IT Network Security Engineer

Design, implement, and operate network security controls to protect organizational infrastructure from cyber threats and unauthorized access.ResponsibilitiesReview security management reports and coordinate third-party security functions.Identify gaps in network design and assess control operating effectiveness; recommend opportunities for continuous improvement.Stay current on industry trends and evaluate new network security technologies.Configure and manage secure network architectures across on-premises, cloud, and hybrid environments.Architect and deploy secure network solutions includingNext-Gen Firewalls (NGFW) ,VPNs ,IDS/IPS , andWeb Content Filters .Serve as a technical lead during security breaches or network outages; performroot cause analysisand rapid remediation.Conduct regular network scans and penetration tests to identify weaknesses; oversee hardening of network devices.UseSIEMtools to monitor traffic patterns and automate response.Ensure network infrastructure meets industry standards includingNERC CIP ,CJIS ,PCI , etc.Understand and apply information security administration, management, governance, and compliance requirements; respond to auditor and regulator comments and mitigate identified risks.Provide guidance and technical support to IT staff and end users on security-related matters.Perform related duties as required.RequirementsBachelor’s degree(preferably Computer Science, MIS, Information Technology, or similar) plusat least 4 yearsof related work experience; orMaster’s degreeplusat least 2 yearsof related work experience.Familiarity with cloud security platforms such asAzure ,AWS , orGoogle Cloud .Preferred: experience supporting public sector, enterprise, or highly regulated environments.Knowledge of applicable information security administration, management, governance, and compliance principles, practices, laws, rules, and regulations.Knowledge of cybersecurity standard frameworks, controls, technology, and solutions.Knowledge of IT systems and processes, network infrastructure, data architecture, data processes, and protocols.Deep understanding ofTCP/IP ,BGP ,OSPF ,DNS , andTLS/SSL .Hands‑on experience with vendors such asPalo Alto Networks ,Fortinet ,Cisco ASA/Firepower , orCheck Point .Proficiency in securing hybrid environments (e.g.,AWS VPCs ,Azure VNETs ,Google Cloud Armor ).Strong knowledge ofIPsec ,SSL VPNs , andPKIinfrastructure.Initiative to learn job tasks, broaden knowledge levels, accept new responsibilities, and attend training to advance skills.Ability to work independently with limited direction and collaborate in a team environment.Demonstrate collaborative, respectful, and productive work habits.Identify and mitigate network vulnerabilities.Prepare clear, concise, and complete reports and written materials.Anticipate, identify, and resolve issues and problems effectively.Take ownership of assigned tasks and projects, ensuring accurate and timely completion with minimal supervision.Maintain absolute confidentiality of sensitive files, data, and materials accessed, discussed, or observed while working with City staff.Be constantly alert to safe working practices and workplace hazards; take appropriate corrective action during sudden accidents or equipment failure.Comply with all City and departmental policies and procedures; meet attendance and punctuality guidelines.Provide management with clear, accurate, and constructive advice and information related to responsibilities and technical decisions.Establish cooperative working relationships and communicate effectively with the public and other required entities.Strong verbal and written communication skills.Strong analytical, problem-solving, organizational, and time-management skills.Ability to respond effectively under pressure during security incidents.Attention to detail and commitment to security best practices.Texas Class C driver’s license with a good driving record (per City evaluation system).After-hours technical support may be required; must respond and elevate within posted time constraints.Must be able to access Texas Criminal Justice Information Services (CJIS) System data; cannot possess a felony or Class A misdemeanor conviction, or a Class B misdemeanor conviction within the past 10 years.Must be able to work in the United States without requiring visa sponsorship, now or in the future.Additional certifications are a plus:CISSP ,CISM ,CEH ,Security+ ,CCNP Security , or similar.TechnologiesSIEM toolsNext-Gen Firewalls (NGFW)VPNsIDS/IPS systemsWeb Content FiltersNERC CIP, CJIS, PCITCP/IP, BGP, OSPF, DNS, TLS/SSLPalo Alto Networks, Fortinet, Cisco ASA/Firepower, Check PointAWS VPCs, Azure VNETs, Google Cloud ArmorIPsec, SSL VPNs, PKI infrastructureCISSP, CISM, CEH, Security+, CCNP SecurityBenefitsCertificate Pay Program (CPP) through the City of Bryan IT Department.Up to$450/monthin certification pay for qualifying certificates.Reimbursement available for qualifying passed certificate exams while employed by the City of Bryan IT.Position InformationLocation:Bryan, TX(onsite)FLSA ExemptClassification Type: ProfessionalDepartment: Information TechnologyJob Type: Full TimeWork Schedule: Monday-Friday; 8am-5pmHiring Pay Rate: Depends on qualificationsLicenses, Certifications & Special RequirementsAdditional certifications such as CISSP, CISM, CEH, Security+, CCNP Security, or similar are a plus.CPP eligibility: new employees eligible after the first90 daysof employment; must be in good standing.CPP primary goal: develop technical skills of IT staff to improve or focus on the overall service level of IT support services.Physical DemandsSitting, talking, hearing, seeing, standing, walking, driving, bending, reaching, twisting, pushing, pulling.Using hands and fingers to operate office equipment and machines.Occasionally lift or move objects up to and including25 pounds .Working ConditionsPrimarily office setting or a well-lighted, temperature-controlled working environment.EquipmentUse tools and equipment approved by agencies and bodies with authority over design ranges/limitations; comply with those limits.Equipment may include multi-line telephone, computers, computer peripherals, printers, fax machines, copiers, scanners, and vehicles.Notes:This job description is not exhaustive; City management can alter it at any time without notice. The document does not create an employment contract and reflects an at-will relationship.#J-18808-Ljbffr