IT Network Security Engineer

Design, implement, and operate network security controls to protect organizational infrastructure from cyber threats and unauthorized access.

Responsibilities

• Review security management reports and coordinate third-party security functions.
• Identify gaps in network design and assess control operating effectiveness; recommend opportunities for continuous improvement.
• Stay current on industry trends and evaluate new network security technologies.
• Configure and manage secure network architectures across on-premises, cloud, and hybrid environments.
• Architect and deploy secure network solutions including Next-Gen Firewalls (NGFW), VPNs, IDS/IPS, and Web Content Filters.
• Serve as a technical lead during security breaches or network outages; perform root cause analysis and rapid remediation.
• Conduct regular network scans and penetration tests to identify weaknesses; oversee hardening of network devices.
• Use SIEM tools to monitor traffic patterns and automate response.
• Ensure network infrastructure meets industry standards including NERC CIP, CJIS, PCI, etc.
• Understand and apply information security administration, management, governance, and compliance requirements; respond to auditor and regulator comments and mitigate identified risks.
• Provide guidance and technical support to IT staff and end users on security-related matters.
• Perform related duties as required.

Requirements

• Bachelor’s degree (preferably Computer Science, MIS, Information Technology, or similar) plus at least 4 years of related work experience; or Master’s degree plus at least 2 years of related work experience.
• Familiarity with cloud security platforms such as Azure, AWS, or Google Cloud.
• Preferred: experience supporting public sector, enterprise, or highly regulated environments.
• Knowledge of applicable information security administration, management, governance, and compliance principles, practices, laws, rules, and regulations.
• Knowledge of cybersecurity standard frameworks, controls, technology, and solutions.
• Knowledge of IT systems and processes, network infrastructure, data architecture, data processes, and protocols.
• Deep understanding of TCP/IP, BGP, OSPF, DNS, and TLS/SSL.
• Hands-on experience with vendors such as Palo Alto Networks, Fortinet, Cisco ASA/Firepower, or Check Point.
• Proficiency in securing hybrid environments (e.g., AWS VPCs, Azure VNETs, Google Cloud Armor).
• Strong knowledge of IPsec, SSL VPNs, and PKI infrastructure.
• Initiative to learn job tasks, broaden knowledge levels, accept new responsibilities, and attend training to advance skills.
• Ability to work independently with limited direction and collaborate in a team environment.
• Demonstrate collaborative, respectful, and productive work habits.
• Identify and mitigate network vulnerabilities.
• Prepare clear, concise, and complete reports and written materials.
• Anticipate, identify, and resolve issues and problems effectively.
• Take ownership of assigned tasks and projects, ensuring accurate and timely completion with minimal supervision.
• Maintain absolute confidentiality of sensitive files, data, and materials accessed, discussed, or observed while working with City staff.
• Be constantly alert to safe working practices and workplace hazards; take appropriate corrective action during sudden accidents or equipment failure.
• Comply with all City and departmental policies and procedures; meet attendance and punctuality guidelines.
• Provide management with clear, accurate, and constructive advice and information related to responsibilities and technical decisions.
• Establish cooperative working relationships and communicate effectively with the public and other required entities.
• Strong verbal and written communication skills.
• Strong analytical, problem-solving, organizational, and time-management skills.
• Ability to respond effectively under pressure during security incidents.
• Attention to detail and commitment to security best practices.
• Texas Class C driver’s license with a good driving record (per City evaluation system).
• After-hours technical support may be required; must respond and escalate within posted time constraints.
• Must be able to access Texas Criminal Justice Information Services (CJIS) System data; cannot possess a felony or Class A misdemeanor conviction, or a Class B misdemeanor conviction within the past 10 years.
• Must be able to work in the United States without requiring visa sponsorship, now or in the future.
• Additional certifications are a plus: CISSP, CISM, CEH, Security+, CCNP Security, or similar.

Technologies

• SIEM tools
• Next-Gen Firewalls (NGFW)
• VPNs
• IDS/IPS systems
• Web Content Filters
• NERC CIP, CJIS, PCI
• TCP/IP, BGP, OSPF, DNS, TLS/SSL
• Palo Alto Networks, Fortinet, Cisco ASA/Firepower, Check Point
• AWS VPCs, Azure VNETs, Google Cloud Armor
• IPsec, SSL VPNs, PKI infrastructure
• CISSP, CISM, CEH, Security+, CCNP Security

Benefits

• Certificate Pay Program (CPP) through the City of Bryan IT Department.
• Up to $450/month in certification pay for qualifying certificates.
• Reimbursement available for qualifying passed certificate exams while employed by the City of Bryan IT.

Position Information

• Location: Bryan, TX (onsite)
• Posting Number: 2026630
• Position #: 9000219
• FLSA Exempt
• Classification Type: Professional
• Department: Information Technology
• Job Type: Full Time
• Work Schedule: Monday-Friday; 8am-5pm
• Hiring Pay Rate: Depends on qualifications
• Posting Opening Date: 09/25/2026
• Posting Closing Date: 10/09/2026

Licenses, Certifications & Special Requirements

• Additional certifications such as CISSP, CISM, CEH, Security+, CCNP Security, or similar are a plus.
• CPP eligibility: new employees eligible after the first 90 days of employment; must be in good standing.
• CPP primary goal: develop technical skills of IT staff to improve or focus on the overall service level of IT support services.

Physical Demands

• Sitting, talking, hearing, seeing, standing, walking, driving, bending, reaching, twisting, pushing, pulling.
• Using hands and fingers to operate office equipment and machines.
• Occasionally lift or move objects up to and including 25 pounds.

Working Conditions

• Primarily office setting or a well-lighted, temperature-controlled working environment.

Equipment

• Use tools and equipment approved by agencies and bodies with authority over design ranges/limitations; comply with those limits.
• Equipment may include multi-line telephone, computers, computer peripherals, printers, fax machines, copiers, scanners, and vehicles.

Posting link: https://www.bryantxjobs.com/postings/5180

Notes: This job description is not exhaustive; City management can alter it at any time without notice. The document does not create an employment contract and reflects an at-will relationship.