Computer Network Manager

Computer Network Manager (may also be referred to as the Systems Administrator & Cybersecurity Specialist)

District: Lowell Public Schools
Reports To: Director of Têchnology
Department: lnformation Technology & Educational Technology

Position Summary
The Systems Administrator & Cybersecurity Specialist is a vital enterprise-level role
responsible for designing, securing, and maintaining the district's core network infrastructure,
directory services, and cybersecurity posture. This position ensures the confidentiality, integrity,
and availability of all district data, voice, and video networks across multiple school and
administrative sites. Operating in a high-compliance K-12 environment, the Network Manager &
Cybersecurity Specialist leads threat prevention, incident response, network architecture
planning, enterprise identity suppott, and proactive security hardening to protect sensitive
student and staff information.

Key Responsibilities

1. Systems Administrator

• Manage high-availability core firewall and VPN tunnels.

2. Directory Services & Active Directory Support

• Provide advanced support, maintenance, and security hardening for Microsoft Active Directory (AD) and associated identity synchronization services (such as Azure AD/Entra lD).
• Collaborate closely with the Manager of ITCS-who handles day-to-day administration-to maintain organizational unit (OU) structures, Group Policy Objects (GPOs), schema updates, and robust authentication pipelines.
• Ensure directory-level security controls, role-based access controls (RBAC), and multi-factor authentication (MFA) are rigorously enforced across all user and administrative accounts.

3. Cybersecurity & Risk Management

• Develop, implement, and continuously update the district's comprehensive cybersecurity strategy and incident response plan.
• Deploy and manage endpoint detection and response (EDR), intrusion detection/prevention systems (lDS/lPS), multi-factor authentication (MFA), and enterprise sparn/phishing filters.
• Conduct regular vulnerability scans, penetration testing, and risk assessments to identify and remediate security gaps across servers, network hardware, directory services, and cloud environments.
• Lead incident triage and forensic investigation in the event of a security breach or suspicious activity.

4. Cross-Departmental Data Collaboration & Directory Services

• Collaborate closely with the district data department to ensure secure data pipelines, proper integration handling for student information systems (SlS), and robust data protection during transport and storage.
• Manage and maintain enterprise email distribution lists and mailgroups, ensuring accurate role-based access, security group memberships, and compliance with communication policies.

5. Systems Patch Management & OS Lifecycle

• Ensure all operating systems (servers and core infrastructure) are kept up to date, establishing and executing regular, automated patching schedules to minÍmize attack surfaces.
• Monitor, test, and deploy critical security patches and firmware updates for servers, firewalls, network switches, and core infrastructure with minimal disruption to instructional time.

6. Data Privacy & Regulatory Compliance

• Ensure all network, directory, and data architectures strictly comply with federal, state, and local mandates, including CIPA (Children's lnternet Protection Act), FERPA (Family Educational Rights and Privacy Act), COPPA, and state student data privacy laws.
• Collaborate with the Director of Technology to vet third-party software and cloud vendors from a technical security and data encryption standpoint before Data Privacy Agreements (DPAs) are executed.
• Oversee web-filtering infrastructure to ensure safe, filtered internet access for students and staff in accordance with legal requirements.

7. lnfrastructure Security & Collaboration with ITCS

• Establish secure remote-management protocols and role-based access controls (RBAC)
• for technical staff.

8. Disaster Recovery, Backup, & System Resiliency

• Architect, test, and maintain enterprise disaster recovery and business continuity plans, including immutable local and off-site/cloud backup solutions.
• Monitor network and server uptime, performance metrics, and log files using advanced SIEM (Security lnformation and Event Management) tools.

Qualifications & Requirements

• Education: Bachelor's Degree in Computer Science, lnformation Assurance, Cybersecurity, lnformation Technology, or a related field (equivalent professional experience will be strongly considered).
• Experience: Minimum of 5-8 years of progressive experience in enterprise network engineering, cybersecurity administration, and directory services management, with a preferred background in K-12 public education or municipal government environments.
• Technical Expertise:
• Deep technical proficiency with Microsoft Active Directory, GPO design, identity synchronization, and directory security hardening.
• Advanced knowledge of routing protocols (BGP, OSPF), VLAN segmentation, enterprise wireless architecture, and next-generation firewalls (e.9., Palo Alto, Fortinet, Cisco).
• Hands-on experience with SIEM platforms, EDR solutions, vulnerability management scanners, patch management fra meworks, and identity/access management (IAM/MFA)
• Deep understanding of secure data integration, email administration, and packet analysis.
• Certifications: lndustry-recognized certifications-such as CISSP, CISM, CompTlA Security , CCNA, CCNP, or equivalent-are highly desirable.
• Gore Competencies: Strong analytical and problem-solving skills, ability to manage high-pressure security incidents calmly and systematically, and excellent technical documentation and communication abilities.