Salary : $88,277.00 - $171,479.00 Annually
Location : Annapolis, MD
Job Type: Full-Time Permanent
Job Number: 08749
Department: Information Technology
Opening Date: 08/26/2026

Position Description

This senior technical position is responsible for the hands-on engineering, configuration, implementation, and operational support of the County's enterprise network infrastructure.
The primary focus of this role is drafting, building, and validating network device configurations-including routers, switches, firewalls, enterprise wireless infrastructure, and Network Access Control (NAC) systems. This includes deploying 802.1X port security and Cisco Identity Services Engine (ISE) policies in strict alignment with established security standards. Proposed configurations and architectural changes undergo formal technical review prior to production deployment.

This position provides Tier 4 advanced technical troubleshooting for complex, enterprise-critical network incidents, vendor TAC escalations, and deep-level diagnostic resolution.
Nature and Variety of Work:
Work involves supporting mission-critical operations across public safety, medical, and utility facilities. This position applies technical engineering expertise to build device configurations, manage wireless controller environments, enforce switch port security, maintain firewall rulesets, and resolve high-level technical escalations.

This position operates with moderate-to-high technical independence to execute scheduled maintenance, perform hardware rollouts, manage wireless access points, collaborate on Tier 4 incident resolutions, and lead technical tasks on multi-phased IT projects within a high-visibility enterprise environment.
Examples of Duties and Knowledge, Skills and Abilities

(Note: The duties and responsibilities enumerated in this class specification are for the purpose of determining a common set of minimum qualifications and salary level for all positions in this class. They are not intended to include all of the essential functions of all positions in the class.)

• Build and validate configurations for enterprise routers, switches, firewalls, optical gear, wireless LAN controllers, and access points according to standard templates.
• Deploy and maintain Cisco ISE, 802.1X port security, and NAC policies (MAB, RADIUS/TACACS+) to control wired and wireless network access.
• Design and optimize enterprise wireless networks, managing SSID profiles, RF tuning, coverage mapping, and guest/internal controls.
• Configure IPsec/GRE VPN tunnels, SSL certificates, firewall rules, and ACLs; submit proposed changes through formal review processes before deployment.
• Provide Tier 4 support to diagnose complex enterprise outages, protocol failures, and vendor TAC escalations.
• Maintain high availability by executing firmware updates, patch management, and scheduled hardware replacements during maintenance windows.
• Monitor traffic, QoS, ISE authentication logs, switch port security, and wireless performance using SNMP and packet capture tools.
• Draft change control requests, risk assessments, and rollback plans for all scheduled maintenance activities.
• Serve as the hands-on engineering lead for network, wireless, and NAC rollout projects, performing site surveys and heat mapping.
• Maintain network topology diagrams, wireless coverage maps, ISE policy documentation, and IP/VLAN allocation tables.
• Support field technicians, system administrators, and third-party vendors during deployments and troubleshooting.Conducts detailed methods and systems surveys of programs with a view to applying electronic data processing methods.
• Conducts feasibility and cost-comparison studies and prepares recommendations; may conduct work-measurement, work-simplification, and manpower-utilization studies in conjunction with the design of overall systems.
• Participates in the preparation of electronic data processing system specifications; develops block diagrams, flow charts, and input-output requirements.
• Provides complete analysis and documentation for programming; instructs computer staff in the conversion of operations to electronic data processing methods; designs forms associated with the systems; prepares procedure manuals for the operation of the systems; devises data verification methods and standards.
• Participates in development and maintaining of the long-range County master plan and the database.
• Maintains existing systems through the review and analysis of user requests for program changes; recommends approach and estimates impact of requested changes; coordinates and monitors progress of program changes.
• Leads other analysts in the conduct of their work.
• Performs related work as required.

KNOWLEDGE, SKILLS, AND ABILITIES

• Thorough knowledge of modern techniques in systems analysis and design.
• Thorough knowledge of current developments in systems analysis, management information systems, and electronic data processing.
• Thorough knowledge of the capabilities and requirements of electronic data processing equipment.
• Considerable knowledge of management principles and practices, including organizational structure, staffing patterns, and administrative control techniques.
• Ability to plan, organize, and conduct systems analyses and to evaluate alternative processes and procedures.
• Ability to communicate effectively with administrators and subordinate personnel.
• Ability to establish and maintain effective working relationships with administrators, departmental representatives, and electronic data processing personnel.
• Ability to make oral and written reports and presentations, and to prepare charts and graphs clearly and effectively.
• Ability to lead others in the performance of their duties.

Minimum Qualifications

Graduation from an accredited four-year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations, and methodologies; and six (6) or more years of experience in electronic data processing systems analysis and design.

NOTE: Graduation from an accredited four-year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations and methodologies may be substituted on a year-for-year basies with up to four (4) years of experience in electronic data processing systems analysis and design for a total of ten (10) years of experience.

*Note: Accredited University or College is the recognition from an accrediting agency that an institution maintains a certain level of educational standards. The U.S. Department of Education maintains a database of accrediting agencies it recognizes for schools within the United States.

