Network Security and Firewall Engineer - City

$43.12 - $65.93 Hourly

Note: The normal starting pay for this position is the minimum of the pay range listed above. A higher rate of pay may be considered, dependent on the qualifications and experience of the selected applicant and/or the City’s step placement policy.

Important APPLICANT Information: 

• When completing the application, applicants will be asked to respond to application questions.  These application questions are based on the Job Requirements for the position.  
• Completion of the application questions is required. 
• Applicant responses to the application questions must specifically answer the questions asked. 
• Responses to application questions must be supported by work history/information listed on the application/resume, sufficient to demonstrate qualifications for the position.  
• Applications may not be reviewed if specific responses to application questions have not been provided.
• Each application submission is reviewed independently.  

Important BENEFITS Information:

• The City offers competitive pay and robust benefits: https://www.okc.gov/home/showdocument?id=47740&t=638783981410928803

SAFETY SENSITIVE

This job classification has been designated as a safety sensitive job classification in accordance with the Oklahoma Medical Marijuana and Patient Protection Act, 63 O.S., § 427.1 et seq., (OSCN 2019), effective August 29, 2019. This means employees in this job classification can be subject to disciplinary action up to and including termination if they test positive for marijuana components or metabolites, even if they possess a medical marijuana license.

This job classification has been designated as a cyber security sensitive job classification effective June 26, 2023, in order to comply with United States Department of Justice, Federal Bureau of Investigation, Criminal Justice Information Services (CJIS) Division’s Criminal Justice Information Services Security Policy (Version 5.9.2, 12/07/2022), 5.12 Policy Area 12 Personnel Security.  The policy requires national fingerprint-based records checks be conducted prior to granting access to criminal justice information for all personnel who have unescorted access to unencrypted Criminal Justice Information (CJI) or unescorted access to physically security locations or controlled areas (during times of CJI processing).   Employees in this job classification will be subject to a Criminal Justice Information Services (CJIS) Interstate Identification Index (III) Fingerprint Background check after receiving a conditional offer of employment. Additionally, employees in this job classification must complete the required CJIS Security and Privacy Training and pass the online certification test. 

JOB SUMMARY

The Network Security and Firewall Engineer is located in the Technology Infrastructure Division of the Information Technology Department within the City of Oklahoma City and is under the direction of the Information Technology Business Systems Manager.  This position is responsible for managing and maintaining the City of Oklahoma City firewall infrastructure to protect the network from external threats, ensuring network security, and implementing security policies and best practices. A Network and Firewall Engineer is also responsible for designing, implementing, configuring, and maintaining the firewall infrastructure to ensure the security and integrity of the network. This role is essential for safeguarding sensitive data, preventing unauthorized access, and mitigating security threats. 

VETERANS PREFERENCE

Honorably discharged veterans of the United States Active Duty Armed Forces, National Guard, and Reserve Forces who are not currently employed full-time by the City of Oklahoma City and who meet the qualifications for the position shall be given preference. To receive preference, veterans must submit verification of honorable discharge from the United States military service (Department of Defense Form DD214 or NGB Form 22) prior to the closing date of the vacancy announcement. 

ESSENTIAL JOB FUNCTIONS

• Configures, installs, and maintains firewall hardware and software solutions, including next-generation firewalls (NGFW), to protect the organization's network.
• Develops, implements, and enforces firewall security policies, rules, and access controls to safeguard sensitive data and ensure compliance with industry regulations.
• Monitors network traffic for suspicious activities, security breaches, and vulnerabilities using intrusion detection and prevention systems (IDPS).
• Responds to security incidents and breaches promptly, investigates root causes, and implements corrective actions to prevent future occurrences.
• Analyzes firewall logs and generates reports to identify security threats, trends, and potential vulnerabilities.
• Manages user access and permissions by configuring VPNs, ACLs, and other access control mechanisms.
• Ensures firewall hardware and software are up to date by applying patches, firmware updates, and security patches.
• Implements network segmentation to isolate critical assets and limits lateral movement in the event of a breach.
• Monitors and optimizes firewall performance to ensure it does not adversely affect network speed or latency.
• Maintains accurate documentation of firewall configurations, policies, and network diagrams for reference and audit purposes.
• Collaborates with other IT teams, such as network engineers, system administrators, and security analysts, to ensure a cohesive and secure network environment.
• Provides training and guidance to employees and IT staff on firewall security best practices and security awareness.
• Configures and monitors firewalls.
• Monitors daily usage, performs regular maintenance, and patches as needed.
• Troubleshoots complex errors and configurations to determine root cause.
• Creates documentation of procedures, configurations, and network topologies.
• Stays abreast of changes and processes for compliance to ensure requirements are met.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Three (3) years firewall administration and five (5) years Information Technology experience.
• Possession of valid industry certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Firewall Administrator (CFA).

