Information Security (Cyber Security) Network Engineer

Allentown School District; Allentown (Lehigh County); On-site; USD 100,000 - 141,000; Full time

Job summary

Allentown School District is seeking an Information Security Engineer to design, implement, and manage security across its networks and data systems. You will focus on risk assessment, vulnerability management, and incident response to protect district information and student data.

The role requires strong Cisco/Firewall expertise, extensive experience with Windows/VMware/Apple environments, and collaboration with IT teams to ensure integrated security with operations.

Qualifications

• Bachelor’s degree in Computer Science or related field, or comparable Cybersecurity network engineering experience.
• Minimum 5 years’ experience in the technology field supporting wide area networks.
• Excellent communication skills.
• Satisfactory work record & criminal/child abuse clearances (Acts 34, 114, and 151).
• Cisco CCNA, CompTIA Security+ or other network related certification preferred.
• In-depth knowledge of Cisco Catalyst series core routers and switches (last 5 years).
• Extensive knowledge of network security firewall systems (Fortinet, Cisco, Palo Alto, Check Point).
• Experience with data backup and recovery systems (Veeam, Cohesity, Rubrik, Commvault, Dell).
• Knowledge of cabling (CAT 3-7) and fiber optics.
• Experience with wireless enterprise systems (Cisco, HP/Aruba).
• Windows Server 2019/2022, Windows 8-11, VMWare, HyperV, Nutanix, Cloud connectivity, Apple OS.

Responsibilities

• Design, implement, and maintain network security infrastructure (firewalls, IDS/IPS, VPNs).
• Develop and implement security policies to ensure FERPA/CIPA compliance.
• Maintain District network hardware/software standards.
• Provide secure server environments aligned with SLAs.
• Oversee Windows/VMware/Apple Xserve servers and applications.
• Monitor network activity for security breaches.
• Conduct vulnerability assessments and penetration testing.
• Manage security tools (SIEM, antivirus, EDR).
• Ensure data governance and privacy standards with service providers.
• Comply with district data security policies and procedures.
• Adhere to policies for security of computerized personal information.

Skills

Communication skills

5+ years IT security

Security risk assessment

Windows/VMware/Apple administration

Criminal/child abuse clearances

Education

Bachelor's degree in Computer Science or related field

Tools

Cisco CCNA

Fortinet

Palo Alto

Check Point

Veeam

Cohesity

Rubrik

Dell data backup

VMware

Job description

Starting Salary: $100,401 - $140,561

Qualifications

• Bachelor's degree in Computer Science or related field, or comparable Cybersecurity network engineering experience.
• Minimum 5 years’ experience in the technology field supporting wide area networks.
• Excellent communication skills.
• Satisfactory work record & criminal/child abuse clearances (Acts 34, 114, and 151).
• Cisco Certified Network Associate (CCNA), CompTIA Security+ or other network related certification preferred.
• In-depth, hands‑on knowledge of operation, configuration, and maintenance of Cisco Catalyst series core routers and network switches released within the last 5 years.
• Extensive demonstrated knowledge of supporting, maintaining, and configuring network security firewall systems such as Fortinet (preferred), Cisco, Palo Alto, and Check Point; content filtering solutions and defense against malware, viruses, phishing, ransomware, and other threats.
• Demonstrated knowledge and experience with managing and supporting data backup and recovery systems such as Veeam, Cohesity, Rubrik, Commvault, and Dell.
• Working knowledge of installation, testing and maintenance of network cabling including copper (CAT 3, 5, 5E, 6, 7) and fiber optic (single mode and multimode) and related test equipment.
• Experience in supporting and configuring wireless enterprise systems such as Cisco and HP/Aruba.
• In‑depth, hands‑on knowledge of Windows Server 2019/2022, Windows 8‑11 OS, VMWare, HyperV, Nutanix, Cloud connectivity, and Apple OS as related to local and wide area networks supporting Mac, iPhone, iPad, and other iOS devices, server hardware, and voice‑over‑IP and SIP telephony operations.
• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• Such alternatives to the above qualifications as the Board may find appropriate and acceptable.

Under the supervision of the Executive Director of Technology, the Information Security Engineer is responsible for maintaining and enhancing the security posture of the Allentown School District's information systems and networks. This role involves designing, implementing, and managing security measures to protect the district's data and systems from unauthorized access, use, disclosure, disruption, modification, or destruction. The engineer will focus on identifying, assessing, and mitigating security risks and threats, ensuring compliance with district policies and relevant regulations.

Essential Duties And Responsibilities

Strategic Leadership & Planning

Design, implement, and maintain network security infrastructure, including firewalls, intrusion detection/prevention systems, VPNs, and other security appliances.

Develop and implement security policies and procedures to ensure compliance with district policies and relevant regulations (e.g., FERPA, CIPA).

Maintain District network hardware and software standards as set forth in the district's technology plan and by the Director of Technology.

Provide stable, secure, and appropriately scaled server environments consistent with the district's service level agreements.

Oversee the daily operations of the District's Windows, VMWare, and Apple Xserve servers and applications.

Operational Management

Monitor network activity for security breaches and investigate security incidents.

Conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses.

Manage and maintain security tools and technologies, including SIEM systems, antivirus software, and endpoint detection and response (EDR) solutions.

Implement network equipment security, system/data backups, and network security.

Ensure that all service providers retained or contracted by the district for data governance and records management purposes meet or exceed industry and/or government standards for data protection and privacy of personal information.

Comply with law, Board policy, administrative regulations and district procedures regarding data security and integrity of data containing confidential and/or critical data/information of the district.

Adhere to district policies 830 and 830.1, ensuring the security of computerized personal information and data governance.

Team Leadership & Development

Perform other tasks and assume other responsibilities as assigned.

Provide technical support and guidance to IT staff on security best practices.

Collaborate with other IT teams to ensure seamless integration of security measures with network operations.

Maintain a cooperative working relationship with the members of the Information Technology staff and the District community.

Communicate effectively.

Stay current with the latest security threats and trends and recommend appropriate security measures.

Other Duties

Perform other duties as assigned by the Executive Director of Information Technology.

Such alternatives to the above qualifications as the Board may find appropriate and acceptable.