Network Analyst – Network Security & Access Support
Job Title: Network Analyst-Network Security & Access Support
Location: Teacher Administration Center, 3215 Cuming Street, Omaha NE
Reports To: Director of IMS Technical Support
Work Schedule/FLSA Status: 261 day 12-month / Exempt
Position Purpose: The Omaha Public Schools (OPS) is seeking a Network Analyst for network security and access support. This position will focus on: ensuring the security of the network from threats originating from inside and outside OPS, performing audits looking for security gaps and ensure security policies are up-to-date and being followed, configuration and maintenance of the district firewalls and user policies, web filtering management, installation and monitoring of an identity and access management system (Cisco Identity Services Engine), and reporting progress and escalating issues to IT management. Other information security duties as assigned.
Essential Performance Responsibilities:
- Implement Cisco ISE in wired and wireless environments with a strong focus on policy, posture, and profiling
- Analyze, troubleshoot, and remediate Cisco ISE related issues at buildings
- Build load balancers for servers
- Plan, document, and implement hardware and software refresh and upgrade of Cisco ISE production and lab deployments (e.g.: patching, upgrades, capacity reviews, lifecycle management)
- Plan, document, and implement hardware and software refresh and upgrade of Palo Alto firewalls.
- Manage firewall and intrusion detection systems’ rules and policies by process that includes analysis of request, security recommendation, change control documentation and obtaining approval for implementation
- Conduct periodic firewall best practice review audit and adjust as required according to Palo Alto and District needs
- Manage and monitor Advance Endpoint Protection: Palo Alto Cortex XDR and alarms
- Assist with e-discovery and internal penetration testing.
- Research, evaluate and interface with technology vendors to recommend the selection of security-related tools and emerging technologies
- Interface with end-users and IMS User Support department for the purpose of designing and implementing security solutions and policy recommendations
- Escalate network problems to the Network Services Administrator and as appropriate to IT management
- Provide input and knowledge as needed to others on the Network Services team
- Work with network tools to monitor and troubleshoot the network
- Establish strong standards of professional ethics when relating to staff, students, parents, administration, and the community
- Maintain strict confidentiality
- Comply with the District’s operational guidelines
- Keep abreast of technology developments relating to current trends/issues and education needs (such as training, reading literature, participating in professional organizations)
- Provide technical assistance and training to staff as necessary; willingness to share knowledge with others
- Adhere to District and IMS security practices
- Exhibit willingness to research, recommend, and implement technologies to improve network performance
Knowledge, Skills, and Abilities:
- Minimum of Bachelor’s Degree in a technology related field or equivalent experience
- Proficiency with Cisco Nexus and Catalyst 9000 Switching Family
- Proficiency with Cisco ASR, ISR and Catalyst Routers
- Experience with QoS implementation and troubleshooting
- Experience and proficiency in deployment of Cisco native IOS, EIGRP, BGP, HRSP, OSPF, TCP/IP MPLS, IPVPN, point to point, broadband; WIFI
- Knowledge of Network Access Control and Device Administration technologies: Cisco IDS/IPS, Cisco ISE, Cisco ACS, IEEE 802.1x, Radius, TACACS+
- Knowledge of enterprise firewall and VPN platforms with preference on Palo Alto NG firewalls
- Knowledge of F5 load Balancer, nGeniusONE for Enterprise, Wireshark, VoIP
- Advanced WAN/LAN/WLAN experience level
- Licensed in good standing and able to travel (drive) throughout the District
- Understanding of various types of operating systems and multimedia technologies
- Ability to study, document and prepare system diagrams regarding present day networking workfow and procedures; ability to document LAN/WAN infrastructure with Microsoft Visio
- Ability to analyze existing network systems and redefine them in order to take into account changes in system requirements and/or equipment configurations
- Willingness to research, recommend, and implement technologies to improve network performance
- Skills pertinent to positive human relationships and the ability to work effectively with staff members in a multicultural urban setting
- Ability to configure and install network systems, repair and troubleshoot systems; analyze and design systems
- Ability to plan, organize, problem-solve, and think abstractly/conceptually
- Ability to monitor and maintain network/security equipment and data circuits
- Ability to understand technical manuals and procedural documentation as well as keep documentation up to date
- Ability to work through difficult issues and maintain a great, positive attitude when communicating with others
- Ability to work hours outside of normal schedule with little or no advance notification