Network Architect

The Department of Information Technology (DoIT) provides support to state agencies, the Executive Office of the Governor, the Governor’s coordinating offices, and a variety of independent agencies within the Executive Branch.

Striving to provide the highest level of customer service to its internal and external customers, DoIT supports Maryland’s agencies and commissions through its leadership and strategic direction for Information Technology and Telecommunications, establishing a long range, target technology architecture, encouraging cross agency collaboration and advocating best practices for operations and project management.

STD 0023

100 Community Place, Crownsville, MD 21032

This role ensures that the stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes. The Network Architect collaborates within the information technology teams and throughout the business to develop and maintain technology roadmap components to optimize security architecture processes. The Network Architect is expected to demonstrate expertise to execute strategic direction as well as technical expertise in overall information security architecture, Infrastructure security architecture, Application and Data security architecture, and enterprise network and application architecture.

The Network Architect will work closely with the DoIT CTOs, CDXO, and State CISO, and other stakeholders, to ensure all state security and privacy considerations and requirements are addressed and in the design of the solution. This role requires strong technical knowledge and hands-on experience in security requirements analysis, security architecture, security operations and maintenance. Employees in this position will provide technical guidance to networkMaryland engineers on projects of medium to high complexity. Employees in this position have advanced knowledge related to hosting environments, wide area and local networks, identity & access management platforms, IDS/IPS, and all other components of an enterprise data network. Employees will guide in execution of Incident, Change, Release, Problem, Performance, and Availability Management.

This position may be subject to an on-call 24 hours a day and may be required to travel to field locations and have access to an automobile in the event a state vehicle cannot be provided.

• Designing and Implementing Network Security: Developing and integrating cybersecurity designs for systems and networks and determining protection needs for information systems and networks. Providing and maintaining supporting documentation of solutions and architectures. Review and Validate implementations against approved architecture and design. Develop and enforce Information security architecture standards. Plans, research, and designs security architecture for IT systems. 
• Managing Disaster Recovery & Tests: Oversees and establishes disaster recovery procedures and performs regular system tests. Develops After Action Reports and remediation strategies to improve cyber resilience. Support the creation of reliable automated end-to-end security tests. 
• Aligning to Business Requirements: Evaluate product business cases including functional and detailed design specs to ensure security standards are met. Consult, advise or oversee the secure design of key IT system and infrastructure projects to ensure alignment with enterprise security architecture. Identify and prioritize critical business functions in collaboration with organizational stakeholders. 
• Responding to incidents: Supporting the prompt response to network and security incidents, investigates, and providing thorough post-event analyses. Develops remediation strategies and updates architecture requirements to prevent future incidents. 
• Providing strategic direction: Providing the vision and strategic direction for enterprise-wide network architecture and design. Serve as expert across network functional areas, which include nMD Infrastructure, Data Security, Operations, Governance, Risk and Compliance. Lead, manage, and mentor a team of Network engineers. 
• Staying current: Staying up to date on changing technologies and emerging threats. Report underlying security issues and propose enhanced security protections and/or mitigation controls. Perform analysis to validate established security requirements and to recommend additional security requirements and safeguards

Experience: Six years of experience, five or more years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology and an additional one year of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software.

Note:

1. Candidates may substitute graduation from an accredited high school or possession of a high school equivalency certificate and thirty credit hours from an accredited college or university in Computer Science, Computer Technology, Management Information Systems or other information technology-related field to include coursework in application, communication, database or operating systems software technology for the additional one year of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software.

2. Candidates may substitute experience operating computer systems; or scheduling, controlling input and output to process data on computer systems; or evaluating, implementing and maintaining computer hardware and software; or converting data from project specifications by developing program code using generally accepted computer programming languages may be substituted for high school education on a year-for-year basis for high school education.

3. Candidates may substitute the possession of a Bachelor's degree in Computer Science, Information Systems, Information Technology, or related field from an accredited college or university and five or more years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology for the required experience.

4. Candidates may substitute the possession of a Master's degree in Computer Science, Information Systems, Information Technology, or related field from an accredited college or university and three years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology for the required experience.

5. Candidates may substitute U.S. Armed Forces military service experience as a commissioned officer in the Computer Systems Operations classifications or Computer Systems Operations specialty codes in the Information Technology field of work on a year-for-year basis for the required experience.

Preference will be given to applicants who possess the following preferred qualification(s). Include clear and specific information on your application regarding your qualifications.

1. Experience with multi-vendor environments (Cisco, Juniper, Aruba, Palo Alto, Fortinet, etc.) is preferred. 
2. Experience with network automation and scripting languages (e.g., Python, Ansible) is preferred.

Employees in this classification may be subject to call-in 24 hours a day and, therefore, may be required to provide the employing agency with a telephone number where the employee can be reached. Employees may be furnished with a pager or cell phone.

Applicants for this classification may handle sensitive data. This will require a full scope background investigation prior to appointment. A criminal conviction may be grounds for rejection of the applicant.

Employees may occasionally be required to travel to field locations and must have access to an automobile in the event a state vehicle cannot be provided. Standard mileage allowance will be paid for use of a privately owned vehicle.

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date. We will not consider information submitted after this date. Successful candidates will be ranked as Best Qualified, Better Qualified, or Qualified and placed on the eligible (employment) list for at least one year.

The assessment may consist of a rating of your education, training, and experience related to the requirements of the position. It is important that you provide complete and accurate information on your application. Please report all experience and education that is related to this position.

STATE OF MARYLAND BENEFITS

Online applications are highly recommended. However, if you are unable to apply online, the paper application and supplemental questionnaire may be submitted to: Department of Budget and Management, Recruitment and Examination Division, 301 W. Preston St., Baltimore, MD 21201. Paper application materials must be received in our office by the closing date for the recruitment. No postmarks will be accepted.

For questions regarding this recruitment, please contact the DBM Recruitment and Examination Division at Application.Help@maryland.gov or 410-767-4850, MD TTY Relay Service 1-800-735-2258.

We thank our Veterans for their service to our country.

People with disabilities and bilingual candidates are encouraged to apply.

As an equal opportunity employer, Maryland is committed to recruitment, retaining and promoting employees who are reflective of the State's diversity.