Assistant Deputy Director – Control Systems Network Security

Job ID: 7651

Business Unit: Metro-North Railroad

Location: New York, NY, United States

Regular/Temporary: Regular

Department: Operations Ctr

Date Posted: Jun 4, 2024

Description

POSTING NO.

7651

JOB TITLE:

Assistant Deputy Director – Control Systems Network Security

DEPT/DIV:

Communication and Signal

WORK LOCATION:

New York

FULL/PART-TIME

FULL

SALARY RANGE:

$ 103 , 682 .00-$ 1 36 , 083 . 1 5

DEADLINE:

Until Filled

This position is eligible for teleworking which is currently one day per week. New hires are eligible to apply 30 days after their effective hire date .

Metro-North Railroad reserves the right to remove this posting before the Application Deadline.

Opening:

MTA Metro-North Railroad is a dynamic organization, operating out of the jewel of New York City, Grand Central Terminal. We provide service to over 86.5 million customers, traveling in and out of New York and Connecticut. A subsidiary of the Metropolitan Transportation Authority, Metro-North Railroad is one of the busiest commuter railroads in the nation. MTA Metro-North Railroad strives to provide a safe and reliable commute, excellent customer service, and rewarding opportunities to its employees.

Position Objective:

This position is responsible for developing networks and network security models to adequately protect all of Metro-North Railroad’s mission-critical and safety-critical control systems. These responsibilities include ensuring that the Control Systems are in compliance with the industry's best practices regarding cyber security intrusion detection and mitigation. This position will also be responsible for the development of work scopes to support present and future projects relating to Metro-North’s control systems.

Responsibilities:

• Lead the design, development, testing, implementation, and documentation of computer system security policies, security models, computer system security architecture and technical standards, administrative, end-user guidelines and procedures. Systems include but not limited to, CTC, SCADA, PTC, remote field systems as well as the interfaces to customer information systems.

• Design, develop, test, implement, and document computer network architecture to provide the necessary reliability and redundancy for all mission-critical and safety-critical control systems.

• Provide necessary enforcement, monitoring, maintenance, and recovery of security processes.

• Provide the necessary training and technical leadership to support personnel on network and security processes.

• Take the lead in coordinating with the MTA Network Auditors concerning the Control Systems network and security compliance.

• Lead the development and implementation of Network Cyber Security Policies in compliance with the industry's best practices.

• Lead the Network-Security team in the design, deployment, maintenance and monitoring of all networks in compliance with the MTA policies.

  Required Knowledge/Skills/Abilities:

• Strong Knowledge of Windows Servers, Workstations, and Virtual Machines (VM).

• Strong knowledge of CFR49 Part 236 requirements.

• Strong demonstrated knowledge of Cisco and Juniper Switches, Firewalls, and router configuration.

• Strong demonstrated knowledge of communications design standards and practices.

• Strong demonstrated knowledge of the integration of digital networks.

• Strong demonstrated knowledge of project management standards and practices.

• Strong oral and written communication skills.

• Strong working knowledge of Microsoft Office and/or comparable applications.

• Must be able to work in a high-profile/high-pressure environment.

• Must be able to manage complex multi-discipline projects.

• Strong knowledge of Auto CAD or comparable programs.

• Strong Knowledge of Network Security procedures and standards.

• Knowledge of Network Management Systems.

• Strong knowledge of Microsoft Project or comparable programs.

• Strong interpersonal skills with the ability to interact with internal departments and outside agencies.

• Must be able to implement and participate in Metro-North Railroad’s Priority One Safety Program .

• 24-hour 7-day availability required.

• Valid driver’s license.

  Required Education and Experience:

• Bachelor’s Degree in Electrical Engineering , Computer Science, or other related fields. Demonstrated (4) years of related education, experience and/or technical credentials, may be considered in place of a degree.

• Minimum of Seven (7) years experience in:

• deploying integrated networks (fiber, cat 6 , and others) .

• configuring and deploying (CISCO/JUNIPER/other) Firewall appliances .

• configuring and deploying (CISCO/JUNIPER/other) Network Switches and Network Routers .

• designing network environments using technologies such as IP routing, switching, OSPF, RIP, EIGRP, MPLS, Frame Relay, VLANs , IPsec, and VPN .

• working with TCP/IP, SNMP, SMTP, and RIP2 Protocols.

• Minimum of five (5) years experience managing staff and/or projects.

  The Following is/are preferred:

• Familiarity with Metro-North Policies and Procedures.

• Familiarity with Metro-North collective bargaining agreements.

• CCNA, CCNP, CISSP, CISM, CCIE, CASP+ and/or other equivalent Professional certificates.

• Familiarity with penetration testin g.

• Familiarity with Microsoft Azure or Cloud-based infrastructure .

  Other Information

  This position is safety-sensitive and subject to toxicological testing.

  According to the New York State Public Officers Law & the MTA Code of Ethics, all employees who hold a policymaking position must file an Annual Statement of Financial Disclosure (FDS) with the NYS Commission on Ethics and Lobbying in Government (the “Commission”).

  Employees driving company vehicles must complete defensive driver training once every three years for current MNR drivers; or within 180 days of hire or transfer for an employee entering an authorized driving position.

  Equal Employment Opportunity

  MTA and its subsidiary and affiliated agencies are Equal Opportunity Employers, including those concerning veteran status and individuals with disabilities.

  The MTA encourages qualified applicants from diverse backgrounds, experiences, and abilities, including military service members, to apply.