POSITION SUMMARY:

The Network Security Analyst designs, implements and supports a network and voice infrastructure that provides secure, reliable communications for TCEC's information systems and employees across multiple locations.

RESPONSIBILITIES:

1. Administration and support of secure LAN, WAN, DMZ, Voice, Advanced Metering Infrastructure (AMI), and WLAN networks.

1. Configuring and installing various network devices and services (e.g. software defined networking, routers, switches, NGFW's, DMZ's, VPN, wireless, etc.)

1. Monitor network intrusion detection (NIDS) events from the security information and event management (SIEM) to ensure consistent and continued protection of the cooperative network.

1. Architect network solutions for new sites and projects that meets the performance, security and resiliency needs of the Cooperative.

1. Assists in the identification, handling and resolution of cyber security incidents.

1. Works with our SCADA Administrator and G&T network engineers on the SCADA network and firewalls as needed.

1. Responsible for assisting in the deployment and support of network & security hardware associated with the Cooperative's AMI fiber ring network.

1. Maintaining network diagrams and documentation of what you build and change

1. Configure, extend, and develop VLAN's for compliance and security requirements

1. Performing activities needed to achieve and demonstrate regulatory compliance with security standards such as PCI and NERC CIP.

1. Performing networking maintenance and system upgrades including service packs, patches, hot fixes and security configurations.

1. Monitoring performance and ensuring system availability and reliability

1. Providing level 2-3 support and troubleshooting to resolve issues

1. Install, maintain and provide support for video conferencing hardware

1. Coordinate and Manage Contractor/Vendor services and support.

1. Performs change management and configuration activities, security controls testing, system baseline activities, vulnerability testing and analysis, and network traffic analysis to ensure system reliability and security.

1. Assist in vulnerability and penetration tests, identifying, defending against threats, and initiate mitigation responses.

1. Utilize risk management principles from established frameworks (NIST/CIS) to help improve cybersecurity performance and reduce risk across the Cooperative.

1. Assists in the development, implementation and review of security plans, policies and procedures.

1. Keeping abreast of the latest network security issues and briefing management of emerging threats including both general threats and those specifically targeting the electric sector and industrial control systems.

1. Assist in the development and testing of disaster recovery plans.

1. Work within budget for company projects and provide regular status updates to IT Infrastructure Manager.

1. Assist IT Infrastructure Manager in planning and budgeting for future needs of the Network and Cybersecurity infrastructure.

1. Complete all assigned work in an accurate, timely, and efficient manner.

1. All other duties as assigned by IT Infrastructure Manager.

PHYSICAL REQUIREMENTS:

1. Must be able to work in a general office environment, indoors, for eight hours or more at a time.

1. Must be able to be seated or standing for extended periods of time.

1. Must be able to communicate verbally both in person and over telecommunications.

1. Must be able to operate computer terminal (keyboard, mouse, monitor) effectively.

1. Must have 20/20 vision or ability to wear corrective lenses.

1. Must be able to lift 50lbs of equipment for short periods of time.

1. Must be able to work on limited space / cramped (cabling under office desks for workstations).
2. Must be able to bend/stoop for extended periods of time for various component installation/repair.

ESSENTIAL SKILLS:

1. Must be able to fluently read and speak the English language.

1. Must be able to cognitively understand, analyze, and interpret general mathematic properties (Ex: Add, Subtract, Multiply, Divide).

1. Must have basic skills in the Microsoft Office products to produce quality documents in Word, Excel, PowerPoint, and Visio.

1. Must be able to work in high stress environments.

1. Must be able to prioritize and manage workload, seeking IT Infrastructure Manager assistance as necessary.

1. Must be able to respond to urgent issues quickly, and other issues in a timely manner.

1. Must be able to troubleshoot technical issues.

1. Must be able to research for solutions to technical problems.

1. Must be able to present accurate information to members and co-workers.

1. Must be able to functionally operate a computer terminal, utilizing monitor, keyboard, and mouse.

1. Must be able to enter minimum 150 characters per minute on standard 10-key.

1. Must maintain strong written skills (grammar, punctuation, spelling).

1. Must be able to work cooperatively with other employees within the same office setting.

1. Must be able to work in a team environment.

1. Must abide by all corporate standards, policies, by-laws, and regulations.

EDUCATION/EXPERIENCE:

• Bachelor's Degree in a computer-related field, networking related certification (s) such as Cisco CCNA/CCNP, Juniper JNCIA/JNCIP, Aruba ACSA/ACSP or demonstrate comparable experience.
• Information Security certifications such as Security+, CISSP, CISA, CISM, GCIA, GCIH, and CEH.
• 5+ years of networking support experience with Cisco, Juniper, or Aruba networking solutions.

• 5+ years hands-on experience with LAN/WAN design and implementation.
• In-depth knowledge of dynamic IP routing protocols (MPLS, BGP, OSPF, EIGRP).
• Palo Alto / Cisco ASA firewall experience
• VoIP equipment and operation including Cisco Call Manager
• Knowledge and/or experience with Aruba Wireless controller technologies and wireless access points.

• Experience with Solarwinds Network Performance Monitor (NPM) or equivalent.
• Demonstrated ability to develop IT security standards and procedures
• Knowledge of national and international regulatory compliances and frameworks, such as the NIST Cybersecurity Framework, PCI, and NERC CIP