Network Security and Firewall Engineer - City

Job Description

PAY AND FAIR LABOR STANDARDS ACT (FLSA) STATUS:

Pay Range: 520

Hourly Rate: $44.42 - $67.92

Annual Rate: $92,748.96 - $141,816.96

FLSA Status: Exempt

The normal starting pay for this position is the minimum of the pay range listed above. A higher rate of pay may be considered, dependent on the qualifications and experience of the selected applicant and/or the City's step placement policy.

APPLICATION, HIRING, AND BACKGROUND

• When completing the application, applicants will be asked to respond to application questions. These application questions are based on the Job Requirements for the position.
• Completion of the application questions is required.
• Applicant responses to the application questions must specifically answer the questions asked.
• Responses to application questions must be supported by work history/information listed on the application/resume, sufficient to demonstrate qualifications for the position.
• Applicants may upload only two attachments. Attachments may include, but are not limited to a resume, cover letter, DD214 or NGB Form 22, transcripts, etc. Applicants may also choose to combine documents into one file for upload.
• Applications may not be reviewed if specific responses to application questions have not been provided.
• Each application submission is reviewed independently.

For detailed information about the City's hiring and background processes, check out the: Quick Guide to Hiring and Background Checks

If you have questions, check out the: Frequently Asked Questions

POSITION DESIGNATIONS

This job classification has been designated as a safety sensitive job classification in accordance with the Oklahoma Medical Marijuana and Patient Protection Act, 63 O.S., § 427.1 et seq. (This means employees in this job classification can be subject to disciplinary action up to and including termination if they test positive for marijuana components or metabolites, even if they possess a medical marijuana license.

This job classification has been designated as a cyber security sensitive job classification effective June 26, 2023, in order to comply with United States Department of Justice, Federal Bureau of Investigation, Criminal Justice Information Services (CJIS) Division's Criminal Justice Information Services Security Policy (Version 5.9.2, 12/07/2022), 5.12 Policy Area 12 Personnel Security. The policy requires national fingerprint-based records checks be conducted prior to granting access to criminal justice information for all personnel who have unescorted access to unencrypted Criminal Justice Information (CJI) or unescorted access to physically security locations or controlled areas (during times of CJI processing). Employees in this job classification will be subject to a Criminal Justice Information Services (CJIS) Interstate Identification Index (III) Fingerprint Background check after receiving a conditional offer of employment. Additionally, employees in this job classification must complete the required CJIS Security and Privacy Training and pass the online certification test.

JOB SUMMARY

This position is located in the Technology Infrastructure Division of the Information Technology Department (IT) within the City of Oklahoma City and is under the direction of an immediate supervisor. The Network Security and Firewall Engineer is responsible for designing, implementing, configuring, managing, and maintaining firewall infrastructure to protect the organization's network from security threats, prevent unauthorized access, and safeguard sensitive data. This position supports network security operations through the implementation of security policies, monitoring of network activity, analysis of security risks, and application of industry best practices to maintain the integrity, availability, and reliability of network systems.

ESSENTIAL JOB FUNCTIONS

• Configuring, installing, and maintaining firewall hardware and software solutions, including next-generation firewalls (NGFW), to protect the organization's network.
• Developing, implementing, and enforcing firewall security policies, rules, and access controls to safeguard sensitive data and ensure compliance with industry regulations.
• Monitoring network traffic for suspicious activity, security breaches, and vulnerabilities using intrusion detection and prevention systems (IDPS).
• Responding to security incidents and breaches promptly, investigating root causes, and implementing corrective actions to prevent future occurrences.
• Analyzing firewall logs and generating reports to identify security threats, trends, and potential vulnerabilities.
• Managing user access and permissions by configuring Virtual Private Networks (VPNs), Access Control Lists (ACLs), and other access control mechanisms.
• Ensuring firewall hardware and software are kept current by applying patches, firmware updates, and security patches.
• Implementing network segmentation to isolate critical assets and limit lateral movement in the event of a breach.
• Monitoring and optimizing firewall performance to ensure it does not adversely affect network speed or latency.
• Maintaining accurate documentation of firewall configurations, policies, and network diagrams for reference and audit purposes.
• Collaborating with other IT teams, such as network engineers, system administrators, and security analysts, to support a cohesive and secure network environment.
• Providing training and guidance to employees and IT staff on firewall security best practices and security awareness.
• Configuring and monitoring firewalls.
• Monitoring daily usage, performs regular maintenance, and patches as needed.
• Troubleshooting complex errors and configurations to determine root causes and implement solutions.
• Creating and maintaining documentation of procedures, configurations, and network topologies.
• Staying current with changes, processes, and compliance requirements to ensure organizational and regulatory standards are met.
• Performing other duties as assigned.

VETERANS PREFERENCE

Honorably discharged veterans of the United States Active Duty Armed Forces, National Guard, and Reserve Forces who are not currently employed full-time by the City of Oklahoma City and who meet the qualifications for the position shall be given preference. To receive preference, veterans must submit verification of honorable discharge from the United States military service (Department of Defense Form DD214 or NGB Form 22) prior to the closing date of the vacancy announcement.

MINIMUM QUALIFICATIONS

• Possession of a bachelor's degree in computer science, information technology, cybersecurity, or a related field; or an equivalent combination of education, training, relevant work experience, and industry certifications (e.g., Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Firewall Administrator (CFA), or other comparable cybersecurity certifications).
• Minimum of five (5) years' professional experience in information technology, cybersecurity, network administration, or a related field, including three (3) years' experience administering, configuring, and maintaining firewall systems.

