevention Systems (IDS/IPS).
• Conduct regular vulnerability assessments and coordinate remediation efforts to harden the network perimeter.
• Support Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across agency platforms.
• Monitor security logs for suspicious activity and lead incident response efforts when necessary.
• Manage and automate administrative tasks using PowerShell or similar scripting tools to improve operational efficiency.
• Coordinate network changes, upgrades, and maintenance with internal teams and external vendors.
• Lead technical projects including office setups/relocations, hardware refreshes, and implementation of cloud-based solutions.
• Develop internal communications to promote staff awareness of phishing threats and data hygiene best practices.
• Maintain comprehensive documentation of network architecture, configurations, security protocols, and incident logs.
• Ensure compliance with agency IT policies, security standards, and governance requirements.
• Provide technical support and guidance to staff on network-related issues; available for on-call or after-hours support as required.

Please note:

All candidates must be currently authorized to work full-time in the United States (U.S.). In compliance with Public Law 99-603, candidates are required to present original documents proving citizenship or the legal right to work in the U.S. DDC is unable to support or sponsor any visa application or visa extension, including but not limited to OPT/STEM visas, H-1B visas, F-1 practical training, permanent residence sponsorship, or any proposed change of visa type. DDC does not offer a training program as required by U.S. immigration law and is not hiring temporary employees. Candidates must have proper work authorization when an employment offer is made.

Additionally, educational credentials must be from a U.S. Department of Education-recognized accredited institution. Credentials from foreign institutions require independent equivalency verification from an approved evaluation service. A list of providers (fees apply) is available at: https://www.nyc.gov/assets/dcas/downloads/pdf/employment/nyc-dcas-foreign-education-evaluation-guide.pdf.

Professional/vendor certification(s) in local area network administration that is required for the position to be filled. In addition, all candidates must have the following:

1. A baccalaureate degree from an accredited college, and two years of satisfactory full-time (not classroom based) experience in local area network and/or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management; or
2. A four-year high school diploma or its educational equivalent and six years of satisfactory full-time (not classroom based) in