KNOWLEDGE, SKILLS, AND ABILITIES

• Knowledge and experience in firewall administration, network security, and intrusion detection/prevention systems.
• Knowledge of Firewalls (e.g., Cisco ASA, Palo Alto, Juniper, Fortinet), Intrusion Detection and Prevention Systems (IDPS), VPN technologies, Network monitoring and logging tools, Security Information and Event Management (SIEM) systems, Access Control Lists (ACLs) and Network segmentation techniques.
• Knowledge of firewall technologies, including both hardware and software solutions; staying abreast of the latest cybersecurity threats and industry best practices.
• Knowledge of network protocols, routing, and switching.
• Skill in analysis and problem-solving to identify and respond to security threats.
• Skill in verbal and written communications.
• Ability to work in a fast-paced, dynamic environment and adapt to changing security threats.

COMPETENCIES

• Execution and Results: (1) Sets well-defined and realistic goals and high standards of performance for self or self and others; (2) displays a high level of initiative, effort, and commitment toward performing work; (3) completes assignments in a thorough, accurate, and timely manner, and delivers results; (4) works with minimal supervision, is motivated to achieve, and demonstrates responsible behavior; (5) demonstrates understanding of all aspects of the job and application of accrued knowledge in carrying out duties and responsibilities; technical knowledge; skill in the techniques, equipment, procedures, and work required; (6) recognizes opportunities and takes action for improvement to programs, policies, procedures, practices, and processes; (7) understands and is able to apply the principles, methods, and tools of quality improvement; (8) collects, examines, analyzes, and interprets data from a variety of sources; (9) makes data-driven recommendations/decisions and achieves results; (10) effectively achieves results through others to achieve the Department or City's mission.
• Judgment: (1) Plans, coordinates, and executes business functions efficiently, effectively, and in a fiscally responsible manner; (2) identifies risks and develops and implements measures to avoid, mitigate, or minimize those risks; (3) makes effective, timely, well-informed, objective, and transparent work-related decisions; (4) exhibits emotional maturity and stability, effectively manages conflict, and remains optimistic and calm during stressful situations; (5) uses resources effectively to achieve results aligned with organizational priorities; (6) applies understanding of financial management/budgeting principles to ensure decisions are fiscally sound and responsible and in accordance with policies, procedures, processes, rules, regulations, and laws; (7) makes business decisions that drive positive, fiscally responsible performance; (8) manages ambiguity, business insight, financial acumen, makes decisions using data and insight that achieves the best outcome for the department and City.
• Teamwork/Team Oriented: (1) Recognizes, values, and leverages the ideas, opinions, and perspectives of others; (2) participates willingly and effectively as a team lead or team member; (3) builds consensus; fosters team commitment, spirit, pride, and trust; (4) collaborates with others to accomplish goals and objectives and achieve results; (5) expresses facts, ideas, messages, and information (technical and non-technical) to individuals or groups clearly, concisely, accurately, understandably, with honesty, tact, and diplomacy and in a manner that is appropriate for the intended audience; (6) actively listens, clarifies information as needed.
• Customer Centric: (1) Demonstrates commitment to public service; (2) serves and satisfies internal and external customers in a timely and effective manner; (3) establishes, commits to, and maintains high standards for producing quality work products and being responsive to customers; (4) supports the Department/City's mission; develops and executes strategies with the customer in mind.
• Strategic Thinking: (1) Thinks conceptually, imaginatively, and systematically; (2) envisions the future; (3) defines the vision, direction, and goals; (4) develops a road map for achievement; (5) anticipates change and plans for it; (6) considers long-term value and consequences; (7) influences others to achieve results; (8) understands where the organization is headed; knows the organization's mission and functions, and how its social, political, and technological systems work; (9) aligns business strategies to long-term success of the City; (10) sets the vision, direction and compelling course of action; (11) operates effectively within the systems, programs, policies, procedures, codes, ordinances, rules, and regulations of the organization; (12) knows industry and stays ahead of best practices; (13) understands the political environment, management priorities, staff roles and responsibilities, and grasps external factors impacting the organization; (14) identifies when issues need to be escalated to higher authorities and effectively alerts appropriate officials.
• Leads Through Influence: (1) Persuades others; builds consensus through give and take; (2) gains cooperation from others to obtain information and accomplish goals; (3) works with others towards achieving agreements that may involve exchanging resources or resolving differences; (4) understands the concepts, practices, and techniques used to identify, engage, influence, and monitor relationships with individuals and groups connected to a work effort including those actively involved; (5) leads through influence over the process and its results, and those who have a vested interest in the outcome (positive or negative).
• Commitment to Continuous Improvement: (1) Recognizes opportunities for improvement with regard to programs, policies, procedures, practices, and processes; (2) understands and is able to apply the principles, methods, and tools of quality improvement; (3) collects, examines, analyzes, and interprets data from a variety of sources; (4) makes data-driven recommendations/decisions and achieves results.
• Agility: (1) Values collaboration, communication, and feedback and is flexible and open to new ideas; (2) learns rapidly and transforms learning into action; (3) examines processes and practices to perform work most effectively; (4) demonstrates courage and willingness to take calculated risks; (5) assesses readiness; proposes new approaches, methods, and technologies plans, implements, and evaluates change in a transparent, positive, and thoughtful manner; (6) exhibits emotional maturity and stability, effectively manages conflict, and remains optimistic and calm during stressful situations; (7) rapidly adapts to change and leads others through change, while producing tangible results and identifying new opportunities.
• Talent Development: (1) Provides tools, materials, equipment, and resources; (2) provides performance feedback, coaching, mentoring, encouragement, and support; (3) discusses personal and professional goals; (4) provides formal and informal learning and development opportunities that support achievement of personal and professional goals; (5) attracts and develops talent; (6) manages performance throughout the department or City; (7) sets the leadership tone for area of responsibility.  Note:  This competency is not applicable for employees who are not supervisors.

