Portland General Electric

IT Infrastructure (ITOP) Defines network security management tool sets and determines network security, risk, and performance statistics.. IT Estate Management (DCMA) Develops and maintains the standards, processes, and documentation for network security hardware / software systems.. Competencies (Knowledge, Skills, Abilities)Advanced knowledge of Palo Alto NGFW, f5 Networks, Network Security systems, Cisco routing and switching technologies.. Advanced knowledge Routing Protocols and how to troubleshoot: EIGRP, BGP, RIP-2, PBR, Route Filtering, Redistribution, SummarizationAdvanced knowledge of Intermediate knowledge of F5 Networks LTM, GTM, GSLB, ASM, and APM.Intermediate knowledge of Cloud networking and security practices in Azure, AWS, and Google.. Physical and Cognitive DemandsConsistent use of logic or scientific thinking to define problems, collect information, establish facts, and draw valid conclusions (for example, engineer, HR director, plant manager, etc

security operations analyst

Key Responsibilities Applications Support (ASUP)Drafts and maintains network security, security policy, procedures, and documentation to support a zero-trust network architecture. Manages security enhancements to improve network security posture and performance. Ensures that all requests for support are dealt with according to set standards and procedures.IT Infrastructure (ITOP) Defines network security management tool sets and determines network security, risk, and performance statistics. Drives the planning, design, and implementation of maintenance and installation work. Implements agreed network security changes and maintenance routines. Identifies network security operational problems and drives their resolution, checking that they are managed in accordance with agreed standards and procedures. Provides reports and proposals for improvement to specialists, users and managers.Network Security Planning (NSTPL) Develops and maintains network security plans, contributes to setting service level agreements and plans the security infrastructure necessary to provide security services to meet those agreements. Network Security Design (NSTDS) Produces system designs, specifications, and overall architectures, topologies, configurations, and design documentation of network security and security technology within the organization. Specifies user/system interfaces, including validation and error correction procedures, processing firewall rules, access policy, security policy and audit controls. Assesses associated risks and specifies recovery routines and contingency procedures. Translates logical designs into physical designs. Incident Management (USUP)Ensures that security incidents are handled according to agreed procedures. Investigates escalated incidents to responsible service owners and seeks resolution. Facilitates recovery, following resolution of incidents. Ensures that resolved incidents are properly documented and closed. Analyzes causes of incidents and informs service owners to minimize probability of recurrence and contribute to service improvement. Analyzes metrics and reports on performance of security incident management process.Systems Installation/ Decommissioning (HSIN) Takes responsibility for installation projects, providing effective team leadership, including information flow to and from the customer during project work. Develops and implements quality plans and method statements. Monitors the effectiveness of installations and ensures that appropriate recommendations for change are made.Customer Service Support (CSMG) Ensures the inventory of components to be supported is complete and current. Drafts and maintains policy, standards and procedures for the customer service or service desk functions. Responsible for day-to-day management and work allocation to meet agreed service levels. Specifies, agrees, and applies standards. Ensures that tracking and monitoring of security and performance is carried out, metrics and reports are analyzed, and issues are resolved.System Software (SYSP) Evaluates new security software, reviews security software updates, and identifies those that merit action. Ensures that security software is tailored to facilitate the achievement of service objectives. Plans the installation and testing of new versions of security software. Investigates and coordinates the resolution of potential and actual service problems. Ensures that operational documentation for security software is fit for purpose and current. Advises on the correct and effective use of security software.IT Estate Management (DCMA) Develops and maintains the standards, processes, and documentation for network security hardware / software systems. Technical Specialism (TECH) Maintains knowledge of specific specialisms, provides detailed advice regarding network security, and executes specialized tasks. The specialism can be any area of information or security technology, technique, method, product, or application area. Availability Management (AVMT) Develops the availability management process and its operation and performs specialized availability management tasks. Develops security service and component availability, reliability, maintainability, and serviceability. Verifies security services and components meet and continue to meet all their agreed performance targets and service levels. Implements arrangements for disaster recovery and documents recovery procedures. Conducts testing of