Program Specialist VI (Network Firewall Manager) 21-0238

Office of the Attorney General

Office of the Attorney General
DIVISION: Child Support – Systems Operations 453
JOB TITLE: Network Specialist VI WORKING TITLE: Network Firewall Manger
POSTING DATE: March 1, 2021
LOCATION: 5500 E. Oltorf, Austin, TX 78741

Responsible for managing the network team, providing leadership, guidance, and direction to the team. Provides highly advanced technical telecommunications expertise in the configuration, maintenance, and monitoring of the security of CSD networking devices (Cisco ASAs, Palo Alto IPS, VPN concentrators) to ensure protection of the network; provides technical expertise with Wide Area Networks (WANs) and wireless network hardware/software to support statewide operations; provides highly complex Tier II-III support for VPN,
Firewall/IPS and WAN/LAN network; performs duties to mitigate network security threats; performs thorough audits of Firewall rules and configuration, PTP connections, VPN connections, and develops and implements best practices; plans and assigns work, mentors and trains others.. Work involves planning and coordinating with business units’ technology requirements for new initiatives or for improving existing systems. Mentors, trains, and reviews the work of others. OAG employees enjoy excellent benefits along with tremendous opportunities to do important work and make a positive difference in the lives of all Texans.

Function Description
Manages the network team, develops training plans, performs performance reviews, provides direction and guidance to team.
Maintains, administers, and monitors networking devices, such as adaptive security appliances (ASAs) and or next gen firewalls, intrusion prevention systems (IPSs) and VPN concentrators to ensure protection of the CSD network; performs duties to mitigate network security threats
Provides highly advanced Tier II-III support for site to site VPN tunnels, Firewall/IPS and WAN/LAN network
Performs thorough audits and proactive remediation of findings related to firewall rules and configuration, PTP connections, VPN tunnel connections, and develops and implements solutions and best practices; develops and deploys a network security baseline and other security controls
Performs network diagramming of Firewall/IPS, including connected devices and remote office connections; documents all firewall connections and rules; and maintains firewall inventory
Researches available products, solutions, and emerging technologies and participates in efforts to review products and secure solutions; investigates, recommends and implements new technologies, security enhancements, and purchases; gathers requirements, analyzes alternatives, and provides cost analysis and test options; recommends, documents, and communicates highly technical solutions
Provides training and knowledge transfer on network devices
Performs related work as assigned
Maintains relevant knowledge necessary to perform essential job functions
Attends work regularly in compliance with agreed-upon work schedule
Ensures security and confidentiality of sensitive and/or protected information
Complies with all agency policies and procedures, including those pertaining to ethics and integrity

Education: Graduation from high school or equivalent
Education: Bachelor’s degree from an accredited college or university; experience in the following (or closely related) fields may be substituted for the required education on a year-for-year basis: firewall support, information technology, network support, or troubleshooting and resolving issues related to personal computers, wide area networks (WANs), local area networks
(LANs), or wireless LANs
Experience: Ten years of full-time experience working in the following (or closely related) fields: WAN/LAN technologies, firewall support, information technology, network support, or troubleshooting and resolving issues related to wide area networks (WANs), local area networks (LANs), or wireless LANs; may substitute an advanced degree in a related field for two of the required years of experience
Experience supporting infrastructure to meet network requirements by monitoring performance and availability and tuning network infrastructure to meet SLAs for LAN, WAN, etc.
Experience with design, configuration, and support of enterprise data center technologies
Experience in an environment with deeply embedded change management control
Experience with the configuration and maintenance of Cisco routers and switches, Firewall and Intrusion Detection/Prevention Systems and FTP connections
Knowledge of Cisco equipment, including policy management, VPN creation, management and troubleshooting, network design, deployment, engineering, support, and firewalls
Knowledge of Firewall IDS/IPS deployment and support of routing/switching background with a deep understanding of L2 technologies, L3 technology and use of firewall attestation tools
Knowledge of NIST security protocols and processes
Knowledge of cause and effect when making network changes
Skill in handling multiple tasks, prioritizing, and meeting deadlines
Skill in effective oral and written communication
Skill in exercising sound judgment and effective strategic decision making in a rapidly changing environment
Ability to participate as an effective member of a team and communicate technical concepts to a broad range of technical and non-technical staff
Ability to provide on-call support, 24 hours per day/7 days per week, during emergency situations
Ability to receive and respond positively to constructive feedback
Ability to analyze and problem solve
Ability to work cooperatively with others in a professional office environment
Ability to provide excellent customer service
Ability to arrange for personal transportation for business-related travel
Ability to work more than 40 hours as needed and in compliance with the FLSA
Ability to lift and relocate 30 lbs.
Ability to travel (including overnight travel) up to 5%

Experience using CA or other network monitoring tools and products
Cisco Certified Network Professional (CCNP) or Cisco Certified Security Professional (CCSP)

Applications for employment with the Office of the Attorney General (OAG) can be easily submitted through the OAG’s Job Postings Page
( The OAG also accepts applications submitted through Please note: A State of Texas application must be completed to be considered. Pursuant to the Texas Government Code, an applicant for any OAG position may be subject to a criminal background check. Military Crosswalk information can be accessed at


Posted: April 28, 2021