The Network & Security Administrator is a highly technical position that plans and designs all City core infrastructure and information networks (LAN & WAN). Primary responsibilities include securing enterprise information, planning, implementing, and testing security systems, preparing security standards and procedures, and serving as a resource to team members. In addition, this position also focuses on high-level design and planning, as well as selecting the appropriate data communications components and configuring them to meet data and security needs. This position also plays an essential role in the management, planning, and development of the City’s fiber network. The individual in this position works to assess risks and drive remediation of findings, as well as provides leadership on security and compliance best practices. This individual also provides network and system tuning and maintenance, to ensure network and system availability, optimization, acceptable response time, and end-user satisfaction.

Position Responsibilities:

Computer Networks. Design and maintain the City's complex Wide Area Network (WAN), which consists of multiple buildings, data centers, redundant fiber ring, and several firewalls. Ensure the stability and integrity of in-house voice, data, and wireless network services. Design and deploy company LANs, wireless networks, SANs, VMWare clusters, servers, routers, firewalls, switches, UPS's, and other hardware. Configure networks to ensure their smooth and reliable operation. Monitor network performance and troubleshoot problem areas. Ensure network connectivity of all servers, workstations, backup infrastructure, telephony equipment, mobile devices, and other network appliances. Manage servers, including database, e-mail, file, print, and backup servers and their associated operating systems and software. Develop, implement, and maintain policies, procedures, and associated training plans for network administration, usage, and disaster recovery. Practice network asset management, including maintenance of network component inventory and related documentation and technical specifications information.

Internet/Data Sharing. Assist with installation and maintenance, and monitor the City's Internet gateways. Work with the County and other agencies to support and maintain inter-network connectivity in an effort to share and submit data. Supports the hardware and connectivity with the following: Overland Park Computer Aided Dispatching (CAD) and MPS for the Police Dept., the County's CAD for the Fire Dept., multiple agency intersection security camera sharing, and the County's video arraignment system for Court. Monitor and maintain data access and integrity.

Security. Determine security requirements by evaluating business strategies and requirements. Plan security systems by evaluating network and security technologies. Design public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures as well as hardware and software. Coordinate routine activities through risk analysis and security audits to mitigate risks and to enhance system security. Perform daily/weekly security log audits including VPN access, firewall, routers, and switches. Review and approve monthly Microsoft security updates and patches for global domain. Perform routine penetration testing scans (IP based and Web Application Scans), as well as internal network scanning. Work with Security as a Service (SaaS) vendor routinely on system logs, system alerting, and security review.

Telecommunications. Maintain and troubleshoot the City's Cisco UCM servers, gateways, and VoIP/FoIP networking components and protocols.

Problem-Solving. Develop and implement consistent and reliable monitoring methods to track network component availability. Identify and resolve problems with hardware and software, and troubleshoot problems. Respond to network and fiber outages by working with internal users and outside vendors to minimize service disruption and duration. Assist in the completion of end user information system requests and problems.

Upgrades. Responsible for equipment, hardware, and server software upgrades. Collaborate with management to assess network capacity needs. Implement new programs and operating systems. Install and set up firewalls, routers, switches, security cameras, wireless access points, personal computers, and new equipment. Inform and train staff on necessary upgrades.

Server/Storage Administration. Design, deploy, and maintain City wide server infrastructure. Design and maintain multiple VMWare clusters, supporting both servers and VDI desktops. Maintain and monitor multiple SANs (Storage Area Networks).

Back-Ups. Performs quarterly audit of backup policies and procedures of system-wide infrastructure.

Desktop Administration. Responsible for Tier III level support including installation, configuration, maintenance, and troubleshooting of end user workstation hardware, software, and peripheral devices. Construct and deploy software packages and updates across global domain.

Purchasing. Research and evaluate vendor products in IS hardware and software. Recommend purchases consistent with the organizations short and long-term objectives. Responsible for vendor bidding, RFP's and quote reviews.

Liaison. Serve as the liaison to the various vendors and contractors assigned to the City's account. Interact and negotiate with them to secure network products and services, and to resolve problems as required. Maintain contact with outside organizations in the maintenance, service, recommendation, implementation, problem solving and/or purchasing of network components or software.

Training. Attend training. Stay informed of changing technologies by utilizing trade/security blogs, web sites, and continued education. Recommend and implement training programs when needed.

Budgeting. Identify infrastructure, equipment, and program needs and assist with preparing budget requests for the Information Systems Division.

Minimum Qualifications

• Bachelor's degree from an accredited college or university with major study in computer science, accounting or a closely related field. 

• Certifications preferred in any of the following areas: Microsoft Certified Systems Administrator or Systems Engineer (MCSA or MCSE), Cisco (CCNA or CCNP), Fortinet NSE, and/or VMWare certifications.

• Eight (8) years total experience in Information Technology and Information Security, to include any of the following:
  • Cisco Systems
  • Enterprise Systems and Storage
  • Core Networking Devices
  • Microsoft Server Products & Technologies

• Five (5) years total experience to include any of the following:

  • Fortigate firewalls

  • Fiber design, implementation, and troubleshooting

  • Point-of-Sale networks, requirements, compliance 

  • VMware Server and/or Desktop Virtualization

• Preferred qualifications include additional experience in any of the following: 

  • Microsoft O365 Administration and Teams Calling 

  • Phishing Testing and Security Awareness Training 

  • Genetec (EDL, badges, and Security Cameras) 

  • Powershell 

  • Wireshark 

Any combination of education and experience that provides the knowledge, skills and abilities to successfully perform the responsibilities listed in this job posting may also be considered.

The hiring salary based on the minimum qualifications begins at $84,000 annually. Individuals with education and experience that exceeds the minimum qualifications listed above will be compensated accordingly.

Work Schedule

Although this position generally works eight hour days Monday through Friday, work days of the week and daily hours may vary in order to meet operational requirements. This position is a 24/7 on-call position with one week rotations, however, this position may be required to work outside of normal hours at any time for emergencies or to perform necessary tasks which could impact network availability.

Disclaimer

The included statements are intended to describe the general nature and level of the work performed by employees assigned to this position. It is not designed to contain or be interpreted as a comprehensive list of all duties, responsibilities, and qualifications. The City of Shawnee reserves the right to amend and change responsibilities of job descriptions to meet business and organizational needs as necessary. The job description is not a contract or guarantee of employment.

If reasonable accommodation is necessary to apply or further information is needed, please contact: Human Resources, Shawnee City Hall
11110 Johnson Drive, Shawnee, KS 66203.
EOE M/F