8 DAYS AGO
Position Summary Description
Independently directs, administers and ensures the Physical Access and Control Systems (PACS) and the Video Surveillance Systems (VSS) at Seminole facilities, meets the NERC CIP regulatory requirements. This includes maintenance of server and workstation hardware, software, firmware, operating systems and patching of identified cyber assets. In addition, manages and monitors system-level security functions for the systems and network infrastructure (hardware, software, databases, etc.) that comprises the PACS, VSS and the Energy Management System (EMS).
Essential Functions
• Plans, maintains, supports and documents server, storage and affiliated hardware and software configurations for PACS and VSS.
• Directs the work activity of System Administrators and assigned interns or contractors.
• Ensures accurate records, documents and diagrams of the server and storage environment are maintained for PACS and VSS.
• Makes recommendations for changes to improve service and/or contain cost.
• Responsible for coordinating the administration and implementation of the steps necessary to ensure PACS and EMS comply with the requirements and measures of the NERC CIP Standards.
• Develops, reviews and maintains the procedures and documentation required to comply with the security requirements and measures of the NERC CIP Standards for the PACS and EMS.
• Ensures all security patching activity (assessment, testing and implementation) occur within the mandated period or creates a mitigation plan for the PACS and EMS identified cyber assets.
• Reviews security and event logs for identified cyber assets and investigate all cyber security incidents found.
• Reviews and maintains the electronic access account list and shared account list for all users and cyber assets. Verifies that accounts/assets are compliant with NERC CIP security requirements.
• Verifies the implementation and the periodic update of the PACS anti-malware definition files.
• Designs, installs and maintains the operating systems and network infrastructure systems that comprise the PACS and EMS.
• Offers technical consultation for technicians, contractors, and consultants.
• Ensures the periodic backups and testing of PACS cyber assets are performed and verified.
• Formulates and implements recovery drills for testing of PACS recovery media and exercising of the business continuity and disaster recovery plans.
• Ensures removal and proper disposes of defective or obsolete equipment is in compliance with SECI procedures.
• Serves as a SME during NERC audits.
• Creates, monitors and maintains the monthly software / ports / services baselines for all PACS cyber assets.
• Provides technical support for the Business Technology departments and corporate users of PACS and EMS data.
• Remains abreast of current and proposed NERC cybersecurity standards and initiates action as necessary to ensure compliance.
• Conduct security reviews, identify issues and make recommendations to improve system security.
• Tracks and reports the progress of all assigned tasks ensuring management's awareness of project status.
• Contributes to and conducts cybersecurity training programs.
• Keeps up to date on current cybersecurity threats, technology advancements and industry trends.
• Provides project management for assigned projects.
• Produces, organizes and maintains evidentiary documentation required for compliance with NERC CIP standards.
• Creates and coordinates the annual disaster recovery drill.
• Supports the annually required cyber vulnerability assessment.
• Provides testing and evaluation of new hardware and software.
• Produces cybersecurity reports as requested.
• Performs other duties as applicable to the position or as assigned.
Qualifications and Education Requirements
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering or a closely related field is required from an accredited institution. Two (2) years of similar experience may be substituted for each year of formal education. A minimum of five (5) years' experience in a technically progressive position with a minimum of three (3) years as a system or network administrator responsible for the installation, maintenance, and support of server hardware and software products. CompTIA, A+, CISSP or equivalent certification preferred.
Core Competencies: Adaptable, Collaborative, Conscientious, Critical-Thinking, Outcome-Driven and Professional
Technical Competencies/Skills:
• Cyber and Network Security
• NERC CIP Standards
• Network Administration
• Patch Management
• TCP/IP Networking Systems
• Storage Systems
• Data Backup and Recovery
• Server Operating Systems
• Server Hardware
• Proficiency with Microsoft Office applications
Soft Competencies/Skills:
• Effective verbal/nonverbal, listening and written communications
• Planning & Organizing
• Analytical
• Leadership
• Problem Solving
• Work Independently
• Organization
• Customer Service
• Developing Others
Physical Requirements
Must be able to follow established protective measures including wearing required personal protective equipment (PPE). Must possess a valid driver's license and acceptable Motor Vehicle Report.
Working Conditions
Some travel and work outside of normal business hours. While working in certain areas of the plant or substation there is the potential for exposure to hazards typical of an industrial working environment. Maintains critical cyber equipment in a real-time environment that requires 24/7 on-call support and is subject to call out at any time which may include extended periods during inclement weather or other emergency conditions.
Location/Region: Tampa, FL (33646)