Information Technology Security Analyst

Halifax Regional Municipality (HRM) is inviting applications for the temporary, full-time position of IT Security Analyst in Information Technology.

Halifax Regional Municipality (HRM) is committed to reflecting the community it serves and recognizing Diversity and Inclusion as one of the Municipality’s core values. We have an Employment Equity Policy and we welcome applications from African Nova Scotians and Other Racially Visible Persons, Women in occupations or positions where they are underrepresented in the workforce, Indigenous/Aboriginal People, Persons with Disabilities and 2SLGBTQ+ Persons. Applicants are encouraged to self-identify on their electronic application.

Reporting to the Manager, Cybersecurity, the Security Analyst is responsible for the implementation, administration, and maintenance of security technologies that support Halifax Regional Municipality's operational and project-based initiatives. The position focuses on network security controls, firewall administration, secure connectivity solutions, identity-related security controls, and technical security configurations required to support business and technology objectives.

Working closely with networking, infrastructure, cloud, and project teams, the Security Analyst will implement approved security requirements, perform firewall and access control changes, support technology deployments, and assist in maintaining secure and reliable technology services across the municipal environment.

KEY RESPONSIBILITIES:

• Security Infrastructure Administration
• Administer, maintain, and support enterprise security technologies including firewalls, VPN platforms, proxy services, remote access technologies, web filtering solutions, and related security infrastructure.
• Implement firewall rule changes and security control modifications required to support projects, operational requirements, technology upgrades, and business initiatives.
• Review and process firewall requests in accordance with approved security and network architecture standards.
• Configure and maintain network security controls to support secure connectivity across on-premises and cloud environments.
• Assist with implementation and maintenance of network segmentation and access control technologies.
• Project Delivery Support
• Participate in technology projects by implementing approved security configurations and connectivity requirements.
• Collaborate with networking, infrastructure, cloud, and application teams to support the secure deployment of new technologies and services.
• Assist in translating technical requirements into security control implementations and firewall configurations.
• Support operational and architectural changes through implementation of required security infrastructure modifications.
• Maintain technical documentation related to security infrastructure, firewall policies, and connectivity solutions.
• Security Technology Operations
• Perform upgrades, maintenance, troubleshooting, and lifecycle management activities for security technologies.
• Monitor system performance and troubleshoot issues affecting security infrastructure and secure connectivity services.
• Participate in testing and validation of security technologies and configuration changes.
• Recommend improvements to security infrastructure and operational processes where appropriate.
• Research emerging security technologies and provide recommendations that improve operational effectiveness.

QUALIFICATIONS

Education & Experience

• Undergraduate degree in Computer Science or Information Technology
• A professional designation in information technology risk and controls such as the CISA, CISM, CISSP, GIAC, CompTIA Security+, GCED, GCES, IAAP, etc. designations
• Minimum 5 years of experience in the information technology security field
• Experience with any combination of the following: PCI DSS, ISO 27001 Maturity Model, SOC2 and CobiT framework
• Experience with risks and controls in the IT processes of Governance, Security, Systems Development, Change Management and Production Operations & Support. Documentation of controls, evaluating their effectiveness and developing and executing tests of the controls
• Demonstrated high-level of personal integrity and honesty
• Experience with procurement, contract negotiations, or contract management
• Experience with developing and managing a security awareness program would be an asset

Technical/Job Specific Knowledge and Abilities

• Strong experience administering enterprise firewall environments.
• Experience configuring, supporting, and troubleshooting IPSec VPN technologies.
• Experience implementing network security policies and secure connectivity solutions.
• Experience with Fortinet pro