Certified Network Administrator (LAN/WAN)

Full-time position, 35 hours per week. Work location: 30-30 Thomson Avenue, Long Island City, NY 11101. Only candidates who are permanent in the Certified IT Administrator (LAN/WAN) title, reachable on the Open-Competitive List (Exam #1111) may apply. Please include a copy of your Notice of Results card, Receipt of Filing, or indicate if you are already permanent.

About the role

The New York City Department of Design and Construction, Technology & Innovation Division, is seeking an experienced and security-minded Certified Network Administrator (LAN/WAN) to manage and secure the agency’s network infrastructure. This role is responsible for the design, administration, and continuous improvement of DDC’s local and wide area networks, ensuring high availability, performance, and resilience across all systems and sites. The ideal candidate brings deep technical expertise in network infrastructure and cybersecurity, a proactive approach to threat mitigation, and the ability to lead IT projects that support agency-wide operations and modernization initiatives.

Responsibilities

• Design, install, configure, and maintain network infrastructure, including routers, switches, firewalls, SAN/NAS, and wireless access points.
• Monitor network performance and implement improvements to optimize reliability and efficiency; perform regular maintenance and firmware updates.
• Troubleshoot and resolve network issues, outages, and connectivity problems in a timely manner.
• Maintain strong working knowledge of Active Directory, TCP/IP, DNS, DHCP, VLANs, virtual machine systems, backups, and deployment/imaging tools.
• Implement and enforce network security policies, including access controls, threat mitigation, and configuration of enterprise firewalls, VPNs, and Intrusion Detection/Prevention Systems (IDS/IPS).
• Conduct regular vulnerability assessments and coordinate remediation efforts to harden the network perimeter.
• Support Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across agency platforms.
• Monitor security logs for suspicious activity and lead incident response efforts when necessary.
• Manage and automate administrative tasks using PowerShell or similar scripting tools to improve operational efficiency.
• Coordinate network changes, upgrades, and maintenance with internal teams and external vendors.
• Lead technical projects including office setups/relocations, hardware refreshes, and implementation of cloud-based solutions.
• Develop internal communications to promote staff awareness of phishing threats and data hygiene best practices.
• Maintain comprehensive documentation of network architecture, configurations, security protocols, and incident logs.
• Ensure compliance with agency IT policies, security standards, and governance requirements.
• Provide technical support and guidance to staff on network-related issues; available for on-call or after-hours support as required.

Requirements

All candidates must be currently authorized to work full-time in the United States. In compliance with Public Law 99-603, candidates are required to present original documents proving citizenship or the legal right to work in the U.S. The Department of Design and Construction is unable to support or sponsor any visa application or visa extension, including but not limited to OPT/STEM visas, H-1B visas, F-1 practical training, permanent residence sponsorship, or any proposed change of visa type. Educational credentials must be from a U.S. Department of Education-recognized accredited institution. Credentials from foreign institutions require independent equivalency verification from an approved evaluation service.

Qualifications

• Professional/vendor certification(s) in local area network administration that is required for the position to be filled.
• A baccalaureate degree from an accredited college, and two years of satisfactory full-time (not classroom-based) experience in local area network and/or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management; or
• A four-year high school diploma or its educational equivalent and six years of satisfactory full-time (not classroom-based) information technology experience, of which at least 2 years must have been in the experience described above; or
• A satisfactory equivalent of education and/or experience equivalent to the above.

Education may be substituted for experience on the basis that 30 undergraduate semester credits from an accredited college is equivalent to 6 months of experience. A master’s degree in computer science or a related field from an accredited college may substitute for one year of experience. However, all candidates must have at least one year of satisfactory (not classroom-based) full-time information technology experience as described above.

Incumbents may be required to update existing and/or obtain additional professional industry-standard certification(s) for current and future technical environments, as determined by the employing agency.

Skills

• Strong knowledge of network administration, infrastructure, and protocols (TCP/IP, VPN, DNS, DHCP, VLAN).
• Experience configuring and managing routers, switches, firewalls, wireless networks, and network monitoring tools.
• Familiarity with enterprise security tools including IDS/IPS, SSO, MFA, and vulnerability assessment platforms.
• Proficiency with PowerShell or similar scripting languages for task automation.
• A “security-first” mindset applied to all architectural and administrative decisions.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to translate technical concepts for non-technical staff.
• Proven ability to manage multiple projects and meet strict deadlines.
• Experience in government or large enterprise IT environments preferred.

Benefits

• Eligibility for the Public Service Loan Forgiveness program.

Pay

$99,209.00 – $133,648.00

New York City residency is not required for this position.

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter if you would like to be considered through the 55-a Program.