IT Systems and Security Administrator (I, II, III, Senior)

This position is responsible for providing support and maintenance for local applications, infrastructure, and plant system needs and IT services. Responsible for the administration, maintenance, support, and continuous improvement of Rainbow Energy Center’s enterprise systems, business applications, Microsoft 365 environment, server platforms, network systems, and cybersecurity systems. Ensures the secure, reliable, and efficient operation of technology services supporting business operations. Serves as a technical resource for systems administration, cybersecurity, disaster recovery, regulatory compliance, technology planning, and project execution. This role partners closely with business units, plant operations, engineers, vendors, regulatory organizations, and other technology personnel to support current and future business needs while maintaining organizational security standards., Systems Administration and Support

• Administer and support enterprise servers, network systems, business applications, Microsoft 365 services, Active Directory, virtualization platforms, and related technology services.
• Perform system maintenance, upgrades, patch management, backup administration, recovery testing, and lifecycle management.
• Monitor system performance, availability, reliability, and capacity to ensure business requirements are met.
• Troubleshoot and resolve hardware, software, application, operating system, and technology service issues.
• Maintain asset inventory and technology lifecycle replacement plans.
• Provide on-call support for critical technology incidents and emergencies.
• Serve as technical escalation support for Service Desk personnel and IT Support Analysts.
• Provide recommendations for server, workstation, and application lifecycle replacement, upgrades, and technology standards.
• Support disaster recovery planning, testing, and recovery efforts to ensure business continuity.

Cybersecurity Administration

• Administer and support cybersecurity infrastructure including security monitoring, threat detection, vulnerability management, identity management, endpoint protection, and security event analysis.
• Configure and maintain security tools, alerts, reports, dashboards, rules, signatures, and monitoring systems.
• Participate in security incident investigations, root cause analysis, containment activities, and remediation efforts.
• Assist with the development, implementation, and continuous improvement of the REC security program.
• Conduct security reviews of systems, applications, infrastructure, and technology projects.
• Support audit activities and regulatory compliance requirements.
• Maintain disaster recovery, business continuity, and incident response plans.

Systems Planning and Design

• Participate in planning, design, implementation, and enhancement of enterprise systems, business applications, and technology solutions.
• Develop and maintain system documentation, diagrams, standards, procedures, and configuration records.
• Provide technology consulting and recommendations to support plant and business objectives.
• Recommend improvements to technology standards, system architectures, support processes, and operational effectiveness.
• Participate in architecture reviews and technology assessments of existing and proposed solutions.
• Support integration of business, operational, and plant information systems where applicable.

Project Management and Continuous Improvement

• Lead or participate in technology and cybersecurity projects.
• Identify opportunities to improve reliability, security, efficiency, and operational effectiveness.
• Research emerging technologies, industry trends, and best practices.
• Prepare recommendations and technical evaluations for decision-making management.
• Participate in change management, incident management, and problem management processes.

Compliance, Documentation, and Governance

• Create and maintain technical documentation, operating procedures, standards, diagrams, and system inventories.
• Ensure adherence to cybersecurity, safety, and technology governance policies.
• Assist with regulatory compliance initiatives including NERC, FERC, and applicable industry standards.
• Maintain records supporting audits, assessments, and compliance reviews.
• Coordinate technology-related communications and change activities within the organization.

Level I: Associate degree in Information Technology, Computer Science, Cybersecurity, or related field and two (2) years of relevant experience; or four (4) years of progressively responsible IT experience.

Level II: Associate degree and four (4) years of relevant experience; or bachelor’s degree and two (2) years of relevant experience.

Level III: Bachelor’s degree and four (4) years of progressively responsible enterprise IT experience; or associate degree and six (6) years of progressively responsible enterprise IT experience.

Senior: Bachelor’s degree and six (6) years of progressively responsible enterprise IT experience; or associate degree and eight (8) years of progressively responsible enterprise IT experience. Professional certifications and demonstrated technical leadership are strongly preferred.

Knowledge, skills, & abilities

• Advanced knowledge of Windows Server administration, Microsoft 365, Active Directory, virtualization platforms, enterprise applications, and systems administration.
• Knowledge of cybersecurity technologies include vulnerability management, intrusion detection, endpoint security, identity management, logging, and monitoring.
• Understanding disaster recovery, business continuity, and incident response practices.
• Knowledge of regulatory and compliance frameworks including NERC CIP, SOX, PCI, and industry security standards.
• Strong troubleshooting, analytical, and root cause analysis skills.
• Ability to communicate effectively with technical and non-technical audiences.
• Ability to manage multiple priorities and projects simultaneously.
• Ability to prepare technical documentation, standards, and recommendations.
• Ability to foster collaboration and work effectively across departments.
• Ability to maintain confidential information and exercise sound judgment.
• Ability to anticipate future technology needs and contribute to strategic planning and budgeting activities.
• Knowledge of industrial control systems and electrical generation operations preferred.

Working conditions

Normal office conditions and occasional visits to other REC and partner sites as required. Conditions may include exposure to noise, vibration, dirt, and dust. Conditions may include long periods of sitting, using a keyboard or mouse, and reading a PC monitor. May be required to do occasional lifting of computer equipment (approx. 25 pounds) and work under and around office furniture and plant equipment. Non-exempt personnel are required to work overtime as needed. Exempt personnel are expected to work the necessary hours to get the required work accomplished. May be expected to travel to attend training and conferences. Required to wear personal protective equipment as needed. May be expected to travel to support remote sites and to attend training and conferences. Must be able to perform the essential functions of the job.