Certified Network Administrator; LAN​/WAN

Hours:

Full-Time Position – 35 Hours

Work Location:

30-30 Thomson Avenue, LIC, NY 11101

Only candidates who are permanent in the Certified IT Administrator (LAN/WAN) title, reachable on the Open-Competitive List (Exam #1111) may apply. Please include a copy of your Notice of Results card, Receipt of Filing or indicate if you are already permanent.

The New York City Department of Design and Construction, Technology & Innovation Division, is seeking an experienced and security-minded Certified Network Administrator (LAN/WAN) to manage and secure the agency’s network infrastructure. This role is responsible for the design, administration, and continuous improvement of DDC’s local and wide area networks, ensuring high availability, performance, and resilience across all systems and sites. The ideal candidate brings deep technical expertise in network infrastructure and cybersecurity, a proactive approach to threat mitigation, and the ability to lead IT projects that support agency-wide operations and modernization initiatives.

• Design, install, configure, and maintain network infrastructure, including routers, switches, firewalls, SAN/NAS, and wireless access points.
• Monitor network performance and implement improvements to optimize reliability and efficiency; perform regular maintenance and firmware updates.
• Troubleshoot and resolve network issues, outages, and connectivity problems in a timely manner.
• Maintain strong working knowledge of Active Directory, TCP/IP, DNS, DHCP, VLANs, virtual machine systems, backups, and deployment/imaging tools.
• Implement and enforce network security policies, including access controls, threat mitigation, and configuration of enterprise firewalls, VPNs, and Intrusion Detection/Prevention Systems (IDS/IPS).
• Conduct regular vulnerability assessments and coordinate remediation efforts to harden the network perimeter.
• Support Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across agency platforms.
• Monitor security logs for suspicious activity and lead incident response efforts when necessary.
• Manage and automate administrative tasks using Power Shell or similar scripting tools to improve operational efficiency.
• Coordinate network changes, upgrades, and maintenance with internal teams and external vendors.
• Lead technical projects including office setups/relocations, hardware refreshes, and implementation of cloud-based solutions.
• Develop internal communications to promote staff awareness of phishing threats and data hygiene best practices.
• Maintain comprehensive documentation of network architecture, configurations, security protocols, and incident logs.
• Ensure compliance with agency IT policies, security standards, and governance requirements.
• Provide technical support and guidance to staff on network-related issues; available for on-call or after-hours support as required.

Please note:

All candidates must be currently authorized to work full-time in the United States (U.S.). In compliance with Public Law 99-603, candidates are required to present original documents proving citizenship or the legal right to work in the U.S. DDC is unable to support or sponsor any visa application or visa extension, including but not limited to OPT/STEM visas, H-1B visas, F-1 practical training, permanent residence sponsorship, or any proposed change of visa type.

DDC does not offer a training program as required by U.S. immigration law and is not hiring temporary employees. Candidates must have proper work authorization when an employment offer is made.

Additionally, educational credentials must be from a U.S. Department of Education-recognized accredited institution. Credentials from foreign institutions require independent equivalency verification from an approved evaluation…