IT SECURITY NETWORK ADMINISTRATOR (ON-SITE) in Espanola, New Mexico at Santa Clara Development Corporation

SUMMARY:

Under the general direction of the IT Manager the IT Security Network Administrator is responsible for the administration, security, monitoring, maintenance, and optimization of the organization's network and network-security infrastructure. This position combines traditional network administration responsibilities with a strong emphasis on cybersecurity, network access controls, firewall administration, network segmentation, threat monitoring, vulnerability remediation, and secure infrastructure operations.

The position works closely with IT leadership, systems administrators, cybersecurity personnel, vendors, and business stakeholders to maintain a secure, reliable, and resilient network infrastructure.

The IT Security Network Administrator will be expected to operate proactively, identify security and infrastructure risks, investigate abnormal network activity, implement appropriate controls, and maintain accurate documentation of network and security configurations.

ESSENTIAL DUTIES AND RESPONSIBILITIES include the following:

• Administer and maintain LAN, WAN, wireless, VPN, Internet, and related network infrastructure.
• Configure and maintain switches, routers, firewalls, wireless infrastructure, VPN systems, and network-management platforms.
• Administer VLANs, routing, switching, DNS, DHCP, IP addressing, and related network services.
• Monitor network performance, availability, capacity, and utilization.
• Troubleshoot network connectivity, performance, routing, switching, wireless, and VPN issues.
• Maintain network configurations in accordance with organizational standards.
• Perform network upgrades, configuration changes, and infrastructure maintenance.
• Participate in scheduled and emergency maintenance activities.
• Administer and maintain firewalls, network security appliances, VPN infrastructure, and related security technologies.
• Implement network segmentation and access-control policies.
• Manage secure remote-access technologies and associated authentication requirements.
• Review firewall rules and network-access permissions for appropriateness and continued business need.
• Monitor network traffic and security events for suspicious or anomalous activity.
• Identify and address network-security weaknesses and misconfigurations.
• Implement security hardening standards for network infrastructure.
• Support the organization's vulnerability-management and remediation programs.
• Assist with security assessments, audits, and compliance activities involving network infrastructure.
• Maintain current documentation of security controls and network-security architecture.
• Monitor network and security-management systems for indicators of compromise, unauthorized access, abnormal activity, and policy violations.
• Investigate network-security alerts and incidents. Including completion of IT Security Incident report with supporting documentation to provide over to IT Management.
• Assist with containment, remediation, and recovery of network-related security incidents.

• Coordinate with IT staff and appropriate organizational personnel during cybersecurity incidents.
• Preserve appropriate technical information and documentation associated with security investigations.
• Participate in post-incident reviews and recommend improvements to prevent recurrence.
• Escalate significant security events in accordance with organizational procedures.
• Support network access-control technologies and associated authentication systems.
• Administer network-related users, device, and administrative access.
• Apply least privilege principles to network and security infrastructure.
• Review privileged access to network devices and security systems.
• Support implementation and maintenance of multi-factor authentication for network-access services where applicable.
• Assist with access reviews and removal of unnecessary or obsolete access.
• Evaluate network infrastructure for security vulnerabilities and configuration weaknesses.
• Maintain secure configurations for routers, switches, firewalls, wireless controllers’/access points, and other network devices.
• Coordinate operating-system and firmware updates for network infrastructure.
• Track network-device lifecycle and identify equipment that presents operational or security risks.
• Assist with development and maintenance of network-security standards.
• Identify single points of failure and security weaknesses within the network architecture.
• Support business continuity and disaster-recovery planning for network infrastructure.
• Maintain accurate network diagrams, device inventories, IP addressing documentation, firewall documentation, and configuration records.
• Document network-security policies, procedures, and standards.
• Maintain records of network and firewall changes.
• Follow established change-management processes.
• Develop and maintain technical procedures for network administration and security operations.
• Ensure critical network knowledge is documented and accessible to the appropriate IT personnel.
• Work with Internet, telecommunications, managed-security, hardware, software, and other technology vendors.
• Coordinate vendor troubleshooting and technical support.
• Assist in evaluating network-security products and services.
• Review vendor recommendations and determine applicability to organizational requirements.
• Participate in implementation and acceptance of network-security technologies and services.
• Provide advanced technical support for network and security-related issues.
• Work with systems administrators and application teams to resolve connectivity and security issues.
• Assist departments with secure connectivity requirements.
• Communicate technical and security issues to nontechnical stakeholders in understandable terms.
• Provide recommendations to IT leadership concerning network security, infrastructure risks, and technology improvements.

• Diagnoses, resolves, and documents, hardware and software network problems in a timely and accurate manner and provides end user training and support where required in accordance with the SCDC mission, vision, and core values.
• Manage assigned projects and program components to deliver services in accordance with established objectives using project management standards such as Agil, PMP, etc.
• Provide reports and updates on network performance, system outages, and maintenance activities to management.
• Maintain detailed documentation of network configurations, issues, and resolutions.
• Ensure all network equipment and communication software is properly licensed.
• Proactively monitors and maintains intrusion detection systems to identify and neutralize network security threats.
• Ensures compliance of all assigned systems with applicable regulatory frameworks.
• Aids the IT Systems Administrator in administration and maintenance of applications and storage infrastructure including, but not limited to DNS, DHCP, AD, VMware, SANs.
• Provides second-level technical support to users concerning network system operations escalated by other IT department staff.
• Supports the IT Team in the installation, maintenance, and troubleshooting of Enterprise and Desktop hardware and software.
• Provides backup support for IT team members, including the handling of all incoming support calls, emails and walk-ins as required to maintain department SLAs.
• Performs other duties as assigned.
• 24/7/365 Availability, Rotating Schedules, and Overtime Required as needed to work odd hours to accommodate projects, system maintenance, critical issues, emergencies, etc.
• Participate in the regular on call after hours IT support schedule.

