Network & Security Engineer

City of Wilson•Wilson, NC

About The Position

The Network & Security Engineer manages the City of Wilson’s Fiber to the Premise network and internal enterprise network. The position designs and maintains the function and security of the City’s networks and connected assets, supporting secure enterprise operations and municipal broadband video, telephone, and Internet services. It serves as a primary technical escalation authority for perimeter defense, security incident response, regulatory data compliance, and broadband optical network evolution. The role administers enterprise and municipal broadband infrastructure, including Fortinet security platforms, routing and switching, SD-WAN, VPN systems, and carrier-grade optical access networks. It also supports server security, network segmentation, VoIP, cybersecurity operations, regulatory and legal data requests, and documentation. The work includes scheduled 24/7 on-call engineering duty and response to critical network emergencies. The work is typically performed in an office, computer room, stockroom, or warehouse, and occasionally outdoors in cold or inclement weather. The employee may encounter noise, dust, dirt, grease, moving machinery, and irritating chemicals, and may need to stand, walk, bend, crouch, stoop, lift objects, climb ladders, use tools or equipment requiring dexterity, and distinguish shades of color. The hiring range is $85,734.87 to $118,069.97, dependent upon qualifications. The City states that it offers a competitive salary and a best-in-class benefits package; further benefits details are referenced under the posting’s Benefits tab.

Requirements

Baccalaureate degree in Computer Science, Information Technology, Network Engineering, or a closely related field, combined with 3–5 years of progressively responsible enterprise networking and perimeter security experience, or an equivalent combination of education and experience.
Maintain at least one active professional-level certification in enterprise networking or cybersecurity.
Possess or be able to readily obtain a valid North Carolina Driver's License.
Advanced knowledge of carrier-grade FTTH PON architectures, optical power budgets, coexistence elements, GPON and XGS-PON wavelengths, and next-generation PON deployment and migration standards.
Hands-on expertise with Fortinet enterprise platforms, including FortiOS, FortiGate NGFW, FortiManager, and FortiAnalyzer.
Practical understanding of CJIS data standards, subpoena data extraction methods, and municipal public-records compliance.
Working knowledge of VoIP telephony systems, SIP trunk signaling, and E911 emergency locator databases.
Advanced routing competency in BGP and OSPF, VLAN design, and carrier-grade FTTH GPON infrastructure.
Ability to author clear technical documentation, topology diagrams, and SOPs.
Ability to perform work that may involve standing, walking, bending, crouching, stooping, lifting light and heavy objects, climbing ladders, using tools or equipment requiring dexterity, and distinguishing shades of color.

Nice To Haves

Fortinet Certified Professional (FCP) in Network Security / NSE 4+ certification.
Cisco Certified Network Professional (CCNP Enterprise or Security) certification.
CompTIA CySA+ or CASP+ certification.
SSCP or CISSP certification.

Responsibilities

Administer City enterprise and municipal broadband networks, including architecture, configuration, and lifecycle maintenance of Fortinet firewalls and management tools, routers, switches, SD-WAN policies, IPsec tunnels, and SSL-VPN systems.
Maintain routing with peer ISPs using BGP path manipulation and load balancing over peer links.
Collaborate on the design and hardening of Windows and Linux server environments, following security baselines and least-privilege architectures.
Work with Applications, Systems, and Infrastructure teams to design, evaluate, and enforce firewall access policies and network segmentation.
Establish and perform daily security operations, including monitoring SIEM dashboards, firewall threat alerts, endpoint security events, and system logs.
Lead cybersecurity incident response, develop containment playbooks, coordinate host isolation, and direct root-cause remediation.
Administer network and server security; coordinate external audits and vulnerability assessments and manage internal penetration and configuration audits.
Develop and execute procedures for receiving, logging, preserving, extracting, and fulfilling subpoenas, court orders, law-enforcement data requests, and public-records inquiries in compliance with CJIS and statutory requirements.
Serve as a technical liaison to regulatory bodies, cybersecurity working groups, public safety agencies, and vendors; coordinate security initiatives with City department and division heads.
Collaborate with telecommunications staff on VoIP and PBX administration, including SIP trunk routing, IVR and auto-attendant architecture, and user moves, adds, and changes.
Author, maintain, and audit SOPs, technical runbooks, disaster recovery procedures, and network topology diagrams in the team knowledge base.
Deploy, configure, and maintain carrier-grade OLT shelves using GPON and XGS-PON technologies; plan and execute migrations to NG-PON2 or 25GS-PON and coexistence optical networks.
Design FTTH inside-plant expansions, including transport equipment, licensing, and capacity planning.
Administer municipal broadband auxiliary systems, including ETI provisioning servers and Ookla Speedtest appliances.
Maintain legacy broadband infrastructure or facilitate planned migration to managed platforms.
Lead technical training and cross-training of Greenlight IT personnel in enterprise networking, perimeter security, and troubleshooting.
Perform scheduled 24/7 on-call engineering duty and respond to critical network emergencies.
Perform other related duties as assigned.