Senior Network Analyst - Cybersecurity

Job Summary:

The primary purpose of the Senior Network Analyst - Cybersecurity is to perform complex technical and analytic work with a focus on Cybersecurity relating to the investigation, design, configuration, implementation and post-implementation review and ongoing maintenance of the data network, servers, storage and associated infrastructure. The Senior Network Analyst - Cybersecurity will design, configure, install, support, monitor and maintain cybersecurity systems related to VPL’s wired and wireless network infrastructure, servers and storage. Data, voice, video, and wireless network services are dependent on this infrastructure.

The Senior Network Analyst - Cybersecurity works with various departments to establish/install new services and connectivity to new sites. This includes the assessment of network equipment The incumbent is responsible for design and implementation of network infrastructure; design and implementation of the Library’s server and storage environment; ensuring IT security; participating in selection and then installation, configuration and maintenance of specific locally hosted platforms. This position has specific Cybersecurity duties and responsibilities, including planning, implementing, administering, maintaining, monitoring, and documenting IT security controls for all digital assets and processes. The incumbent has direct responsibility for designing and supporting operational procedures and tasks related to Cybersecurity and performed by other ITS staff.

Work is performed under supervision, with considerable independent judgement and action exercised in the analytical and technical aspects of the work. The more complex work or issues are carried out under the guidance of the Manager. This position may provide guidance and instruction to more junior members of the Network and Server Team.

This position will work with customers to complete needs assessments and has access to highly sensitive and business critical data from all Library departments.

This position has specific Cybersecurity duties, including:

• Implements Cybersecurity technologies to secure and protect services delivered to Library patrons and staff, supporting cost savings, financial responsibility and legal compliance.
• Monitors firewall logs, intrusion detection logs and other data collected by Library systems, which entails a detailed review of all pertinent traffic and transactions on any given system or network within the Library.
• Plan, implement, administer, maintain and monitor IT security controls for all digital assets and processes (network, hypervisor, endpoint, server, application, etc), including but not limited to: Vulnerability assessment, validation and remediation Firewalls, routing and switching equipment Intrusion Detection/Prevention Systems Anti-malware protection and management Remote Access Systems and VPN Identity and Access Management Systems and Directories Security incident management and response Data Loss Prevention Endpoint security (laptops, workstations, mobile devices) Network Security (Wired & Wireless) Application Security Operating system hardening Managed file transfer Logging and monitoring systems (SIEM) Network segmentation System forensics Multi-factor authentication Mobile device management User and system administration
• Provides tactical technical advice and consultation to Library project teams and provides assistance with the adoption of Cybersecurity technology
• Remains current with developments in Cybersecurity and recommends new approaches and application of new technology which will assist the Library to meet its business objectives
• Delivers educational security awareness framework for Library staff, both business and technical, including multi-channel approaches.
• Takes a lead role in the technical response to cybersecurity incidents, including direction of other team members involved in the response

Job Requirements:

Education/Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent training and experience related to the work.
• Current certification in technologies and practices related to the job: CISCO network certifications, MCSA, MCITP or MCSE, VMWare Certified professional, CompTIA.

Experience:

• Minimum 3 years related data network and infrastructure management experience
• Minimum 1 year PCI implementation related experience
• Minimum 1 year supervisory experience
• Extensive Cisco experience and related Cisco training is desirable
• Experience working in the Public sector is an asset.
• IT security certification is an asset.
• Networking certification in the technologies being supported is an asset.
• Microsoft certification is an asset.

Knowledge, Skills & Abilities:

• Considerable knowledge of current cybersecurity standards & technologies.
• Considerable knowledge of industry standard best practices in installing, configuring, supporting and securing
• Thorough knowledge of monitoring and reporting tools
• Thorough knowledge of server technology and software
• Considerable knowledge of integrated library software systems
• Thorough knowledge of system integration between business applications and across technical platforms
• Thorough knowledge of network and communications hardware such as routers, bridges, switches, Firewalls,
• Thorough knowledge of server operations, functions and procedures
• Experience with Microsoft Server, Microsoft SQL server; Linux
• Thorough knowledge of storage operations, functions and procedures
• Thorough knowledge of VPN's, communications software and protocols such as TCP/IP, GRE Tunnelling, VRF, xDSL, T1, 802.11x, OSPF, BGP and EIGRP
• Experience with DMZ
• Familiar with strong cryptography and security protocols to safeguard sensitive cardholder data during transmission
• Familiar with time synchronization technology

A current and valid Class 5 BC drivers licence is also a requirement of this position.

A Police Information Check (Vulnerable Sector) is a requirement of this position. As a designated Position of Trust, this must be renewed every 5 years