Principal Purpose of Position:

• Examines design and operational effectiveness of Firewalls and Intrusion Detection Systems
• Performs existing firewall rule review and optimization
• Documents key network communications thru firewalls
• Upgrades and installs new Cisco Firewall and Intrusion Detection technology
• Assists with design of new internal network topology, flows, and planned system isolation using firewalls
• Performs daily network security operations duties including handling service requests associated with firewall rule changes, network intrusion detection signature updates, and Cisco ASA software upgrades
• Updates standard operating procedures and as-built documentation
• Provides network security technical assistance for IT projects intended to enable or advance business initiatives

% of time Accountability/Activities Impact/Results Expected

• 70% Perform project related firewall/NIDS design and deployment Successful upgrade and installation of security infrastructure (firewalls and IDS)
• 20% Assist with daily network security operations post-change Ensure minimum disruption as a result of firewall and intrusion detection change
• 10% Assist with efforts to improve control design, operational effectiveness, and service delivery quality Lower likelihood of harm from cyber-attack and compliance failure