The Network Security Engineer serves as an individual contributor within DCTA's Innovation & Information Technology department. This position is responsible for the administration, security, and operational integrity of DCTA's enterprise network infrastructure, cybersecurity systems, and business applications. The role works alongside the Systems Administrator as a technical peer, with a primary focus on network engineering, security operations, and application support. This position reports to the Director of Information Technology and Cybersecurity.
ESSENTIAL FUNCTIONS
The following duties are standard for this position. The omission of specific statements of duties does not exclude them from the classification if the work is similar, related, or a logical assignment for this classification.
Administers DCTA's layer 3 fiber optic networks, including the design, configuration, monitoring, and maintenance of switches, routers, firewalls, and related network hardware across all DCTA facilities and operational environments.
Manages VLAN segmentation, routing protocols, access control lists, and network policies to ensure performance, availability, and security across DCTA's wired and wireless environments.
Administers and maintains DCTA's wireless infrastructure across facilities and fleet vehicles, ensuring reliable connectivity for both IT and operational technology systems in coordination with operations and other IT staff.
Deploys, configures, and manages network monitoring tools to proactively identify performance degradation, outages, and security anomalies across DCTA's network environment.
Manages secured vendor access to internal and external network systems in alignment with DCTA's IT Cybersecurity Policy, including access provisioning, monitoring, and revocation.
Plans and executes network capacity assessments, infrastructure upgrades, and technology refresh cycles to ensure DCTA's network environment supports current and future operational requirements.
Administers and configures DCTA's cybersecurity toolset, including but not limited to identity security, identity and access management, application control, and endpoint protection platforms - serving as a subject matter expert in coordination with the Systems Administrator.
Manages firewall rule sets, intrusion detection/prevention policies, and network access controls to protect DCTA's internal and external-facing systems from unauthorized access and threats.
Implements, monitors, and enforces DCTA's IT security policies across network, application, and end-user environments, ensuring organizational compliance and end-user adherence. This includes monitoring, investigating, and responding to security events, alerts, and potential incidents across DCTA's network and application environments.
Supports DCTA's cybersecurity posture through vulnerability assessments, remediation tracking, and coordination with the Director of IT and Cybersecurity on risk management activities.
Works alongside the Systems Administrator as a senior technical peer, providing cross-functional coverage and shared expertise across infrastructure, network, and security domains to ensure operational continuity within a small, high-responsibility team.
Serves as an escalation point for helpdesk and OT helpdesk staff on network, security, and application-related issues.
SUPERVISORY RESPONSIBILITIES
None