recovery procedures.Emerging Technology Monitoring (EMRG) Monitors the market to gain knowledge and understanding of currently emerging security technologies. Identifies new and emerging hardware and software technologies and products based on own area of expertise, assesses their relevance and potential value to the organization and contributes to briefings of staff and management.Education/Experience/CertificationsRequires a bachelor’s degree in an IT discipline or other related field or equivalent experience.Eight or more years of progressive IT operations experience focusing on network security, system administration, monitoring or networking support in an enterprise environment. Preferred experience with network security, zero trust, policy optimization, and administration. Three or more years’ experience with automation including implementation, optimization, and adoption of automation opportunities.Certifications within technical disciplines preferred.Competencies (Knowledge, Skills, Abilities)Advanced knowledge of Palo Alto NGFW, f5 Networks, Network Security systems, Cisco routing and switching technologies.Advanced knowledge of network and security functions.Advanced knowledge of network device, system, and security scripting automation.Advanced knowledge of enterprise level firewall rule management and policy optimization.Working understanding of ITIL or other service operations framework.Advanced knowledge Routing Protocols and how to troubleshoot: EIGRP, BGP, RIP-2, PBR, Route Filtering, Redistribution, SummarizationAdvanced knowledge of Intermediate knowledge of F5 Networks LTM, GTM, GSLB, ASM, and APM.Intermediate knowledge of Cloud networking and security practices in Azure, AWS, and Google.Advanced knowledge of Zero Trust architectures for infrastructure and applications environments.Advanced customer focus skills.Advanced accuracy skills.Advanced risk management skills.Advanced oral and written communication skills.Advanced interpersonal skills.Advanced decision-making skills.Physical and Cognitive DemandsConsistent use of logic or scientific thinking to define problems, collect information, establish facts, and draw valid conclusions (for example, engineer, HR director, plant manager, etc.).Ability to adhere to set response times, deadlines, and time-sensitive tasks.Ability to follow accuracy standards.Ability to follow through on decision-making tasks.Ability to interact effectively and collaboratively within a team environment.Ability to communicate and problem solve when under stress.Ability to respond and adapt to frequent change.Ability to accept and demonstrate self-awareness when provided constructive feedback.Ability to discern feedback and acknowledge ownership of areas of improvement.Ability to avoid future mistakes by applying reasonable skills to new but similar work situations or tasks.Ability to successfully collaborate with peers, managers, and others within the organization.Demonstrates sound memory.Ability to process new information to be applied consistently to work tasks.Schedule/AttendanceAbility to occasionally work long hours.Ability to occasionally work a variable schedule.Ability to report to work and perform work during periods of severe inclement weather.Ability to consistently meet attendance standards for regular, reliable, predictable, full-time attendance.Ability to work shift schedule.Ability to maintain ability to adjust schedule, fill in shifts and work occasional extended hours, evenings, or weekends when necessary to support operational needs.Ability to support after-hour on-call with the parameter of 15-minute response times and drive into office within two-hour drive time if needed.Must be fit for duty during standard work hours and during on-call rotations.Ability to participate in companywide Incident Command System and its processes to maintain core company functions during crisis events.Physical CapabilitiesDriving/travel/commute: Daily within service territory - Frequently (at least once a week or more)Driving/travel/commute: Overnight inside/outside the service territory - Occasionally (one to two times a month or less)Computer use (use computer regularly for entire work shift)Lifting/pushing/pulling: Up to 50 lbs.Unstable surfaces requiring balance (i.e., moving equipment, boats); check all that apply: Access to: ☒ Datacenter ☒ Communications closets ☒ Electrical/HVAC rooms ☒ Raised floor/under floorEnvironment - Indoor/Outdoor (check all that apply):OfficePGE supports hybrid flexible work arrangements; and will have a combination of in-the-office and working offsite. This individual will need to be located within 75 miles from job location and will need to work in-the-office at least one day a week. However, these arrangements may change due to business needs or changes in responsibility.#LI-CU1Compensation Range:$113,925.00 - $189,875.00Actual total compensation, including a performance based incentive bonus, is commensurate with experience, skills, qualifications, education, training, and internal equity. While we anticipate the selected candidate for this position will fall towards the middle or entry point of the compensation range, the decision will be made on a case-by-case basis.PGE believes in rewarding dedicated performance. We provide a total rewards package that is designed to reward your contributions to the company, and, at the same time, support your well-being and professional development, both now and into the future.

START NEW SEARCH