PG191184EP

No

Network Security Engineer

$110,000 - $130,000

Monday-Friday, 8AM-5PM

Raleigh, NC

Communication Technologies

The mission of Communication Technologies is to provide premier communication services to the entire NC State University community. The department provides communication services such as data, telephony, cable TV, video, and converged services such as IP Telephony and IP Video to over 34,000 students and approximately 8,000 faculty and staff.
Supporting this continuously growing academic population is a distributed enterprise data network that provides over 75,000 network access ports with connectivity to the Internet and Internet2, 12,000 phone lines, and 4,000 cable television outlets.

Communication Technologies (ComTech) is viewed as the telephony, cable television, and network service provider for the NC State University community and is responsible for designing, maintaining, and supporting the campus voice, video, and data network infrastructures and all associated components.

The primary purpose of the Network Security Engineer is to design and plan the direction of a secure robust, large scale enterprise network comprised of over 7000 access points and over 2000 network switches across two data centers . This includes creating firewall design standards for the entire campus while supporting and maintaining all firewalls for the entire network. This position works with other ComTech engineers and customers to troubleshoot and resolve complex security problems. This person is also responsible for annual budget planning around the security of the network by keeping track of license requirement for growth as well as equipment lifecycle.

The Network Security Engineer will design and implement a comprehensive secure firewalled network that protects the data of the various needs of faculty, staff and students across campus, statewide as well as connectivity to cloud services such as Amazon’s AWS, Google Cloud and Microsoft’s Azure. The person in this position is required to understand all aspects of security needs and how to implement them on the multiple physical firewalls consisting of many virtual firewalls. A strong knowledge of security standards such as PCI and NIST is required so that when designing and implementing new architectures, these standards are adhered to. This includes securing high profile environments such as NIST for government research, PCI for taking credit cards as well as HIPAA and FERPA environments. The person in this position will ensure that risks are evaluated against operational complexities.

This position will work with other IT groups across campus to assess their security needs and develop solutions to meet their security requirements to mitigate risks. While the underlying architecture is the same across campus, each group will have individual needs that need to be met. It is critical that the person in this position has a high degree of knowledge of how servers and services work in order to ask the right questions in order to develop the best security profile for that particular group.

The person in this position is required to have a broad knowledge base across multiple networking environments including wired and wireless networks as they will be consulted on how to troubleshoot these networks.

Other duties as assigned.

Entry level with Master’s degree or a Bachelor’s degree and 2 years of experience

• High degree of understanding of security protocols such as IPSec, VPN, TLS and SSL, how they interact with other pieces of the network to ensure that the overall environment is well protected from outside and inside threats.
• Keep abreast of security standards such as PCI, NIST, FERPA and HIPAA. As these standards are forever changing, it is imperative that this position keep up with new requirements to ensure that any necessary modifications to the environment are made.
• Strong knowledge of routing and switching concepts such as IPSec, TLS, SSL, MPLS, TCP/IP, Vlans, SNMP Management as well as the OSI model.
• Effective communication skills are required for this position in order to work with other ComTech staff, OIT staff and campus IT staff and faculty/staff and students. This position needs to be able to determine the best communication method based on the technical expertise for the person(s) they are working with so that design principles are understood and implemented and problems are resolved in an efficient manner.
• High degree of analytical skills. This means they need to understand all aspects of how applications work, network protocols, firewalls, load balancers and databases in order to troubleshoot complex performance issues. This position needs to be able to look at different types of data, such as packet captures, switch statistics and net flow data, then be able to recognize when things are outside of normal operating parameters.

N/A

Valid NC Driver’s License is required for this position.

Yes

No

09/27/2021

Open until filled

00103423

EHRA Non-Faculty

1.0

12 Month Recurring

Mandatory - Adverse Weather

Non Mandatory - Emergency Event

No

516001 - Communication Technologies

NC State University is an equal opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, gender identity, age, sexual orientation, genetic information, status as an individual with a disability, or status as a protected veteran.

If you have general questions about the application process, you may contact Human Resources at (919) 515-2135 or workatncstate@ncsu.edu. Individuals with disabilities requiring disability-related accommodations in the application and interview process, please call 919-515-3148.

Final candidates are subject to criminal & sex offender background checks. Some vacancies also require credit or motor vehicle checks. Degree(s) must be obtained prior to start date in order to meet qualifications and receive credit.

NC State University participates in E-Verify. Federal law requires all employers to verify the identity and employment eligibility of all persons hired to work in the United States.