Information Security (Cyber Security) Network Engineer

Under the supervision of the Executive Director of Technology, the Information Security Engineer is responsible for maintaining and enhancing the security posture of the Allentown School District's information systems and networks. This role involves designing, implementing, and managing security measures to protect the district's data and systems from unauthorized access, use, disclosure, disruption, modification, or destruction. The engineer will focus on identifying, assessing, and mitigating security risks and threats, ensuring compliance with district policies and relevant regulations., Strategic Leadership & Planning:

Design, implement, and maintain network security infrastructure, including firewalls, intrusion detection/prevention systems, VPNs, and other security appliances. Develop and implement security policies and procedures to ensure compliance with district policies and relevant regulations (e.g., FERPA, CIPA). Maintain District network hardware and software standards as set forth in the districts technology plan and by the Director of Technology. Provide stable, secure, and appropriately scaled server environments consistent with the districts service level agreements. Oversee the daily operations of the Districts Windows, VMWare, and Apple Xserve servers and applications.

Operational Management:

Monitor network activity for security breaches and investigate security incidents. Conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses. Manage and maintain security tools and technologies, including SIEM systems, antivirus software, and endpoint detection and response (EDR) solutions. Implement network equipment security, system / data backups, and network security. Ensure that all service providers retained or contracted by the district for data governance and records management purposes meet or exceed industry and/or government standards for data protection and privacy of personal information. Comply with law, Board policy, administrative regulations and district procedures regarding data security and integrity of data containing confidential and/or critical data/information of the district. Adhere to district policies 830 and 830.1, ensuring the security of computerized personal information and data governance. Perform other tasks and assumes other responsibilities as assigned.

Team Leadership & Development:

Provide technical support and guidance to IT staff on security best practices. Collaborate with other IT teams to ensure seamless integration of security measures with network operations. Maintain a cooperative working relationship with the members of the Information Technology staff and the District community. Communicate effectively. Stay current with the latest security threats and trends and recommend appropriate security measures.

Other Duties: Perform other duties as assigned by the Executive Director of Information Technology.

1. Bachelor's degree in Computer Science or related field, or comparable Cybersecurity network engineering experience.
2. Minimum 5 years' experience in the technology field supporting wide area networks.
3. Excellent communication skills.
4. Satisfactory work record & criminal/child abuse clearances (Acts 34, 114, and 151).
5. Cisco Certified Network Associate (CCNA) certified, CompTIA Security+ Certification, or other network related certification preferred.
6. In-depth, hands-on knowledge of the operation, configuration, and maintenance of Cisco Catalyst series enterprise-level core routers and network switches released within the last 5 years.
7. Extensive demonstrated knowledge of supporting, maintaining, and configuration of network security firewall systems such as Fortinet (preferred), Cisco, Palo Alto, and Check Point; Content filtering solutions, network defense against malware, viruses, phishing schemes, ransomware, and other threats.
8. Demonstrated knowledge and experience with managing and supporting data backup and recovery systems such as Veeam, Cohesity, Rubrik, Commvault, and Dell.
9. Working knowledge of the installation, testing and maintenance of network cabling including copper (CAT 3, 5, 5E, 6, 7) and fiber optic (single mode and multimode) and related copper and fiber optical test equipment.
10. Experience in supporting and configuring wireless enterprise systems such as Cisco and HP/Aruba.
11. In-depth, hands-on knowledge of Windows Server 2019 / 2022, Windows 8 11 OS, VMWare, HyperV, Nutanix, Cloud connectivity, and Apple OS as related to local and wide area networks supporting Mac, iPhone, iPad, and other iOS devices, server hardware, and voice over IP and SIP telephony operations.
12. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
13. Such alternatives to the above qualifications as the Board may find appropriate and acceptable.