THIS JOB ANNOUNCEMENT IS FOR INFORMATIONAL PURPOSES ONLY
PLEASE READ THE “HOW TO APPLY” SECTION BELOW

The Department of Technology is currently recruiting for the position of 1044 IS Engineer - Principal. We currently have at least one (1) vacant position.

Position Description:
Under general direction, this position will lead a team of Engineers supporting the City’s Wide Area Network. Additionally, the candidate will:

• Assist in the design and review of the City’s MPLS based Wide Area Network (WAN) infrastructure up to the customer site based on the City’s Security Policies and industry best practices in regards to network security.
• Including but not limited to, design, documentation, and securing the City’s existing network infrastructure including the CCSF Fiber WAN
• Provide expert level technical expertise in the design, implementation, and architecting the CCSF WAN to industry standard “Best Security Practices”.
• Work closely with department project managers, clients, vendors, and other departmental staff to provide security services for enterprise projects including: Active Directory, DNS, Public facing Internet projects, and other network services as requested.
• Implement best practices in disciplines such as network security, network provisioning, and network design
• Analyze, plan, implement, and troubleshoot complex MPLS configurations incorporating Quality of Service (QOS) into network layer.
• Review existing network and network architecture to ensure adherence to current security standards and practices, recommend and assist in designing solutions that will enhance network security and services
• Expertise in the installation and configuration Intrusion Prevention Systems and Security and Information Event Management System (SIEM)
• Design and implement a Disaster Recovery/Business Continuation Plan for the CCSF WAN in the event of a disaster.
• Experience with BIND DNS and other DNS versions and systems including familiarity with the Request for Comments (RFC) standards for DNS and DHCP
• Recommend, integrate, and implement network security devices
• Assist in the development of network hardware and software standard
• Assist in the development of network security policies

Candidate must be willing to work a 40-hour week as determined by the department. Twenty-four hour on-call support, weekend and or swing shift work may be required. Additionally, approved production changes are implemented during a scheduled change window. Current change window is: 2:00 a.m. to 6:00 a.m. 

Special Conditions:
• CCIE Certification
• Pl Cisco Pix Network Security Experience
• Junior Level OSI Layer 2 & # LAN WAN Experience
• Senior Level WAN Tech Support Experience

Minimum Qualifications:
Knowledge of: advanced functions for the core hardware and software components that comprise complex large systems or enterprise networks; analysis and evaluation techniques to plan, design, integrate, implement, maintain and troubleshoot large complex systems or networks across similar and dissimilar technology platforms; techniques and practices of supervision, and project management and training.

Ability to: determine the systems or networking requirement to plan for or enhance the core data processing needs for the Enterprise or network; solve problems with minimal disruption to the system or network; exercise judgement, decisiveness and creativity in designing, planning, troubleshooting and integration of large complex systems or networks based on the potential benefits and/or consequences; develop alternative solutions within established guidelines and standards; communicate effectively orally and in writing; coordinate, schedule and orchestrate the installation, maintenance and enhancements of large complex systems or enterprise networks; establish good working relationships with employees, other IS professionals, departmental end users and vendors; prioritize competing requests for service; read and understand professional journals and literature; manage and direct a group of workers; and advise and interpret policies, procedures and standards.

Desirable Qualifications:
• Work experience managing a multi-site WAN or Metropolitan Area Network (MAN)
• Comprehensive understanding of design and security of TCP/IP networks.
• Strong oral and written communication skills and ability to work well with others within a team.
• Hands-on work experience as a Cisco Certified Internetworking Engineer (CCIE)
• Additional experience must include: technical design, development, integration, implementation, and support of a WAN for a large enterprise.
• Experience acting as a technical lead on projects across an enterprise of more than 1000 users
• Experience in MPLS troubleshooting.
• Experience in design and documentation of complex networks
• Local government IT Support for a government enterprise, or department of more than 250 users
• Experience in Information Security and Computer Incident Response
• Experience with encryption implementation and secure data transfers
• Hands-on experience with all levels of network equipment from CISCO, Foundry. Juniper, and other network hardware.
• Experience in implementing, and securing SSL VPN solutions
• Experience with using two-factor authentication solutions
• Ability to lift up to 50 pounds and properly transport computer and peripheral equipment.
• Possession of a valid California Driver's License.


How to Apply:
In order to be considered to appointment to this position you must be on the current Register for class 1044 IS Engineer - Principal or must be currently employed by the City & County of San Francisco in class 1044 IS Engineer - Principal.

If you are not on the current class 1044 IS Engineer - Principal register, you must apply to the register online at:

http://www.jobaps.com/sf/sup/BulPreview.asp?R1=REG&R2=1044&R3=99128

After submitting your online application to the Register in Class 1044 IS Engineer - Principal, send a resume and cover letter by 5:00 PM, November 30, 2009 to GSA – Human Resources Administration (Job# 1044- ISEPS), 1 South Van Ness, 2nd Floor, Room 2221, San Francisco, CA 94103. You may hand deliver or mail your packet. Postmarks will NOT be accepted. Interviews may be held at any time. Applicants are encouraged to apply immediately. Position may close at any time.

Applicants selected for hire by a department will be placed on an eligible list for permanent appointment in that department. If an applicant is selected and placed on an eligible list for permanent or temporary appointment and waives (refuses) the appointment, the applicant will no longer be available for hire and must request in writing to be reinstated to the register.

If you have a disability requiring reasonable accommodation for this selection process, you MUST contact the analyst by telephone at 415-581-4000 (voice), or in writing to the address listed above, as soon as possible.

All City and County of San Francisco employees are designated Disaster Service Workers through state and local law (California Government Code Section 3100-3109). Employment with the City requires the affirmation of a loyalty oath to this effect. Employees are required to complete all Disaster Service Worker-related training as assigned, and to return to work as ordered in the event of an emergency.

All employees hired on or after January 10, 2009 will be required (pursuant to San Francisco Charter Section A8.432) to contribute 2% of pre-tax compensation to fund retiree healthcare. In addition, most employees are required to make a member contribution towards retirement, typically a 7.5% of compensation. For more information on these provisions, please contact the personnel office of the hiring agency.