Network and Cybersecurity Manager #1495

Network and Cybersecurity Manager #1495

BASIC FUNCTION:

Under the direction of the Chief Technology Officer, the Network and Cybersecurity Manager

oversees the district's enterprise network infrastructure, cybersecurity posture, systems architecture,

voice communications, and cloud environments. This position serves as the operational cybersecurity and

data protection lead, ensuring that digital learning systems, administrative platforms, network

infrastructure, and student/staff data are highly available, resilient,performant,andcompliantwithstate

andfederalstandards.Theroleproactively identifies vulnerabilities, plans and executes

modernization initiatives, manages business continuity and disaster recovery, and leads incident

response activities across all district school sites and administrative facilities.

REPRESENTATIVE DUTIES:

• Oversees,designs, configures, andadministersthedistrict’senterpriseLocalArea

• Network (LAN), Wide Area Network (WAN), software-defined networking (SD-WAN), andhigh-

densitywirelessinfrastructure(WLAN)todeliverrobust,high-performance connectivity across all

schoolsites and administrative facilities.

• ActsasoperationalCybersecurityLead;implements,monitors,andenforces comprehensive

information security architectures aligned with industry frameworks (e.g., NIST CSF,CIS Critical

Security Controls) and Zero Trust architecture.

• Conducts proactive vulnerability management, automated endpoint detection and response (EDR/XDR),

regular security audits, internal network penetration testing, and riskassessmentstosafeguard

institutionalassetsagainstransomware,phishing,and emerging cyber threats.

• Develops,tests,andmaintainsincidentresponse,disasterrecovery(DR),and businesscontinuity

plans;coordinateswithlocal,county,andstatecybersecurity entities(includingCal-CSICandMS-

ISAC)intheeventofsecurityincidentsordata breaches.

• Ensuresstrict adherence tofederal andCaliforniadata privacylaws and educational standards,

including FERPA, COPPA, CIPA, California AB 1584/SOPIPA, and California Student Privacy

Alliance (CSPA)requirements; manages data encryption standardsfor data at rest and intransit.

• Deploys, monitors, tests, and patches server and storage infrastructure, on-premises

virtualization clusters, identity management systems, and directory services (Active Directory,

Entra ID/Azure AD, Google Workspace), ensuring continuous high availability and minimal

instructional disruption.

• Architects, evaluates, and optimizes hybrid-cloud and cloud computing architectures (IaaS, PaaS,

SaaS across AWS, Google Cloud, and Microsoft Azure) for educational scalability, disaster

recovery, redundancy, and cost efficiency.

• Configures, maintains, and audits perimeter and internal defenses, including Next-Generation

Firewalls (NGFW), intrusion detection/prevention systems (IDS/IPS), contentandCIPA-

compliantwebfiltering,VPN/Zero-TrustNetworkAccess(ZTNA), Multi-FactorAuthentication

(MFA), and automatednetwork access control(NAC).

• Monitors, troubleshoots, and manages physical security technology infrastructure in collaboration

with site operations, including IP surveillance camera systems, electronic access control,

environmental sensors, and emergency mass notification integration.

• Engineersandoverseesunifiedcommunications,VoIP/SIPsystems,PBXsystems, and intercom

integrations, ensuring Quality of Service (QoS) bandwidth allocation for critical voice, video

conferencing, and emergency broadcasting.

• Designs, configures, and maintains core network routing, switching, VLAN segmentation,

TCP/IP,BGP, DNS, DHCP, and bandwidth shaping to support 1:1 student deviceinitiatives,high-

stakesstateonlineassessments(e.g.,CAASPP/ELPAC),and instructional technology.

• Assists the Chief Technology Officer in long-range strategic technology planning, capitaloutlay

budgeting,hardwarelifecyclereplacementcycles,andcompliance documentationfortheFederalE-

RateprogramandCaliforniastatetechnology grants.

• Manages complex technology modernization projects from inception through deployment, directing

vendors, low-voltage cabling contractors, and cross-functional project teams while enforcing strict

change management protocols.

• Implements centralized telemetry, SIEM/log analysis, and automated monitoring systems to trace

network performance metrics, detect unauthorized intrusion attempts, and report operational

statistics to IT leadership.

• Mentors, provides advanced technical direction, and delivers cybersecurity awareness guidance

and technical training to district IT support staff, field technicians, and school site staff.

• Preparescomprehensivenetworkdiagrams,configurationbaselines,Disaster Recoverystandard

operatingprocedures(SOPs),databreachplaybooks,and compliance auditreportsfor executive

leadership and externalregulatory bodies.

• Researches and evaluates emerging enterprise technologies, automation scripting, and AI-assisted IT

operations tools to enhance operational efficiency, workflow automation, and network uptime.

• Coordinates with internal departments (Facilities, Fiscal, and Educational Services), county

offices of education (COE), and externalservice providersto resolve escalated incidents and execute

district-wide technical projects.

