Security Operations Specialist

ONE POSITION FOR THE INFORMATION TECHNOLOGY DEPARTMENT.

FORTY HOURS PER WEEK.

PLEASE FIND A JOB DESCRIPTION ATTACHED.

AN INTERIM HOURLY RATE OF $33.67 + $8.35 (Labour Market Adjustment ($5.47) and Computer Technician Premium ($2.88)) = $42.02 AN HOUR WILL BE APPLIED.

THIS IS A NEW POSITION AND WILL RECEIVE A FINAL PAY RATING 6 MONTHS AFTER THE NEW INCUMBENT STARTS AS PER THE JOB EVALUATION PLAN.

DUTIES TO COMMENCE AS SOON AS POSSIBLE.

**Terms of Employment**:
Twelve months per year

KNOWLEDGE AND EXPERIENCE

University degree in Computer Science or related field preferred. Diploma in Cyber Security or related will be considered.

IT Certificates (Such as Microsoft and Apple Certified IT Professional, Cloud Security Certification, ISC2 CC or SSCP) or equivalent preferred

Minimum 2 years of experience working in an information technology environment

**Technical experience with the following**:
Microsoft 365 and Windows Server

**Zero Trust technologies including**: CASB, SASE, SSE

Identity and Access Management using Azure and Active Directory

**Endpoint management & security technologies including**: Intune, SCCM, JAMF, Google Admin, Microsoft Defender, BitLocker

**Networking security technologies including**: VLAN, Routing, ACL, PALO ALTO Firewall

Security Operations logging and incident technologies such as SIEM tools or Splunk

Scripting & Programming Languages such as Windows PowerShell or Python

SKILLS AND ABILITIES

1. Actively shows courtesy and respect to all; builds healthy and trusting relationships with all; contributes to a positive working environment

2. Clearly articulates thoughts and ideas and shares timely and relevant information openly, honestly and respectfully using oral, written and visual formats

3. Possesses strong organizational skills and proactively plans, prioritizes and organizes work

4. Uses a solution-based approach to analyze relevant facts, evidence and data to determine specific issues and make decisions to solve problems

5. Takes initiative and works efficiently without direct supervision

6. Respects the confidential nature of all information relating to students, parents and staff

7. Actively demonstrates a keen interest in continual learning

RESPONSIBILITIES

1. Leads the modernization of the IT infrastructure security to implement a cloud-based end-user computer security operations center, including SIEM, cyber security incident and privacy breach management, threat hunting, vulnerability assessments, and identity management

2. Implements cloud-based security on end-user computing environments such as Microsoft 365, GSuite, and VEEAM

3. Supports physical & virtual asset management solutions through the use of security tools

4. Ability to deliver security and privacy education, training and awareness to staff including support staff, teachers and administrators

5. Manages the installation, configuration, maintenance, and problem resolution of Mobile Device Management and Access Management including Multi-Factor Authentication (MFA) and Cloud Access Security Infrastructure

6. Proactively monitors critical software, data and hardware assets, which support critical business functions, for security and privacy threats

7. Identifies potential capacity issues and upgrade requirements and recommend upgrades/enhancements - e.g. firewall, intrusion detection and prevention, and mobile device management

8. Tests, monitors daily backup, and resolves any issues related to IT Disaster Recovery failovers

9. Works with various business owners to investigate, record, and resolve IT security and privacy incidents

10. Researches and evaluates new technologies and provide recommendations for process improvements, new software, new or improved services, additional automation, or innovation

11. Participates in the security design and configuration and installation of core network equipment such as routers, switches, and wireless systems.

12. Supports the day-to-day security and privacy operations of Microsoft 365, MS Teams, and OneDrive environment, including full-life sustainment of the systems, backup, log analysis, review and troubleshooting, and troubleshooting problems as they arise

15. Reviews and implements controls for Identity and Access management especially privileged identities within the District

16. Researches and implements security measures to protect the district network and users including:
Installing, tweaking, and configuring firewalls, intrusion prevention, encryption, and PKI system

Provisioning and de-provisioning of remote access to the district network resources in a secure manner