OFN Network Security Officer

City-of-Ocala,-F; Ocala (FL); On-site; USD 80,000 - 120,000; Full time

Job summary

City of Ocala IT Department seeks a Network Security Officer to maintain and document the department's security profile and coordinate with all sections for integrated solutions. The role requires security requirements elicitation, analysis, and architecture awareness to address high-risk networks.

The candidate will develop attack/defense methodologies, support business continuity during disasters, and supervise security standards across platforms including VMware, Azure, O365 and Windows

Qualifications

• Bachelor's degree in IT or equivalent with network, security and disaster recovery focus.
• Experience administering security within an Active Directory environment.
• CISSP or Security+ certifications preferred or to be completed within 3 years.

Responsibilities

• Maintain and document the department's security profile and coordinate with all sections.
• Elicit, analyze, and specify security requirements and architecturally significant impacts.
• Develop attack and defense methodologies for high-risk networks.
• Oversee security controls, firewalls, and intrusion-detection measures.
• Support business continuity and disaster recovery planning and testing.

Skills

Security architecture

Threat modeling

Disaster recovery

VMware

Azure

O365

Windows OS

NIST standards

ISO27001/ISO27002

Education

Bachelor's degree in Information Technology or equivalent

Experience with security in AD environment

Tools

VMware

Azure

O365

Windows OS

Job description

The Network Security Officer will be responsible for maintaining and documenting the security profile of the Department. The security officer will work closely with all aspects of Department sections to ensure tight collaboration and integration of security solutions. The security officer must possess the ability to perform security requirements elicitation, analysis, and specification with a working ability to identify architecturally significant requirements and their ramifications. Develop attack and defense methodologies for high risk computer networks. This position will be responsible for business continuity and continuing operations during a disaster.

ESSENTIAL DUTIES AND RESPONSIBILITIES

1. Responsible for executing software changes and modifications to the Data Transport and Voice Systems.
2. Monitors and analyzes data and voice network systems for performance and problem indication. Determines causes of problems and initiates corrective action.
3. Researches, evaluates, and recommends methods of enhancing network services to support and fulfill end-user requirements.
4. Inspects, oversees, and monitors contract services and vendors for quality of work and conformance to installation and repair procedures.
5. Responsible for coordinating projects requiring the involvement of the City of Ocala IT staff and projects to provide interconnectivity between the City and other external agencies.
6. Advanced configuration of Internet working devices such as bridges and routers in a multiprotocol environment (TCP/IP, IPX, SPB) using various interior and exterior routing protocols (RIP, OSFP, BGP-4) preferred.
7. Implementation and testing of LAN technologies such as Ethernet, Fast Ethernet and WAN technologies such as T1/T3, MAN, Active Ethernet, GPON and Dark Fiber.
8. Working knowledge with network management using SNMP based platforms
9. Designing and implementing operational and support standards for large network implementations supporting network operating system platforms
10. Research new and emerging security attacks and develop techniques and research solutions to control risks.
11. Evaluate the effectiveness of existing security measures, such as firewalls, password policies and intrusion-detection systems.
12. Make recommendations to improve security based on their assessments and knowledge of current and emerging threats.
13. Monitor system access to ensure compliance with standards and policies.
14. Promote appropriate security best practices and fundamentals in architectural design and implementation.
15. Perform security auditing, assessments, and evaluation vulnerability testing tools and procedures.
16. Develop policies that give managers and employees varying levels of access to applications, systems, and data.
17. Provides service consultation and support towards department related projects and or solutions.
18. Perform enterprise security architecture requirements analysis and design, support/lead engineering and deployment activities.
19. Provide ongoing engineering support for deployed security technologies, support security design reviews for all application and technology rollouts.
20. Review proposed changes in the technology environment for security implications
21. Evaluate and implement new technology for relevancy to the department's overall security strategy and in support of new business requirements/initiatives.
22. Evaluate each control, technology, and gap for potential improvement and refinement.
23. Coordinate with various project teams to communicate the necessity of security requirements and design constraints as part of SDLC.
24. Produce, review, and update designs for security vulnerabilities & gaps.
25. Responsible for maintaining departmental data security using NTFS and Share permissions following Microsoft-recommended best practices to maintain the highest degree of data integrity.
26. Installs server and client virus protection software and ensure updates are applied on a timely basis.
27. Responsible for managing the programming, administration, and support activities for the department's server and client systems, including configuration, performance management, backup and recovery.
28. Leads or commissions suitable information security awareness, training, and educational activities.
29. Responsible for working with the network engineer on firmware updates, patches to all operating systems across all systems.
30. Responsible for developing response plans, continuity of operations plans, and preventative plans for training.
31. Must be able to backfill work tickets for the helpdesk as business needs require.
32. Will work as the local agency security officer for FDLE requirements.
33. Must have experience across VMware, Azure, O365, Windows Operating Systems.
34. Position will require scheduled on call rotations and must be available to work nights, weekends, holidays as needed. Perform any other related duties as required or assigned
35. Perform any other related duties as required or assigned.

EDUCATION AND EXPERIENCE

• Bachelor's degree in Information Technology or equivalent work experience with network architectures, client servers, firewalls, cloud environments, data backup / disaster recovery, Web Servers, etc.
• Possess experience administering security within an Active Directory environment.

