Infrastructure & CyberSecurity Engineer at World Vision Kenya

Key Responsibilities:

IT Infrastructure and Capacity Planning

• Recommends the direction for LAN/WAN, internet, wireless, and remote access services.
• Works with client teams to gather requirements. Analyses and documents requirements.
• Determines requirements impact on existing architecture, work processes and systems.
• Determines infrastructure systems specifications, input/output processes and working parameters for hardware/software compatibility.
• Adheres to policies, processes and standards.

Deployment and Management of IT Infrastructure

• Deploys and reviews new, modified or enhanced system hardware and software components or services.
• Installs, configures and maintains system hardware and software components.
• Maintains local internet, remote access, VPNs, and connectivity protocols.
• Implements and manages security infrastructure (including firewalls) on both enterprise networks and user end points to guarantee secure work environments.
• Assesses service performance risks and assists development of contingency plans.
• Researches, analyzes and implements software or hardware changes to rectify any issues.

Cybersecurity Management

• Monitors the legal and regulatory environment for developments.
• Recommends required changes to IT policies and procedures.
• Consults with other business and technical staff on potential business impacts of proposed changes to the security environment.
• Works closely with IT and development teams to design secure infrastructure solutions and applications, facilitating the implementation of protective and mitigating controls.
• Manages the implementation of the cybersecurity programs aimed at identification, management and remediation of threats to improve the cybersecurity posture.
• Assesses potential items of risk and opportunities of vulnerability in the network and on information technology infrastructure and applications.
• Reviews risk assessments, analyzes the effectiveness of IT control activities, and reports on them with actionable recommendations

Telecom Systems Management:

• Configures and maintains routers, switches and hubs for the enterprises network
• Design, implement and manage voice network configurations (including IP telephony and VoIP)
• Deploys and reviews new telecommunications components and services to ensure they meet client expectations
• Analyzes and resolves issues related to facilities bandwidth requirements, capacity planning, and analyzes system interdependencies
• May develop and implement strategies to identify future client and technology bandwidth and capacity needs
• Leads site specific disaster recovery plans.
• Implements security procedures.

FCAPS Management (Fault, Configuration, Accounting Performance, and Security):

• Monitors network/ telecommunications activity and logs problems.
• Reviews facilities bandwidth requirements and system interdependencies.
• Adjusts bandwidth on routine basis and provides input to capacity planning activities.
• Assesses network performance to ensure that it meets the present and future needs of the business.

Customer Support:

• Provides support for connectivity or related network/ communication issues for the user community.
• Provides documentation, training, and guidance for IT clients.
• Provides responsive support for problems found during normal working hours as well as outside normal working hours.

Vendor Management:

• Works with vendors to resolve network/telecom problems.
• Monitors services provided by vendors to ensure service levels meet requirements.
• Evaluates vendor solutions to ensure compliance with requirements and cost-effectiveness.
• Notifies management when contract requirements are not being met.

Research/Evaluation:

• Conducts technical research on network/telecommunications upgrades and components to determine feasibility, cost, time required, and compatibility with current system.
• Develops and maintains metrics around the system and institutes a process for continuous improvement.

KNOWLEDGE/QUALIFICATIONS FOR THE ROLE

• Bachelor’s Degree in Computer Science, Information Technology, Electrical and Electronic Engineer or other related specialized training, or equivalent work experience.
• Technical certification in one or more IT disciplines or technology. E.g. Microsoft Certified Systems Engineer. Cisco Certifications (CISSP and CCDP), ITIL, ISO/IEC 27000, NIST Information Security Standards.
• PCI-DSS compliance
• Minimum 6 years’ experience in a similar role with advanced network, cloud and/or systems related vendor certifications.
• At least 3 years’ work experience in design and operation of enterprise IT networks
• Possesses advanced knowledge of enterprise systems and cloud expertise – Azure, Amazon Web Services, MS Servers, Active Directory, DNS, DHCP, O365 and enterprise security applications coupled with a high ability to quickly learn new technologies.
• In-depth working experience with performance and status monitoring systems and protocols – SNMP, WMI, NetFlow.
• Comprehensive understanding of networking technologies and related infrastructure.
• Exceptional analytic and troubleshooting skills for solving problems.
• Understands how emerging technologies and service providers can be utilized to improve existing systems and/or increase operational efficiency.
• Experience designing and implementing security solutions.