Network and Security Engineer(P3)

IMPORTANT NOTICE REGARDING APPLICATION DEADLINE: Please note that the closing date for submission of applications is indicated in local time as per the time zone of the applicant’s location.

Organizational Setting

The Department of Safeguards carries out the IAEA’s duties and responsibilities as the world’s nuclear inspectorate, supporting global efforts to stop the spread of nuclear weapons. The primary role of the Department is to develop and implement IAEA safeguards to ensure that there is no diversion of declared nuclear material from peaceful activities and no indications of undeclared nuclear material or activities in a State as a whole.

The Department comprises nuclear safeguards inspectors, responsible for carrying out inspections and verifications of all-safeguards relevant information for nuclear facilities in over 180 States; and technical staff responsible for a wide range of activities including: developing concepts and approaches for implementing safeguards; developing and maintaining safeguards equipment; providing analytical and laboratory services for sample analysis; collecting, evaluating and analysing safeguards-relevant information; providing information and communication technology infrastructure and services; and providing programme coordination support.

Operations Divisions, and the Office for Verification in Iran, perform and document safeguards verification activities and conduct analysis and evaluations aimed at providing assurances that States comply with their nuclear safeguards commitments. These teams implement a broad range of measures, including information analysis and in-field verification, to draw soundly based safeguards conclusions for States.

Main Purpose

Reporting to the Team Leader, the Network and Security Engineer applies technical knowledge in the secure and efficient design, implementation and operation of the Department of Safeguards network and security infrastructure, and manages its hardware and software resources. This is achieved by contributing to the design and implementation of the network, security and communication projects which enhance and support the Department’s Information and Communication Technology (ICT) infrastructure with the objective of achieving highly reliable, highly available and secure LAN and WAN services. Additionally, the Network and Security Engineer will contribute to the development and enforcement of standards, policies and procedures for the efficient and secure operation of the Department’s ICT infrastructure.

Role

The Network and Security Engineer is: 1) a technical specialist, ensuring the smooth and secure operations and monitoring of the Department’s network and security infrastructure; 2) a technical advisor, providing technical advice and guidance to management and peers; 3) a focal point for designing, coordinating and delivering secure network and telecommunications solutions and services; 4) a subject matter expert, providing analysis, and resolution of technical issues on network, security, and telecommunications equipment; and 5) a project manager, defining, planning and implementing network, security infrastructure, and telecommunications projects.

Functions / Key Results Expected

Operational responsibilities: Operate network and security related infrastructure to ensure high availability and conformity to the Department’s security standards and policies. This applies to all network and security infrastructure which includes network switches, routers, firewalls, Virtual Private Network (VPN) devices, intrusion detection devices, data diodes and Network Access Control (NAC) devices located in headquarters and at remote sites.

– Problem solving: investigate and resolve technical issues related to services within his/her own area of responsibility, following an analytical and methodical approach.

– Technical guidance: provide specialist advice based on professional expertise to management, colleagues and customer base on relevant network, telecommunication and security infrastructure equipment and projects.

– Design: Provide planning and design for all network, telecommunication and security infrastructure related projects in a complex multi-site environment, with focus on security, high-availability, and disaster recovery.

– Monitoring: design, implementation and operation of network and security infrastructure monitoring systems and traffic analysis tools for the purpose of capacity planning, performance assessment and lifecycle management including the quality of business/application services and security aspects.

– Maintenance: perform preventive and routine maintenance on network and security infrastructure on a regular basis and in response to out-of-cycle vulnerabilities. This includes regular patching, hot-fixes as well as system upgrades. Maintenance is to be performed in compliance with formal change management procedures and coordinated with other technical teams and the customer base.

– Procurement management: Act as a technical expert supporting procurement procedures for the acquisition of hardware, software, support, warranty, and consultation services related to network and security infrastructure. Coordinate procurement activities related to the Department’s network and security infrastructure, including maintenance, support and warranty. 

– Project management: manage ICT network and security infrastructure projects to ensure that projects produce the required results and deliverables and are completed in a timely manner. This includes planning and monitoring the project, directing the project team, and creating relevant project documentation.

– Security response: Provide expert insight and analysis on the Department’s network infrastructure to support security and operations specialists as part of a security incident response team.

– Documentation: Create and maintain design, operational and inventory documentation related to Department’s network and security infrastructure.

Competencies and Expertise

Core Competencies(Competency Framework)

Functional Competencies

Required Expertise

Asset Expertise

Qualifications, Experience and Language skills

• Bachelor’s Degree – Computer science, information management or a related field
• Minimum of 5 years of experience as a Network Engineer or Security Engineer in an enterprise environment is required.
• Minimum of one Cisco professional level certification, such as CCNP, is required.
• Expert knowledge of network troubleshooting, network diagnostic, monitoring and analysis tools is required
• Firewall certifications such as CheckPoint, Palo Alto or Juniper are highly desirable.
• Security certifications such as CISSP, Security , GIAC Security Essentials and others are a benefit.
• Work experience and knowledge of the Cisco Unified Computing System and Hyperconverged Infrastructure is a benefit
• Experience in project management, including project planning, work assignment and supervision, and in progress review and reporting. Prince2 certification and experience is an advantage.
• Experience in ITIL is an advantage.
• Experience in a secure environment focused on hosting classified information is an asset.
• Excellent oral and written command of English. Knowledge of other official IAEA languages (Arabic, Chinese, French, Russian and Spanish) is an asset.

Remuneration

The IAEA offers an attractive remuneration package including a tax-free annual net base salary starting at US $64121 (subject to mandatory deductions for pension contributions and health insurance), a variable post adjustment which currently amounts to US $ 37447, dependency benefits, rental subsidy, education grant, relocation and repatriation expenses; Other benefits include 6 weeks’ annual leave, home leave travel, pension plan and health insurance. More information on the conditions of employment can be found at: https://www.iaea.org/about/employment/professional-staff/conditions

General Information

• The IAEA’s paramount consideration in the recruitment of staff member is to secure employees of the highest standards of efficiency, technical competence and integrity.
• Staff Members shall be selected without any unfair treatment or arbitrary distinction based on a person’s race, sex, gender, sexual orientation, gender identity, gender expression, religion, nationality, ethnic origin, disability, age, language, social origin or other similar shared characteristic or trait.
• The IAEA is committed to gender equality and to promoting a diverse workforce. Applications from qualified women and candidates from developing countries are strongly encouraged.
• Applicants should be aware that IAEA staff members are international civil servants and may not accept instructions from any other authority. The IAEA is committed to applying the highest ethical standards in carrying out its mandate. As part of the United Nations common system, the IAEA subscribes to the following core ethical standards (or values): Integrity, Professionalism and Respect for diversity.
• The IAEA has a zero-tolerance policy on conduct that is incompatible with the aims and objectives of the United Nations and the IAEA, including sexual harassment, abuse of authority and discrimination.

Evaluation process

• The evaluation of applicants will be conducted on the basis of the information submitted in the application according to the selection criteria stated in the vacancy announcement. Applicants must provide complete and accurate information. Evaluation of qualified candidates may include an assessment exercise, which may be followed by a competency-based interview.
• Candidates under serious consideration for selection may be subject to reference and background checks as part of the recruitment process.

Appointment information

• Appointment is subject to a satisfactory medical report.
• Staff members may be assigned to any location.
• Candidates appointed to posts in the Professional and higher categories are subject to IAEA rotation policy and their maximum tour of service shall normally be seven years.
• The IAEA retains the discretion not to make any appointment to this vacancy, to make an appointment at a lower grade or with a different contract type, or to make an appointment with a modified job description or for shorter duration than indicated above.