ADDITIONAL SKILLS AND ABILITIES

The essential mental functions described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Maintains a strict level of confidentiality regarding company information.
• Strong organizational skills.
• Knowledgeable of networking concepts such as TCP/IP, DNS, DHCP, and VPNs.
• Knowledgeable of telephony systems (VoIP, PBX, etc.)
• Knowledgeable of server operating systems (Windows, Linux) and virtualization.
• Familiarity with working with regulatory compliance governance.
• Ability to analyze network performance and implement improvements.
• Ability to communicate technical information clearly to non-technical staff.
• Demonstrated ability to learn new systems, software, and communication platforms through a combination of self-study, on-the-job training, and vendor-led coursework.
• Demonstrated understanding of Information Security topics related to providing secure, robust communication systems.

• Strong analytical and organizational skills.
• Ability to work and collaborate effectively in a small-team setting.
• Proven ability to provide outstanding customer service.
• Must have excellent problem-solving abilities.
• Must be a detail oriented, organized individual with the ability to multi-task.
• Must be able to work in a fast-paced environment.
• Must be able to deal with stressful situations in a professional manner.
• Must be a Team Player.
• Display strong verbal and written communication skills
• Proven ability to handle conflict situations.

EDUCATION / EXPERIENCE

• Associate degree in Computer Science or related field, and two years’ hands on network engineering experience in an enterprise environment required; or equivalent combination of education, training, and experience.
• Preferred: Bachelor’s degree in information technology, Cybersecurity, Computer Science, Network Engineering, Information Systems, or a related technical discipline.
• 3–5+ years of progressively responsible experience in network administration, network security, cybersecurity, infrastructure administration, or a related field.
• Demonstrated experience administering enterprise network infrastructure.
• Strong knowledge of TCP/IP, routing, switching, VLANs, DNS, DHCP, VPN, and wireless networking.
• Experience administering or supporting enterprise firewalls and network-security technologies.
• Experience with network monitoring and troubleshooting.
• Understanding of common network-security principles, vulnerabilities, and attack methods.
• Ability to troubleshoot complex network and security issues independently.
• Strong written and verbal communication skills.
• Ability to manage multiple priorities and work effectively in a business environment.
• CCNA or equivalent mix of education, training, and experienced required.
• Knowledge of network security administration includes the effective use of firewalls, intrusion detection tools, and network monitoring suites.
• Knowledge of Microsoft Operating systems; Windows 11 to present version.
• Knowledge on Microsoft Windows Server 2012 to present version.
• Knowledge on network design principles and practices including administration of VLANs and routers in complex and security conscious network.
• Excellent communication skills and experience effectively communicating with technical and non-technical audiences.
• Demonstrated efficient and effective use of research, analytical, problem-solving and task prioritization skills to solve complex computing service incidents, problems & requests as required.
• Knowledge of applicable Santa Clara Pueblo Gaming and Regulatory Commission.
• Excellent written, oral, interpersonal communication & MS Office skills.
• Highly self-motivated and directed, with keen attention to detail and sense of initiative.
• Able to prioritize and execute tasks in a high-pressure environment.
• Strong customer service orientation.
• Ability to work in a team-oriented, collaborative environment.

TECHNICAL EXPERTISE:

Three to five (3-5) years’ hands-on administration experience with Windows Server 2012 to current year required, Unix/Linux administration preferred, and Microsoft Desktop support.

Windows Server Components; Active Directory, DHCP, DNS, Group Policies controls.

Server virtualization, VMware vSphere 7.0 to current support version preferred.

Microsoft Communication and Collaboration products; Office 365 Exchange and SharePoint configuration & administration a plus.

Remote server and system administration tools.

Database administration; SQL Server of current supported version.

Fiber Channel or iSCSI SAN solutions and Blade Systems infrastructure.

Experience with data center infrastructure including UPS management.

Cisco networking experiences a plus.

ADDITIONAL SKILLS AND ABILITIES:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Strong personal credibility with demonstrated ability to build trusted relationships with client groups.

Responsible for maintaining a consistent, regular attendance record.

LANGUAGE SKILLS:

Ability to read, analyze, and interpret simple documents such as safety rules and regulations, technical procedure manuals, instructions, basic correspondence, email, reports, and memos.

REASONING ABILITY:

Ability to apply commonsense understanding to carry out instructions furnished in written, oral, or diagram form and to deal with problems involving several concrete variables in standardized situations.

PHYSICAL DEMANDS / WORK ENVIRONMENT:

The physical demands and work environment described here are representative of those that must be met by an Employee to successfully perform the essential functions of this job.

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Ability to work at network equipment locations, telecommunications rooms, server rooms, data centers, and other infrastructure locations as required.

Ability to lift and move networking and related equipment within reasonable job requirements.

May require occasional after-hours work, scheduled maintenance, or participation in an on-call rotation.

May be required to respond to critical network or cybersecurity incidents outside normal business hours.

The Employee is frequently required to lift and/or move up to 50 pounds.

The Employee is frequently required to risk danger of electrical shock and/or radiation (from computers, networking components, wireless components).

The noise level in the work environment is usually moderate. When on the casino floor the noise level increases to loud.

Employee is exposed to second hand cigarette smoke.

Levels of interaction:

• Face-to-face / in person: High level of interaction with other employees, high with guests and vendors.
• Telephone interaction: High level of interaction with employees, vendors and guests.