For a University or College outside the United States, the applicant must provide documentation of accreditation and educational equivalency, which can be accomplished through a credential evaluation service. Applicants with a foreign degree must provide this documentation upon the close of the announcement.
Supplemental Qualifications

Preference will be given to candidates with the following:

• Advanced capability using packet capture tools (e.g., Wireshark), wireless analyzers, ISE logs, diagnostic utility commands, and SNMP monitoring platforms to isolate complex root causes and manage vendor escalations.
• Strong proficiency drafting error-free configurations across major network operating systems (e.g., Cisco IOS/NX-OS, Junos, Palo Alto PAN-OS, Cisco Wireless LAN Controllers).
• Working knowledge of Cisco ISE, 802.1X protocol execution, RADIUS/TACACS+, MAB (MAC Authentication Bypass), and switch port security enforcement.
• Proficiency with enterprise Wi-Fi standards (802.11a/b/g/n/ac/ax), RF spectrum analysis, wireless controllers, heat-mapping software, and central wireless management platforms.
• Solid working knowledge of TCP/IP (IPv4 & IPv6), EIGRP, BGP, MPLS, VLANs, and subnetting.
• Experience configuring enterprise firewalls, IPsec/GRE VPNs, certificates, and border security appliances.
• Ability to clearly document network topology, write technical procedures, and present proposed configurations for review.

• Medical/Health Insurance Plans
  • BlueChoice Advantage EPO
  • BlueChoice Advantage PPO
• Dental Insurance
  • CIGNA Dental PPO (Buy-Up)
  • CIGNA Dental PPO (CORE)
  • CIGNA Dental HMO (DHMO)
• Vision Insurance
  • EyeMed
• Employee Life Insurance
  • Term insurance of up to 2 times salary ($100,000 maximum) for employees at no cost.
  • Ability to purchase Supplemental & Dependent Life Insurance
• Disability Income Insurance
• Pension Plan
  • Normal retirement after 30 years of service or Age 60 and 10 years of service or election to enroll in the Employees Retirement Savings Plan.
• Deferred Compensation Section 457 Plan
• Direct Deposit
• Credit Union
• Holidays
  • Twelve days provided per year, thirteen in general election year
• Annual Leave
  • Less than 3 years - 13 days
  • 3 to less than 15 years - 20 days
  • 15 years or more - 26 days
• Disability Leave
  • Accrual at a rate of 15 days a year
• Personal Leave Day, 5 per calendar year
• Leave Sharing
• Employee Assistance Program
  • Free, confidential counseling for employee and family members 4X per year per problem per family member; also counseling on legal and financial issues; assistance in locating childcare and elder care
• Flexible Spending Accounts
  • Dependent Care Reimbursement
  • Health Care Reimbursement
• Voluntary Benefits
  • Provides you an opportunity to enroll in any or all of the benefits listed below with the convenience of payroll deduction
  • Universal Life Insurance with Long Term Care Rider
  • United Legal Benefits

01

The supplemental questions are a very important first step in our screening process. Therefore, you are required to accurately and completely respond to each question by providing the information asked in each question. Your responses will be used to initially determine your qualifications and eligibility for this position. DO NOT INDICATE "SEE RESUME" IN RESPONSE TO THE SUPPLEMENTAL QUESTIONS.This response and a lack of detail and explanation in the supplemental questions and in your application may result in failure or disqualification for this position. THIS MEANS YOU MAY BE INELIGIBLE FOR FURTHER CONSIDERATION IN THIS RECRUITMENT PROCESS. Please check "yes" to show that you have read and understand this statement.

• Yes
• No

02

Did you graduate from an accredited four-year college or university (with a bachelor's+ degree) with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing programming, operations, and methodologies?

• Yes
• No

03

If you answered "yes" to the above question, please list your MAJOR course work and any specialized training in electronic data processing, programming, operations and methodologies.
04

*Note: Accredited University or College is the recognition from an accrediting agency that an institution maintains a certain level of educational standards. The U.S. Department of Education maintains a database of accrediting agencies it recognizes for schools within the United States.For a University or College outside the United States, the applicant must provide documentation of accreditation and educational equivalency, which can be accomplished through a credential evaluation service. Applicants with a foreign degree must provide this documentation upon the close of the announcement.Have you attached the appropriate documentation to verify your education?

• Yes
• No

05

Education Substitution: Graduation from an accredited four-year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations and methodologies may be substituted on a year-for-year basies with up to four (4) years of experience in electronic data processing systems analysis and design for a total of ten (10) years of experience. Does this apply to you?

• Yes
• No

06

If you answered "yes" to the question above, please list how you possess this experience to include position title, length of time in position and MAJOR duties.
07

Do you have advanced capability using packet capture tools (e.g., Wireshark), wireless analyzers, ISE logs, diagnostic utility commands, and SNMP monitoring platforms to isolate complex root causes and manage vendor escalations?

• Yes
• No

08

If you answered "yes" to the question above, please list how you possess this experience to include position title, length of time in position and MAJOR duties.
09

Do you have strong proficiency in drafting error-free configurations across major network operating systems (e.g., Cisco IOS/NX-OS, Junos, Palo Alto PAN-OS, Cisco Wireless LAN Controllers)?

• Yes
• No

10

If you answered "yes" to the question above, please list how you possess this experience to include position title, length of time in position and MAJOR duties.
11

Do you have a working knowledge of Cisco ISE, 802.1X protocol execution, RADIUS/TACACS+, MAB (MAC Authentication Bypass), and switch port security enforcement?

• Yes
• No

12

If you answered "yes" to the question above, please list how you possess this experience to include position title, length of time in position and MAJOR duties.
13

Do you have proficiency with enterprise Wi-Fi standards (802.11a/b/g/n/ac/ax), RF spectrum analysis, wireless controllers, heat-mapping software