Senior Network Admin- Hybrid

DEFINITION
Under general direction of the Information Technology (IT) Manager, serves as the senior network administrator and technical authority for the data network. Performs the most complex hands-on professional work in the architecture, design, installation, configuration, administration, security, and troubleshooting of the network infrastructure, including local and wide area networks, wireless networks, firewalls, VPN and remote access, and connectivity to City facilities and public safety sites. Establishes network standards; leads network projects; provides lead direction to IT Analysts; may supervise IT Specialists; and coordinates vendor and service-provider work.

TYPICAL DUTIES AND RESPONSIBILITIES
Duties may include, but are not limited to, the following:
Serves as the network architect and technical authority; develops and maintains network architecture, design standards, standard device configurations, and security baselines; and reviews and approves network changes through the change control process.
Develops and maintains a multi-year network roadmap and equipment lifecycle replacement plan; evaluates network capacity, redundancy, and resiliency across City facilities; and recommends priorities and investments to the IT Manager.
Designs, implements, configures, administers, monitors, and maintains the network infrastructure and related systems, including wired and wireless networks and connectivity services, to ensure reliable and secure communications across facilities.
Administers and maintains firewalls, VPN and remote access systems, and related perimeter security systems. Develops, implements, documents, and reviews security configurations and network segmentation in accordance with security standards and change control procedures, in coordination with cybersecurity personnel.
Administers and maintains core network services, including IP address management, DNS, DHCP, network time, network authentication, and access control; and maintains network performance and availability.
Monitors network health, capacity, utilization, and security events using network management and monitoring tools; identifies and resolves performance issues, outages, and anomalies; and recommends capacity and redundancy improvements.
Serves as the final technical escalation point for complex network problems escalated by IT Analysts and Specialists; performs root-cause analysis, implements corrective actions, documents resolutions, and participates in post-incident reviews.
Implements and maintains network security controls to protect City systems and infrastructure; identifies and addresses security vulnerabilities; and supports cybersecurity incident response, security assessments, and testing.
Supports network connectivity for public safety technology systems, including Police and Fire facilities, dispatch, mobile data, and regional partner connections. Implements and maintains network security in accordance with applicable federal and state requirements, including the FBI CJIS Security Policy and California Department of Justice (CLETS) requirements.
Designs, implements, and supports network infrastructure for voice, video, and other network-dependent systems, such as telephone systems, quality-of-service configurations, security cameras, building access control, and other connected City systems. As assigned, provides senior technical support for telecommunications systems, including 911 Public Safety Answering Point (PSAP) infrastructure and the City s P25 radio network.
Coordinates with systems administrators on network aspects of servers, virtualization, cloud services, Microsoft 365, identity services, and backup and disaster recovery, including network recovery procedures.
Leads complex and multi-site network projects, such as equipment refreshes, facility connectivity, wireless expansion, and network redesign. Develops technical requirements, scope, schedules, and cost estimates; coordinates with departments and vendors; and oversees testing and implementation.
Recommends network equipment, software, and services; prepares technical specifications for requests for proposals and quotes; evaluates vendor proposals; and provides input to the IT Manager on budget, lifecycle replacement, and maintenance contract needs.
Develops and maintains network documentation, including network diagrams, device inventories, configuration backups, IP address records, standard configurations, operating procedures, and recovery runbooks.
Coordinates and reviews work performed by vendors, carriers, and contractors, including cabling and installation work, to ensure compliance with City standards and specifications.
Provides lead direction, training, mentoring, and technical work review to IT Analysts. When assigned, supervises, trains, and evaluates IT Specialists, including scheduling, workload management, and performance evaluations. Provides advanced technical support to staff and customer departments.
Retrieves and preserves electronic records and network data in response to authorized legal holds, Public Records Act requests, audits, or investigations, following established chain-of-custody procedures.
Researches and evaluates emerging network technologies, security threats, industry standards, and regulatory requirements; recommends and implements improvements to network systems and services; and maintains current technical knowledge.
Participates in an on-call rotation and responds to network outages and emergencies outside normal business hours, including evenings, weekends, and holidays. Performs scheduled maintenance after hours as required.
Builds and maintains effective working relationships with City staff, customer departments, vendors, and outside agencies.
Performs related duties as assigned.

QUALIFICATIONS

Knowledge of: Principles and practices of enterprise network design, administration, maintenance, and troubleshooting; routing and switching protocols, VLANs, TCP/IP, IP addressing and subnetting, and network services such as DNS and DHCP; wireless network design, administration, and security; firewall administration, VPN, network segmentation, network access control, and perimeter security; wide area network and carrier services, internet circuits, and fiber and copper cabling standards; network monitoring, performance management, and capacity planning tools and methods; network security principles, vulnerability management, logging, and incident response practices; CJIS Security Policy and CLETS network security requirements; network requirements of voice, video, cloud, and other network-dependent systems; general principles of server, virtualization, cloud, identity, and backup systems as they relate to networks; change management, configuration management, and technical documentation practices; technology project management methods; principles of lead direction, supervision, training, mentoring, and performance evaluation; telecommunications, VoIP, and public safety radio network infrastructure; and applicable laws, regulations, and industry standards.

Ability to: Design, configure, administer, and troubleshoot complex enterprise network and security systems; diagnose and resolve complex network outages and performance problems quickly and accurately, including under pressure; assess security risks and implement appropriate network safeguards; plan and lead technical projects and estimate time, cost, and resource requirements; prepare clear, accurate network documentation, technical specifications, and reports; evaluate and coordinate the work of vendors, carriers, and contractors; provide lead direction, training, and technical review to other staff and supervise and evaluate staff when assigned; establish technical standards and make sound decisions on network design and changes with Citywide impact; obtain and maintain all necessary security approvals for access to City facilities and assigned systems, including law enforcement work areas and applications; explain technical information clearly to technical and non-technical audiences; interpret and apply technical documentation, policies, laws, and standards; establish and maintain effective working relationships with those contacted in the course of work; learn and apply emerging technologies; and respond to after-hours emergencies and work weekends, holidays, irregular hours, and after normal business hours.

EDUCATION AND EXPERIENCE
A combination of education and experience that would provide the required knowledge and abilities is qualifying. A typical way to obtain the required knowledge and abilities would be:
Education: A bachelor s degree from an accredited college or university in computer science, information technology, network engineering, or a closely related field.
Additional qualifying network experience may substitute for the required education on a year-for-year basis. Possession of approved industry certifications and/or completion of other approved technology-related training may substitute for some or all of the required education.

LICENSE OR CERTIFICATE
Specific certification requirements may be established at the time of recruitment based on the technologies, industry standards, and operational needs of the department.
Relevant networking, firewall, wireless, cloud, or security certifications, such as CCNA or CCNP, are desirable.
Select positions may require possession of a valid California Class C driver s license and a satisfactory driving record as conditions of initial and continued employment.