IT Network Security Engineer

The City of Bryan is seeking an onsite IT Network Security Engineer to design, implement, monitor, and maintain secure network protection services.

Responsibilities

• Review security management reports and coordinate third-party security functions.
• Identify gaps in network design and operating effectiveness of controls; recommend continuous improvement opportunities.
• Stay current with industry trends and evaluate new security technologies.
• Configure and manage secure network architectures across on-premises, cloud, and hybrid environments.
• Architect and deploy secure network solutions including Next-Gen Firewalls (NGFW), VPNs, IDS/IPS, and Web Content Filters.
• Act as a technical lead during security incidents or network outages by performing root cause analysis and rapid remediation.
• Conduct regular network scans and penetration tests to identify weaknesses.
• Oversee hardening of network devices.
• Use SIEM tools to monitor traffic patterns and automate response actions.
• Ensure network infrastructure alignment with standards and requirements such as NERC CIP, CJIS, PCI, etc.
• Understand industry and regulatory requirements; respond to auditor and regulator comments and mitigate identified risks.
• Provide security-related guidance and technical support to IT staff and end users.
• Perform related duties as required.

Requirements

• Education + experience:
  • Bachelor’s degree (preferably Computer Science, MIS, Information Technology, or similar) plus at least 4 years related work experience; or
  • Master’s degree plus at least 2 years related work experience.
• Familiarity with cloud security platforms such as Azure, AWS, or Google Cloud.
• Experience supporting public sector, enterprise, or highly regulated environments is preferred.
• Knowledge of information security administration, management, governance, compliance principles, practices, laws, rules, and regulations.
• Knowledge of cybersecurity standard frameworks, controls, technology, and solutions.
• Knowledge of IT systems and processes, including network infrastructure, data architecture, data processes, and protocols.
• Deep understanding of TCP/IP, BGP, OSPF, DNS, and TLS/SSL.
• Hands-on experience with vendors including Palo Alto Networks, Fortinet, Cisco ASA/Firepower, or Check Point.
• Proficiency securing hybrid environments including AWS VPCs, Azure VNETs, or Google Cloud Armor.
• Strong knowledge of IPsec, SSL VPNs, and PKI infrastructure.
• Initiative to learn assigned tasks, accept new responsibilities, and attend training to expand skills.
• Ability to work independently with limited direction and collaboratively in a team environment.
• Collaborative, respectful, and productive work habits.
• Ability to identify and mitigate network vulnerabilities.
• Ability to prepare clear, concise, and complete reports and written materials.
• Ability to anticipate, identify, and resolve issues effectively.
• Take full ownership of tasks and projects to ensure accurate and timely delivery with minimal supervision.
• Maintain absolute confidentiality of sensitive files, data, and materials accessed or observed.
• Be constantly alert to safe working practices and workplace hazards; initiate appropriate corrective action during sudden accidents or equipment failures.
• Comply with all City and departmental policies and procedures, including attendance and punctuality guidelines.
• Provide management with clear, accurate, constructive advice and information for technical decisions.
• Establish and maintain cooperative relationships; communicate effectively with the public and required entities.
• Strong verbal and written communication skills.
• Strong analytical, problem-solving, organizational, and time-management skills.
• Ability to respond under pressure during security incidents.
• Attention to detail and commitment to security best practices.
• Maintain a Texas Class C driver’s license with a good record.
• Occasional after-hours technical support may be required; respond and escalate within posted time constraints.
• Must be able to access Texas Criminal Justice Information Services (CJIS) data:
  • Must not possess a felony or Class A misdemeanor conviction; or a Class B misdemeanor conviction within the past 10 years.
• Must be able to work in the United States without requiring visa sponsorship, now or in the future.
• Additional certifications are a plus: CISSP, CISM, CEH, Security+, CCNP Security, or similar.

Technologies

• SIEM tools
• Next-Gen Firewalls (NGFW)
• VPNs
• IDS/IPS systems
• Web Content Filters
• NERC CIP
• CJIS
• PCI
• TCP/IP
• BGP
• OSPF
• DNS
• TLS/SSL
• Palo Alto Networks
• Fortinet
• Cisco ASA/Firepower
• Check Point
• AWS VPCs
• Azure VNETs
• Google Cloud Armor
• IPsec
• SSL VPNs
• PKI infrastructure
• CISSP, CISM, CEH, Security+, CCNP Security

Benefits

• The City of Bryan IT Department provides a Certificate Pay Program (CPP).
• Certification pay up to $450/month for qualifying certificates.
• Reimbursement for qualifying passed certificate exams while employed by the City of Bryan.

Position Information

• Posting Number: 2026630
• Position #: 9000219
• FLSA: Exempt
• Classification Type: Professional
• Department: Information Technology
• Job Type: Full Time
• Work Schedule: Monday-Friday; 8am-5pm
• Hiring Pay Rate: Depends on Qualifications
• Work Location: Bryan, TX (onsite)
• Posting Opening Date: 09/25/2026
• Posting Closing Date: 10/09/2026

License, Certifications & Special Requirements

• Certifications: CISSP, CISM, CEH, Security+, CCNP Security, or similar are a plus.
• CPP eligibility: New employees eligible after the first 90 days; must be in good standing.
• CPP primary goal: develop IT staff technical skills to improve and focus overall IT support service levels.

Physical Demands

• Sitting, talking, hearing, seeing, standing, walking, driving, bending, reaching, twisting, pushing, pulling, and using hands and fingers to operate office equipment and machines.
• Occasionally lift and/or move objects up to and including 25 pounds.

Working Conditions

• Primarily office setting or well-lighted, temperature-controlled environment.

Equipment

• Use tools and equipment approved by applicable agencies/bodies within design ranges and limitations.
• May include multi-line telephone, computers, peripherals, printers, fax machines, copiers, scanners, and vehicles.

Posting link: https://www.bryantxjobs.com/postings/5180