Thank you for your interest in a career with County of Galveston. Please click on the Apply button if interested in this job.

General Description

We are seeking a highly skilled and experienced Network & Security Manager to lead the design, implementation, and governance of our enterprise network and security infrastructure. This role combines technical depth with leadership responsibilities, ensuring the stability, scalability, and security of critical systems across both on-premises and cloud environments. The ideal candidate will have strong expertise in advanced data center fabrics, routing protocols, firewalls, load balancing, secure access, identity solutions, and hybrid cloud networking, along with proven experience guiding teams and driving strategic initiatives.

Duties and Responsibilities

The functions listed below are those that represent the majority of the time spent working in this class.  Management may assign additional functions related to the type of work of the class as necessary.

• Lead the Network & Security team, providing technical direction, mentorship, and performance management.
• Define and execute the network and security roadmap, aligning with business goals and compliance requirements.
• Develop, implement, and enforce network and security policies, ensuring consistent standards across the enterprise.
• Design, implement, and test disaster recovery and failover strategies to ensure high availability, business continuity, and rapid recovery from network or security incidents.
• Partner with IT leadership to drive modernization initiatives and technology adoption.
• Oversee the design and operation of Cisco Nexus Fabric environments, including VXLAN EVPN spine-leaf architectures.
• Ensure optimal performance and resiliency of underlay/overlay networks leveraging OSPF, BGP, and MP-BGP.
• Manage enterprise Cisco switching and wireless infrastructure, ensuring secure, reliable connectivity.
• Architect and maintain Cisco Voice solutions (CUCM, Unity, Jabber, Webex) to support enterprise unified communications.
• Direct the deployment, configuration, and lifecycle management of Palo Alto and Cisco Firepower NGFWs.
• Develop firewall policies, segmentation strategies, and incident response processes.
• Oversee Cloud Access Security Broker (CASB) solutions for SaaS visibility, compliance, and threat protection.
• Manage Cisco Duo for multi-factor authentication (MFA), Zero Trust access, and secure user identity management.
• Manage Cisco ISE for policy-based network access control and identity enforcement.
• Apply CISSP-level security best practices across governance, risk management, and compliance frameworks.
• Manage enterprise-class F5 load balancers, ensuring high availability and secure application delivery.
• Administer Microsoft Defender for Endpoint and Identity to strengthen endpoint protection and identity threat defense.
• Collaborate with application teams to optimize performance and protect critical workloads.
• Establish and enforce standards, policies, and documentation for network and security operations.
• Manage vendor relationships and evaluate emerging technologies.
• Collaborate with compliance, audit, and risk teams to ensure regulatory alignment.

Minimum Education and Experience Requirements:

Requires Bachelor’s degree in cyber security, computer science or related field or equivalent experience.

Requires five years of progressive experience in network infrastructure, cyber security technology and risk management with two years of supervisory experience or closely related experience.

Advanced knowledge of risk assessment tools, technologies and methods required.

Knowledge of authoring and executing incident response and recovery plans required.

Physical Demands/Work Environment:

Physical demands refer to the requirements for physical exertion and coordination of limb and body movement.

Unavoidable hazards refer to the job conditions that may lead to injury or health hazards even though precautions have been taken.

The work is typically performed sitting at a desk or table or while intermittently sitting, standing, bending, crouching, or stooping. The employee occasionally lifts light and heavy objects.

This position is required to be on call as needed and must be available 365/24/7 to respond to security incidents.

Emergency Preparedness Tier Level: 1

Required Skills & Experience

Proven leadership experience in network and security management.

Hands-on expertise with Cisco Nexus Fabrics, VXLAN EVPN, and spine-leaf architectures.

Strong background in routing protocols: OSPF, BGP, MP-BGP.

Deep knowledge of Palo Alto and Cisco Firepower firewalls.

Experience with Cisco ISE, Cisco Duo MFA, Microsoft Purview CASB, and Defender for Endpoint/Identity.

Proficiency with F5 load balancing, Cisco Catalyst switching, Cisco WLCs, and Cisco Voice Architecture.

Excellent communication, documentation, and stakeholder management skills.

Special Certifications and Licenses:

CISSP certification (required or strongly preferred for senior-level security leadership).

Cisco certifications: CCNP/CCIE Data Center or Security.

Palo Alto PCNSE certification.

F5 Certified Administrator (F5-CA).

Experience in hybrid cloud networking and security (Azure, AWS).

Valid TX Driver’s License

Must maintain CJIS compliance

Department:  Information Technology

Salary: $131,289.00

The County of Galveston is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, religion, sex, sexual orientation, age, disability, gender identity or expression, genetic information, veteran status or any other characteristic protected by law.