KNOWLEDGE, SKILLS, AND ABILITIES

• Knowledge of firewall administration, network security, intrusion detection and prevention systems (IDPS), vulnerability management, and security incident response practices.
• Knowledge of firewall technologies (e.g., Cisco ASA, Palo Alto, Juniper, Fortinet), VPN technologies, security information and event management (SIEM) systems, access control lists (ACLs), network monitoring tools, and network segmentation techniques.
• Knowledge of network protocols, routing, and switching.
• Skill in analyzing security events, logs, and network data to identify vulnerabilities, threats, and potential risks.
• Skill in verbal and written communications.
• Ability to prepare and maintain technical documentation, including firewall configurations, procedures, and network diagrams.
• Ability to work in a fast-paced, evolving environment and adapt to changing cybersecurity threats, technologies, and industry best practices.

PREFERRED QUALIFICATIONS

• Experience with Palo Alto and Fortinet.

COMPETENCIES

• One City, One Team (Teamwork/Team Oriented) (1) Recognizes, values, and leverages the ideas, opinions, and perspectives of others; (2) participates willingly and effectively as a team lead or team member; (3) builds consensus; fosters team commitment, spirit, pride, and trust; (4) collaborates with others to accomplish goals and objectives and achieve results; (5) expresses facts, ideas, messages, and information (technical and non-technical) to individuals or groups clearly, concisely, accurately, understandably, with honesty, tact, and diplomacy and in a manner that is appropriate for the intended audience; (6) actively listens, clarifies information as needed; (7) [Core Value One City, One Team] shares information, resources and solutions across departments; (8) [Core Value One City, One Team] asks for help early and offers it often; (9) [Core Value One City, One Team] collaborates across teams before decisions are made.
• Service First (Customer Centric) (1) Demonstrates commitment to public service; (2) serves and satisfies internal and external customers in a timely and effective manner; (3) establishes, commits to, and maintains high standards for producing quality work products and being responsive to customers; (4) supports the Department/City's mission; develops and executes strategies with the customer in mind; (5) [Core Value Service First] acts quickly and follows through until the job is complete; (6) [Core Value Service First] serves everyone with genuine respect, diligence and professionalism; (7) [Core Value Service First] makes decisions with the people we serve in mind.
• Respect Always (Leads Through Influence) (1) Persuades others; builds consensus through give and take; (2) gains cooperation from others to obtain information and accomplish goals; (3) works with others towards achieving agreements that may involve exchanging resources or resolving differences; (4) understands the concepts, practices, and techniques used to identify, engage, influence, and monitor relationships with individuals and groups connected to a work effort including those actively involved; (5) leads through influence over the process and its results, and those who have a vested interest in the outcome (positive or negative). (6) [Core Value Respect Always] listens with curiosity and speaks with care; (7) [Core Value Respect Always] embraces different perspectives and lived experiences; (8) [Core Value Respect Always] gives feedback constructively and receives it openly.
• Own the Outcome (Execution and Results) (1) Sets well-defined and realistic goals and high standards of performance for self or self and others; (2) displays a high level of initiative, effort, and commitment toward performing work; (3) completes assignments in a thorough, accurate, and timely manner, and delivers results; (4) works with minimal supervision, is motivated to achieve, and demonstrates responsible behavior; (5) demonstrates understanding of all aspects of the job and application of accrued knowledge in carrying out duties and responsibilities; technical knowledge; skill in the techniques, equipment, procedures, and work required; (6) recognizes opportunities and takes action for improvement to programs, policies, procedures, practices, and processes; (7) understands and is able to apply the principles, methods, and tools of quality improvement; (8) collects, examines, analyzes, and interprets data from a variety of sources; (9) makes data-driven recommendations/decisions and achieves results; (10) effectively achieves results through others to achieve the Department or City's mission; (11) [Core Value Own the Outcome] takes initiative to fix it or escalates issues; (12) [Core Value Own the Outcome] follows through on commitments; (13) [Core Value Own the Outcome] speaks up when accountability is missing.
• Keep Getting Better (Commitment to Continuous Improvement) (1) Recognizes opportunities for improvement with regard to programs, policies, procedures, practices, and processes; (2) understands and is able to apply the principles, methods, and tools of quality improvement; (3) collects, examines, analyzes, and interprets data from a variety of sources; (4) makes data-driven recommendations/decisions and achieves results; (5) [Core Value Keep Getting Better] takes time to reflect and act on what is working and what is not; (6) [Core Value Keep Getting Better] learns from mistakes without blaming; (7) [Core Value Keep Getting Better] supports self and other's development and growth.
• Empathetic Leadership (1) Fosters a workplace where employees are engaged; (2) seeks to know and learn about, and respects the values, attitudes, and beliefs of others; (3) welcomes varied ideas, perspectives, and thoughts when carrying out the work of the organization and making decisions; (4) builds trust through transparency, open communication, feedback, consistency, and humility; (5) seeks to build high performing teams through practices that demonstrate a commitment to hiring the most qualified candidates; promotes advancement opportunities for all (e.g., coaching, mentoring, providing personal and professional development opportunities); (6) resolves conflict and maintains effective work