Minimum Qualifications Minimum Qualifications
Technical School for Computer Networking Systems or Associates degree in Computer Science or related fields plus seven years of relevant hands-on experience with: leading network architecture design that spans multiple locations, network performance & security management, MPLS support and ELAN configuration, network infrastructure maintenance. Professional experience with all aspects of the administration and monitoring of TCP/IP based LAN/WAN networks and their relational components required. Knowledge of VPN setup is required. Two years supervisory experience or the successful completion of a designated supervisor training during probationary period.
Experience with network segmentation design and implementation.
Experience with VOIP communication and Quality of Service configuration.
Experience with wireless network design and implementation.
Experience with supporting cloud hosted applications.
Experience with identifying and remediating vulnerabilities in the network.
Full working knowledge of all routing protocols and ACLs.
Other combinations of education and experience may be considered.
Bachelor's degree in Computer Science or a related field plus five years relevant hands-on experience with: distributed network management and cloud network systems and two years supervisory experience or the successful completion of a designated supervisor training during probationary period.
Experience with Firewall, IPS and IDS configuration.
Experience with VPN configuration.
Experience with performing network penetration testing and analyzing the results.
Advanced knowledge of and skills working with network hardware and software.
Ability to work independently and take greater responsibility for network support is critical to this position.
Capability to analyze business and security needs, and design network solutions.
Ability to troubleshoot complex issues related to DASNY’s network including application and server interaction and system integration.
Demonstrated analytical, conceptual, and problem-solving skills.
Excellent oral, written and listening communications skills, including the ability to relate technical information to non-technical people.
Strong interpersonal skills.
Demonstrated organizational skills and ability to prioritize.
Demonstrated ability to read, understand and interpret technical and procedural manuals.
Duties Description Primary Purpose
The Network and Security Manager (“NSM”) is responsible for planning, designing, directing, implementing, maintaining, resolving production issues, and coordinating all aspects of network installation, maintenance, operations, and identifying risk factors and developing adequate security response plans, evaluating the efficacy of current and future safety measures. The NSM oversees DASNY’s enterprise wired and wireless networks that span across multiple data centers and field offices located within NY State. The NSM oversees the recruiting, leading, and mentoring of teams of Network Engineers. Through analytical, leadership and problem-solving skills, in coordination with the Chief Information Security Officer, the NSM oversees the availability and integrity of the network and systems infrastructure.
Lead Information Security and Network Engineering teams in analysis, design, review, and approval of network infrastructure changes that satisfy the overall security and network performance, and reliability of DASNY systems with the objective goal to support the business needs.
Lead network and cybersecurity projects and make recommendations on technology changes.
Lead and facilitate stakeholders' participation in technical network and cyber security meetings, presentations, trainings, seminars, etc., to foster information-sharing and enhance awareness.
Lead the applicable use of all tools to troubleshoot and resolve complex production network issues.
Lead daily configurations and oversight of firewall and Virtual Private Network components.
Manage all coordination and rapport with internet and network services providers to remediate issues.
Design, build, and support enterprise network upgrades. Implement and support network changes including routing and equipment upgrade / replacement.
Design and implement VOIP communication and Quality of Service configuration, working directly with the telephony group.
Design and implement network access between DASNY offices, including the evaluation, selection, and implementation of new network technologies where applicable.
Design and implement enhancements to the enterprise network to support business needs.
Develop a schedule for and implement network and security firmware upgrades. Plan for and implement hardware replacement according to equipment lifecycles. Maintain hardware inventory and participate in infrastructure asset management and proper equipment disposal.
Develop and maintain baseline security configurations for DASNY supported systems that include (but are not limited to) firewall, networking, WI-FI, and client computing devices.
Develop, manage, and oversee one or more cyber security technical systems (firewalls, anti-malware programs, encryption software, etc.).
Configure and support current network technologies including ELAN, MPLS, Broadband, Cellular, and Virtual Private Networks connecting multiple offices.
Oversee the development and dissemination of actionable strategic, technical, and tactical network and cyber information and intelligence through status reporting, metrics or ad hoc reports, briefings, and presentations.
Analyze requirements, design, and implement wireless network solutions. Support and upgrade current wireless network configuration.
Deliver outstanding customer service to on-site and remote users.
Support server & storage administration, application development, and application support teams in all projects from their design to implementation.
Manage network and systems security. Identify and remediate vulnerabilities in the network.
Perform as a subject matter expert and resource in area of network and cyber security, assisting other IS department staff and DASNY users with system knowledge and problem resolution.
Perform in the capacity as a subject matter expert and resource in area of network, assisting other IS department staff and DASNY users with system knowledge and problem resolution.
