Network Security and Firewall Engineer - City

Job Description

View More Jobs

Network Security and Firewall Engineer - City

Oklahoma City, OK, United States

Trending

Job Description

PAY AND FAIR LABOR STANDARDS ACT (FLSA) STATUS:Pay Range: 520Hourly Rate: $43.55 - $66.59 FLSA Status: ExemptThe normal starting pay for this position is the minimum of the pay range listed above. A higher rate of pay may be considered, dependent on the qualifications and experience of the selected applicant and/or the City's step placement policy.APPLICATION, HIRING, AND BACKGROUNDWhen completing the application, applicants will be asked to respond to application questions. These application questions are based on the Job Requirements for the position. Completion of the application questions is required. Applicant responses to the application questions must specifically answer the questions asked. Responses to application questions must be supported by work history/information listed on the application/resume, sufficient to demonstrate qualifications for the position. Applicants may upload only two attachments. Attachments may include, but are not limited to a resume, cover letter, DD214 or NGB Form 22, transcripts, etc. Applicants may also choose to combine documents into one file for upload. Applications may not be reviewed if specific responses to application questions have not been provided.Each application submission is reviewed independently. For detailed information about the City's hiring and background processes, check out the: Quick Guide to Hiring and Background ChecksIf you have questions, check out the: Frequently Asked QuestionsTOTAL REWARDSAt the City of Oklahoma City, our Total Rewards package is designed to honor your service, fuel your growth, and support every part of your life. We offer:Competitive payAn average of $22,000 annually contributed toward your benefits and retirementA comprehensive package designed to support your health and wellness, financial security, work-life balance, and personal and professional growth and developmentExplore all the ways we invest in you: City of Oklahoma City Total RewardsPOSITION DESIGNATIONS This job classification has been designated as a safety sensitive job classification in accordance with the Oklahoma Medical Marijuana and Patient Protection Act, 63 O.S., § 427.1 et seq., (OSCN 2019), effective August 29, 2019. This means employees in this job classification can be subject to disciplinary action up to and including termination if they test positive for marijuana components or metabolites, even if they possess a medical marijuana license.This job classification has been designated as a cyber security sensitive job classification effective June 26, 2023, in order to comply with United States Department of Justice, Federal Bureau of Investigation, Criminal Justice Information Services (CJIS) Division's Criminal Justice Information Services Security Policy (Version 5.9.2, 12/07/2022), 5.12 Policy Area 12 Personnel Security. The policy requires national fingerprint-based records checks be conducted prior to granting access to criminal justice information for all personnel who have unescorted access to unencrypted Criminal Justice Information (CJI) or unescorted access to physically security locations or controlled areas (during times of CJI processing). Employees in this job classification will be subject to a Criminal Justice Information Services (CJIS) Interstate Identification Index (III) Fingerprint Background check after receiving a conditional offer of employment. Additionally, employees in this job classification must complete the required CJIS Security and Privacy Training and pass the online certification test. JOB SUMMARY This position is located in the Technology Infrastructure Division in the Information Technology Department within the City of Oklahoma City and is under the direction of the Information Technology Business Systems Manager. This position is responsible for managing and maintaining the City of Oklahoma City firewall infrastructure to protect the network from external threats, ensuring network security, and implementing security policies and best practices. A Network and Firewall Engineer is also responsible for designing, implementing, configuring, and maintaining the firewall infrastructure to ensure the security and integrity of the network. This role is essential for safeguarding sensitive data, preventing unauthorized access, and mitigating security threats. ESSENTIAL JOB FUNCTIONSConfigures, installs, and maintains firewall hardware and software solutions, including next-generation firewalls (NGFW), to protect the organization's network.Develops, implements, and enforces firewall security policies, rules, and access controls to safeguard sensitive data and ensure compliance with industry regulations.Monitors network traffic for suspicious activities, security breaches, and vulnerabilities using intrusion detection and