Network Security Engineer

Description

Norfolk, Virginia is America's most authentic and urban waterfront city. Home to the world's largest naval station and the business, arts, and cultural center of Coastal Virginia, Norfolk has been rated a top place to live, work, play, and raise a family by numerous publications. Working for the City of Norfolk is an opportunity to make a real difference in the lives of others. With our commitment to competitive pay and a strong retirement package, you can do good for your community and do well for yourself. Join a caring workplace that proudly celebrates uniqueness, authenticity, and a shared commitment to improving the lives of our residents.

The Department of Information Technology (IT) plays a key role in driving customer-focused innovation initiatives. It is comprised of four technical bureaus, which are Business Enablement, Customer Success and Productivity, Technology Infrastructure and Cybersecurity. There is a continual need for technological solutions that meet business function and organizational needs, while balancing security and support requirements. IT sets technology policy direction for the enterprise, identifying, recommending, implementing, and maintaining technology and solutions to support the City’s business needs. Collectively, the 95 IT staff members work together to provide essential services and technical support to all City staff and business functions while maintaining a supportive, respectful, and inclusive culture in the department.

The Department of Information Technology seeks a Network Engineer III to administer and support the City’s enterprise firewall and network security infrastructure. This position focuses on next-generation firewalls, secure connectivity, VPN technologies, threat prevention, and enterprise troubleshooting while working collaboratively with infrastructure and cyber security team members

Essential Functions

This position manages the following areas of responsibility:

Analytical & Problem Solving

• Diagnose and resolve complex cybersecurity and network issues.
• Investigate and remediate web browsing threats, malware infections, and intrusion attempts.
• Apply analytical reasoning to balance customer needs, operational realities, and technical constraints.
• Diagnose complex firewall, routing, VPN, NAT and connectivity issues
• Perform packet capture and log analysis to determine root cause
• Balance security requirements with operational needs

Network & Cybersecurity Systems Management

• Design, specify, and implement new cybersecurity hardware, software, and services.
• Manage and maintain firewalls, intrusion prevention systems (IPS), web content filtering, email protection, and endpoint detection and response (EDR) platforms.
• Monitor, analyze, and fine-tune security infrastructure for performance, resilience, and compliance.
• Implement firewall policy changes through formal change management
• Perform software upgrades during maintenance windows
• Coordinate with vendors during complex incidents
• Maintain technical documentation and standard operating procedures
• Participate in 24x7 on-call rotation and emergency response
• Administer enterprise NFGW platforms, VPNs, IPS, URL Filtering and SSL Inspection
• Support SIEM integration and security event investigations

Project Participation

• Collaborate with cross departmental teams to deliver secure and scalable technological solutions.
• Contribute security expertise to technology initiatives, from planning through implementation and support.

Communication & Customer Support.

• Communicate complex technical issues clearly to both technical and non-technical audiences.
• Produce accurate and concise documentation, memos, reports, and user guides.
• Deliver outstanding customer service to City agencies and staff, ensuring timely and effective support.
• Update and maintain technical documentation and automated work management systems.

The person in this position must demonstrate technical expertise in the following areas:

Core Technologies

• Proficient with server hardware, Microsoft Server OS, and major Linux distributions (Red Hat, CentOS, Ubuntu, etc.).
• Familiarity with Microsoft Office Suite (Outlook, Teams, Word, Excel, SharePoint, PowerPoint, Visio).
• Working knowledge of vulnerability management and offensive security principles.

Cybersecurity Tools & Platforms

• Hands on experience with cybersecurity incident handling, digital forensics, and full disk encryption.
• Support, investigate and validate the implementation of security policies such as Conditional Access, Insider-Risk Management, DSPM for AI, Data Loss Prevention Information Protection, and endpoint/server security compliance.
• Experience with one or more of the following:
• Next-Generation Firewalls (NGFW)
• Endpoint Detection and Response (EDR)
• Data Loss Prevention
• Microsoft Exchange and Office 365
• Single Sign-On (SSO) and Identity Federation technologies such as SAML, OAuth2, or OpenID
• Multi-Factor Authentication (MFA) systems
• Microsoft Active Directory
• Tenable Vulnerability Management
• Privileged Access Management (PAM)
  

Perform other cybersecurity functions as assigned by the Chief Information Security Officer.

Education/Experience

High School graduate or equivalent; specific vocational, administrative, or technical knowledge obtainable through six months to one year of advanced study or training past the high school level (through either city in-house training or an outside educational institution).

Required

• Three (3) years of experience in an Information Technology related field or an equivalent combination of education and experience.

Preferred:

• Bachelor’s degree with coursework in Cybersecurity, Information Assurance or a related discipline.
• Five (5) years of IT experience.
• Three (3) or more years supporting enterprise network security technologies.
  

Additional Information & Requirements

• Valid driver's license required.
• Must successfully pass a background check.
• Must be capable of working independently and collaboratively within a team.

