Network Analyst - Network Security & Access Support

Position Purpose: The Omaha Public Schools (OPS) is seeking a Network Analyst for network security and access support. This position will focus on: ensuring the security of the network from threats originating from inside and outside OPS, performing audits looking for security gaps and ensure security policies are up-to-date and being followed, configuration and maintenance of the district firewalls and user policies, web filtering management, installation and monitoring of an identity and access management system (Cisco Identity Services Engine), and reporting progress and escalating issues to IT management. Other information security duties as assigned.

Essential Performance Responsibilities:

• Implement Cisco ISE in wired and wireless environments with a strong focus on policy, posture, and profiling
• Analyze, troubleshoot, and remediate Cisco ISE-related issues in schools and buildings
• Build load balancers for servers
• Plan, document, and implement hardware and software refresh and upgrade of Cisco ISE production and lab deployments (e.g., patching, upgrades, capacity reviews, lifecycle management)
• Plan, document, and implement hardware and software refreshes and upgrades for Palo Alto firewalls.
• Manage firewall and intrusion detection systems’ rules and policies by a process that includes analysis of requests, security recommendations, change control documentation, and obtaining approval for implementation
• Conduct periodic firewall best practice review, audit, and adjust as required according to Palo Alto and District needs
• Manage and monitor Advanced Endpoint Protection: Palo Alto Cortex XDR and alarms
• Assist with e-discovery and internal penetration testing.
• Research, evaluate, and interface with technology vendors to recommend the selection of security-related tools and emerging technologies
• Interface with end-users and the IMS User Support department for the purpose of designing and implementing security solutions and policy recommendations
• Escalate network problems to the Network Services Administrator and, as appropriate, to IMS management
• Provide input and knowledge as needed to others on the Network Services team
• Work with network tools to monitor and troubleshoot the network
• Establish strong standards of professional ethics when relating to staff, students, parents, administration, and the community
• Maintain strict confidentiality
• Comply with the District’s operational guidelines
• Keep abreast of technology developments relating to current trends/issues and education needs (such as training, reading literature, participating in professional organizations)
• Provide technical assistance and training to staff as necessary; willingness to share knowledge with others
• Adhere to District and IMS security practices
• Exhibit willingness to research, recommend, and implement technologies to improve network performance, Performs other related tasks as assigned by supervisor and other central office administrators as designated by the Executive Director of IMS., * Will work under the direct supervision of the department supervisor to complete day-to-day tasks.
• Will be working with a diverse population requiring the ability to handle all situations with tact and diplomacy.
• Must understand and respond appropriately to customer needs and maintain a positive attitude with all customers and colleagues.
• Expected to interact with all internal and external customers in a friendly, professional manner and provide quick, responsive customer service.

Employee Punctuality and Appearance

• To operate effectively, schools expect employees to perform all assigned duties and work all scheduled hours on each designated workday, unless they have received approved leave.
• Any deviation from assigned hours must have prior approval from the employee’s supervisor or building administrator.
• All employees are required to report to work dressed in a manner that reflects a positive image of Omaha Public Schools and is appropriate for their position.

Terms of Employment

This position is treated as a full-time exempt classified position. The terms of your employment will be governed by applicable state laws regulating employment in a Nebraska public school and Board of Education policies, as those laws and policies may change from time to time. If your position is represented by a collective bargaining representative, then your employment will also be governed by a negotiated agreement between OPS and that collective bargaining representative.

• Minimum of a Bachelor’s Degree in a technology-related field or equivalent experience.
• Proficiency with data center, enterprise switching, and routing technologies, including Cisco Nexus and Catalyst switching platforms and Cisco enterprise routing platforms.
• Experience and proficiency in the deployment of Cisco IOS/IOS-XE, EIGRP, BGP, OSPF, HSRP, IPVPN, point-to-point, broadband, and enterprise Wi-Fi technologies.

• Experience with network intrusion detection and prevention technologies (IDS/IPS) and network security monitoring. Strong understanding of network security principles, including defense-in-depth, least privilege, network segmentation, secure network architecture, and Zero Trust security concepts.

• Knowledge of Network Access Control and Device Administration technologies, including Cisco ISE or comparable platforms, IEEE 802.1X, RADIUS, TACACS+, and certificate-based authentication.
• Knowledge of enterprise next-generation firewall and VPN technologies, with a preference for Palo Alto Networks or comparable platforms.
• Knowledge of Quality of Service (QoS) design, implementation, and troubleshooting.
• Knowledge of F5 load balancing, Wireshark, nGeniusONE, or comparable network monitoring platforms.
• Advanced WAN/LAN/WLAN networking and troubleshooting experience.
• Understanding of cloud and hybrid-cloud networking and security concepts; knowledge of SASE/SSE and SD-WAN technologies is desirable.
• Ability to analyze existing network and security systems and redesign or modify them to address changes in requirements, technology, security, or equipment configurations.
• Ability to configure, install, monitor, maintain, repair, and troubleshoot network and security systems and equipment.
• Ability to document network and security infrastructure, workflows, procedures, and configurations using Microsoft Visio or comparable tools.
• Willingness to research, recommend, and implement technologies that improve network performance, security, reliability, and operational efficiency.
• Ability to plan, organize, problem-solve, and think abstractly and conceptually.
• Ability to understand technical manuals, security standards, and procedural documentation, and maintain current technical documentation.
• Skills pertinent to positive human relationships and the ability to work effectively with staff members in a multicultural urban setting.
• Ability to work through difficult issues and maintain a positive, professional attitude when communicating with others.
• Ability and willingness to work hours outside of the normal schedule, including scheduled maintenance and emergency response with little or no advance notification.
• Licensed in good standing and able to travel throughout the District as required., Equipment: This position may require the ability to use basic office equipment such as computers, copiers, and scanners. Must always comply with OPS’s guidelines for equipment use., * Must be able to respond rapidly in emergency situations.
• Must have organizational, time-management, communication, and interpersonal skills.
• Work in school building and central office environments., * A background check that demonstrates to OPS that the background is acceptable for the position.
• Verification of U.S. citizenship or legal authorization to work in the United States.
• Successful completion of a pre-employment drug test (if required for the position offered).
• Successful completion of a tuberculosis skin test (if required for the position offered).

Salary Schedule: S04 92D Specialist 4 starts at $94,242.03. Salary credit may be awarded for applicable experience.