IT Network Security Engineer

Job Description

Job Summary
The Network Security Engineer is responsible for designing, implementing, monitoring, and maintaining the organization’s network security infrastructure. This position ensures the confidentiality, integrity, and availability of systems and data by protecting networks against cyber threats, vulnerabilities, and unauthorized access. Works closely with IT networking, operations, and leadership to support secure and reliable technology services.
Essential Job Functions

• Reviews security management reports and coordinated third-party security functions.
• Identifies the gaps in network design, operating effectiveness of controls and identifies opportunities for continuous improvement.
• Remains current on industry trends and evaluates new technology.
• Configures and manages secure network architectures for on-premises, cloud, and hybrid environments.
• Design & Implementation: Architects and deploys secure network solutions, including Next-Gen Firewalls ( NGFW ), VPNs, IDS / IPS systems, and Web Content Filters.
• Incident Response: Serves as a technical lead during security breaches or network outages, performing root cause analysis and rapid remediation.
• Vulnerability Management: Conducts regular network scans and penetration tests to identify weaknesses; oversees the hardening of network devices.
• Monitoring & Automation: Utilizes SIEM tools to monitor traffic patterns and automate response.
• Compliance: Ensures the network infrastructure meets industry standards such as NERC CIP , CJIS , PCI , etc.
• Understands industry and regulatory requirements, responds to comments from auditors and regulators, and mitigates identified risks.
• Provides guidance and technical support to IT staff and end users on security-related matters.
• Performs related duties as required.

Minimum Qualifications

• Bachelor’s degree preferably in Computer Science, MIS , Information Technology, or similar field plus at least four (4) years of related work experience; OR a Master’s degree plus at least two (2) years of related work experience.
• Familiarity with cloud security platforms (e.g., Azure, AWS , or Google Cloud).
• Experience supporting public sector, enterprise, or highly regulated environments is preferred.

Equivalent combinations of related education, experience, certification, and training may be considered.

Licenses, Certifications & Special Requirements
Licenses:

• Texas Class C driver’s license with a good driving record as measured by the City’s evaluation system.

Special Requirements:

• After-hours technical support will occasionally be required; must be able to respond and escalate within posted time constraints.
• Must be able to access Texas Criminal Justice Information Services ( CJIS ) System data. As a result, the person selected for the position cannot possess a felony or Class A misdemeanor conviction; or a Class B misdemeanor conviction within the past 10 years.
• Must be able to work in the United States without requiring visa sponsorship, now or in the future.

Certifications:

• Additional certifications such as CISSP , CISM , CEH , Security+, CCNP Security, or similar are a plus.

Certificate Pay Program:

• The City of Bryan IT Department provides a Certificate Pay Program ( CPP ). New employees are eligible after the first 90 days of employment. Employee must be in good standing to qualify.
• The primary goal of the IT CPP is to develop the technical skills of the IT staff to improve/focus on the overall service level of IT support services.
• Receive up to $450/month in certification pay for qualifying certificates.
• Reimbursement is available for qualifying passed certificate exams while employed by the City of Bryan IT.