What are the responsibilities and job description for the Senior Network Security Engineer position at El Paso County (CO)?
This Senior Network Security Engineer role is designed for experienced engineers ready to move beyond routine support and into a true subject matter expert position. With a strong focus on network/firewall design and architecture, this role blends strategic thinking with hands-on expertise. While you’ll continue to support and maintain existing systems, your primary impact will come from providing technical leadership, guiding complex projects, mentoring peers, and partnering with County leadership to deliver secure, reliable, and forward-looking network solutions. Apply today!
Hiring Range: $114,000.00 - $124,000.00 annually
This position has an anticipated work schedule of Monday – Friday, with flexible hours between 7:00 a.m. and 6:00 p.m. Nights and weekends may be required on an as-needed basis. Schedule is subject to change.
Please be advised this position may close without advance notice, should we receive a sufficient number of qualified applications.
Provides advanced network engineering and architecture expertise to design, implement, and support enterprise data (switching and routing), firewall, video, and VoIP networks throughout the County. Performs maintenance and upgrades in support of highly secure and available networks, including advanced design and architecture, specification, planning, installation, configuration, and support of a wide variety of specialized network hardware and software. Employment is subject to the terms, conditions, and policies detailed in the Personnel Policies Manual (PPM). This position requires regular in-person presence as an essential job function.
- Performs design, installation, configuration, maintenance, and upgrade operations for County-wide network infrastructure using advanced engineering skills.
- Implements, configures, upgrades, patches, and maintains enterprise firewall hardware and operating systems in accordance with established security architecture and policy.
- Configures and maintains high-availability firewall clusters, failover configurations, routing interfaces, VLANs, VPN connectivity, and network integration components.
- Executes approved firewall rule and configuration changes in alignment with Information Security governance and change management procedures.
- Designs and develops network drawings and artifacts as required.
- Provides expert guidance while resolving complex problems and issues to meet the needs of customers.
- Creates network solutions for data, VoIP, broadcasting, and other enterprise networking requirements using networking analysis, engineering, and design skills along with specialized equipment knowledge.
- Creates and updates network project plans, department processes, and standards documentation.
- Designs, configures, deploys, and maintains systems that monitor infrastructure performance, application connectivity, and security-related issues.
- Provides advanced resolution of infrastructure performance, application connectivity, and security-related issues utilizing specialized network diagnostic hardware and software.
- Participates in researching, testing, and recommending new networking technologies; designs and implements new technology.
- Develops and updates support procedures and standards related to network, VoIP, video, and security infrastructure.
- Remains current with all related industry standards, trends, and certifications.
- Participates in on-call rotation, providing off-hours support as necessary.
- Performs other duties as required.
Supervision Exercised: This classification does not have supervisory authority; however, may be required to provide expertise or limited guidance or direction to employees, such as overseeing work quality, training, and guidance. Typically serves as a subject matter expert on the scope of functional area.
Supervision Received: Receives general supervision. This classification typically performs job duties by following established standard operating procedures and/or policies. Regular direction, guidance, and coaching from supervisor may be expected. There is a choice of the appropriate procedure or policy to apply to duties. Performance reviewed periodically.Qualifications
Knowledge, Skills & Abilities
- Thorough knowledge of enterprise network infrastructure design, including LAN, WAN, MAN, wireless, routing, and switching technologies.
- Thorough knowledge of enterprise firewall platforms from an infrastructure and systems perspective, including hardware lifecycle management and operating system maintenance.
- Thorough knowledge of infrastructure-level support requirements for security devices in alignment with established security policies.
- Thorough knowledge of network related technical standards and methodologies.
- Must possess advanced enterprise class network engineering, design, and support skills.
- Must possess advanced expertise with cloud networking technologies.
- Must possess strong analytical and critical thinking skills.
- Ability to serve as a technical subject matter expert.
- Ability to work independently and as part of a team.
- Ability to work long-term network projects while providing expert technical and design knowledge for daily operational support.
- Ability to communicate effectively both verbally and in writing, including the ability to articulate user needs in technical and non-technical terms and document network security and other related information.
- Ability to establish and maintain effective working relationships with co-workers, County staff, and contractors. Ability to provide excellent customer service.
- Maintain regular and punctual attendance.
- High school diploma or equivalent education.
- Five years of experience with installation, configuration, and support of a large multi-site, multi-application enterprise class-network environment.
- Associate’s degree in a related field may substitute for one year of the required experience.
- Bachelor’s degree in a related field may substitute for two years of the required experience.
- Advanced experience with network security and traffic monitoring tools.
- Associate’s degree or higher in computer science or closely-related engineering discipline.
- Five years of experience on large, distributed enterprise-class network and data center infrastructure.
- Three years of experience supporting and designing Palo Alto firewalls.
- Must possess and maintain a valid driver's license.
- Cisco Certified Network Associate (CCNA), or must obtain within 12 months of employment.
- Must obtain and maintain Criminal Justice Information System (CJIS) Compliance within six months of employment based on regular access to the Sheriff's Office buildings, systems, and/or networks.
- Must pass conditional post offer background investigation, motor vehicle record check, drug screen, and physical examination.
The classification specification above is intended to represent only the key areas of responsibilities and minimum qualifications; specific job assignments, duties, education, experience, licenses/certifications, and environmental conditions will vary depending on the needs of the department/office and the particular assignment. Changes to this document may only be made by a member of the Human Resources Department.
Salary : $99,490 - $149,120