[Hiring] Network Security Administrator @Nexiva

Role Description

The Colorado Office of Information Technology (OIT) is seeking a Network Security Administrator to provide specialized network and cybersecurity administration support for multiple state agencies. This role is responsible for maintaining secure, compliant, and modern network infrastructures while supporting security operations, firewall administration, infrastructure modernization initiatives, and regulatory compliance requirements. The ideal candidate will possess hands-on experience with Palo Alto and Cisco ASA firewalls, network security best practices, and enterprise network administration.

Key Responsibilities

• Security Operations & Administration
  • Review, analyze, and implement Firewall Service Requests (FSRs).
  • Manage break-fix incidents, security tickets, and formal change requests.
  • Troubleshoot and resolve network security issues in a timely manner.
  • Participate in ongoing operational support activities for state agency environments.
• Infrastructure Modernization
  • Support hardware lifecycle management initiatives.
  • Coordinate and execute End-of-Life (EOL) hardware replacement and refresh projects.
  • Assist with migration planning, deployment, and validation of new network security infrastructure.
• Compliance & Security Management
  • Implement and maintain security controls to meet regulatory and industry compliance requirements.
  • Support compliance efforts related to IRS, FBI, and Criminal Justice Information (CJI) security standards.
  • Ensure firewall configurations and network security policies align with established security frameworks and best practices.
• Firewall Administration
  • Configure, maintain, and troubleshoot Palo Alto Next-Generation Firewalls.
  • Administer Cisco ASA firewalls, including policy management, rule creation, and troubleshooting.
  • Manage VPN connectivity, NAT configurations, and security policy implementation.

Qualifications

• Palo Alto Firewalls
  • Experience with Security Zones
  • Experience with Security Policies
  • Experience with Site-to-Site VPNs
  • Experience with Network Address Translation (NAT)
  • Experience with Basic Threat Prevention Features
  • Experience with Firewall Monitoring and Troubleshooting
• Cisco ASA Firewalls
  • Configuration and deployment
  • Rule and policy management
  • Troubleshooting and performance tuning
  • Security administration and maintenance
• Networking Fundamentals
  • Strong understanding of TCP/IP Networking
  • Strong understanding of Routing Protocols
  • Strong understanding of Subnetting
  • Strong understanding of OSI Model
  • Strong understanding of Network Troubleshooting
• Enterprise Network Security Concepts

Requirements

• 40 hours per week, Monday through Friday.
• Participation in a rotating on-call schedule for after-hours support.
• Availability for planned maintenance windows and emergency response activities outside normal business hours.

Background Requirements

• Candidates must successfully pass:
  • Criminal Background Check
  • Financial Background Check
  • Drug Screening

Preferred Skills

• Experience supporting government or large enterprise environments.
• Knowledge of security compliance frameworks and regulatory standards.
• Experience with firewall migrations and infrastructure modernization projects.
• Strong incident response and troubleshooting capabilities.