Network Security Engineer

City of Norfolk, VA; Norfolk (VA); On-site; USD 80,000 - 92,000; Full time

Benefits offered by this job

Pension plan

Paid holidays

Parking

Job summary

City of Norfolk, VA is seeking a Network Engineer III to administer and support the City’s enterprise firewall and network security infrastructure. This role focuses on next-generation firewalls, secure connectivity, VPN technologies, threat prevention, and enterprise troubleshooting in collaboration with infrastructure and cybersecurity teams.

You will design and implement cybersecurity solutions, manage firewalls, IPS, web filtering, EDR, and VPNs, participate in 24x7 on-call rotation, and

Qualifications

• High School graduate or equivalent; six months to one year of advanced study or training past high school level.
• Three (3) years of experience in an Information Technology related field or an equivalent combination of education and experience.
• Bachelor’s degree with coursework in Cybersecurity, Information Assurance or related discipline is preferred.

Responsibilities

• Diagnose and resolve complex cybersecurity and network issues.
• Design, specify, and implement new cybersecurity hardware, software, and services.
• Manage and maintain firewalls, intrusion prevention systems (IPS), web content filtering, email protection, and EDR platforms.
• Monitor, analyze, and fine-tune security infrastructure for performance, resilience, and compliance.
• Participate in 24x7 on-call rotation and emergency response.

Job description

Norfolk, Virginia is America's most authentic and urban waterfront city. Home to the world's largest naval station and the business, arts, and cultural center of Coastal Virginia, Norfolk has been rated a top place to live, work, play, and raise a family by numerous publications. Working for the City of Norfolk is an opportunity to make a real difference in the lives of others. With our commitment to competitive pay and a strong retirement package, you can do good for your community and do well for yourself. Join a caring workplace that proudly celebrates uniqueness, authenticity, and a shared commitment to improving the lives of our residents.

The Department of Information Technology (IT) plays a key role in driving customer-focused innovation initiatives. It is comprised of four technical bureaus, which are Business Enablement, Customer Success and Productivity, Technology Infrastructure and Cybersecurity. There is a continual need for technological solutions that meet business function and organizational needs, while balancing security and support requirements. IT sets technology policy direction for the enterprise, identifying, recommending, implementing, and maintaining technology and solutions to support the City’s business needs. Collectively, the 95 IT staff members work together to provide essential services and technical support to all City staff and business functions while maintaining a supportive, respectful, and inclusive culture in the department.

The Department of Information Technology seeks a Network Engineer III to administer and support the City’s enterprise firewall and network security infrastructure. This position focuses on next-generation firewalls, secure connectivity, VPN technologies, threat prevention, and enterprise troubleshooting while working collaboratively with infrastructure and cyber security team members.

Essential Functions

This position manages the following areas of responsibility:

Analytical & Problem Solving

• Diagnose and resolve complex cybersecurity and network issues.
• Investigate and remediate web browsing threats, malware infections, and intrusion attempts.
• Apply analytical reasoning to balance customer needs, operational realities, and technical constraints.
• Diagnose complex firewall, routing, VPN, NAT and connectivity issues
• Perform packet capture and log analysis to determine root cause
• Balance security requirements with operational needs

Network & Cybersecurity Systems Management

• Design, specify, and implement new cybersecurity hardware, software, and services.
• Manage and maintain firewalls, intrusion prevention systems (IPS), web content filtering, email protection, and endpoint detection and response (EDR) platforms.
• Monitor, analyze, and fine-tune security infrastructure for performance, resilience, and compliance.
• Implement firewall policy changes through formal change management
• Perform software upgrades during maintenance windows
• Coordinate with vendors during complex incidents
• Maintain technical documentation and standard operating procedures
• Participate in 24x7 on-call rotation and emergency response
• Administer enterprise NFGW platforms, VPNs, IPS, URL Filtering and SSL Inspection
• Support SIEM integration and security event investigations

Project Participation

• Collaborate with cross departmental teams to deliver secure and scalable technological solutions.
• Contribute security expertise to technology initiatives, from planning through implementation and support.

