Senior Network Analyst - Cybersecurity

City of Vancouver•Vancouver, BC

11d•CA$56 - CA$67•Onsite

About The Position

The Senior Network Analyst - Cybersecurity performs complex technical and analytic work focused on Cybersecurity, including the investigation, design, configuration, implementation, and maintenance of the data network, servers, storage, and associated infrastructure. This role involves designing, configuring, installing, supporting, monitoring, and maintaining cybersecurity systems for VPL’s wired and wireless network infrastructure, servers, and storage. The position supports data, voice, video, and wireless network services. The Senior Network Analyst - Cybersecurity collaborates with various departments to establish new services and connectivity, assesses network equipment, and is responsible for the design and implementation of the network infrastructure, server, and storage environments. Key responsibilities include ensuring IT security, participating in the selection, installation, configuration, and maintenance of locally hosted platforms, and performing specific Cybersecurity duties such as planning, implementing, administering, monitoring, and documenting IT security controls for all digital assets and processes. The incumbent designs and supports operational procedures related to Cybersecurity for other ITS staff. Work is performed with considerable independent judgment, with more complex tasks guided by the Manager. This position may also provide guidance to junior team members and works with customers on needs assessments, handling highly sensitive data. Specific Cybersecurity duties include implementing technologies to secure services, monitoring firewall and intrusion detection logs, planning and implementing IT security controls (vulnerability assessment, firewalls, IDS/IPS, anti-malware, remote access, IAM, incident response, DLP, endpoint security, network security, application security, OS hardening, managed file transfer, SIEM, network segmentation, system forensics, MFA, MDM, user/system administration), providing tactical technical advice on Cybersecurity, staying current with Cybersecurity developments, recommending new technologies, and delivering security awareness training. The role also takes a lead in the technical response to cybersecurity incidents.

Requirements

Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent training and experience related to the work.
Current certification in technologies and practices related to the job: CISCO network certifications, MCSA, MCITP or MCSE, VMWare Certified professional, CompTIA.
Minimum 3 years related data network and infrastructure management experience.
Minimum 1 year PCI implementation related experience.
Minimum 1 year supervisory experience.
Considerable knowledge of current cybersecurity standards & technologies.
Considerable knowledge of industry standard best practices in installing, configuring, supporting and securing.
Thorough knowledge of monitoring and reporting tools.
Thorough knowledge of server technology and software.
Thorough knowledge of network and communications hardware such as routers, bridges, switches, Firewalls.
Thorough knowledge of server operations, functions and procedures.
Experience with Microsoft Server, Microsoft SQL server; Linux.
Thorough knowledge of storage operations, functions and procedures.
Thorough knowledge of VPN's, communications software and protocols such as TCP/IP, GRE Tunnelling, VRF, xDSL, T1, 802.11x, OSPF, BGP and EIGRP.
Experience with DMZ.
Familiar with strong cryptography and security protocols to safeguard sensitive cardholder data during transmission.
Familiar with time synchronization technology.
A current and valid Class 5 BC drivers licence is also a requirement of this position.
A Police Information Check (Vulnerable Sector) is a requirement of this position. As a designated Position of Trust, this must be renewed every 5 years.

Nice To Haves

Extensive Cisco experience and related Cisco training is desirable.
Experience working in the Public sector is an asset.
IT security certification is an asset.
Networking certification in the technologies being supported is an asset.
Microsoft certification is an asset.
Considerable knowledge of integrated library software systems.
Thorough knowledge of system integration between business applications and across technical platforms.

Responsibilities

Perform complex technical and analytic work with a focus on Cybersecurity relating to the investigation, design, configuration, implementation and post-implementation review and ongoing maintenance of the data network, servers, storage and associated infrastructure.
Design, configure, install, support, monitor and maintain cybersecurity systems related to VPL’s wired and wireless network infrastructure, servers and storage.
Work with various departments to establish/install new services and connectivity to new sites.
Assess network equipment.
Design and implement network infrastructure.
Design and implement the Library’s server and storage environment.
Ensure IT security.
Participate in selection and then installation, configuration and maintenance of specific locally hosted platforms.
Plan, implement, administer, maintain, monitor, and document IT security controls for all digital assets and processes.
Implement Cybersecurity technologies to secure and protect services delivered to Library patrons and staff, supporting cost savings, financial responsibility and legal compliance.
Monitor firewall logs, intrusion detection logs and other data collected by Library systems, which entails a detailed review of all pertinent traffic and transactions on any given system or network within the Library.
Plan, implement, administer, maintain and monitor IT security controls for all digital assets and processes (network, hypervisor, endpoint, server, application, etc), including but not limited to: Vulnerability assessment, validation and remediation; Firewalls, routing and switching equipment; Intrusion Detection/Prevention Systems; Anti-malware protection and management; Remote Access Systems and VPN; Identity and Access Management Systems and Directories; Security incident management and response; Data Loss Prevention; Endpoint security (laptops, workstations, mobile devices); Network Security (Wired & Wireless); Application Security; Operating system hardening; Managed file transfer; Logging and monitoring systems (SIEM); Network segmentation; System forensics; Multi-factor authentication; Mobile device management; User and system administration.
Provide tactical technical advice and consultation to Library project teams and provides assistance with the adoption of Cybersecurity technology.
Remain current with developments in Cybersecurity and recommend new approaches and application of new technology which will assist the Library to meet its business objectives.
Deliver educational security awareness framework for Library staff, both business and technical, including multi-channel approaches.
Take a lead role in the technical response to cybersecurity incidents, including direction of other team members involved in the response.