Infrastructure and Security Administrator
Salary: $65-75,000.00/year
I. Position Purpose
The Infrastructure & Security Administrator is responsible for the operation, security, reliability, monitoring, and continuous improvement of the College's network, cybersecurity technologies, physical technology infrastructure, and related systems.
The position serves as the primary service owner for wired and wireless networking, firewalls, Internet connectivity, network security, physical security technology, cameras, access control technology, infrastructure monitoring, UPS systems, and related services.
The Infrastructure & Security Administrator also serves as the primary technical lead for cybersecurity operations, working under the cybersecurity governance and risk-management direction of the Chief Information Officer.
The position works collaboratively with the Cloud Services Administrator, Director of Application Services, Campus Technology Specialists, facilities personnel, public safety personnel, vendors, and other College departments to provide a secure, resilient, and reliable technology environment.
Working Expectations
Network and security services are critical to College operations, this position will participate in scheduled maintenance, system upgrades, cybersecurity response, emergency service restoration, or infrastructure work outside normal operating hours in accordance with College policies and applicable employment requirements.
The position is expected to maintain sufficient documentation and cross-training to support continuity of critical infrastructure and security services.
This position will have access to and encounter confidential information. Strict confidentiality must be maintained and shared only on a need-to-know basis. Further, confidential information must only be accessed on an as-needed basis.
This position is expected to participate in an on-call rotation to provide coverage to the College outside of normal business hours.
II. Duties and Responsibilities
The Infrastructure & Security Administrator serves as the primary service owner for:
- Cisco Meraki network infrastructure
- Fortinet/FortiGate firewall services
- Virtual Private Network services
- Physical security technology
- Video surveillance systems
- Electronic access control technology
- Network-connected point-of-sale and meal-service technologies
- UPS and infrastructure power monitoring
- Network-connected operational technology
- Backup and recovery infrastructure, where assigned
- Core network services and infrastructure dependencies
- Provide confidential information for bargaining unit contract negotiations
- Management of student interns
Essential Duties and Responsibilities
Network Infrastructure
- Administer the College's Cisco Meraki network environment.
- Configure, maintain, monitor, and troubleshoot switches, wireless access points, VLANs, routing, addressing, and related networking technologies.
- Maintain reliable wired and wireless connectivity throughout classrooms, labs, offices, public spaces, and other College facilities.
- Maintain connectivity between college buildings and campuses using SDWAN and VPN technologies.
- Monitor network capacity, availability, utilization, performance, and security.
- Plan network improvements, equipment replacement, expansion, and lifecycle activities.
- Maintain accurate network diagrams, inventories, configurations, and documentation.
- Coordinate Internet, telecommunications, and network-related vendor services as assigned.
Firewall and Perimeter Security
- Administer and maintain the College's FortiGate firewall environment.
- Maintain firewall policies, segmentation, secure remote access, filtering, threat-prevention capabilities, and related security functions.
- Regularly review firewall configurations, administrative access, firmware, security recommendations, and logs.
- Maintain appropriate network segmentation between administrative, instructional, student, guest, infrastructure, Internet-of-Things, and other network environments.
- Work with the Cloud Services Administrator and Director of Application Services to securely provide network access to cloud and enterprise services.
Cybersecurity Operations
- Serve as the primary technical lead for day-to-day cybersecurity operations.
- Implement security standards, technical controls, and remediation activities established under the College's cybersecurity program and direction from the CIO.
- Monitor security events, alerts, logs, and threat information.
- Investigate suspicious activity and coordinate technical incident response.
- Conduct or coordinate vulnerability scanning and remediation activities.
- Track identified vulnerabilities through remediation or documented risk acceptance.
- Assist in maintaining secure configurations for network, infrastructure, and connected systems.
- Participate in cybersecurity incident response, containment, recovery, and post-incident review.
- Support cybersecurity assessments, audits, cyber insurance requirements, and risk-management initiatives.
- Assist the CIO with development and testing of cybersecurity incident response and disaster recovery plans.
- Work collaboratively with the Cloud Services Administrator on identity security, endpoint security, authentication security, and cloud-related incidents.
Physical Security and Operational Technology
- Administer or provide technical ownership for network-connected physical security systems.
- Support video surveillance systems, cameras, recorders, management platforms, and related infrastructure.
- Support electronic access control systems in collaboration with appropriate College departments.
- Provide technology support for network-connected point-of-sale systems, meal swipe terminals, card systems, and similar operational technologies.
- Maintain appropriate network segmentation and security controls for Internet-of-Things and operational technology devices.
- Coordinate vendor support, upgrades, lifecycle planning, and troubleshooting for assigned systems.
- Maintain accurate documentation of systems, network dependencies, credentials, support contacts, and configurations.
Infrastructure Resilience
- Monitor UPS systems, generators, and other infrastructure technologies that support technology service availability.