WORKING CONDITION

• Primarily indoors in a climate-controlled environment.
• Occasional local travel or out-of-town travel.
• Occasionally required to work hours beyond the normal scheduled workday (e.g., when responding to unplanned outages, performing scheduled maintenance activities, or to meet project deadlines)

Note:  Typical City employee working hours are 8:00 a.m. to 5:00 p.m., Monday through Friday. However, working hours vary (may require work to begin before 8:00 a.m. and/or end beyond 5:00 p.m., and/or may require work on weekends and holidays), and are subject to change, based on the duties and location of the position and the business needs of the assigned work unit/department.  

PHYSICAL EFFORT

• Near vision enough to read a video display terminal and draft communications such as written or machine generated documents, reports, etc.
• Hearing and speech enough to communicate verbally.
• Manual and finger dexterity enough to operate equipment such as computer keyboards, etc.

Note:  The working conditions and physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential job functions. 

OTHER DETAILS

Attachments:  Applicants may upload only two attachments.  Applicants may choose to combine documents into one file for upload. 

Pay Method:  City employees are required to receive pay electronically, either via direct deposit or pay card.

Former Employees:  If this position is open to external applicants and you are a former employee, you must be eligible for rehire to participate in any selection process.  If you are unsure of your rehire status, please contact the Human Resources Department at (405) 297-2530.  If your rehire status has been coded “Not Eligible,” “Eligible 3,” or “Conditional,” you will need to request a review of your rehire status through the Human Resources Department’s Employee and Labor Relations Division.

Background Investigation, Drug Testing, Physical Examination:  Upon a conditional offer of employment/acceptance of position, the City of Oklahoma City will conduct a criminal history background check for external applicants. Applicants will be provided contact information for any third-party reporting agencies used to collect background information in connection with conditional offers of employment.   

If the position accepted includes a driver license (commercial or non-commercial) Job Requirement, the City of Oklahoma City will obtain a Motor Vehicle Report for internal and external applicants. 

If the position accepted is safety sensitive and/or a driving position, internal and external applicants will be provided a copy of the City of Oklahoma City's Drug and Alcohol Testing Policy prior to being directed for a drug test. A copy is also available at the link below:  

HRB 25-01 Drug and  Alcohol Testing Procedure.FINAL 030325_AM.pdf

If the position accepted is cyber security sensitive, internal and external applicants will be subject to a Criminal Justice Information Services (CJIS) Interstate Identification Index (III) Fingerprint Background check. Additionally, employees in this job classification must complete Level 4 Security Awareness Training and pass an online certification test.

If the position accepted includes a lift/push/pull/carry Physical Requirement of 25 pounds and greater, internal and external applicants will be directed for a physical examination. 

AN EQUAL OPPORTUNITY EMPLOYER

If you require reasonable accommodation at any time during the hiring process, please notify one of the Human Resources Department Representatives by calling 405-297-2530. The City of Oklahoma City is an equal opportunity employer and values diversity and inclusion. The City of Oklahoma City will not discriminate against any applicant or employee because of race, color, creed, national origin, ethnicity, religion, sex (to include sexual orientation and gender identity and/or expression), age, genetic information, disability or political affiliation.