REQUIRED CERTIFICATES, LICENSES, REGISTRATIONS

• Must possess and maintain a valid Florida Operators Driver's License with an acceptable driving record.
• Possesses Computer Information Systems Security Professional Certification, (CISSP) or successfully completes the exam for CISSP certification within 3 years of job placement.
• Possesses CompTIA Security Certification or acquire within 1 year of job assignment.

RESPONSIBILITY FOR FUNDS, PROPERTY and EQUIPMENT

None.

SUPERVISORY RESPONSIBILITIES

Directly supervises 0 subordinate supervisor(s) who supervise(s) a total of 0 employee(s). Supervises 0 non-supervisory employee(s). Carries out supervisory responsibilities in accordance with the organizations policies and applicable laws. Responsibilities include interviewing, hiring and training employees; planning, assigning and directing work; appraising performance, rewarding and disciplining employees; addressing complaints and resolving problems.

COMMUNICATION SKILLS

Ability to read and understand simple instructions, short correspondence, notes, letters and memos; Ability to write simple correspondence. Ability to read and understand documents such as policy manuals, safety rules, operating and maintenance instructions, and procedure manuals; Ability to write routine reports and correspondence. Ability to effectively communicate information and respond to questions in person-to-person and small group situations with customers, clients, general public and other employees of the organization. Ability to read, analyze, and understand general business/company related articles and professional journals; Ability to speak effectively before groups of customers or employees.

MATHEMATICAL SKILLS

Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to prepare and interpret bar graphs.

CRITICAL THINKING SKILLS

Ability to solve practical problems and deal with a variety of known variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, or diagram formats.

SUPERVISION RECEIVED

Under direction where a definite objective is set up and the employee plans and arranges own work, referring only unusual cases to supervisor.

PLANNING

Considerable responsibility with regard to general assignments in planning time, method, manner, and/or sequence of performance of own work, in addition, the work operations of a group of employees, all performing basically the same type of work.

DECISION MAKING

Performs work operations which permit frequent opportunity for decision-making of minor importance and also frequent opportunity for decision-making of major importance, either of which would affect the work operations of medium organizational component and theorganization's clientele.

MENTAL DEMAND

Close mental demand. Operations requiring close and continuous attention for control of operations. Operations requiring intermittent direct thinking to determine or select the most applicable way of handling situations regarding the organization's administration and operations; also to determine or select material and equipment where highly variable sequences are involved.

ANALYTICAL ABILITY / PROBLEM SOLVING

Moderately directed. Activities covered by wide-ranging policies and courses of action, and generally directed as to execution and review. High order of analytical, interpretative, and/or constructive thinking in varied situations.

USE OF MACHINES, EQUIPMENT AND/OR COMPUTERS

Regular use of highly complex machines and equipment; specialized or advanced software programs.

ACCURACY

Probable errors of internal and external scope would have a moderate effect on the operational efficiency of the organizational component concerned. Errors might possibly go undetected for a considerable period of time, thereby creating an inaccurate picture of an existing situation. Could cause further errors, losses, or embarrassment to the organization. The possibility for error is always present due to requirements of the job.

PUBLIC CONTACT

Extensive contacts with various diversified sectors of the public environment; wherein, the contacts are of extreme importance and failure to exercise proper judgment can lead to substantial losses to the organization.

EMPLOYEE CONTACT

Contacts with other departments or offices and also frequently with individuals in middle level positions; consulting on problems which necessitate judgment and tact in presentation to obtain cooperation or approval of action to be taken. Also, important contacts with associates as required in advanced supervisory jobs.

SOFTWARE SKILLS REQUIRED

Advanced: 10-Key, Alphanumeric Data Entry, Spreadsheet. Intermediate: Word Processing/Typing.

ADDITIONAL SOFTWARE SKILLS

Not indicated.

OTHER SKILLS

Excellent customer service and verbal communication skills Excellent written communications and problem-solving skills Excellent organizational skills with ability to team with others to develop and implement complex projects Ability to work a variety of projects with limited supervision Solid analytical skills to troubleshoot high-level, complex and technical problems Knowledge of industry security standards such as ISO27001/ISO27002, NIST, etc. Knowledge of common IT architectures, cryptography, encryption, ciphers, certificate and key based technologies, TCP/IP protocol suite Knowledge of operating system design and principles Knowledge in Microsoft Excel, PowerPoint, Visio and Word Knowledge of continuity of operations plans

PHYSICAL ACTIVITIES

The following physical activities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and expectations. While performing the functions of this job, the employee is continuously required to sit, use hands to finger, handle, or feel, talk or hear; regularly required to reach with hands and arms; occasionally required to stand, walk, stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 10 pounds, occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision.

ENVIRONMENTAL CONDITIONS

There are no harmful environmental conditions that are present for this position. The noise level in the work environment is usually moderate.

ADDITIONAL INFORMATION

Residency Requirement

This is not necessarily an exhaustive list of all responsibilities, skills, duties, requirements, efforts, and working conditions associated with the job. While this is intended to be an accurate reflection of the current job, management reserves the right to revise the job or to require that other or different tasks be performed when circumstances change (e.g., emergencies, changes in personnel, workload, rush jobs, or technological developments).