Salary: See Position Description
Location : Wilson, NC
Job Type: Regular Full Time
Job Number:Department: Broadband Communications/Headend Engineering
Opening Date: 10/29/2026
Job Summary/ScopeThe purpose of this position is to manage the City's Fiber to the Premise Network and the internal enterprise network. This position is responsible for designing and maintaining the overall function and security of the City of Wilson's networks and the assets it connects. Successful performance results in the efficient and secure operation of the enterprise network, as well as the municipal owned fiber network: Video, telephone, and Internet services.
The work consists of varied technical and team oriented tasks. Security of network assets is an ever changing field. The amount of work to be performed contributes to the complexity of the position. This position serves as a primary technical escalation authority for perimeter defense, security incident response, regulatory data compliance, and broadband optical network evolution.
Job Responsibilities Major Duties- Administers all City of Wilson enterprise and municipal broadband networks, including high-level architecture design, configuration, and advanced lifecycle maintenance of enterprise Fortinet next-generation firewalls (FortiGate, FortiManager, FortiAnalyzer), core routers, switches, SD-WAN routing policies, IPsec site-to-site tunnels, and remote-access SSL-VPN systems.
- Maintains optimal routing with peer ISPs through BGP path manipulation and load balancing over peer links.
- Collaborates on the design and hardening of the City's server environment, including Windows and Linux systems, ensuring strict adherence to baseline security standards and least-privilege architectures.
- Consults with Applications, Systems, and Infrastructure teams to design, evaluate, and enforce granular firewall access policies and network segmentation.
- Establishes, reviews, and executes daily security operational routines, including active monitoring of SIEM dashboards, firewall threat alerts, endpoint security events, and recurring system log reviews.
- Serves as the primary operational lead and escalation authority for cybersecurity incident response; develops containment playbooks, coordinates host isolation during active compromises, and leads root-cause remediation.
- Administers overall network and server security, including coordinating external audits, vulnerability assessments, and managing routine internal penetration and configuration audits.
- Develops, manages, and executes standard operating procedures for legal compliance, including the formal intake, logging, technical preservation, extraction, and fulfillment of legal subpoenas, court orders, law enforcement data requests, and public records inquiries in compliance with CJIS and statutory requirements.
- Serves as technical liaison and advisory representative to external regulatory bodies, state and local cybersecurity working groups (MS-ISAC, NC DIT), regional public safety agencies, and vendor engineering escalations; coordinates cross-functional security initiatives with City department and division heads.
- Collaborates with telecommunications staff on enterprise VoIP and PBX administration, including SIP trunk routing, IVR/auto-attendant architecture, user moves/adds/changes.
- Authors, maintains, and audits comprehensive Standard Operating Procedures (SOPs), technical runbooks, disaster recovery procedures, and network topology diagrams in the team knowledge base to eliminate operational single points of failure.
- Deploys, configures, and maintains carrier-grade Optical Line Terminal (OLT) shelves (Calix, Nokia/Alcatel) utilizing GPON and 10G symmetrical XGS-PON technologies; plans and executes migration architectures for the transition to Next-Generation PON (NG-PON2 / 25GS-PON) systems and coexistence optical networks.
- Designs expansions to new and existing FTTH inside plants, including transport equipment, licensing, and capacity planning.
- Administers municipal broadband auxiliary systems, including ETI provisioning servers and Ookla Speedtest appliances.
- Maintains legacy broadband infrastructure systems as assigned or facilitates planned migration to managed platforms.
- Leads technical training and cross-training of Greenlight IT personnel on enterprise networking, perimeter security, and troubleshooting practices.
- Performs scheduled 24/7 on-call engineering duty and responds to critical network emergencies as required.
- Perform all other related duties as assigned.
Guidelines- Guidelines include department standard operating procedures, city hardware and software policies, and network wiring standards and codes. These guidelines require judgment, selection, and interpretation in application.
Supervisory/Management Responsibility Minimum Qualifications Education/Experience Requirements- Baccalaureate degree in Computer Science, Information Technology, Network Engineering, or a closely related field, combined with three to five (3-5) years of progressively responsible enterprise networking and perimeter security experience (or an equivalent combination of education and experience).
- Must maintain at least one active professional-level certification in enterprise networking or cybersecurity. Preferred certifications include: Fortinet Certified Professional (FCP) in Network Security / NSE 4+, Cisco Certified Network Professional (CCNP Enterprise or Security), CompTIA CySA+ / CASP+, SSCP, or CISSP.
- Possession of or ability to readily obtain a valid North Carolina Driver's License.
Knowledge Requirements- Advanced knowledge of carrier-grade FTTH PON architectures, optical power budgets, coexistence elements (CEx), GPON and XGS-PON wavelengths, and next-generation PON deployment and migration standards.
- Demonstrated hands-on expertise with Fortinet enterprise platforms (FortiOS, FortiGate NGFW, FortiManager, and FortiAnalyzer).
- Practical understanding of criminal justice data standards (CJIS), subpoena data extraction methods, and municipal public records compliance.
- Working knowledge of VoIP telephony systems, SIP trunk signaling, and E911 emergency locator databases.
- Advanced routing competency (BGP, OSPF), VLAN design, and carrier-grade FTTH GPON infrastructure (Calix / Alcatel).
- Skill in authoring clear, scannable technical documentation, topology diagrams, and Standard Operating Procedures (SOPs).
Work Environment/Physical Demands - The work is typically performed in an office, computer room, stockroom, or warehouse, and occasionally outdoors in cold or inclement weather, while intermittently standing, walking, bending, crouching or stooping.
- The employee may be exposed to noise, dust, dirt, grease, machinery with moving parts, and irritating chemicals.
- The employee frequently lifts light and heavy objects, climbs ladders, uses tools or equipment requiring a high degree of dexterity, and must distinguish between shades of color.
The City of Wilson is dedicated to providing unique benefits that meet the needs of our employees and their families, while being competitive and cost effective. We offer the following benefits:
- Paid vacation and sick leave
- Paid holidays (maximum 12 per year)
- Health/dental/vision insurance
- Membership in the North Carolina Local Government Employees' Retirement System
- 5% 401(k) contribution
- Flexible Spending Account (FSA) for medical and childcare expenses
- Paid Life Insurance
- MD Live (Cigna's Telehealth)
- Supplementary benefits including critical care, cancer, accident, medical bridge, long and short term disability and term and whole life insurance.
