Network & Security Engineer

Under the direction of the IT Manager, the Network Security Engineer is responsible for SSSCU’s IT network security systems and functions. He/she works within established IT policies, procedures, standards and guidelines to ensure that IT systems and services address network security threats, risks, and attacks directed toward SSSCU. He/she also troubleshoots issues related to Information Security, network connectivity, and Microsoft Active Directory infrastructure. The Network Security Engineer contributes to the planning and implementation of IT network security initiatives and assists in planning defenses against security breaches and vulnerability issues. He/she will also be responsible for the day to day operations of SSSCU’s network to include network backbone, wide area network, Wi-Fi, and local area networks.

• Security Administration:
  • Works with information technology leadership to develop strategies and plans to enforce security requirements and address identified risks.
  • Act as a technical Subject Matter Expert (SME) on information security system development and best practices.
  • Works with vendors concerning security and network access requirements. Serves as a central point of contact to coordinate and implement network access and ensure network security.
  • Provides support for Enterprise VPN systems through access controls in firewall policies and monitoring of firewall logs.
  • Collaborates with other Information Technology staff to develop remediation plans addressing identified vulnerabilities.
  • Collaborates on critical IT projects to ensure that security issues are addressed throughout the project life cycle.
  • Deploys, tunes and runs vulnerability-scanning and penetration-testing tools
  • Assists in the development of security controls and security policies, principles and standards.
  • Researches, evaluates, tests and recommends the implementation of new or updated information security technologies.
  • Monitors daily or weekly reports and security logs for unusual events and trends.
  • Maintains awareness of industry trends, security news, and best practices.
  • Participates in security investigations and compliance reviews, as requested by internal or external auditors.
  • Administers all Network Security including but not limited to firewall management, Antivirus, email and Web Filtering.
  • Initiates, facilitates, and promotes activities to create information security awareness within the organization
  • Administers the internal control systems to ensure that appropriate access levels are maintained
  • Assists with the updating of the disaster recovery plan and may serve on a DR team
• Active Directory Administration:
  • Design and architect a global Active Directory Infrastructure, including, design and implementation of Group Policy
  • Plan and execute Active Directory Domain level upgrades.
  • Plan and design Group Policy Objects as requested to ensure compliance of company policies for servers and user end-point devices.
  • Lead, operate and continuously improve the AD environment on a global scale
  • Provide architecture guidance regarding changes and enhancements to Active Directory
  • Manage and maintain standardized Organizational Units (OU) in Active Directory
  • Manage and maintain Active Directory custom attributes and security groups
  • Manage Active Directory sites and subnets, including site replication
  • Manage and maintain group policy, and scripts associated with group policy
  • Research and resolve issues related to user accounts, group membership, and access
  • Assist in management and support of internal and external DNS systems. Assist in management and support of internal DHCP architecture and scoping.
  • Create and update technical documentation of operating procedures as needed.
  • Review domain level rights and privileges and perform changes to the same as appropriate.
  • Strong understanding of architecting and configuring Microsoft Windows OS technology including AD Forests, Domains, Trusts, DNS, DHCP, Group Policy and Organizational Units.
• Network Administration:
  • Configure network switches/routers to support connectivity to all network devices
  • Troubleshoot all LAN/WAN network issues and manage communications with ISP Business support while troubleshooting WAN issues
  • Check help desk tickets for entries on server and server resource issues; prioritize and respond to help desk tickets as, appropriate.
  • Implement, maintain, and support current and future LAN/WAN network technologies
  • Proactive monitoring and network performance analysis to improve availability, utilization and bandwidth usage
  • Documents and configures SSSCU network (physical, logical, subnets, VLANs, circuit IDs, changes configuration, etc)
  • Performs proactive maintenance to determine possible bottlenecks and security issues.
  • Develops test plans and procedures for installation and upgrades.
  • Perform network setup for new facilities.
  • Performs other related duties as assigned.