Data Center Network Security Engineer- Sangamon (Information System Analyst II, Opt. N)

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. The posting includes description of role, responsibilities, essential functions, minimum qualifications, specialized skills, preferred qualifications, conditions of employment, benefits. No explicit Pay or Schedule given (though benefits mention flexible work schedules when available). There's mention of flexible work schedules (when available and dependent upon position) but not a specific schedule. According to rule: never create Pay/Schedule/Benefits sections unless posting actually states them. Benefits are stated (list of benefits). So we include Benefits section. Pay not stated, so omit. Schedule: not specific schedule; only mention flexible work schedules when available. That's vague; maybe we could include Schedule? The rule says: never create Pay/Schedule/Benefits sections unless posting actually states them. It does state flexible work schedules (when available and dependent upon position). That's a statement about schedule flexibility, but not a specific schedule. Might be considered stating schedule info. However they said "Prefer a few substantive sections over many thin ones." Could include Schedule as a subsection under Benefits? But they want separate headings for Benefits, Pay, Schedule. Since schedule info is vague, maybe better to omit Schedule section. Benefits we have concrete list. We need headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits. Possibly combine Requirements and Qualifications? They are separate headings allowed. We'll include both if content. We need to preserve all substantive information, not invent or summarize away detail. Must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate: cookie/navigation/legal/EEO etc. The posting includes some conditions of employment that are legal; we need to keep substantive info but remove boilerplate? Conditions of employment includes many legal items; they might be considered boilerplate but they are specific to position. The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." Conditions of employment could be considered legal boilerplate; but they are part of the posting. Might need to keep them? The instruction says remove legal boilerplate. So we should omit the Conditions of employment section (which is largely legal). However we need to preserve substantive info; but conditions of employment are legal. Likely we should drop that section. Also need to drop duplicated lines (like repeated responsibilities). We'll consolidate. We need to use

for section headings. Use

• for any list of duties/requirements/benefits. Use

  for prose. We need to output only HTML fragment. Let's extract content: Intro paragraph: "Are you looking for a rewarding career with an organization that values their staff? The Department of Innovation & Technology (DoIT) is seeking to hire qualified candidates with the opportunity to work in a dynamic, creative thinking, problem solving environment. This position serves as a Data Center Network Security Engineer- Sangamon County for the DoIT, in performing complex hardware and software installations, designing specifications, developing, and modifying secure Data Center network communications, including related security components. In this role, you will assume accountability of deliverables, including maintaining accuracy, compliance with security standards, and alignment with organizational objectives. Additionally, you will collaborate with stakeholders to define secure architecture requirements and design specifications to Data Center security communications, including firewalls, micro-segmentation technologies, intrusion detection/prevention systems, network security appliances, application load balancers, internet filtering solutions, and supporting infrastructure. If you possess these knowledges, skills, abilities, and experience, we invite you to apply for this position to join the DoIT Team!" That's about the role. Could be About the role section. Responsibilities: Essential Functions list: performing complex hardware and software installations, designing specifications, developing, and modifying secure Data Center network communications, including related security components. Collaborates with users/stakeholders to define secure architecture requirements and design specifications to Data Center security communications, including firewalls, micro-segmentation technologies, intrusion detection/prevention systems, network security appliances, application load balancers, internet filtering solutions, and supporting infrastructure. Configures, tests, and maintains diverse firewall models, application load balancers, micro-segmentation solutions, and network security systems such as Intrusion Detection (IDS), and Intrusion Prevention Systems (IPS) to safeguard critical infrastructure. Keeps abreast of new developments in the information technology field by continuing education through online training platforms, meetings, training sessions, seminars, and conferences to increase familiarity with and remain current on products, vendors, techniques, and procedures. Performs other duties as required or assigned which are reasonably within the scope of duties enumerated above. We can put these as

  • . Requirements: Minimum Qualifications: Requires knowledge, skill, and mental development equivalent to completion of four (4) years of college with course work in computer science or directly related fields. Requires three (3) years of professional experience in Network Services or a related Information Technology field. Also Specialized Skills (maybe under Skills). But we have separate Skills heading. Qualifications: Preferred Qualifications list (multiple bullet points). Also Certifications. Skills: Specialized Skills list (the three years experience items). Also maybe Preferred Qualifications could be under Qualifications. We need to avoid duplication: Minimum Qualifications vs Specialized Skills vs Preferred Qualifications. We'll treat Minimum Qualifications as Requirements. Specialized Skills as Skills. Preferred Qualifications as Qualifications (or maybe also under Qualifications). We'll include both. Let's extract Specialized Skills bullet points: - Requires three (3) years of professional experience in data center network security, including designing, implementing, documenting and maintaining secure architectures for on-premises and cloud environments in alignment with organizational and regulatory security standards, including experience with formal change control processes, configuration management and audit-ready documentation. - Requires three (3) years of professional experience with enterprise firewall administration, including configuration, testing, maintenance, upgrades, and hardening of diverse firewall models (e.g. Palo/Cisco) to safeguard critical infrastructure, as well as implementing vendor-recommended firmware/software updates, coordinating vendor support, and resolving production incidents in high-availability environments. - Requires three (3) years of professional experience with OSI Model Layers 1 through 7, network diagnostic tool integration, packet analyzers, and complex network troubleshooting, including administration of enterprise security systems and traffic analysis using tools including Wireshark and Panorama and participation in incident response, root cause analysis and SLA-driven break/fix operations using enterprise monitoring platforms. - Requires three (3) years of professional experience with data center and cloud network security architecture, including micro-segmentation technologies, application load balancers, traffic management and internet/content filtering solutions supporting muti-tiered applications, including capacity planning, performance optimization, vulnerability assessment, and collaboration with stakeholders to define secure architecture requirements. Preferred Qualifications bullet points (similar but slightly varied). We'll list them. Certifications: list. Benefits: list as given. We need to ensure we don't include filler like "commensurate with experience". Not present. Now construct HTML. We'll have:

    About the role

    ... intro paragraph ...

    Responsibilities

    • ...
    ...

    Requirements

    • Requires knowledge, skill, and mental development equivalent to completion of four (4) years of college with course work in computer science or directly related fields.
    • Requires three (3) years of professional experience in Network Services or a related Information Technology field.

    Qualifications

    • Three (3) years of professional experience in data center network security, including designing, implementing, documenting and maintaining secure architectures for on-premises and cloud environments in alignment with organizational and regulatory security standards, including experience with formal change control processes, configuration management and audit-ready documentation.
    • Three (3) years of professional experience with enterprise firewall administration, including configuration, testing, maintenance, upgrades, and hardening of diverse firewall models (e.g. Palo/Cisco) to safeguard critical infrastructure as well as implementing vendor-recommended firmware/software updates, coordinating vendor support, and resolving production incidents in high-availability environments.
    • Three (3) years of professional experience with OSI Model Layers 1 through 7, network diagnostic tool integration, packet analyzers, and complex network troubleshooting, including administration of enterprise security systems and traffic analysis using tools such as Wireshark and Panorama and participation in incident response, root cause analysis and SLA-driven break/fix operations using enterprise monitoring platforms.
    • Three (3) years of professional experience with data center or cloud network security architecture, including micro-segmentation technologies, application load balancers, traffic management and internet/content filtering solutions supporting multi-tiered applications including capacity planning, performance optimization, vulnerability assessment, and collaboration with stakeholders to define secure architecture requirements.
    • Three (3) years of experience with intrusion detection and protection systems (IDS/IPS), Domain Name Services (DNS) administration, including analysis of security events and implementation of mitigation strategies to ensure secure and efficient traffic flow.
    • Three (3) years of professional experience in technical project coordination, including multitasking across complex security initiatives, collaborating with stakeholders and vendors, supporting change control processes and strategic planning for data center network security implementations.
    • Ability to analyze data logically and exercise sound judgement in defining and evaluating problems of an operational or procedural nature.
    • Ability to lead and coordinate cross-functional teams, aligning individual contributions toward shared goals to consistently deliver high-impact results.
    • Developed verbal and written communication skills to present technical information clearly and precisely to diverse audiences, including business users, development teams, and agency executives.
    • Certifications in one or more of the following: Cisco Certified Network Professional (CCNP) Security, Cisco Certified Internetwork Expert (CCIE) Security, CompTIA Security, Certified Information Security Manager (CISM), Routing and Switching, Palo Alto Networks Certified Network Security Engineer (CCSE), or similar relevant certification(s) in Information Security.
    But note that some of these overlap with Specialized Skills. Might be duplication. However we have separate Skills section maybe for Specialized Skills. Let's decide: We'll put Specialized Skills under Skills heading, and Preferred Qualifications under Qualifications heading. To avoid duplication, we can keep Skills as the specialized skills list (the four items). Qualifications as the preferred qualifications list (the six items plus abilities). That seems reasonable. Thus:

    Skills

    • Three (3) years of professional experience in data center network security, including designing, implementing, documenting and maintaining secure architectures for on-premises and cloud environments in alignment with organizational and regulatory security standards, including experience with formal change control processes, configuration management and audit-ready documentation.
    • Three (3) years of professional experience with enterprise firewall administration, including configuration, testing, maintenance, upgrades, and hardening of diverse firewall models (e.g. Palo/Cisco) to safeguard critical infrastructure, as well as implementing vendor-recommended firmware/software updates, coordinating vendor support, and resolving production incidents in high-availability environments.
    • Three (3) years of professional experience with OSI Model Layers 1 through 7, network diagnostic tool integration, packet analyzers, and complex network troubleshooting, including administration of enterprise security systems and traffic analysis using tools including Wireshark and Panorama and participation in incident response, root cause analysis and SLA-driven break/fix operations using enterprise monitoring platforms.
    • Three (3) years of professional experience with data center and cloud network security architecture, including micro-segmentation technologies, application load balancers, traffic management and internet/content filtering solutions supporting muti-tiered applications, including capacity planning, performance optimization, vulnerability assessment, and collaboration with stakeholders to define secure architecture requirements.

    Qualifications

    • Three (3) years of professional experience in data center network security, including designing, implementing, documenting