- Participate in business continuity and disaster recovery planning.
- Maintain documented recovery procedures for assigned services.
- Conduct or participate in periodic recovery and resilience testing.
- Identify infrastructure single points of failure and recommend appropriate mitigation.
- Monitor infrastructure health and proactively address conditions that could result in service disruption.
Security Architecture and Risk Reduction
- Recommend network and infrastructure changes that improve institutional security.
- Apply principles of least privilege, segmentation, defense in depth, secure administration, and risk reduction.
- Evaluate network-connected devices and systems for security and supportability before implementation.
- Participate in vendor and product security reviews as requested.
- Assist with maintaining inventories of network-connected devices and critical infrastructure.
- Identify unsupported, obsolete, insecure, or unmanaged technologies and develop remediation recommendations.
Service Management and Documentation
- Serve as primary owner of assigned infrastructure and security services.
- Maintain complete and current system documentation, network diagrams, administrative procedures, recovery procedures, and support information.
- Maintain configuration backups when appropriate.
- Develop standard operating procedures sufficient for another IT employee to provide essential service coverage.
- Identify and cross-train secondary service owners.
- Participate in change management, service reviews, incident reviews, and problem management.
- Maintain accurate vendor support, licensing, warranty, and lifecycle information for assigned systems.
Projects and Continuous Improvement
- Lead infrastructure and security projects assigned by the CIO.
- Develop implementation plans, project milestones, testing procedures, and documentation.
- Recommend modernization and security improvements based on institutional needs and technology developments.
- Proactively identify opportunities to improve reliability, security, manageability, and cost effectiveness.
- Participate in planning for renovations, classroom projects, construction, moves, and other initiatives involving network or infrastructure technologies.
Professional Development
- Maintain current knowledge of networking, cybersecurity, firewalls, wireless technologies, physical security systems, and related infrastructure.
- Participate in ongoing professional development relevant to assigned responsibilities.
- Develop and maintain technical competencies through formal training, certification, conferences, vendor education, self-study, or other approved professional development.
- Share knowledge and security awareness with other Information Technology employees.
Team Responsibilities
- Work closely with the Cloud Services Administrator on identity, endpoint, cloud, and cybersecurity matters.
- Provide technical escalation and consultation to Campus Technology Specialists.
- Cross-train other IT employees on infrastructure and security systems.
- Participate in major IT implementations and institutional projects.
- Coordinate effectively with vendors, Facilities, Public Safety, and other institutional departments.
- Participate in emergency response, service restoration, and critical infrastructure maintenance as required.
- Perform other technology-related duties consistent with the responsibilities of the position.
III. Qualifications – Education, Experience, and Skills
Minimum Qualifications
- Associate degree in information technology, networking, cybersecurity, computer science, or a related field and significant relevant professional experience; or an equivalent combination of education, training, and experience.
- Demonstrated experience administering enterprise network technologies.
- Experience administering firewalls, wireless networks, switches, or other network infrastructure.
- Understanding of contemporary cybersecurity principles and practices.
- Demonstrated ability to troubleshoot complex network and infrastructure problems.
- Demonstrated ability to maintain technical documentation.
- Strong communication and organizational skills.
- Ability to independently manage projects, priorities, and assigned services.
- Ability and willingness to continually learn new technologies and adapt to changes in the College's technology environment.
Preferred Qualifications
- Bachelor's degree in cybersecurity, information technology, networking, computer science, or related field.
- Experience with Cisco Meraki networking technologies.
- Experience with Fortinet or FortiGate technologies.
- Experience with enterprise wireless networking.
- Experience with vulnerability management, security monitoring, incident response, or related cybersecurity functions.
- Experience supporting video surveillance, access control, or other network-connected operational technologies.
- Experience with network monitoring, logging, or security information systems.
- Experience working in higher education.
Relevant professional certifications in CompTIA, networking, Fortinet, Cisco/Meraki, cybersecurity, or related areas are preferred.
Knowledge, Skills, and Abilities
The successful candidate must demonstrate:
- Ability to take direction.
- Strong networking and infrastructure troubleshooting skills.
- Strong understanding of cybersecurity principles.
- Initiative and ability to identify risks and improvements without waiting for detailed direction.
- Ability to analyze complex technical problems and develop sustainable solutions.
- Strong documentation and organizational skills.
- Ability to manage multiple priorities and projects.
- Ability to communicate technical risk to both technical and non-technical audiences.
- Ability to collaborate effectively across departments.
- Commitment to professional development and continuous improvement.
- A service-oriented approach to supporting the mission of the College.
Hocking College is an Equal Opportunity Employer and does not discriminate on the basis of race, color, national origin, sex, sexual orientation, genetic information, religion, age disability or military status in employment or the provision of services.
Reasonable accommodations may be requested and reviewed according to the Americans with Disabilities Act (ADA).