Work Schedule

• This position works forty-hours per week to accommodate City operating hours.
• This position is an Essential position, which requires attendance during emergencies, delayed city openings and special weather events.
• Report during emergencies, natural disasters, and nonstandard shifts as directed.
• Be available for a 24-hour on-call rotation and emergency response as required.
• Regular full-time and permanent part-time employees may receive paid holidays, vacation and sick leave, employer paid pension plan, basic life insurance, voluntary participation in medical and dental, Section 457 deferred compensation, long-term disability, optional life insurance for self, spouse and children, medical and dependent care reimbursement plans, access to membership in credit union and employer provided parking.
• Special project/grant employees are generally eligible for the same benefits of regular full-time employees; however, retirement, life insurance and participation in health plans vary depending upon funding and authorization.
• Temporary/seasonal and part-time employees are generally only eligible for employer provided parking and access to membership in credit union.
• Retirement

If you are hired October 5, 2010, or after to a position with City of Norfolk Retirement System benefits, you will be required to contribute five percent (5%) of your salary toward your retirement benefit. This will be a pre-tax payroll deduction.

If you are hired January 1, 2022, or after to a position with Virginia Retirement System (VRS) benefits, you will be required to contribute five percent (5%) of your salary toward your retirement benefit. This will be a pre-tax payroll deduction.

• The Tuition Assistance Program is established to encourage employees toward continued self-development and education. Permanent full-time and permanent part-time classified, unclassified permanent, full-time special projects, and constitutional employees who have completed six months continuous service will be eligible to apply. The applicant’s school of enrollment must be an accredited institution.

Note

The benefits described above are broad generalizations. The specific benefits that an employee may be eligible for are governed by City regulations, as applicable to job type.

Non-City

Positions listed with a job type designation of "Non-City" are not subject to the benefits descriptions above. Refer to the content of the job posting for information regarding these positions.

01

The following Supplemental Questions are specific to the position for which you have applied to assist the hiring manager in screening applications for specific experience being sought. Please be specific in answering these questions as they will be used to evaluate which applications will be given further consideration in the process. Do not answer "see resume" or "see application" as these are not valid answers. Please note that if you are invited to be interviewed by the department, your responses to the following questions may be subject to verification.

• I understand and will answer the following supplemental questions completely and thoroughly.

02

If you were referred for this position by a current City of Norfolk employee, please provide the employee's full name, department, and job title, and your relationship to the employee. If not, please indicate by typing "N/A."

03

Please select the highest level of education you have completed.

• High School Diploma/GED
• Some College (6 months or more)
• Vocational/Technical Degree
• Associate's Degree
• Bachelor's Degree
• Master's Degree or higher

04

How many years of professional experience do you have in information technology or cybersecurity, including systems administration, networking, or programming?

• Less than 3 years
• 3-5 years
• 5-7 years
• 7 years or more

05

Describe your experience troubleshooting NAT and routing.

06

How many years of experience do you have designing, deploying, or managing network and cybersecurity infrastructure, such as firewalls, intrusion prevention systems (IPS), or endpoint protection platforms (EDR)?

• Less than 3 years
• 3-5 years
• 5-7 years
• 7 years or more

07

Do you hold any relevant cybersecurity related certifications, such as CompTIA Security+?

• CompTIA Security+
• GIAC Security Essentials (GSEC)
• (ISC2) Systems Security Certified Practitioner (SSCP)
• Other (please ensure to list on application)
• None of the above

08

Do you have experience managing or maintaining any of the following cybersecurity systems? Select all that apply:

• Next Generation Firewalls (NGFW)
• Endpoint Detection and Response (EDR)
• Security Information and Event Management (SIEM) system
• Intrusion Prevention / Detection Systems (IPS/IDS)
• Single Sign On and Identity Federation technologies such as SAML, OAuth2, or OpenID
• Vulnerability or Patch Management
• Privileged Access Management (PAM)
• No experience

09

How many years have you administered enterprise firewalls?

• Less than 3 years
• 3-5 years
• 5-7 years
• 7 years or more

10

Describe your experience with VPN technologies.

11

Are you willing to submit to an extended background check necessary to access or work with Criminal Justice Information Systems (CJIS) data and computer systems (NOTE: This is not a check to grant security clearance)?

• Yes
• No

12

This position requires reporting to work at the IT administrative offices, data center, or other location in Norfolk on a regular scheduled basis or within an hour of notification of an event or emergency. Are you willing to comply?

• Yes
• No

13

The departmental hiring range for this position is $79,982.84 - $91,782.15. Are you willing to accept the position for this salary?

• Yes
• No

14

Do you have a valid driver's license?

• Yes
• No

15

Do you have the legal right to work in the United States and, upon employment, can you provide documentation to verify this?

• Yes
• No

16

Please provide an explanation of any periods of unemployment that are 30 days or longer. Indicate N/A if you have not experienced any periods of unemployment.

17

Are you a current or previous City of Norfolk employee?

• Yes - I am a current City of Norfolk Employee
• Yes - I am a previous City of Norfolk Employee
• No - I am not a previous or current City of Norfolk employee

18

Please indicate your veteran status. (A copy of your long form DD-214 may be required)

• I am not a Veteran
• I am a Veteran
• I am a Disabled Veteran
• Required Question