This position serves as an Information Systems Security and Systems Administrator. This position is responsible for all ongoing activities related to the availability, integrity, and confidentiality of CCNC’s Information Resources in compliance with internal security policies and procedures. This position also will be involved in the designing, installing, configuring, and maintenance of servers, storage, networking systems, software, and related technologies at CCNC’s corporate offices as well as the data centers.

• Deploy security patches as necessary.
• Create processes and develop procedures for all security test plans.
• Work with all aspects of vulnerability management, Incident Response and writing policies and procedures for security hardening for NIST compliance.
• Produce reports and work with other groups within ART for the mitigation of vulnerabilities.
• Develop risk mitigation programs and action plans to address the risks identified during assessments and audits.
• Perform information security risk analysis and periodic information system activity reviews for information security processes.
• Maintain the disaster recovery and business continuity plans, and test readiness on an annual basis
• Audit and review appropriate authorizations for all information systems.
• Work with the Governance, Risk Management, and Compliance staff to manage third-party engagements of audits, network scans, and application penetration testing.
• Provide periodic reporting on information security issues to the Director of Platform Engineering and Security.
• Propose areas where increased management controls will help with security.
• Work within the ITIL guidelines for change, problem, and incident management.

• Engineer’s solutions for various projects and operational needs.
• Designs and implements complex local and wide area networks.
• Installs new and rebuilds existing servers and configures hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
• Installs and configure networking systems such as switches, firewalls, routers, WAPs, cabling, etc.
• Develops and maintains installation and configuration procedures.
• Research and recommends innovative and automated approaches for system administration tasks.

• Performs daily system monitoring, verifies the integrity and availability of all hardware, server and network resources, systems and key processes, reviews system and application logs, and verifies completion of scheduled jobs such as backups.
• Performs regular security monitoring and penetration testing to identify any possible intrusions.
• Performs daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media.
• Creates, changes, and deletes user accounts and assigns permissions per request.
• Provides Level 3 escalated support per request from other ART staff. Investigates and troubleshoots issues.
• Repairs and recovers from hardware or software failures. Coordinates and communicates with impacted user groups.

• Applies OS and hardware patches and upgrades on a regular basis and upgrades administrative tools and utilities. Configures and adds new roles and services as necessary.
• Maintains operational, configuration and other procedures.
• Performs periodic performance reporting to support capacity planning.
• Performs ongoing performance tuning, hardware upgrades, and resource optimization as required.

Qualifications

• The candidate must have a minimum of 4+ years of experience in security and 3+ years in system administration
• A bachelor’s degree is desired or related information technology work experience for a minimum of 7 years

Certifications

• System Engineer and Security certifications a plus but not required

• Experience in Active Directory security, Windows, and Linux server environments
• Understanding of Security Standards and Framework such AS NIST, PCI, CIS, etc.
• Experience in Vulnerability management
• Experience in Incident Response
• The candidate must demonstrate strong analytical and problem-solving skills with the ability to diagnose and resolve highly visible production incidents in a methodical and expeditious manner
• Knowledge of server and network infrastructure
• Excellent presentation and communication skills
• Solid understanding of server, networking, and encryption technologies
• Solid understanding of networking services such as DNS, File/Print Sharing, CIFS, NFS, Active Directory, NPS, Radius, IIS, Apache, etc.
• Solid understanding of advanced networking concepts such as IP routing, LAN, WAN, DMZ, VPN, SAN, SNMP, etc.
• Ability to program in an administrative language (VBScript, PowerShell, Batch, Bash, Python, etc.)

• Routinely there may be some minor physical inconveniences or discomforts in the work setting, including sitting for moderate periods of time
• Must be able to utilize office equipment, computer, keyboard, and phone with or without assistive devices
• Repetitive wrist motion and occasional lifting/carrying of up to 25 pounds
• Travel within the region and/or state