CITY OF MANTECA
SENIOR IT SYSTEMS ENGINEER
Department: IT & Innovation Bargaining Group: Mid-Management Effective Date: July 2024 FLSA Status: Exempt
Revision History:
BASIC FUNCTION:
Under general supervision, coordinates and performs a full range of entry-level to high-level technical, operational, and specialty work in support of the City’s Information Technology and Innovation (IT) Department, including analyzing, planning, implementing, maintaining, troubleshooting and enhancing large complex systems or networks consisting of a combination that may include, personal computers, Virtual Desktop Infrastructure (VDI), cell and mobile devices, switches, routers, firewalls, LANS, WANs, point-to-point network radios, physical, virtual and blade servers, Storage Area Network(SAN), Network Attached Storage (NAS), and the physical and logical components that integrate these systems together as an enterprise networking backbone. Incumbents support planning, managing, and coordinating the day-to day network operations, software maintenance activities, and special projects/assignments of the IT Department including security compliance and network maintenance operations, training and technical assistance to users as needed; performs other related duties and responsibilities as assigned.
DISTINGUISHING CHARACTERISTICS:
The Lead IT Systems Engineer classification is an advanced journey level class responsible for independently performing the full scope of routine and complex assigned duties; including but not limited to duties assigned under the entry-level and journey level class. This class is distinguished from the journey level class by the complexity and size of the tasks, projects, or duties assigned; it is also distinguished by the amount of discretion exercised over technical issues, problems and resolutions, and that it possesses a significant level of specialized technical and functional expertise beyond that expected at the journey level. Incumbents at this level require highly specialized knowledge, abilities, skills, and experience and often exercise independent judgement in the performance of their duties; are expected to formulate recommendations consistent with directives, policies, standards, and regulations; work is judged primarily on overall results with great latitude in determining work methods and assignment requirements; serves as the senior technical engineer for large complex systems and networks, with a focus on securing vulnerabilities and reducing risk of system and/or asset compromisesThis classification differs from the next higher classification of IT Operations Manager in that the latter provides overall supervision, direction and performs the most complex assignments of the Information Technology and Innovation Department. Incumbents may provide on-the-job training and instructions to subordinate staff as needed, under the direction of the IT Operations Manager or designee.
REPRESENTATIVE DUTIES:
ESSENTIAL DUTIES:
Duties may include, but are not limited to, the following:
• May perform some or all duties assigned to the entry-level and journey class. • Takes lead in establishing networking environment by installing, configuring, testing, and documenting the equipment/network systems according to the design and specifications; monitors network traffic; analyzes server and network activity; maintains performance monitoring systems as well as other software programs including intrusion detection and virus scanning applications and documentation. • Perform day-to-day networking tasks to ensure network and server reliability, availability, and serviceability within minimal interruption; develops and maintains documentation of area network infrastructure and operations of local and wide area networks with the assistance of the lower level IT Engineers. • Review of daily system backups; troubleshoot if necessary of any issues, monthly verification of all servers’ backups and monthly backup restores testing; backup configuration of all networking equipment, switches, firewall, routers, and other network equipment. • Assists department personnel on networking and security troubleshooting; initiates and provides applicable training; develops and administers, or provides advice, evaluation, and oversight for, information security user training and awareness programs. • Maintains inventory records of existing and newly acquired server hardware, software license, telecommunications circuits, and network equipment. • Reviews, maintains, and implements network group policies for Active Directory. • Ensures monthly security and firmware patching for network equipment, server hardware, and operating systems, unless urgent patching is necessary based on CISA (Cybersecurity & Infrastructure Security Agency) Vulnerability Bulletin recommendations. • Plans, coordinates, configures, implements, administers and maintains security systems, including administration of firewall, switches, routers, wireless technologies, physical security for all sites with network access and security systems; configures network security settings for employees, vendor and processes for incoming and outgoing internet traffic as well internal data flows. • Perform network technology upgrades or expansion, including installation of hardware, software, and integration testing, security, as well as coordinating these activities without impacting functions of existing systems and networks; plans, tests, and implements programs to ensure network system redundancy; performs backups of all network equipment configuration; and plans for and implements disaster recovery site test every six months or as required. • Develop and maintain documentation of network topology, and troubleshooting of networking hardware and software; Plans, coordinates installation, monitoring, and trouble-shooting of networks. • Knowledge of and responsible for compliance of Federal, State and City laws, codes, ordinances, policies and procedures relevant to information technology; reviews and maintains FCC license for radio infrastructure as well as Wide Area Network systems. • Responsible for PCI compliance requirements; stays abreast of newest technology for payment card industry security information and provides tools to help the organization maintain a secure electronic payment environment. • Setup, track and troubleshoot all analog and VOIP lines. • Responsible to configure, train, deploy, maintain and trouble-shooting of two factor authentication and VPN software. • Designs, implements, maintains and operates information system security controls and countermeasures; assists as the City’s project lead in the design and oversees installation of fiber and wiring for networking and telecommunications in new building or remodels. • Analyzes and recommends security controls and procedures in business processes related to use of information systems and assets, and monitors for compliance. • Monitors information systems for security incidents and vulnerabilities; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities, and trends; examines systems, networking logs daily, and maintains computing environment free of malware and security threats. • Responds to information system security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches; interacts and coordinates with third-party incident responders, including law enforcement; monitors homeland security notifications for security risks/threats and implementation of recommendations. • Administers authentication and access controls, including provisioning, changes, and de-provisioning of user and system accounts, security/access roles, and access permissions. • Analyzes trends, news and changes in threat and compliance environment with respect to organizational risk; advises organization management and develops and executes plans for compliance and mitigation of risk; performs risk and compliance self-assessments, and engages and coordinates third-party risk and compliance assessments. • Analyzes and develops information security governance, including organizational policies, procedures, standards, baselines, and guidelines with respect to information security and use and operation of information systems. • Maintains inventory records of existing and newly acquired networking hardware and software, telecommunications circuits and carriers, servers, security encryption keys, SSL certificates, access points, communications, firmware versions and network maps • Maintain backup of all software programs and retain accurate electronic historical records, files, and data.
