Sr Network Security Engineer

The final salary will depend on the candidate's qualifications. Those with 8 years or more of required experience can expect offers up to the midpoint of the salary range. Metra provides full pay ranges so candidates can consider their growth potential.

Metra is one of the largest and most complex commuter rail systems in North America, serving Cook, DuPage, Will, Lake, Kane, and McHenry Counties. The agency is linking communities in Northeastern Illinois by providing safe, reliable, and efficient commuter service.

Engineering is responsible for building and maintaining the majority of Metra's fixed assets, such as buildings, stations, bridges, track, electrical, telecommunications and signal systems. The Engineering Department also monitors the condition of and assists in building and maintaining the fixed assets on the freight lines where Metra trains operate. The Engineering Department is divided into two major groups: Capital Projects, and Communications and Maintenance.

Reporting to the Senior Manager, Engineering Network Security, the Senior Network Security Engineer coordinates and executes the cybersecurity plans and procedures within Operations Technology (OT) Engineering; designs and coordinates system installations and configurations for OT Engineering networks; and maintains compliance with OT system cyber standards and directives. The position also serves as the secondary contact for OT Engineering for cybersecurity-related activities and communications with the Transportation Security Administration, the Cybersecurity and Infrastructure Security Agency, and law enforcement and emergency response agencies.

The primary duties include: Function as the lead network and security engineer for all OT Engineering Networks supporting communications and operations and ensuring successful and secure communications within Metra, and with other Chicago area railroads.

Participate in the development of key cyber policies and procedures, contingency/response plans in case of breach, and remediation expectations; conduct self-assessments to determine cyber posture, ensure vulnerability scans are run across all networks, document and share findings with network/system owners, and monitor remediation efforts ensuring timely resolution.

Ensure all applications and software are monitored for vulnerabilities and receive security updates; and prepare monthly management reports of cyber issues and threats.

Manage OT Cybersecurity Program elements ensuring hardware, software, and related tools are configured and set up; assigning tasks and issues to team members and system owners confirming they are performed according to work plan; and resolving findings of vulnerability scans.

Monitor and report cybersecurity incidents including unauthorized access, discovery of malicious software, denial of service, and incidents that result in disruption to systems or facilities, or that have the potential to impact national economic security, public health and safety, or core government functions.

Manage and monitor OT data centers for day-to-day network communications, particularly with other railroad systems, including MPLS circuits, fiber optic network, cellular networks, Wi-Fi, and radio communications and resolve or coordinate the resolution of issues.

Coordinate team's day-to-day activities, assign tasks/projects and monitor performance, and provide guidance and training, but is not a supervisor.

Promote safe work practices and maintain and foster a safe work environment.

Works under both inside and outside environmental conditions under prevailing conditions of heat, cold, rain, and snow.

This position is issued network test equipment and a vehicle.

Metra is a railroad employer subject to the provisions of the Railroad Retirement Tax Act, not the Social Security Administration.

1. Bachelor's degree in computer related discipline.

2. In addition to #1, must have eight years of IT experience performing a combination of network engineering and network security services oversight that includes implementing and managing unicast and multicast networks, firewalls, routers, switches, servers, VPN's, DMZ, Wi-Fi, wireless LAN controllers, network management (i.e. Solarwinds).

3. Considerable knowledge of:

• network protocols TCP/IP, UDP, HTTP/HTTPS, SSH, SNMP, DNS, FTP/SFTP, RIP, BGP, OSPF, EIGRP, IS-IS, DSR, MPLS, STP, RSTP, RTP, RTSP, unicast, multicast, powershell.
• network security best practices.
• security architecture, configurations, and infrastructure.
• networking tools including SolarsWinds, Wireshark, and TCP dump, and packet filtering techniques.

4. Strong:

• analytical, organizational, and critical thinking skills.
• verbal and written communication skills.
• interpersonal skills when interacting with users, management, and It professionals.

5. Proficient in Microsoft Office 365.

6. Ability to:

• assess complex security issues and develop and implement solutions.
• manage projects.

7. Cisco Certified Network Professional (CCNP)

8. Microsoft Certified Professional (MCP) preferred

9. COMPTIA+, or similar equivalence preferred.

10. Ability to lift and move up to 30 pounds.

11. Must:

• possess and maintain a valid driver's license and be willing to travel within Metra's 6-county region.
• be available to work flexible hours in the early morning, late afternoon, evenings, or weekends.
• be available on-call 24-hours/day, 7 days/week, 365 days/year, including weekends and holidays.

Preferred:

• Master's degree.

Metra employees in an active review period under the current discipline policy or who have documented attendance or performance issues will not be considered and/or selected for this position.

Please note: Regardless of any state laws that legalize marijuana, Metra prohibits applicants and employees' use or possession of marijuana (or marijuana paraphernalia), or having detectable amounts of marijuana in their bodies, including synthetic and/or non-synthetic substances such as THC for any reason for pre-employment screening purposes, while on duty, subject to duty, on Metra property, or in Metra work equipment and vehicles.

Metra is an Equal Opportunity/Affirmative Action Employer. It is our policy to fill vacant positions with qualified candidates without regard to race, color, sex, religion, national origin, age, gender identity, disability, or any protected categories, assuming an individual can perform the essential functions of the job with or without accommodation.

Metra is committed to ensuring that our career website and recruiting process are accessible to all individuals. If you encounter difficulties or limitations in using or accessing our online application, or if you require reasonable accommodations to complete this application, participate in interviews, complete any pre-employment testing, or engage in any other aspect of the employee selection process, please direct your inquiries to RAC@Metrarr.com.