Certified Network Administrator (LAN/WAN)

City of New York; New York (NY); On-site; USD 125,000 - 150,000; Full time

Job summary

The New York City Department of Design and Construction is seeking a Certified Network Administrator (LAN/WAN) to design, secure, and manage the agency's local and wide area networks. This role emphasizes high availability, performance, and resilient infrastructure across multiple sites.

Ideal candidates bring deep networking and cybersecurity expertise, with a proactive approach to threat mitigation, documentation, and collaboration on modernization initiatives.

Qualifications

• Bachelor's degree in IT or related field and 2+ years LAN/WAN experience.
• High school diploma and 6+ years IT experience acceptable with relevant LAN/WAN work.
• Proven ability to design, implement, and secure network infrastructures.

Responsibilities

• Design, install, configure, and maintain network infrastructure including routers, switches, firewalls, SAN/NAS, and wireless APs.
• Monitor network performance and implement improvements to enhance reliability and efficiency.
• Troubleshoot outages and connectivity issues promptly.
• Maintain knowledge of AD, TCP/IP, DNS, DHCP, VLANs, VMs, backups, and imaging tools.
• Implement security policies, firewalls, VPNs, IDS/IPS.
• Conduct vulnerability assessments and coordinate remediation.
• Support SSO and MFA across agency platforms.
• Monitor security logs and lead incident response.
• Automate admin tasks with PowerShell or similar.
• Coordinate network changes with internal teams and vendors.
• Lead projects like office relocations, hardware refreshes, and cloud solutions.
• Develop staff awareness of phishing and data hygiene.
• Maintain documentation of network architecture and logs.
• Ensure IT policy and governance compliance.

Skills

LAN/WAN

Active Directory

TCP/IP

DNS

DHCP

VLANs

Firewall/VPN

IDS/IPS

PowerShell

Security policies

Incident response

Cloud

Documentation

Education

Bachelor's degree in IT

High school diploma or equivalent

Tools

VMware

Hyper-V

Imaging tools

Deployment tools

Job description

Certified Network Administrator (LAN/WAN)

• Full-time
• Agency: DEPT OF DESIGN & CONSTRUCTION
• Salary Band: $125,000 to $150,000
• Compensation: USD 99,209 - USD 133,648

Hours: Full-Time Position – 35 Hours
Work Location: 30-30 Thomson Avenue, LIC, NY 11101

Only candidates who are permanent in the Certified IT Administrator (LAN/WAN) title, reachable on the Open-Competitive List (Exam #1111) may apply. Please include a copy of your Notice of Results card, Receipt of Filing or indicate if you are already permanent.

The New York City Department of Design and Construction, Technology & Innovation Division, is seeking an experienced and security-minded Certified Network Administrator (LAN/WAN) to manage and secure the agency’s network infrastructure. This role is responsible for the design, administration, and continuous improvement of DDC’s local and wide area networks, ensuring high availability, performance, and resilience across all systems and sites. The ideal candidate brings deep technical expertise in network infrastructure and cybersecurity, a proactive approach to threat mitigation, and the ability to lead IT projects that support agency-wide operations and modernization initiatives.

The responsibilities include:

• Design, install, configure, and maintain network infrastructure, including routers, switches, firewalls, SAN/NAS, and wireless access points.
• Monitor network performance and implement improvements to optimize reliability and efficiency; perform regular maintenance and firmware updates.
• Troubleshoot and resolve network issues, outages, and connectivity problems in a timely manner.
• Maintain strong working knowledge of Active Directory, TCP/IP, DNS, DHCP, VLANs, virtual machine systems, backups, and deployment/imaging tools.
• Implement and enforce network security policies, including access controls, threat mitigation, and configuration of enterprise firewalls, VPNs, and Intrusion Detection/Prevention Systems (IDS/IPS).
• Conduct regular vulnerability assessments and coordinate remediation efforts to harden the network perimeter.
• Support Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across agency platforms.
• Monitor security logs for suspicious activity and lead incident response efforts when necessary.
• Manage and automate administrative tasks using PowerShell or similar scripting tools to improve operational efficiency.
• Coordinate network changes, upgrades, and maintenance with internal teams and external vendors.
• Lead technical projects including office setups/relocations, hardware refreshes, and implementation of cloud-based solutions.
• Develop internal communications to promote staff awareness of phishing threats and data hygiene best practices.
• Maintain comprehensive documentation of network architecture, configurations, security protocols, and incident logs.
• Ensure compliance with agency IT policies, security standards, and governance requirements.
• Provide technical support and guidance to staff on network-related issues; available for on-call or after-hours support as required.

Please note: All candidates must be currently authorized to work full-time in the United States (U.S.). In compliance with Public Law 99-603, candidates are required to present original documents proving citizenship or the legal right to work in the U.S. DDC is unable to support or sponsor any visa application or visa extension, including but not limited to OPT/STEM visas, H-1B visas, F-1 practical training, permanent residence sponsorship, or any proposed change of visa type. DDC does not offer a training program as required by U.S. immigration law and is not hiring temporary employees. Candidates must have proper work authorization when an employment offer is made.

Additionally, educational credentials must be from a U.S. Department of Education-recognized accredited institution. Credentials from foreign institutions require independent equivalency verification from an approved evaluation service. A list of providers (fees apply) is available at: https://www.nyc.gov/assets/dcas/downloads/pdf/employment/nyc-dcas-foreign-education-evaluation-guide.pdf.

CERTIFIED IT ADMINISTRATOR (LA - 13652)

Professional/vendor certification(s) in local area network administration that is required for the position to be filled. In addition, all candidates must have the following:

1. A baccalaureate degree from an accredited college, and two years of satisfactory full-time (not classroom based) experience in local area network and/or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management; or
2. A four-year high school diploma or its educational equivalent and six years of satisfactory full-time (not classroom based) information technology experience of which at least 2 years must have been as described in "1" or
3. A satisfactory equivalent of education and/or experience equivalent to "1" or "2" above. Education may be substituted for experience on the basis that 30 undergraduate semester credits from an accredited college is equivalent to 6 months of experience. A master’s degree in computer science or a related field from an accredited college may be substitute for one year of experience. However, all candidates must have at least one year of satisfactory (not classroom based) full-time information technology experience as described in "1" above.

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.