Security Administrator Levels

9:00 am - 5:30 pm (7.5 hours/day) or as required

Opening

The Metropolitan Transportation Authority is North America's largest transportation network, serving a population of 15.3 million people across a 5,000-square-mile travel area surrounding New York City, Long Island, southeastern New York State, and Connecticut. The MTA network comprises the nation’s largest bus fleet and more subway and commuter rail cars than all other U.S. transit systems combined. MTA strives to provide a safe and reliable commute, excellent customer service, and rewarding opportunities.

Summary

This position is responsible for administering access to the railroad's computer systems on all computing platforms and managing various firewall and network technologies used to protect the network perimeter from intrusion. This includes resolving complex security problems, researching and implementing new security technology, providing firewall and network security solutions for large-scale initiatives, recommending policy changes to management, and developing security procedures, policies, and documentation for the IT Department and the end user community.

Responsibilities

Level 3

• Provide first-level security support for all IT-related technical problems and services to ensure that all MTA application and system availability targets are met.
• The implementation, administration, and monitoring of data security procedures on all computing platforms, ensuring appropriate documentation.
• Work with IT staff and customers to ensure awareness of security concerns, mitigation techniques, and assist in following procedures or implementing controls as necessary.
• Implementation, administration, and monitoring of physical security procedures within the IT Department and the associated documentation.
• Install, configure, and troubleshoot complex hardware and/or software solutions supporting critical business functions and customer-facing services.
• Maintain compliance with PCI-DSS Controls.
• Participate in the evaluation of new security products and security-related technologies.
• Assist and back up other Security Administrators.
• Recommend solutions for security problems to management.
• Recommend and draft security policies and procedures for MTA computing platforms and coordinate with other MTA agencies as necessary.
• Implement and maintain compliance with PCI-DSS Controls.
• Perform and coordinate electronic data discoveries, maintaining confidentiality and meeting required deliverable time frames.
• Identify security problems and review them with other Security Administrators.

Level 4

Same as Level 3 with the following additional responsibilities:

• Identify security problems and recommend solutions to management.
• Participate in the evaluation of new security products and security-related technologies.
• Plan, design, and engineer solutions and projects to be implemented within the security section.
• Perform security-related project management tasks.
• Assist and back up other Security Administrators.
• Guide less senior technicians and staff in the performance of their tasks.

Level 5

Same as Level 4 with the following additional responsibilities:

• Lead the planning and coordination of security tasks and activities in support of IT-related projects and initiatives.
• Assume complete ownership of the firewall and network security elements of a project or the implementation of any large-scale system.
• Lead and participate in all technical and non-technical tasks, such as procurement, while ensuring that milestones are met according to plan and that the quality of the final product is high.
• Design, implement, and maintain compliance with PCI-DSS controls. Communicate the importance of controls to less senior Security Administrators and other IT personnel.

Required Qualifications

Level 3:

• Knowledgeable and experienced with the administration of information security systems, including but not limited to:
  • Firewalls (E.g., Palo Alto) ,
    • Using centralized management solutions (E.g., Panorama)
    • Creation of firewall rules
    • Building site-to-site VPN tunnels
    • Applying IPS/IDS signatures (E.g., Wild Fire )
  • Proxy Servers
  • NAC Solutions
  • Remote Access Solutions
  • Micro segmentation and related system technologies
• Knowledg…