Network & Systems Security Analyst, CISCO & SCADA Focus, Progression

Title: Network & Systems Security Analyst, CISCO & SCADA Focus, Progression    
Company: Tampa Electric Company
Location: Ybor Data Center    
State and City: Florida    -  Ybor City
Shift: 8 Hr. X 5 Days  

Hiring Manager: Jason W Gumto   

Recruiter: Mark E Koener    

 

 

TITLE:    Network & Systems Security Analyst, CISCO & SCADA Focus, Progression
PERFORMANCE COACH:     Mgr Network Engineering & Cyber Security Operations
COMPANY:    Tampa Electric
DEPARTMENT:    High Performance Computing & BP Support

FOCUS AREAS
•    Support/Patch Cisco network equipment devices in a SCADA enviorment.
•    Report monthly on NERC check for Cisco SCADA equipment. 
•    Configure and install Cisco Network equipment.

POSITION CONCEPT

The Network & Systems Security Analyst is responsible for planning/designing, implementing, and supporting new and existing network, server, storage infrastructure. This role is also responsible for ensuring all network security controls (i.e., firewalls, web application firewalls [WAF], proxies, network segmentation, NAC, ACLs, etc.) are implemented and managed per corporate information security standards. Additionally, responsibilities include assessing enterprise assets and critical assets for secure configurations and maintaining and enforcing regulations and standards such as NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), and Payment Card Industry (PCI).

Responsible for the design, planning, operation, maintenance, and support of the TECO and NMGC network infrastructure. This includes primary accountability for network technologies such as route/switch, on-premise LAN/WAN, IPAM, Wi-Fi, ISP management, site-to-site VPNs, proxies (forward and reverse), perimeter firewall management, DNS, Azure cloud environments, automation, NAC/user access, hyperconverged infrastructure, and overall network security. Partners with the Telecommunication teams on establishing/upgrading existing circuits/communication links. Responsible for the NERC Cyber Infrastructure Protection and disaster recovery plans.

Responsible for VoIP, SIP, DHCP, DNS, TCP/IP routing and routing protocols such as OSPF and BGP, binary mathematics, NAT, PAT, IPsec and SSL VPN technologies, GRE tunneling, route redistribution, traffic shaping, port-level filtering, SD-WAN, MPLS and other communications related technologies. Responsible for the installation, configuration, and maintenance of all WAN and LAN connectivity which includes core and campus switches, routers, firewalls, wireless access points, WAN scalers and load balancer technologies. Responsible for the design, installation, configuration, and maintenance of DNP over IP and serial SCADA communications between the primary and backup control centers, power plants, solar sites, and substations. Responsible for the configuration and maintenance of Smart GRID communication hardware switches and routers between the primary and backup control centers.

 

NETWORK & SYSTEMS SECURITY ANALYST I (LEVEL 1) 
Monitors and troubleshoots server, network, and security controls related problems and failures; and installs and configures hardware/software. Works under direct supervision.

 

PRIMARY DUTIES AND RESPONSIBILITIES

1.    Plan, design, and implement network, server, and storage infrastructure based on project requirements, capacity plans, and system support. (20%)

2.    Problem solving involves basic troubleshooting following the OSI (Open Systems Interconnection) model, making or calling for equipment repairs, and problem escalation. (20%)

3.    Detection and correction of work stoppages and/or errors are accomplished by monitoring systems and changing configurations, as necessary. (20%)

4.    Install and support network, server, and storage hardware and software. (10%)

5.    Direct participation in the planning and designing, maintenance, testing and documentation of the company’s disaster recovery plans are vital. (10%)

6.    Provide and apply appropriate security consulting and support for IT infrastructure across multiple platforms (Firewalls, proxies, WAFs, ACLs, NAC, Operating Systems, NetScaler load balancers, DDoS protection, and other network devices). (10%)

7.    Provide third-level technical support for security systems and authentication mechanisms on all operating system platforms. (10%).

 

QUALIFICATIONS
EDUCATION  
Required:    High School Diploma or GED    

Preferred:     Bachelor’s degree in Computer Science, Engineering, Math, or equivalent IT discipline (e.g., MIS).