Manager of Network Administration and Network Security

At Community Financial System, Inc. (CFSI), we are dedicated to providing our customers with friendly, personalized, high-quality financial services and products. Our retail division, Community Bank, N.A., operates more than 200 customer facilities across Upstate New York, Northeastern Pennsylvania, Vermont and Western Massachusetts. Beyond retail banking, we also offer wealth management, investment management, insurance and risk management, and benefit plan administration.

Just as our employees are committed to helping our customers manage their finances, we're committed to our employees. After all, they make it happen for our customers every day.

To ensure our people can enjoy long and successful careers here at CFSI, we offer competitive compensation, great benefits, and professional development and advancement opportunities. As an equal-opportunity workplace and affirmative-action employer, we celebrate and support a diverse workplace for the benefit of all: our employees, customers and communities.

The Manager of Network Administration and Network Security will be responsible for supporting our enterprise network environment that provides for highly available and secure network services, operational excellence, and leveraging VxLAN architectural and network segmentation advancements. This position will provide technical leadership and be a change agent in the architecture, design, configuration, testing, implementation, issue management, performance monitoring and documentation of the enterprise network environment.

Responsibilities:

• Network Design and Implementation - Provide network design, deployment and maintenance of our enterprise network infrastructure, to include VxLAN (Cisco ACI) networking technologies encompassing wired and wireless networks considering scalability, network segmentation, and adaptation to future needs.
• Capacity Planning - Proactively monitor network performance identifying potential performance impacts and apply to future network organic and acquisition growth requirements.
• Firewall and Remote Access Management - Configure and manage firewalls to ensure effective policies and access controls are in place, to include creating new policies as business and security needs require. Provide the same level of management to remote access solutions supporting our hybrid workforce, which includes web application firewall (WAF) responsibilities.
• Incident Response - Manage and respond to network infrastructure and network security incidents, isolating and containing threats and implementing remediation strategies commensurate with the incident.
• Network Security Policy Enforcement - Develop and enforce comprehensive network security polices utilizing access controls, data encryption, and vulnerability management, to include tight integration and collaboration with our Information Security organization and provide remediation activities as appropriate.
• Threat Monitoring and Detection - Monitor network traffic for suspicious activity, analyzing firewall logs and other metrics for abnormal or potential security breach traffic.
• Vendor Management - Evaluate and manage relationships with network hardware and software vendors.
• Circuit and Telecommunications Management - Manage the WAN and Internet circuits along with telecommunications assets for the enterprise to include UCaaS telephony (Avaya), Teams telephony, and the provisioning and management of mobile phones.
• Team Leadership - Lead a team of network security engineers, network administrators, and telecommunications analysts by managing/assigning tasks, and provide technical guidance and staff mentoring.

Our ideal candidate is an experienced and talented network architect and network security leader, able to work with our Information Security, Systems Administration, and Application Development groups. We are looking for an organized, accomplished, collaborative and self-starting technical leader, who can bring creative and innovative solutions to our team. This is a challenging position with opportunity for further technical and management growth.

Location: This position is a hybrid position with onsite and remote capability. This position requires several days of onsite office attendance per week in our East Syracuse, New York office.

Experience:

• Minimum of 5 years of enterprise network design, engineering, and deployment of network solutions.
• Minimum of 5 years of team leadership of network administration, network security and telecommunications staff.
• Deep understanding of networking protocols including TCP/IP, routing protocols, SDWAN and VxLAN switching technologies.
• Expertise in network security tools including Palo Alto and Meraki firewalls, web application firewalls (Cloudflare WAF), network access control (Cisco ISE), and remote access solutions (Palo Alto Global Protect and PRISMA ZTNA).
• Network security policy development and enforcement encompassing access controls, data encryption, vulnerability management and remediation activities.
• Experience with WAN circuit and SDWAN performance, tuning, and remediation of circuit connectivity and latency issues.
• Experience with network monitoring and analysis tools (Solarwinds and other telemetry data/tools).
• Experience in a Financial Institution is a plus.

Skills: Established technical leadership in conjunction with strong interpersonal relations and communication skills is required. Analytical and problem-solving skills that enable working on multiple projects simultaneously is a basic expectation. Proficiency in the creation and maintenance of supporting enterprise network architecture documentation is required (to include policies and procedures along with architectural diagrams and documents).

Education/Training: A degree in Computer Technology or related discipline is desired but not required. Proven field experience in lieu of a degree is acceptable. This position is a technical leadership position, so strong network skills and team leadership are overriding requirements.

Compensation: Commensurate with experience plus potential for annual merit increase. In addition to your competitive salary, you will be rewarded benefits including: 11 paid holidays, paid vacation, Medical, Vision & Dental insurance, 401K with generous match, Pension, Tuition Reimbursement, Banking discounts and the list goes on!

Physical Requirements:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee may be required to stand, walk or sit. Use hands and fingers, handle or feel, reach with hands or arms, and speak and hear. The employee may occasionally be required to lift and or move up to 25 pounds. Specific vision abilities required by this job include close vision, and the ability to focus.

The Company is an Affirmative Action, Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation and gender identity), national origin, citizenship status, age, disability, genetic information, veteran status, or any other characteristic protected by applicable federal, state or local law.

The Company will make reasonable accommodations for qualified individuals with a disability. If you have a physical or mental impairment and would like to request an accommodation with respect to the application process, please contact the Human Resources Department.