Network Security Engineer (Hybrid)

• Employee wellness programs and an on-site fitness center
• 12 paid holidays per year plus generous personal time off and sick leave
• Access to a diverse array of technical, leadership and supervisory training opportunities
• Strong, yet flexible retirement benefits including a choice of the PERA Defined Benefit Plan or the PERA Defined Contribution Plan, plus optional 401K and 457 plans
• Medical and dental health plans
• Paid life insurance
• Automatic short-term (and optional long-term) disability coverage
• Some positions may qualify for the Public Service Loan Forgiveness Program. For more information, go to:  https://studentaid.gov/manage-loans/forgiveness-cancellation

• Will have the option to work a hybrid work schedule with a combination of in-office workdays and remote work. 

Information Technology (IT) Division

Provides information systems and computer support for employees, customers of the Department of State, and therefore the people of Colorado. Most of the work completed by the division can be done remotely, contributing to the positive work-life balance of its employees. This includes maintaining computer hardware and peripherals. Staff develops, upgrades, enhances, and maintains computer applications and system software for the use of Departmental staff and the public. Processing and storing data received from Colorado counties for voter registration, charitable gaming licenses, UCC filings, domestic and foreign corporations, notary, campaign finance, and lobbyist systems. The Colorado Department of State is unique from many state agencies in that we are a smaller agency with an in-house IT division, as a result our employees maintain greater collective impact over the work product of the Department.

As the Network Security Engineer, you will be a valued member of the Network and Security team. You will be part of a department that continues to be recognized as a leader, both in Colorado and nationally, in multiple areas. The ideal candidate will display excellent teamwork and collaboration skills, be an expert in cloud security, incident response, network and security architecture, as well as threat intelligence.

Illustration of some of your duties:

• Design and support growing need for cloud network connectivity support and cloud network configuration.
• Design and support local area network connectivity switching and routing.
• Firewall, Web Application Firewall (WAF), Cloud Content Distributed Network (CDN), Virtual Private Network (VPN) configuration, wireless network configuration, conference room network and connection configuration, and all other network related configuration and troubleshooting.
• Provide support for network flow review, log review, network management support, county election network issues assistance, automation/scripting, IT Help Desk backup support especially for network troubleshooting.
• Cybersecurity network monitoring and support, including intrusion detection and prevention systems.
• Cybersecurity threat detection including Security Incident and Event Management review and Security Orchestration and Automated Response (SOAR) review and configuration with cybersecurity team.
• General systems and engineering support with infrastructure team support when needed.
• Position must maintain confidentiality of all confidential and personal identifying information, personnel information, and any other confidential or proprietary information, as well as comply with all State and Department policies regarding professional conduct and professional practices.

Class Code & Classification Description:

T1B3XX

CYBER SECURITY III

Minimum Qualifications:

This position requires a total of three (3) years of relevant professional experience and/or education in a field of study related to the work. To be considered for this position, your application must clearly demonstrate that you meet one of the following options outlined below:

OPTION 1 – Experience

Three (3) years of experience as a Network Security Engineer focusing on a combination of system configuration & builds, network switching and routing, firewall configuration and management, and cloud security. 

OR

SUBSTITUTIONS:  

OPTION 2 - Education and Experience Combined

A combination of related education in Computer Science, Information Technology, Cybersecurity, Computer Engineering, Information Systems, Network Engineering or Network Administration, Engineering, or a closely related field, formalized apprenticeship program, certification, and/or relevant experience as defined in Option 1 to equal three (3) years combined.

*An unofficial copy of transcripts must be submitted at the time of the application.* (You may redact information that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.)

Transcripts from colleges or universities outside the United States must be assessed for U.S. equivalency by a NACES educational credential evaluation service. This documentation is the responsibility of the applicant and must be included as part of your application materials. Failure to provide a transcript or credential evaluation report may result in your application being rejected and you will not be able to continue in the selection process for this announcement.

Preferred Qualifications: 

The exceptional candidate will possess these identified knowledge, skills, abilities, and competencies:

• Preference will be given to candidates with previous State Service related to the work assigned to the position
• Expertise in Firewall, Web Application Firewall (WAF), Cloud Content Distributed Network (CDN), Virtual Private Network (VPN) configuration, wireless network configuration, conference room network and connection configuration
• Experience with network and secure network configuration
• Experience configuring and monitoring Intrusion Detection and Prevention systems (IDS/IPS).
• Experience with syslog/SIEM
• Experience with Network and Cloud diagnostics tools such as Wireshark

Required Competencies:

Complex Problem-Solving Skills • Attention to Detail • Teamwork and Collaboration Skills • Network and Security Architecture Knowledge • Network and Security Technology Skills • Secure Network and Cloud Connectivity Knowledge • Firewall and Web Application Firewall Management • Threat Intelligence Knowledge • Secure Configuration Management Skills

Conditions of Employment:

• This position is required to successfully pass a criminal background check.
• Travel may be required to visit Colorado counties as necessary for cybersecurity, auditing, and network support, or to attend industry conferences when required. Travel to other State datacenters may be necessary at times.
• Must be a Colorado resident at the time of application.
• The Department of State does not offer sponsored Visa for employment purposes.

