Network Analyst – Network Security & Access Support

Omaha Public Schools•Omaha, NE

4d•Onsite

About The Position

The Omaha Public Schools (OPS) is seeking a Network Analyst for network security and access support. This position will focus on ensuring the security of the network from threats originating from inside and outside OPS, performing audits looking for security gaps and ensure security policies are up-to-date and being followed, configuration and maintenance of the district firewalls and user policies, web filtering management, installation and monitoring of an identity and access management system (Cisco Identity Services Engine), and reporting progress and escalating issues to IT management. Other information security duties as assigned.

Requirements

Minimum of a Bachelor’s Degree in a technology-related field or equivalent experience.
Proficiency with data center, enterprise switching, and routing technologies, including Cisco Nexus and Catalyst switching platforms and Cisco enterprise routing platforms.
Experience and proficiency in the deployment of Cisco IOS/IOS-XE, EIGRP, BGP, OSPF, HSRP, IPVPN, point-to-point, broadband, and enterprise Wi-Fi technologies.
Experience with network intrusion detection and prevention technologies (IDS/IPS) and network security monitoring.
Strong understanding of network security principles, including defense-in-depth, least privilege, network segmentation, secure network architecture, and Zero Trust security concepts.
Knowledge of Network Access Control and Device Administration technologies, including Cisco ISE or comparable platforms, IEEE 801.1X, RADIUS, TACACS+, and certificate-based authentication.
Knowledge of enterprise next-generation firewall and VPN technologies, with a preference for Palo Alto Networks or comparable platforms.
Knowledge of Quality of Service (QoS) design, implementation, and troubleshooting.
Knowledge of F5 load balancing, Wireshark, nGeniusONE, or comparable network monitoring platforms.
Advanced WAN/LAN/WLAN networking and troubleshooting experience.
Understanding of cloud and hybrid-cloud networking and security concepts; knowledge of SASE/SSE and SD-WAN technologies is desirable.
Ability to analyze existing network and security systems and redesign or modify them to address changes in requirements, technology, security, or equipment configurations.
Ability to configure, install, monitor, maintain, repair, and troubleshoot network and security systems and equipment.
Ability to document network and security infrastructure, workflows, procedures, and configurations using Microsoft Visio or comparable tools.
Willingness to research, recommend, and implement technologies that improve network performance, security, reliability, and operational efficiency.
Ability to plan, organize, problem-solve, and think abstractly and conceptually.
Ability to understand technical manuals, security standards, and procedural documentation, and maintain current technical documentation.
Skills pertinent to positive human relationships and the ability to work effectively with staff members in a multicultural urban setting.
Ability to work through difficult issues and maintain a positive, professional attitude when communicating with others.
Ability and willingness to work hours outside of the normal schedule, including scheduled maintenance and emergency response with little or no advance notification.
Licensed in good standing and able to travel throughout the District as required.
Must be able to respond rapidly in emergency situations.
Must have organizational, time-management, communication, and interpersonal skills.
Work in school building and central office environments.
Contact with district personnel, customers, and vendors.
Will work under the direct supervision of the department supervisor to complete day-to-day tasks.
Will be working with a diverse population requiring the ability to handle all situations with tact and diplomacy.
Must understand and respond appropriately to customer needs and maintain a positive attitude with all customers and colleagues.
Expected to interact with all internal and external customers in a friendly, professional manner and provide quick, responsive customer service.
To operate effectively, schools expect employees to perform all assigned duties and work all assigned hours on each designated workday, unless they have received approved leave. Any deviation from assigned hours must have prior approval from the employee’s supervisor or building administrator.
All employees are required to report to work dressed in a manner that reflects a positive image of Omaha Public Schools and is appropriate for their position.
Obtaining and providing verification of all licenses, certificates, and other requirements for the position (e.g., Paraprofessionals obtaining “Highly Qualified status,” etc.), as identified, and maintaining all licenses, certificates, and requirements for your position throughout employment.
A background check that demonstrates to OPS that the background is acceptable for the position.
Verification of U.S. citizenship or legal authorization to work in the United States.
Successful completion of a pre-employment drug test (if required for the position offered).
Successful completion of a tuberculosis skin test (if required for the position offered).

Nice To Haves

Knowledge of cloud and hybrid-cloud networking and security concepts; knowledge of SASE/SSE and SD-WAN technologies is desirable.

Responsibilities

Implement Cisco ISE in wired and wireless environments with a strong focus on policy, posture, and profiling
Analyze, troubleshoot, and remediate Cisco ISE-related issues in schools and buildings
Build load balancers for servers
Plan, document, and implement hardware and software refresh and upgrade of Cisco ISE production and lab deployments (e.g., patching, upgrades, capacity reviews, lifecycle management)
Plan, document, and implement hardware and software refreshes and upgrades for Palo Alto firewalls.
Manage firewall and intrusion detection systems’ rules and policies by a process that includes analysis of requests, security recommendations, change control documentation, and obtaining approval for implementation
Conduct periodic firewall best practice review, audit, and adjust as required according to Palo Alto and District needs
Manage and monitor Advanced Endpoint Protection: Palo Alto Cortex XDR and alarms
Assist with e-discovery and internal penetration testing.
Research, evaluate, and interface with technology vendors to recommend the selection of security-related tools and emerging technologies
Interface with end-users and the IMS User Support department for the purpose of designing and implementing security solutions and policy recommendations
Escalate network problems to the Network Services Administrator and, as appropriate, to IMS management
Provide input and knowledge as needed to others on the Network Services team
Work with network tools to monitor and troubleshoot the network
Establish strong standards of professional ethics when relating to staff, students, parents, administration, and the community
Maintain strict confidentiality
Comply with the District’s operational guidelines
Keep abreast of technology developments relating to current trends/issues and education needs (such as training, reading literature, participating in professional organizations)
Provide technical assistance and training to staff as necessary; willingness to share knowledge with others
Adhere to District and IMS security practices
Exhibit willingness to research, recommend, and implement technologies to improve network performance
Performs other related tasks as assigned by supervisor and other central office administrators as designated by the Executive Director of IMS.