If you are an Internal City Employee, Retiree or Dependent/Survivor of a City Employee please apply internally via Career Icon in your Workday account.

Make a difference in the community you live in! As a Community Builder—an employee with the City of Gainesville— you will have a direct hand in building and improving your community and making a visible impact on the lives of your neighbors. Working for local government is more than a job, it’s a chance to contribute to community success and to help enhance the Gainesville way of life.

Department:

1330 GRU - Systems Control/Technical Support

Salary Range Minimum:

$68,979.59

Salary Range Maximum:

$105,083.94

Closing Date:

05/27/2025

Job Details:

This position is responsible for the administration and monitoring of next-generation firewalls, Security Information and Event Management (SIEM) systems, Intrusion Detection/Prevention Systems (IDS/IPS), and OT network components within critical utility environments. The ideal candidate will have hands-on experience with OT security tools and protocols, an understanding of Purdue model segmentation, and the ability to work collaboratively with IT and compliance teams to ensure secure and resilient operations. This role plays a key part in supporting the protection of OT systems, regulatory compliance, and the overall cybersecurity posture of the utility’s OT infrastructure.

Job Description:

SUMMARY

This position performs advanced, complex technical and analytical work to support a robust multi-facility SmartGrid environment.  Work is performed on-site and off-site in a secure, monitored environment 24/7/365.  This role supports the reliability, cybersecurity, and regulatory compliance of the bulk electric system, real-time operational systems including SCADA, ICCP, virtualization, and secure communication paths necessary to deliver energy services. Work requires a key technical expert supporting design, security, administration and optimization of Operational Technology and systems supporting critical infrastructure.

This position requires exceptional expertise in network engineering, system administration and cybersecurity within an energy utility or critical infrastructure environment. The incumbent will lead high-impact projects, improve system resilience, and drive adherence to compliance with NERC CIP, NIST and other industry standards while working under minimal supervision. Work in this class is distinguished from higher classes by its lack of supervisory and design responsibility, and from lower classes by its advanced technical and analytical knowledge and skill in communication/data networks, virtual infrastructure and system security monitoring software.

EXAMPLES OF WORK**

**This section of the job description is not intended to be a comprehensive list of duties and responsibilities of the position.  The omission of a specific job function does not absolve an employee from being required to perform additional tasks incidental to or inherent in the job.  Performance of lower-level duties may be required.

ESSENTIAL JOB FUNCTIONS

Depending on area of assignment, incumbents will have skillsets in one or more of the following areas:

Design, implement, and optimize high-availability network architecture (LAN, WAN, VLAN, SD-WAN, and wireless), firewalls, VPNs, intrusion detection systems (IDS/IPS), and segmentation strategies to secure OT environments and maintain real-time communications.

Communicates network security policies and procedures required for regulatory compliance, to end users, control room operators and remote facility staff. 

Design, install, configure, administer, monitor and optimize server infrastructure, including redundant and highly available virtualized environments, cloud-based solutions, Windows and Linux servers, databases, and storage supporting SCADA and other OT applications in a Critical Infrastructure Protection (CIP) environment.

Creates, maintains, removes and audits physical and electronic access to NERC CIP environments.

Utilize regulatory and industry standards, frameworks (NERC CIP, NIST 800-53, and DOE C2M2), to identify capabilities and technologies needed to provide enhanced cyber defenses.

Conduct penetration tests, vulnerability scans, risk assessments, and regular audits to protect OT assets and provide recommendations and plans to mitigate identified concerns.

Lead the development, execution and testing of incident response (IR), disaster recovery (DR) and business continuity (BCP) plans. Provide subject matter expertise during cyber incidents, response and remediation.

Work closely with System Contr