prevention systems (IDPS).Responds to security incidents and breaches promptly, investigates root causes, and implements corrective actions to prevent future occurrences.Analyzes firewall logs and generates reports to identify security threats, trends, and potential vulnerabilities.Manages user access and permissions by configuring VPNs, ACLs, and other access control mechanisms.Ensures firewall hardware and software are up to date by applying patches, firmware updates, and security patches.Implements network segmentation to isolate critical assets and limits lateral movement in the event of a breach.Monitors and optimizes firewall performance to ensure it does not adversely affect network speed or latency.Maintains accurate documentation of firewall configurations, policies, and network diagrams for reference and audit purposes.Collaborates with other IT teams, such as network engineers, system administrators, and security analysts, to ensure a cohesive and secure network environment.Provides training and guidance to employees and IT staff on firewall security best practices and security awareness.Configures and monitors firewalls.Monitors daily usage, performs regular maintenance, and patches as needed.Troubleshoots complex errors and configurations to determine root cause.Creates documentation of procedures, configurations, and network topologies.Stays abreast of changes and processes for compliance to ensure requirements are met.VETERANS PREFERENCEHonorably discharged veterans of the United States Active Duty Armed Forces, National Guard, and Reserve Forces who are not currently employed full-time by the City of Oklahoma City and who meet the qualifications for the position shall be given preference. To receive preference, veterans must submit verification of honorable discharge from the United States military service (Department of Defense Form DD214 or NGB Form 22) prior to the closing date of the vacancy announcement. MINIMUM QUALIFICATIONSBachelor's degree in computer science, Information Technology, or a related field.Three (3) years firewall administration and five (5) years Information Technology experience.Possession of valid industry certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Firewall Administrator (CFA).KNOWLEDGE, SKILLS, AND ABILITIESKnowledge and experience in firewall administration, network security, and intrusion detection/prevention systems.Knowledge of Firewalls (e.g., Cisco ASA, Palo Alto, Juniper, Fortinet), Intrusion Detection and Prevention Systems (IDPS), VPN technologies, Network monitoring and logging tools, Security Information and Event Management (SIEM) systems, Access Control Lists (ACLs) and Network segmentation techniques.Knowledge of firewall technologies, including both hardware and software solutions; staying abreast of the latest cybersecurity threats and industry best practices.Knowledge of network protocols, routing, and switching.Skill in analysis and problem-solving to identify and respond to security threats.Skill in verbal and written communications.Ability to work in a fast-paced, dynamic environment and adapt to changing security threats.PREFERRED QUALIFICATIONSExperience with Palo Alto and Fortinet.COMPETENCIESOne City, One Team (Teamwork/Team Oriented) (1) Recognizes, values, and leverages the ideas, opinions, and perspectives of others; (2) participates willingly and effectively as a team lead or team member; (3) builds consensus; fosters team commitment, spirit, pride, and trust; (4) collaborates with others to accomplish goals and objectives and achieve results; (5) expresses facts, ideas, messages, and information (technical and non-technical) to individuals or groups clearly, concisely, accurately, understandably, with honesty, tact, and diplomacy and in a manner that is appropriate for the intended audience; (6) actively listens, clarifies information as needed; (7) [Core Value One City, One Team] shares information, resources and solutions across departments; (8) [Core Value One City, One Team] asks for help early and offers it often; (9) [Core Value One City, One Team] collaborates across teams before decisions are made.Service First (Customer Centric) (1) Demonstrates commitment to public service; (2) serves and satisfies internal and external customers in a timely and effective manner; (3) establishes, commits to, and maintains high standards for producing quality work products and being responsive to customers; (4) supports the Department/City's mission; develops and executes strategies with the customer in mind; (5) [Core Value Service First] acts quickly and follows through until the job is complete; (6) [Core Value Service First] serves everyone with genuine respect, diligence and professionalism; (7) [Core Value Service First] makes decisions with the people we serve in mind.Respect Always (Leads Through Influence) (1) Persuades others; builds consensus through give and take; (2) gains cooperation from others to obtain in