Senior Information Technology Engineer, IT Security (IT/OT Firewall Administration)

About the role

The East Bay Municipal Utility District’s (EBMUD) Information Systems Department is currently seeking a Senior Information Technology Engineer with deep experience administering firewalls in mission-critical, highly available enterprise environments. The role focuses on securing both internal and perimeter networks, supporting business continuity and strengthening cyber resilience across business networks (IT) and operational technology networks (OT).

Responsibilities

• Administer firewalls in enterprise-scale, high-availability production environments, including policy management, troubleshooting, and rule lifecycle maintenance.
• Configure, support, and manage routing protocols such as BGP, OSPF, EIGRP, static.
• Analyze firewall logs and packet captures.
• Manage virtual firewalls in AWS, Azure, and/or GCP.
• Understand and implement IAAS concepts.
• Implement and support SSL-inspection in a production environment.
• Manage VPNs: IPSEC site-to-site and end-user remote access.
• Create and maintain network diagrams and documentation for new and existing firewall deployments.
• Communicate complex topics to non-technical users.
• Create documentation detailing implementation steps, tracking changes.
• Work across teams to investigate and respond to incidents.
• Lead or participate in IT/OT security projects by creating project plans and technical requirements.
• Track and report on incident handling and response metrics.
• Participate in annual tabletop cyber incident response exercises.
• Establish and maintain positive working relationships; teamwork attitude.
• Balance project deliverables among day-to-day operational demands.
• Perform independent research and share knowledge effectively.
• Maintain calm and focus during emergency operations.
• Work in a hybrid work environment.

Requirements

• A bachelor’s degree; two years of experience in information technology engineering, one year of which was at a level comparable to or higher than the EBMUD class of Information Technology (IT) Engineer II.
• Willingness to participate in a rotating on-call schedule to support 24/7 network security operations, including incident response and critical issue resolution.

Qualifications

• Advanced IT/OT security experience and skills.
• Experience in three or more of the following disciplines:
• Administering firewalls in enterprise-scale, high-availability production environments.
• Enterprise-grade firewalls: e.g. Palo Alto Networks, Cisco, FortiNet, Checkpoint.
• Troubleshooting network issues.
• Solid understanding of TCP/IP protocols.
• Configuring, supporting, and managing routing- BGP, OSPF, EIGRP, static.
• Experience with enterprise-grade firewalls: e.g. Palo Alto Networks, Cisco, FortiNet, Checkpoint.
• Experience with analyzing firewall logs and packet captures.
• Experience managing virtual firewalls in AWS, Azure and/or GCP.
• Understanding of IAAS concepts.
• Experience implementing and supporting ssl-inspection in a production environment.
• Experience managing VPN’s: IPSEC site to site and end user remote access.
• Experience working with firewall policies, implementing changes, testing changes, submitting changes through change control processes.
• Experience with automating firewall rule analysis or change workflows using scripts or APIs is a plus.

Skills

• Ability to perform and analyze network captures utilizing wireshark.
• Experience working within a ticketing system to track requests, changes, approvals.
• Experience participating in Blue/Red team exercises.
• Log and systems analysis, troubleshooting, documentation techniques and procedures.
• Change control concepts and procedures supporting a production environment.
• Knowledge of network based attack methods and defense: DDOS, C2, data exfiltration, brute-force attacks, OWASP, etc.
• Familiarity with Industrial Control Systems (ICS) and Operational Technology (OT) environments is a plus.
• Project management principles and practices.

Pay

The salary range is $13,124 per month increasing to $13,780, $14,469, $15,192, and $15,952 after 6, 18, 30, and 42 months, respectively.

Schedule

This is a hybrid position which requires office presence in accordance with EBMUD’s telecommuting guidelines (minimum 2-day per week physical office presence currently required but is subject to change). Telecommuting policies are subject to change.