OTHER DUTIES:
Create and implement machine policies that align with business policies and procedures.
Conduct user training as needed.
Perform related duties as assigned.
KNOWLEDGE AND ABILITIES:
KNOWLEDGE OF:
• Principles of and current trends in information technology design and implementation across all platforms from PCs and servers. • Multiple operating systems, programming languages, tools • Network architecture and design fundamentals.
• Wide area network and local area network architecture and infrastructure; networking fundamentals, technologies and protocols. • Backup and recovery methods.
• Fiber optics, wiring capacities/limitations and Intranet and extranet technologies • Software development methodologies and life cycles.
• Disaster planning and recovery techniques, debugging and error detection, design and testing tools. • Principles and practices of project management.
• Mobile data information management.
• Methods of long-term strategic technical planning.
• Principles of documentation and report preparation.
• Pertinent federal, state, and local laws, codes, and regulations. • Principles of project management.
ABILITY TO:
• Perform a variety of professional, technical and system programming and/or systems administration duties. • Use various operating systems and platforms that manage system resources. • Install, troubleshoot, and program operating systems. • Problem-solve beyond an intermediate technical level. • Recommend and implement goals, objectives, policies and procedures for providing information technology services. • Understand the organization and operation of the City and of outside agencies as necessary to assume assigned responsibilities. • Understand, interpret, and apply general and specific administrative and departmental policies and procedures as well as applicable federal, state, and local policies, laws, and regulations. • Participate in the preparation and administration of assigned budgets. • Plan and organize work to meet changing priorities and deadlines. • Work cooperatively with other departments, City officials, and outside agencies. • Respond tactfully, clearly, concisely, and appropriately to inquiries from the public, City staff, or other agencies on sensitive issues in area of responsibility. • Conduct and direct research into information technology issues and products. • Make group presentations.
• Plan and organize work to meet changing priorities and deadlines. • Understand, identify and resolve safety issues and other operational needs. • Build consensus to bring successful conclusion to various projects and issues. • Interpret and explain information technology policies and procedures. • Prepare clear and concise reports.
• Operate office equipment including computers and supporting word processing, spreadsheet, and database applications. • Communicate clearly and concisely, both orally and in writing. • Establish and maintain effective working relationships with those contacted in the course of work. • Will expected to become familiar with SCADA/Telemetry in order to be able to respond during emergencies. At times will be assigned to periods of 24 hour availability. • Learn and observe all appropriate safety precautions as required by the City including, but not limited to, Cal/OSHA General Industry Safety Orders, and City’s safety directives.
EDUCATION AND EXPERIENCE:
Any combination of training and experience which would provide the required knowledge and skill. A typical way to obtain the required knowledge and skill would be:
Education: A Bachelor's degree from an accredited college or university with major course work in computer science, information systems, or a related field.
Experience: Two (2) years of professional information technology experience.
OR
Education: An Associate degree from an accredited college or university with coursework in Computer Science, Management Information Systems or closely related field.
Experience: Six (4) years of professional information technology experience.
OR
Experience: Six (6) years of professional information technology experience.
Preferred Experience:
• Hands-on networking experience, systems administration or operating system programming in a multi-platform, large scale application and operating system environment. Prior experience must include the testing, installation, documentation, and maintenance on system software and hardware/network configurations. • Experience with Windows XP/7/10/11, Active Directory, Microsoft Office and MS-Exchange 2016/2019, Server 2008,2012,2016,2019, and SQL is required. • Experience with IBM mainframe, Vmware, New World Public Sector, Veeam Backup, Mitel VOIP, Numara TrackIT/Helpdesk, Barracuda, SonicWALL, NetMotion, Imprivata, Palo Alto Firewalls, and Aruba switches experience desirable. • Experience in Hyper Converged Infrastructure (HCI) such as Cisco UCS and Dell VxRail. • Experience in scripting (PowerShell, Python, Perl, etc.) for task automation. • Familiarity with Microsoft 365 (Office 365) administration and other cloud technologies. • Experience with Microsoft Azure and Azure AD. • Microsoft Certified Systems Engineer qualification is preferred • Experience in a public agency setting is desirable.
LICENSES AND OTHER REQUIREMENTS:
Possess a valid California Class C driver’s license.
Willingness and ability to work the hours necessary to accomplish the assigned duties including before and after normal work hours; be available for technical support and emergencies; attend meetings, seminars, conferences, and training classes during work and non-work hours; travel out of town and/or out of state for several days at a time.
WORKING CONDITIONS:
ENVIRONMENT:
Office environment.
Driving a vehicle to conduct work.
Indoor & Outdoor work environment.
Subject to noise from equipment operation.
Emergency call outs.
Seasonal heat and cold or adverse weather conditions.
PHYSICAL DEMANDS:
Dexterity of hands and fingers to operate a computer keyboard.
Hearing and speaking to exchange information.
Sitting for extended periods of time.
Bending at the waist, kneeling or crouching to reach computer equipment.
Seeing to view a computer monitor.
Lifting and carrying moderately heavy computer equipment.
HAZARDS:
Exposure to chemical fumes and odors.
Working around and with machinery having moving parts.
ATTACHMENT 3
Senior IT Systems Engineer-continued Page PAGE 2 ATTACHMENT 3