Senior Infrastructure Engineer

Under direction of the Information Technology Manager I (IT Manager I), the Information Technology Specialist II (IT Specialist II) acts as a Senior Infrastructure Engineer working on the most complex IT infrastructure assignments and issues that impact the Department statewide. The incumbent is expected to be proficient and have strong working knowledge in the following competencies with monitoring, maintenance, support, and troubleshooting services for the Department's infrastructure solutions including Wide Area Network (WAN), Local Area Network (LAN), enterprise firewall systems, Network Access Control systems (NAC), wireless controllers and access points, protection and management solutions, network switches, identity management and authentication services, and server virtualization services.

The incumbent may be required to work after regular business hours and/or weekends to perform activities to support business operations and/or systems maintenance.

The incumbent must carry a cell phone and respond to calls after hours to lead multi-disciplinary IT professional team(s) in organizing, analyzing, troubleshooting and resolving IT system problems., The duties of this position are primarily conducted indoors in an office environment. The incumbent will have a workstation with modular furniture, an adjustable rolling chair, a computer with various software programs, a telephone with voicemail, and stationary filing drawers and bins. The position requires the ability to sit for extended periods of time and operate a personal computer utilizing a mouse and keyboard.

The incumbent must be able to give presentations, participate in meetings, and interact with other staff. They must also be able to: push buttons on a keyboard, calculator, photocopy machine, facsimile machine, and telephone; grasp papers, small objects, and manuals; access upper and lower files and cabinets; and exert up to 25 lbs. of force occasionally and/or a negligible amount of force frequently in order to move or position objects.

Travel to various CDFA facilities and sites throughout the state as needed using various means of transportation systems; overnight stays, and weekend and off-shift work may be required.

Regular or recurring telework may occur as part of the incumbent's ongoing regular schedule in accordance with CDFAs Telework Policy.

1. Based on the job description and duty statement, what skills and abilities do you believe are most critical to be successful in this position? Please be specific and provide examples that highlight: the complexity of the networks or server services you have worked with; your proficiency with key technologies such as DNS, VPN, network security, server virtualization, authentication and authorization services, and IDS/IPS systems.

2. Describe your experience with deploying and managing Windows servers in VMware. Include your knowledge of Active Directory, group policy management, server hardening and performance optimization. Provide examples of specific projects or implementations you have worked on., In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

Knowledge of:

• Analytical procedures and methods;

• The application of security policies and procedures, security awareness programs, business continuity, disaster recovery plans, and operational recovery plans; and technical knowledge of California and federal laws, policies, and regulations and procedures applicable to data confidentiality, security, and privacy (specifically NIST 800-53, NIST SP1800-35, and/or California SAM 5300).

• Administration and support of infrastructure services and platforms, security services and solutions including:

o Demonstrate a solid understanding of LAN/WAN technology protocols and processes (e.g., DNS, DHCP, and TCP/IP)

o Next generation firewall, web filtering and switching, such as Palo Alto Networks, Aruba, Juniper, & Cisco;

o Identity and authentication solutions, such as Microsoft Azure/Windows Active Directory

o Server operating systems, such as Microsoft Windows Server;

o Server virtualization, such as VMware vSphere;

o Cloud-based office productivity and security solutions, such as Microsoft/Office 365 (M365/O365), including MS Advanced Threat Protection/Defender for Endpoint/Identity/Office platforms;

o Cloud solutions, such as Azure Cloud services and Amazon Web Services (AWS)

o Endpoint management and protection solutions, such as Microsoft Intune;

o Server patching solutions, such as Windows Server Update Services and Azure Arc;

o Mobile Device Management solutions, such as Microsoft Intune;

o Enterprise VPN services such as PAN Global Protect

o Cybersecurity controls and standards

Ability to:

• Effectively communicate, both verbally and in writing;

• Develop clear, accurate, and concise reports, correspondence, issue papers, memorandums, and other types of written communication;

• Network, communicate, and interface effectively with business and technical personnel with various levels of IT knowledge;

• Demonstrate strong interpersonal skills;

• Provide technical guidance for lower level staff and State contractors/consultants;

• Apply technical knowledge effectively and methodically;

• Provide infrastructure administration and support services that adhere to Departmental policies and procedures and other governing State laws., Upon hire you may be required to provide official sealed transcripts or an original degree or certificate.

Applicants with foreign degrees may be asked to provide an official foreign transcript evaluation which indicates course work is equivalent to a degree from an accredited U.S. College or University.

The position exists in downtown Sacramento at CDFA's Headquarters office, located at 1220 N Street, Sacramento, CA., The Information Technology Services Division (ITSD) is responsible for the oversight and management of all information technology and telecommunications activities including, but not limited to, information technology, information security, and telecommunications personnel, contractors, systems, assets, projects, purchases, and contracts. ITSD is tasked with ensuring compliance with state information technology policy and conformance to state information technology and telecommunications policy and enterprise architecture. The range of services that ITSD provides encompasses the areas of Technology Governance, Applications Development Services, Customer Support and Services, IT Infrastructure Operations, Enterprise Architecture, Procurement, and Information Security. ITSD provides IT services to over 2,000 employees in eight major program areas as well as executive and administrative staff distributed over 100 locations throughout the state.