Communication & Customer Support

• Communicate complex technical issues clearly to both technical and non-technical audiences.
• Produce accurate and concise documentation, memos, reports, and user guides.
• Deliver outstanding customer service to City agencies and staff, ensuring timely and effective support.
• Update and maintain technical documentation and automated work management systems.

Core Technologies

• Proficient with server hardware, Microsoft Server OS, and major Linux distributions (Red Hat, CentOS, Ubuntu, etc.).
• Familiarity with Microsoft Office Suite (Outlook, Teams, Word, Excel, SharePoint, PowerPoint, Visio).
• Working knowledge of vulnerability management and offensive security principles.

Cybersecurity Tools & Platforms

• Hands on experience with cybersecurity incident handling, digital forensics, and full disk encryption.
• Support, investigate and validate the implementation of security policies such as Conditional Access, Insider‑Risk Management, DSPM for AI, Data Loss Prevention Information Protection, and endpoint/server security compliance.
• Experience with one or more of the following:
• Next-Generation Firewalls (NGFW)
• Endpoint Detection and Response (EDR)
• Data Loss Prevention
• Microsoft Exchange and Office 365
• Single Sign‑On (SSO) and Identity Federation technologies such as SAML, OAuth2, or OpenID
• Multi‑Factor Authentication (MFA) systems
• Microsoft Active Directory
• Tenable Vulnerability Management
• Privileged Access Management (PAM)

Perform other cybersecurity functions as assigned by the Chief Information Security Officer.

Education/Experience

High School graduate or equivalent; specific vocational, administrative, or technical knowledge obtainable through six months to one year of advanced study or training past the high school level (through either city in‑house training or an outside educational institution).

Required

• Three (3) years of experience in an Information Technology related field or an equivalent combination of education and experience.

Preferred

• Bachelor’s degree with coursework in Cybersecurity, Information Assurance or a related discipline.
• Five (5) years of IT experience.
• Three (3) or more years supporting enterprise network security technologies.

Additional Information & Requirements

• Valid driver's license required.
• Must successfully pass a background check.
• Must be capable of working independently and collaboratively within a team.

Work Schedule

• This position works forty‑hours per week to accommodate City operating hours.
• This position is an Essential position, which requires attendance during emergencies, delayed city openings and special weather events.
• Report during emergencies, natural disasters, and nonstandard shifts as directed.
• Be available for a 24‑hour on‑call rotation and emergency response as required.
• Regular full‑time and permanent part‑time employees may receive paid holidays, vacation and sick leave, employer paid pension plan, basic life insurance, voluntary participation in medical and dental, Section 457 deferred compensation, long‑term disability, optional life insurance for self, spouse and children, medical and dependent care reimbursement plans, access to membership in credit union and employer provided parking.
• Special project/grant employees are generally eligible for the same benefits of regular full‑time employees; however, retirement, life insurance and participation in health plans vary depending on funding and authorization.
• Temporary/seasonal and part‑time employees are generally only eligible for employer provided parking and access to membership in credit union.
• Retirement

If you are hired October 5, 2010, or after to a position with City of Norfolk Retirement System benefits, you will be required to contribute five percent (5%) of your salary toward your retirement benefit. This will be a pre‑tax payroll deduction.

If you are hired January 1, 2022, or after to a position with Virginia Retirement System (VRS) benefits, you will be required to contribute five percent (5%) of your salary toward your retirement benefit. This will be a pre‑tax payroll deduction.

• The Tuition Assistance Program is established to encourage employees toward continued self‑development and education. Permanent full‑time and permanent part‑time classified, unclassified permanent, full‑time special projects, and constitutional employees who have completed six months continuous service will be eligible to apply. The applicant's school of enrollment must be an accredited institution.

Note

The benefits described above are broad generalizations. The specific benefits that an employee may be eligible for are governed by City regulations, as applicable to job type.

Non-City

Positions listed with a job type designation of "Non-City" are not subject to the benefits descriptions above. Refer to the content of the job posting for information regarding these positions.

The departmental hiring range for this position is $79,982.84 - $91,782.15. Are you willing to accept the position for this salary?