Network Systems Specialist II - Security Administrator

Title: Network Systems Specialist II - Security AdministratorJob Type:Regular Company: Roswell Park Comprehensive Cancer Center Department: Information Technology Time Type: Full time Weekly Hours: 40 FTE: 1 Shift: First Shift (United States of America)Summary: Highly skilled Security Administrator to join our dynamic IT team. This role involves managing and securing our network infrastructure across two data centers. The successful candidate will be responsible for administering Palo Alto Networks firewalls, configuring and maintaining GlobalProtect VPN for secure remote access, and managing business-to-business (B2B) VPN tunnels. Additionally, the role includes overseeing F5 BIG-IP devices, including Local Traffic Manager (LTM) and Global Traffic Manager (GTM), to ensure efficient load balancing and robust application security. The ideal candidate will have a deep understanding of networking protocols, strong problem-solving skills, and the ability to mentor junior staff. If you are passionate about network security and looking to make an impact, we encourage you to apply.Responsibilities:• Configure, manage, and monitor Palo Alto Networks firewalls.• Develop and implement security policies, rules, and configurations to safeguard network traffic on Palo hardware.• Working knowledge of Palo Alto Panorama• Ability to rapidly update firmware on multiple Palo Alto firewalls in response to announced vulnerabilities• Administer and support Palo Alto Networks GlobalProtect VPN hardware• Ensure secure remote access for employees using GlobalProtect clients and MFA technologies• Set up and maintain business-to-business (B2B) VPN tunnels.• Collaborate with partners to ensure secure and reliable inter-organizational communications.• Configure and manage F5 BIG-IP devices, including LTM, ASM, APM, and GTM.• Implement load balancing, traffic management, and application security policies across multiple data centers• Ability to update F5 firmware when call upon• Maintain detailed documentation of network configurations, security policies, procedures, and incident reports.• Maintain Business to Business VPN documentation and partner contact information• Work closely with other IT teams, vendors, and stakeholders to ensure comprehensive security strategies.• Mentor junior network/security administrators and provide training on security best practices.• Proficient in IT Service Management (ITSM concepts and operations, particularly with ServiceNowRequired Skills and Qualifications:• Extensive experience with Palo Alto Networks firewalls and GlobalProtect VPN.• Strong knowledge of B2B VPN tunnel configuration and management.• Proficient in F5 BIG-IP administration, including LTM, ASM, APM, and GTM.• Deep understanding of networking protocols and concepts, including TCP/IP, HTTP/HTTPS, SSL/TLS, and DNS.• Strong understanding of DNS configurations within the F5 ecosystem.• Proficiency in DNS concepts, including zone files, DNSSEC, and record types (A, AAAA, CNAME, MX, etc.).• Strong understanding of WAN technologies and concepts and include but not limited to BGP and EVPN• Administration of WAN routers using Metro Ethernet and eLink connectivity• Strong analytical skills to diagnose and resolve network security issues promptly.• Excellent verbal and written communication skills.Salary range for this position is $98,456 - $121,360 annually which includes a comprehensive benefits package.Qualifications: Required Education and Experience1. Master's degree and the equivalent of four (4) years of full-time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization; or2. Bachelor's degree and the equivalent of four (4) years of full-time experience as a Network Systems Specialist I at Roswell Park Comprehensive Cancer Center; or3. Bachelor's degree and the equivalent of six (6) years of full-time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization; or4. Associates degree and the equivalent of eight (8) years of full-time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization; or5. High School Diploma or High School equivalency Diploma and the equivalent of ten (10) years of full-time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization.NOTE:Required degrees must have been granted by an accredited school, college or university or one recognized by Roswell Park Comprehensive Cancer Center as following acceptable educational practices.Preferred Qualifications:The ideal candidate will have:

Extensive experience with Palo Alto Networks firewalls and GlobalProtect VPN.Strong knowledge of B2B VPN tunnel configuration and management.Proficient in F5 BIG-IP administration, including LTM, ASM, APM, and GTM.Deep understanding of networking protocols and concepts, including TCP/IP, HTTP/HTTPS, SSL/TLS, and DNS.Strong understanding of DNS configurations within the F5 ecosystem.Proficiency in DNS concepts, including zone files, DNSSEC, and record types (A, AAAA, CNAME, MX, etc.).Strong understanding of WAN technologies and concepts and include but not limited to BGP and EVPNAdministration of WAN routers using Metro Ethernet and eLink connectivityStrong analytical skills to diagnose and resolve network security issues promptly.Excellent verbal and written communication skills.

Equal Employment Opportunity StatementRoswell Park Cancer Institute Corporation (RPCIC) and Health Research Inc. (HRI) Roswell Park Division believe that all persons are entitled to equal employment opportunities, and we do not discriminate against our employees, applicants or job seekers because of their race, color, religion, sex, sexual orientation, gender identity or expression, national origin, creed, age, disability, pregnancy-related condition, military or veteran status, marital or familial status, domestic violence victim status, citizenship status, genetic information, individual's relationship or association with a member of a protected category or any other protected group status as defined by law.Reasonable Accommodation RequestRPCIC and HRI are committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please email HR-PayAndBenefits@RoswellPark.org and let us know the nature of your request and your contact information.Our Core ValuesRPCIC and HRI are committed to providing an environment where patients, families, employees and community are treated with courtesy and respect. We support an inclusive environment that nurtures the talents, skills and abilities of each individual to embody and reflect our core values: Innovation, Integrity, Teamwork, Commitment, Compassion and Respect.Historical Compensation Information StatementPursuant to Executive Order 161, no State entity, as defined by the Executive Order, is permitted to ask, or mandate, in any form, that an applicant for employment provide his or her current compensation, or any prior compensation history, until such time as the applicant is extended a conditional offer of employment with compensation. If such information has been requested from you before such time, please contact the Governor's Office of Employee Relations at (518) 474-6988 or via email at info@goer.ny.gov.

Minimum Salary: 98456.00 Maximum Salary: 121360.00 Salary Unit: Yearly