Network Security Engineer

About the Department

Position Duties

• This position manages the following areas of responsibility: Analytical & Problem Solving Diagnose and resolve complex cybersecurity and network issues. Investigate and remediate web browsing threats, malware infections, and intrusion attempts. Apply analytical reasoning to balance customer needs, operational realities, and technical constraints. Diagnose complex firewall, routing, VPN, NAT and connectivity issues Perform packet capture and log analysis to determine root cause Balance security requirements with operational needs Network & Cybersecurity Systems Management Design, specify, and implement new cybersecurity hardware, software, and services. Manage and maintain firewalls, intrusion prevention systems (IPS), web content filtering, email protection, and endpoint detection and response (EDR) platforms. Monitor, analyze, and fine-tune security infrastructure for performance, resilience, and compliance. Implement firewall policy changes through formal change management Perform software upgrades during maintenance windows Coordinate with vendors during complex incidents Maintain technical documentation and standard operating procedures Participate in 24x7 on-call rotation and emergency response Administer enterprise NFGW platforms, VPNs, IPS, URL Filtering and SSL Inspection Support SIEM integration and security event investigations Project Participation Collaborate with cross departmental teams to deliver secure and scalable technological solutions. Contribute security expertise to technology initiatives, from planning through implementation and support. Communication & Customer Support. Communicate complex technical issues clearly to both technical and non-technical audiences. Produce accurate and concise documentation, memos, reports, and user guides. Deliver outstanding customer service to City agencies and staff, ensuring timely and effective support. Update and maintain technical documentation and automated work management systems. The person in this position must demonstrate technical expertise in the following areas: Core Technologies Proficient with server hardware, Microsoft Server OS, and major Linux distributions (Red Hat, CentOS, Ubuntu, etc.). Familiarity with Microsoft Office Suite (Outlook, Teams, Word, Excel, SharePoint, PowerPoint, Visio). Working knowledge of vulnerability management and offensive security principles. Cybersecurity Tools & Platforms Hands on experience with cybersecurity incident handling, digital forensics, and full disk encryption. Support, investigate and validate the implementation of security policies such as Conditional Access, Insider-Risk Management, DSPM for AI, Data Loss Prevention Information Protection, and endpoint/server security compliance. Experience with one or more of the following: Next-Generation Firewalls (NGFW) Endpoint Detection and Response (EDR) Data Loss Prevention Microsoft Exchange and Office 365 Single Sign-On (SSO) and Identity Federation technologies such as SAML, OAuth2, or OpenID Multi-Factor Authentication (MFA) systems Microsoft Active Directory Tenable Vulnerability Management Privileged Access Management (PAM) Perform other cybersecurity functions as assigned by the Chief Information Security Officer.
• This position manages the following areas of responsibility:

Analytical & Problem Solving

Network & Cybersecurity Systems Management

Project Participation

Communication & Customer Support.

Core Technologies

Cybersecurity Tools & Platforms

Minimum Qualifications

• High School graduate or equivalent; specific vocational, administrative, or technical knowledge obtainable through six months to one year of advanced study or training past the high school level (through either city in-house training or an outside educational institution). Required: Three (3) years of experience in an Information Technology related field or an equivalent combination of education and experience. Preferred: Bachelor’s degree with coursework in Cybersecurity, Information Assurance or a related discipline. Five (5) years of IT experience. Three (3) or more years supporting enterprise network security technologies.
• Three (3) years of experience in an Information Technology related field or an equivalent combination of education and experience.
• Bachelor’s degree with coursework in Cybersecurity, Information Assurance or a related discipline.
• Five (5) years of IT experience. Three (3) or more years supporting enterprise network security technologies.
• Three (3) or more years supporting enterprise network security technologies.

Other Qualifications

• Valid driver's license required. Must successfully pass a background check. Must be capable of working independently and collaboratively within a team. Work Schedule: This position works forty-hours per week to accommodate City operating hours. This position is an Essential position, which requires attendance during emergencies, delayed city openings and special weather events. Report during emergencies, natural disasters, and nonstandard shifts as directed. Be available for a 24-hour on-call rotation and emergency response as required.
• Valid driver's license required.
• Must successfully pass a background check.
• Must be capable of working independently and collaboratively within a team.
• This position works forty-hours per week to accommodate City operating hours.
• This position is an Essential position, which requires attendance during emergencies, delayed city openings and special weather events. Report during emergencies, natural disasters, and nonstandard shifts as directed.
• Report during emergencies, natural disasters, and nonstandard shifts as directed.
• Be available for a 24-hour on-call rotation and emergency response as required.

Benefits

• Regular full-time and permanent part-time employees may receive paid holidays, vacation and sick leave, employer paid pension plan, basic life insurance, voluntary participation in medical and dental, Section 457 deferred compensation, long-term disability, optional life insurance for self, spouse and children, medical and dependent care reimbursement plans, access to membership in credit union and employer provided parking. Special project/grant employees are generally eligible for the same benefits of regular full-time employees; however, retirement, life insurance and participation in health plans vary depending upon funding and authorization. Temporary/seasonal and part-time employees are generally only eligible for employer provided parking and access to membership in credit union. Retirement If you are hired October 5, 2010, or after to a position with City of Norfolk Retirement System benefits, you will be required to contribute five percent (5%) of your salary toward your retirement benefit. This will be a pre-tax payroll deduction. If you are hired January 1, 2022, or after to a position with Virginia Retirement System (VRS) benefits, you will be required to contribute five percent (5%) of your salary toward your retirement benefit. This will be a pre-tax payroll deduction. The Tuition Assistance Program is established to encourage employees toward continued self-development and education. Permanent full-time and permanent part-time classified, unclassified permanent, full-time special projects, and constitutional employees who have completed six months continuous service will be eligible to apply. The applicant’s school of enrollment must be an accredited institution. NOTE: The benefits described above are broad generalizations. The specific benefits that an employee may be eligible for are governed by City regulations, as applicable to job type. Non-City Positions listed with a job type designation of "Non-City" are not subject to the benefits descriptions above. Refer to the content of the job posting for information regarding these positions.
• Regular full-time and permanent part-time employees may receive paid holidays, vacation and sick leave, employer paid pension plan, basic life insurance, voluntary participation in medical and dental, Section 457 deferred compensation, long-term disability, optional life insurance for self, spouse and children, medical and dependent care reimbursement plans, access to membership in credit union and employer provided parking. Special project/grant employees are generally eligible for the same benefits of regular full-time employees; however, retirement, life insurance and participation in health plans vary depending upon funding and authorization. Temporary/seasonal and part-time employees are generally only eligible for employer provided parking and access to membership in credit union. Retirement
• Special project/grant employees are generally eligible for the same benefits of regular full-time employees; however, retirement, life insurance and participation in health plans vary depending upon funding and authorization. Temporary/seasonal and part-time employees are generally only eligible for employer provided parking and access to membership in credit union. Retirement
• Temporary/seasonal and part-time employees are generally only eligible for employer provided parking and access to membership in credit union. Retirement
• Retirement
• The Tuition Assistance Program is established to encourage employees toward continued self-development and education. Permanent full-time and permanent part-time classified, unclassified permanent, full-time special projects, and constitutional employees who have completed six months continuous service will be eligible to apply. The applicant’s school of enrollment must be an accredited institution.

Supplemental Questions