Senior Network Security Operations Analyst_

Portland

At PGE, our work involves dreaming about, planning for, and realizing a smarter, cleaner, more enduring Oregon neighborhood. Its core to our DNA and we haven’t stopped since we started in 1888. We energize lives, strengthen communities and drive advancements in energy that promote social, economic and environmental progress. We’re always on the lookout for people passionate about leading and being a part of teams that are advancing innovative clean energy solutions that are also affordable and accessible to all.

**Senior Network Security Operations Analyst**

**Job Function**

Conducts active monitoring, triage, remediation, or escalation of events within the IT environment, including network security, security policy, policy enforcement and auditing, policy creation, network routing and switching, internet / intranet security posture, server, and workflow automation of tasks to support proactive network security operational awareness. Performs development and implementation of PGE’s network security practices and programs. Supports and performs administrative functions on network security infrastructure and applications.

Key Job Information:

**Specialist Professional**

+ Requires specialized depth and/or breadth of network security expertise.

+ Interprets internal or external business issues and recommends best practices.

+ Solves complex problems; takes a broad perspective to identify innovative solutions.

+ Works independently, with guidance in only the most complex situations.

+ May lead functional teams or projects.

**Key Responsibilities**

+ **Applications Support (ASUP)** Drafts and maintains network security, security policy, procedures, and documentation to support a zero-trust network architecture. Manages security enhancements to improve network security posture and performance. Ensures that all requests for support are dealt with according to set standards and procedures.

+ **IT Infrastructure (ITOP)** Defines network security management tool sets and determines network security, risk, and performance statistics. Drives the planning, design, and implementation of maintenance and installation work. Implements agreed network security changes and maintenance routines. Identifies network security operational problems and drives their resolution, checking that they are managed in accordance with agreed standards and procedures. Provides reports and proposals for improvement to specialists, users and managers.

+ **Network Security Planning (NSTPL)** Develops and maintains network security plans, contributes to setting service level agreements and plans the security infrastructure necessary to provide security services to meet those agreements.

+ **Network Security Design (NSTDS)** Produces system designs, specifications, and overall architectures, topologies, configurations, and design documentation of network security and security technology within the organization. Specifies user/system interfaces, including validation and error correction procedures, processing firewall rules, access policy, security policy and audit controls. Assesses associated risks and specifies recovery routines and contingency procedures. Translates logical designs into physical designs.

+ **Incident Management (USUP** )Ensures that security incidents are handled according to agreed procedures. Investigates escalated incidents to responsible service owners and seeks resolution. Facilitates recovery, following resolution of incidents. Ensures that resolved incidents are properly documented and closed. Analyzes causes of incidents and informs service owners to minimize probability of recurrence and contribute to service improvement. Analyzes metrics and reports on performance of security incident management process.

+ **Systems Installation/ Decommissioning (HSIN)** Takes responsibility for installation projects, providing effective team leadership, including information flow to and from the customer during project work. Develops and implements quality plans and method statements. Monitors the effectiveness of installations and ensures that appropriate recommendations for change are made.

+ **Customer Service Support (CSMG)** Ensures the inventory of components to be supported is complete and current. Drafts and maintains policy, standards and procedures for the customer service or service desk functions. Responsible for day-to-day management and work allocation to meet agreed service levels. Specifies, agrees, and applies standards. Ensures that tracking and monitoring of security and performance is carried out, metrics and reports are analyzed, and issues are resolved.

+ **System Software (SYSP)** Evaluates new security software, reviews security software updates, and identifies those that merit action. Ensures that security software is tailored to facilitate the achievement of service objectives. Plans the installation and testing of new versions of security software. Investigates and coordinates the resolution of potential and actual service problems. Ensures that operational documentation for security software is fit for purpose and current. Advises on the correct and effective use of security software.

+ **IT Estate Management (DCMA)** Develops and maintains the standards, processes, and documentation for network security hardware / software systems.

+ **Technical Specialism (TECH)** Maintains knowledge of specific specialisms, provides detailed advice regarding network security, and executes specialized tasks. The specialism can be any area of information or security technology, technique, method, product, or application area.

+ **Availability Management (AVMT)** Develops the availability management process and its operation and performs specialized availability management tasks. Develops security service and component availability, reliability, maintainability, and serviceability. Verifies security services and components meet and continue to meet all their agreed performance targets and service levels. Implements arrangements for disaster recovery and documents recovery procedures. Conducts testing of recovery procedures.

+ **Emerging Technology Monitoring (EMRG)** Monitors the market to gain knowledge and understanding of currently emerging security technologies. Identifies new and emerging hardware and software technologies and products based on own area of expertise, assesses their relevance and potential value to the organization and contributes to briefings of staff and management.

**Education/Experience/Certifications**

+ Requires a bachelor’s degree in an IT discipline or other related field or equivalent experience.

+ Eight or more years of progressive IT operations experience focusing on network security, system administration, monitoring or networking support in an enterprise environment.

+ Preferred experience with network security, zero trust, policy optimization, and administration.

+ Three or more years’ experience with automation including implementation, optimization, and adoption of automation opportunities.

+ Certifications within technical disciplines preferred.

**Competencies (Knowledge, Skills, Abilities** )

_Functional Competencies_

+ Advanced knowledge of Palo Alto NGFW, f5 Networks, Network Security systems, Cisco routing and switching technologies.

+ Advanced knowledge of network and security functions.

+ Advanced knowledge of network device, system, and security scripting automation.

+ Advanced knowledge of enterprise level firewall rule management and policy optimization.