Perform feasibility studies and cost benefit analysis based on facts gathered about current or proposed network enhancements to address business needs.
Evaluate network & security settings of existing application, infrastructure, and network components.
Effectively communicate network and cyber security details and technical analysis to IT and business teams within DASNY.
Collect, analyze, and report on technical network and cyber security issues and emerging trends impacting government entities.
Identify and recommend technical programs and products to improve DASNY’s network and cyber maturity posture.
Understand system interactions across the network and be able to work with the end user and other infrastructure and development teams to improve or resolve operational issues.
Schedule and plan required system outages to create minimal disruption of systems for DASNY users.
Administer network performance and set baseline metrics including bandwidth usage, throughput, latency, packet loss, availability, and connectivity. Implement proactive controls to minimize impact to business operations.
Review, approve, and follow internal change processes for all requesting changes to infrastructure systems and networks.
Approve, oversee, and maintain documentation on network architecture.
Maintain hardware, software specifications, and vendor contact information.
Maintain current knowledge of NYS ITS and security industry policies and procedures and make recommendations for changes and/or updates to DASNY Policies and Procedures.
Maintain current knowledge of industry standards and make recommendations for changes and/or updates to network architecture and equipment based on the organization’s overall mission and strategic plan.
Project and anticipate network equipment need. Develop roadmaps for the technical resources and applications owned by DASNY. Manage the life cycle of network infrastructure.
Manage the budget for the purchase, upkeep, repair, and timely replacement of network and firewall equipment.
Oversee drafting of incident reports ensuring reports are both technically accurate and well-written.
Liaise with cyber security industry experts to maintain knowledge of cyber trends and techniques, with specific focus on Critical Infrastructure.
Meet with lead field staffs on a regular basis to discuss business needs and plan for approved changes.
Provide technical expertise and leadership for staff and project teams. Mentor junior network engineers and provide technical assistance.
Work directly with external vendors on technical solutions to enhance network and security controls.
Work directly with external stakeholders (e.g., MS-ISACA, NYS ITS Cyber Comment Center, etc.) representing DASNY in evaluating and addressing a potential or actual cyber incident.
Participate in disaster recovery planning, testing and execution.
Other Duties and Responsibilities
Respond, assess, and evaluate emergency security incidents or disasters, as required.
Provide advice to applications development, security, technical operations, or end-user personnel relating to network scalability, security, and quality of service.
Participate in the completion and follow up of requests for proposal; as needed, participate in the evaluation of responses, participate in vendor contract negotiations, and work with others responsible for contract development.
Work closely with the Chief Information Security Officer to identify and apply appropriate security controls for user access to business information and submit updates to the disaster recovery plan when system changes occur.
Maintain current knowledge of network hardware/software products and trends in the technology industry.
Contribute to budget preparation, planning and management for the above functions.
Assess, develop, and implement internal controls, and oversee the review and testing of same.
Assist Management in the development of policies.
Develop, document, and implement procedures.
Undertake special assignments as directed.
Must maintain regular attendance in accordance with DASNY attendance and leave policies.
Must adhere to the NYS Information Security Policy Standards established and issued by the Office of Cyber Security and Critical Infrastructure Coordination. (Standards can be found on the Intranet and NY State ITS sites).
Supervision of employees is required.
Frequent travel is required, using public transportation, rental vehicle, DASNY vehicle or personal vehicle. This travel may include overnight stays at public accommodations and related establishments. This position requires complex and time-pressured decision-making and availability to work a modified work schedule or extended workday hours. May require physical mobility (movement from place to place) and exposure to heights (climbing ladders, scaffolding, etc.). Must be able to lift up to fifty pounds.
Standard office environment, including the use of one or more of the following: PC, telephone, fax machine, printer, copier, electronic stapler/hole punch/date stamp, shredder.
Additional Comments DASNY provides financing and construction services to public and private universities, not-for-profit healthcare facilities, and other institutions which serve the public good.
We offer a comprehensive benefits plan, which includes:
• Choice of several health insurance plans
• Dental & vision insurance
• Membership in the NYS Retirement System
• Deferred Compensation Investment Plan
• 13 vacation days per year
• 13 sick days per year
• 5 days of personal leave per year
• 12 paid holidays per year
• Tuition reimbursement
• Training & development opportunities
Some positions may require additional credentials or a background check to verify your identity.
Notes on ApplyingPlease copy and paste the link to your browser to apply:
DASNY is an Equal Employment Opportunity employer committed to excellence and diversity.
All qualified candidates are encouraged to apply.