IT Infrastructure Operations Analyst, Progression

Title: [[extTitle]] Company : [[filter4]] Location: [[reqphysicallocation]] State and City: [[filter1]] - [[filter2]] Shift: [[jobSchedule]] Hiring Manager: [[hiringManagerName]] Recruiter: [[recruiterName]] TITLE: Network & Systems Security Analyst P rogression PERFORMANCE COACH: Mgr Network Engineering & Cyber Security Operations COMPANY: Tampa Electric DEPARTMENT: High Performance Computing & BP Support Note that this position can be hired at any level in the job family progression, based on Education and Experience. FOCUS AREAS Day to Day Operations role for the IT Infrastructure Rolling out to Datacenter and remote locations Supporting critical NERC infrastructure On call and involve some after hours and weekend support coverage POSITION CONCEPT The Network & Systems Security Analyst is responsible for planning/designing, implementing, and supporting new and existing network, server, storage infrastructure. This role is also responsible for ensuring all network security controls (i.e., firewalls, web application firewalls [WAF], proxies, network segmentation, NAC, ACLs, etc.) are implemented and managed per corporate information security standards. Additionally, responsibilities include assessing enterprise assets and critical assets for secure configurations and maintaining and enforcing regulations and standards such as NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), and Payment Card Industry (PCI). Responsible for the design, planning, operation, maintenance, and support of the TECO and NMGC network infrastructure. This includes primary accountability for network technologies such as route/switch, on-premise LAN/WAN, IPAM, Wi-Fi, ISP management, site-to-site VPNs, proxies (forward and reverse), perimeter firewall management, DNS, Azure cloud environments, automation, NAC/user access, hyperconverged infrastructure, and overall network security. Partners with the Telecommunication teams on establishing/upgrading existing circuits/communication links. Responsible for the NERC Cyber Infrastructure Protection and disaster recovery plans. Responsible for VoIP, SIP, DHCP, DNS, TCP/IP routing and routing protocols such as OSPF and BGP, binary mathematics, NAT, PAT, IPsec and SSL VPN technologies, GRE tunneling, route redistribution, traffic shaping, port-level filtering, SD-WAN, MPLS and other communications related technologies. Responsible for the installation, configuration, and maintenance of all WAN and LAN connectivity which includes core and campus switches, routers, firewalls, wireless access points, WAN scalers and load balancer technologies. Responsible for the design, installation, configuration, and maintenance of DNP over IP and serial SCADA communications between the primary and backup control centers, power plants, solar sites, and substations. Responsible for the configuration and maintenance of Smart GRID communication hardware switches and routers between the primary and backup control centers. NETWORK & SYSTEMS SECURITY ANALYST Monitors and troubleshoots server, network, and security controls related problems and failures; and installs and configures hardware/software. Works under direct supervision. PRIMARY DUTIES AND RESPONSIBILITIES Plan, design, and implement network, server, and storage infrastructure based on project requirements, capacity plans, and system support. (20%) Problem solving involves basic troubleshooting following the OSI (Open Systems Interconnection) model, making or calling for equipment repairs, and problem escalation. (20%) Detection and correction of work stoppages and/or errors are accomplished by monitoring systems and changing configurations, as necessary. (20%) Install and support network, server, and storage hardware and software. (10%) Direct participation in the planning and designing, maintenance, testing and documentation of the company’s disaster recovery plans are vital. (10%) Provide and apply appropriate security consulting and support for IT infrastructure across multiple platforms (Firewalls, proxies, WAFs, ACLs, NAC, Operating Systems, NetScaler load balancers, DDoS protection, and other network devices). (10%) Provide third-level technical support for security systems and authentication mechanisms on all operating system platforms. (10%) RELATIONSHIPS Key Internal: Consults with all IT departments as needed. This role requires the ability to provide technical direction to members of project teams. Key External: Consults with vendor technical specialists and account managers for the various technologies deployed. QUALIFICATIONS EDUCATION Required: High School Diploma or GED Preferred: Bachelor’s degree in Computer Science, Engineering, Math, or equivalent IT discipline (e.g., MIS). LICENSES/CERTIFICATIONS Required: Has obtained at least one related network, system, operating system, or information security professional certification: (e.g., Microsoft Certified Solutions Associate (MCSA), VMware Certified Professional (VCP), Cisco Certified Network Associate (CCNA), Certified Ethical Hacker (CEH), GIAC Certifications, Certified Information Systems Security Professional (CISSP). Preferred: ITIL v3, CCNA , MCSA, VCP, Security+, CISSP EXPERIENCE Required: Minimum four (4) years of related hands-on experience implementing and maintaining Windows, VMware, firewall support, DDoS protection, proxies, WAFs, NetScaler load balancers, or Cisco Networking. In lieu of some experience listed above, may consider three (3) years of related experience with an Associate’s Degree or two (2) years of related experience with a Bachelor’s Degree in Computer Science, Engineering, Math, or equivalent IT discipline (e.g., MIS). KNOWLEDGE/SKILLS/ABILITIES (KSA) Working knowledge of network, server, and security controls infrastructure regardless of the complexity Working knowledge for most of the following technologies and operational functions: switching, routing, DNS/DHCP, Windows Active Directory, VMware, Voice over IP, Storage Area Networking, firewall support, DDoS protection, proxy, WAF, NetScaler load balancing, network segmentation, NAC, IDS/IPS, antivirus support, cyber security best practices, and networking/hardware installation and maintenance Working knowledge with packet analysis and denial of service protection Strong critical thinking, analytical, problem solving, and risk assessment skills as well as strong listening and communication skills (oral and written) Ability to present issues and topics of a complex technical nature to non-technical audiences Excellent interpersonal and organizational skills Basic working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX, and PCI LEADERSHIP COMPETENCIES Speaks up on Safety, Health and the Environment Takes Ownership and Acts with Integrity Drives Operational Excellence for Customers Builds Strong, Collaborative Relationships Develops People and Teams Cultivates Innovation and Embraces Change Thinks Strategically and Exercises Sound Judgment WORKING CONDITIONS Normal working conditions with occasional extended hours during the week and weekends. PHYSICAL DEMANDS/REQUIREMENTS Normal physical demands related to an office and operational (Power P