Network Analyst II, Security Operations

This position leads initiatives to enhance security configurations, optimize performance monitoring, and improve capacity management across both on-premises and hybrid cloud environments. The Network Analyst II also plays a key role in supporting UBC’s external network connections, including the BCNET backbone, and contributes to the continuous enhancement of network detection and response (NDR) capabilities.

A fixed work schedule is set for this role, but flexibility is required as some work must be performed outside regular business hours. The position may be required to act in an on-call capacity in the event of a cybersecurity incident or major service disruption.

Organizational Status
Reports to the BMS Manager, Energy Water Services. Works independently and collaboratively with the UBC BMS team, the UBC Thermal teams, the UBC IT teams, the Cybersecurity team, and other relevant stakeholders across academic and administrative units. Interfaces with technology professionals from other institutions, research communities, and industry partners.

Work Performed

• • Work with the BMS and PLC controls team
  • Generate a network deployment plan for buildings.
  • Support PWC report goals
  • Design and develop Network Security solutions that align with the UBC Cybersecurity guidelines. Integrating these new solutions with existing systems and solutions. Collaborating with vendors to ensure solutions will not impact operations.
  • Collaborate with the Cybersecurity Group to address vulnerabilities related to network devices reported by the vendors and 3rd parties, follow security advisories/recommendations, and perform or coordinate patches and upgrades accordingly.
  • Analyze network systems to assess the overall security risks, ensuring conformity with UBC Cybersecurity guidelines, up-to-date patching, and develop network policies or rules in order to best protect the network systems.
  • Manage and troubleshoot firewall rules & ACLs on the firewall and routers protecting the network infrastructure and operations.
  • Monitor and analyze Logs/Alerts specifically related to the security of internal network infrastructure devices. Develop, recommend, and undertake mitigation steps to proactively reduce Cybersecurity risks related to logs/alerts.
  • Support UBC IT Cybersecurity Initiatives and NMC/CI Network Projects by ensuring secure network operations and documentation.
  • Leads small and medium-sized network-specific security projects and initiatives.
  • Generates reports using CAASM to identify system vulnerabilities and security concerns. Design and develop mitigation steps to address any such identified vulnerabilities or concerns.
  • Perform system administration tasks on Linux systems, including user account management, patching, and system updates to enhance security and performance.
  • Implements fixes independently where possible or devises a strategic plan for patching, collaborating with colleagues as needed.
  • Maintain up-to-date knowledge on emerging security threats and vulnerabilities, proactively alerting the team to any issues requiring immediate attention.
  • Manage, update, and patch network security tools, and perform operational and security incident response using these tools.
  • Proactively manage privileged access management (PAM) systems, ensuring devices and accounts are configured correctly and compliant with established policies.
  • Develop, deploy and maintain automated security patching processes using tools like Ansible Tower, automate Linux server configurations and security patches, reducing manual efforts and ensuring consistency across systems.
  • Develop, implement and maintain automated pre- and post-upgrade checks to validate the health of server VMs and network devices, allowing…