Completing the Application
Applications will be reviewed by a Human Resources Specialist to determine if you meet the minimum qualifications for the position. Your application should specifically address your specialized experience, work products, accomplishments, etc. as they relate to the position duties and minimum and preferred qualifications.

• The minimum qualifications listed in the announcement are NOT optional.
• Cover letters and resumes will NOT be accepted in lieu of the official State of Colorado application form.
• Cover letters and resumes may be attached to the application as supplemental information.

If it is determined that you meet the minimum qualifications, your application may also be used as part of the comparative analysis process to identify a top group for further consideration. The comparative analysis may consist of application reviews, answers to supplemental questions, review of submitted work samples, phone screens, structured
interviews, and any other method determined to be valuable in identifying the right candidate. FAILURE TO DOCUMENT YOUR EXPERIENCE OR EXCLUDING INFORMATION REQUIRED IN THE APPLICATION MAY RESULT IN YOUR APPLICATION BEING REMOVED FROM CONSIDERATION.

Appeal Rights: 

An applicant who has been removed from an employment list or removed from consideration during the selection process may request a review by the State Personnel Director.

As an applicant directly affected by the results of the selection or comparative analysis process, you may file a written appeal with the State Personnel Director.

Review of the completed, signed and submitted appeal will be timely on the basis of written material submitted by you, using the official appeal form signed by you or your representative. This form must be completed and delivered to the State Personnel Board by email at dpa_state.personnelboard@state.co.us within ten (10) calendar days from your receipt of notice or acknowledgement of the Department’s action.

For further information on the Board Rules, you can refer to 4 Colorado Code of Regulations (CCR) 801-1, State Personnel Board Rules and Personnel Director's Administrative Procedures, Chapter 8, Resolution of Appeals and Disputes, atspb.colorado.gov/board-rules.Notifications 
All correspondence regarding your status in the selection/evaluation process will be via email. Include your current working email address on your application and check your email frequently as you could receive time sensitive correspondence regarding this position. We highly recommend that you set up your email to accept messages from “coloradosos.gov” and info@governmentjobs.com addresses. It’s your responsibility to ensure that your email will accept these notices and review your junk mail and spam filtered email.  
 
Equal Pay for Equal Work
A wide salary range is posted for this position and any job offer is based upon a salary analysis to comply with the Colorado Equal Pay for Equal Work Act. The salary analysis considers relevant experience, education, certifications, and state seniority as compared to others doing substantially similar work. While all offers are compliant with the Colorado Equal Pay for Equal Work Act, there is no guarantee an offer will be at the top of the posted range based on the salary analysis.
  
ADAAA Accommodations and Equal Opportunity Employment
The State of Colorado believes that equity, diversity, and inclusion drive our success, and we encourage candidates from all identities, backgrounds, and abilities to apply. The State of Colorado is an equal opportunity employer committed to building inclusive, innovative work environments with employees who reflect our communities and enthusiastically serve them. Therefore, in all aspects of the employment process, we provide employment opportunities to all qualified applicants without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity or expression, pregnancy, medical condition related to pregnancy, creed, ancestry, national origin, marital status, genetic information, or military status (with preference given to military veterans), or any other protected status in accordance with applicable law.
  
The Department of State is committed to the full inclusion of all qualified individuals. As part of this commitment, our agency will assist individuals who have a disability with any reasonable accommodation requests related to employment, including completing the application process, interviewing, completing any pre-employment testing, participating in the employee selection process, and/or to perform essential job functions where the requested accommodation does not impose an undue hardship. If you have a disability and require reasonable accommodation to ensure you have a positive experience applying or interviewing for this position, please direct your inquiries to our ADAAA Coordinator, Laura Darby, at Laura.S.Darby@coloradosos.gov or call (303) 894-2200 ext 6113.

E-Verify 
The Department of State participates in E-Verify in accordance with the program’s Right to Work for all newly-hired employees. Employees are queried through the electronic system established by the Department of Homeland Security (DHS) and the Social Security Administration (SSA) to verify identity and employment eligibility. You may complete section 1 of the I-9 form upon your acceptance of a job offer letter, but no later than your first day of employment and in addition, on your first day, but no later than the third day, you will be required to submit original documents to verify your eligibility to work in the U.S. Learn more about E-Verify, including your rights and responsibilities at http://dhs.gov/e-verify.

Salary : $85,200 - $110,000