+ Working understanding of ITIL or other service operations framework.

+ Advanced knowledge Routing Protocols and how to troubleshoot:  EIGRP, BGP, RIP-2, PBR, Route Filtering, Redistribution, Summarization

+ Advanced knowledge of Intermediate knowledge of F5 Networks LTM, GTM, GSLB, ASM, and APM.

+ Intermediate knowledge of Cloud networking and security practices in Azure, AWS, and Google.

+ Advanced knowledge of Zero Trust architectures for infrastructure and applications environments.

_General Competencies_

+ Advanced customer focus skills.

+ Advanced accuracy skills.

+ Advanced risk management skills.

+ Advanced oral and written communication skills.

+ Advanced interpersonal skills.

+ Advanced decision-making skills.

**Physical and Cognitive Demands**

_Cognitive Level_ _Substantial:_ Consistent use of logic or scientific thinking to define problems, collect information, establish facts, and draw valid conclusions (for example, engineer, HR director, plant manager, etc.).

+ Ability to adhere to set response times, deadlines, and time-sensitive tasks.

+ Ability to follow accuracy standards.

+ Ability to follow through on decision-making tasks.

+ Ability to interact effectively and collaboratively within a team environment.

+ Ability to communicate and problem solve when under stress.

+ Ability to respond and adapt to frequent change.

+ Ability to accept and demonstrate self-awareness when provided constructive feedback.

+ Ability to discern feedback and acknowledge ownership of areas of improvement.

+ Ability to avoid future mistakes by applying reasonable skills to new but similar work situations or tasks.

+ Ability to successfully collaborate with peers, managers, and others within the organization.

+ Demonstrates sound memory.

+ Ability to process new information to be applied consistently to work tasks.

**Schedule/Attendance**

+ Ability to occasionally work long hours.

+ Ability to occasionally work a variable schedule.

+ Ability to report to work and perform work during periods of severe inclement weather.

+ Ability to consistently meet attendance standards for regular, reliable, predictable, full-time attendance.

+ Ability to work shift schedule.

+ Ability to maintain ability to adjust schedule, fill in shifts and work occasional extended hours, evenings, or weekends when necessary to support operational needs.

+ Ability to support after-hour on-call with the parameter of 15-minute response times and drive into office within two-hour drive time if needed.

+ Must be fit for duty during standard work hours and during on-call rotations.

+ Ability to participate in companywide Incident Command System and its processes to maintain core company functions during crisis events.

**Physical Capabilities**

+ Driving/travel/commute: Daily within service territory - Frequently **(at least once a week or more)**

+ Driving/travel/commute: Overnight inside/outside the service territory - Occasionally **(one to two times a month or less)**

+ **Computer use (use computer regularly for entire work shift)**

+ Lifting/pushing/pulling: Up to 50 lbs.

+ Unstable surfaces requiring balance (i.e., moving equipment, boats); check all that apply: Access to:

☒ Datacenter

☒ Communications closets

☒ Electrical/HVAC rooms

☒ Raised floor/under floor

Environment - Indoor/Outdoor (check all that apply):

+ Office

PGE supports hybrid flexible work arrangements; and will have a combination of in-the-office and working offsite. This individual will need to be located within 75 miles from job location and will need to work in-the-office at least one day a week. However, these arrangements may change due to business needs or changes in responsibility.

\#LI-CU1

Compensation Range:

$113,925.00 - $189,875.00

Actual total compensation, including a performance based incentive bonus, is commensurate with experience, skills, qualifications, education, training, and internal equity. While we anticipate the selected candidate for this position will fall towards the middle or entry point of the compensation range, the decision will be made on a case-by-case basis.

PGE believes in rewarding dedicated performance. We provide a total rewards package that is designed to reward your contributions to the company, and, at the same time, support your well-being and professional development, both now and into the future. To find out more, click here (om/hrcs5511) .

**Join us today and power your potential!**

Assisting with storms or other Company emergencies is a part of all positions at Portland General Electric.

PGE is committed to diversity and inclusion in the workplace and is an equal opportunity employer. PGE will not discriminate against any employee or applicant for employment based on race, color, national origin, gender, gender identity, sexual orientation, age, religion, disability, protected veteran status, or other characteristics protected by law.

PGE does not discriminate on the basis of disability. We recognize individuals have a variety of abilities to offer and we believe there is much to value and celebrate by incorporating different abilities into the work we do. One very important way we live this out is in our application and interview process. We work hard to support individuals who may need an accommodation to fully participate in these processes. If you feel you may need an accommodation, or would like to request one, please notify the Talent Acquisition Specialist (Recruiter) associated with the job posting. You may also make this request by contacting [email protected] or by calling 503-464-7250. The Recruiter will provide information and next steps for the accommodation process. Our Diversity, Equity & Inclusion (DEI) team is also available for support. You can contact them at [email protected] .

To be considered for this position, please complete the following employment application by the posting close date. Posting closes at midnight (Pacific Time) on the closing date below. If no date is listed, job is open until filled.

At Portland General Electric, we’re innovators, builders, and achievers. We’re committed to powering our customers’ potential and making a difference for our community and the planet. Today, that commitment includes developing an intelligent and resilient electric grid, electrifying transportation and de-carbonizing the energy sector.

We’re proud to deliver an exceptional experience to help our customers thrive. Our mission is to make clean, reliable and affordable energy services available to all. We obsess over serving customers and are committed to growing employee career paths with purpose. Equity and inclusion are core business values; we celebrate our differences and are committed to developing teams that reflect the communities we serve.