• Serves as an emergency technical escalation point for critical service, security, or utility outages

outside regular businesshours.

• Performsrelateddutiesasassignedconsistentwiththepositionclassificationand responsibilities.

SKILLS, KNOWLEDGE AND ABILITIES:

SKILLS are requiredtoperformadvancedtechnicalsystemsarchitecture,administrative tasks, and

project leadership. Specific skill-based competencies include: configuring enterprise core/edge

network hardware; implementing Next-Generation firewalls, VPNs, and Zero Trust access policies;

conducting vulnerability and log analyses; configuring virtual machine hypervisors and storage area

networks(SAN/NAS); utilizing scripting languages(e.g., PowerShell, Python, Bash) for network

administration and automated configuration management; deploying unified

communications/VoIP; creating detailed technical documentation, network topologies, and standard

operating procedures.

KNOWLEDGE is required of:

• Enterprise network architecture, spanning trees, routing protocols (BGP, OSPF), SD-WAN, QoS,

VLANs, and high-density Wi-Fi 6/6E/7 deployments.

• Cybersecuritystandardsandframeworks,includingNISTCSF,CISControls,ISO 27001, and

Zero TrustArchitecture.

• State and federal regulations governing public education data and technology, includingCIPA,

COPPA, FERPA, HIPAA,California EducationCode, and AB1584/SOPIPA data privacy

mandates.

• Serveroperatingsystems(WindowsServer,Linux),enterpriseActiveDirectory architecture,

Entra ID, LDAP, SSO/SAML integrations, and Group Policy management.

• Virtualization technologies(e.g., VMware vSphere, Proxmox, Hyper-V) and enterprise storage

environments.

• Public cloud services and hybrid cloud architecture (AWS, Microsoft Azure, and Google Cloud

Platform).

• Disasterrecovery, data replication,immutable backup architectures, and incident response

playbooks.

• Physical access control, video surveillance (IP cameras/VMS), and emergencymass notification

integrations. FederalE-Rate compliance guidelines, competitive bidding processes, and public

sector procurement.

ABILITY is required to:

• Design,maintain, andsecure complexenterprise ITand telecommunication networks.

• Rapidly triage, isolate, and mitigate critical cybersecurity threats, incidents, and infrastructure

failures.

• Communicate complex technical concepts and securityprocedures clearly too technical and non-

technicalstakeholders, including district leadership and school administrators.

• Establish and maintain cooperative and collaborative working relationships with districtstaff,

vendor partners, lawenforcement, and regional education agencies.

• Prioritize and manage concurrent projects under firm deadlines with frequent interruptions.

• Maintain strict confidentiality regarding sensitive student data, personnel records, and

institutional vulnerabilities.

• Remain on call and respond promptly to critical network orsecurity emergencies outside normal

business hours.

RESPONSIBILITIES:

Works under general direction of theChiefTechnologyOfficer;leading,guiding,and/orcoordinatingo

assigned technicalstaff,contractors,andprojectteams; assistingwithtechnology budgetexpenditures

andprocurement. Utilizationof someresourcesfromotherwork units is often required to perform the

job's functions. There is a continual opportunity to impact the organization's services and

instructional continuity.

MINIMUM QUALIFICATIONS:

EXPERIENCE: Aminimumof five(5)yearsofprogressivelyresponsibleexperienceinenterprise

network administration, systems architecture, infrastructure management, and cybersecurity

operations. Minimum of two (2) years of experience in a lead, supervisory, or project management

capacitymanagingcomplextechnicalrollouts.PriorexperienceinaK-12public education or public sector

environment is strongly preferred.

EDUCATION: Bachelor’s Degree from an accredited college or university in Computer Science,

Information Technology, Cybersecurity, Computer Engineering, or a related field. Qualifying

professional experience beyond theminimumrequirementmay be substituted for education on a year-for-

year basis (up to a maximum of four years).

CERTIFICATIONS & CREDENTIALS: Possession of one ormore ofthe following current

industrycertificationsisstrongly preferred:

• Networking: Cisco Certified Network Professional (CCNP), Cisco Certified Network Associate

(CCNA), Aruba Certified Mobility Associate/Professional (ACMA/ACMP), CompTIA

Network+.

• Cybersecurity: Certified Information Systems Security Professional (CISSP), Certified

Information Security Manager (CISM), CompTIA Security+, CompTIA CySA+, or GIAC

certification.

• Cloud&Systems:AWSCertifiedSolutionsArchitect,MicrosoftCertified:Azure

AdministratorAssociate,orequivalentvirtualizationcredentials(e.g.,VCP).

CLEARANCES: Meet employment requirements as applicable with state, federal, and local laws,

and Board Policy.

TERMS OF EMPLOYMENT:

• 12-month position (260 work days)

• Benefits: Medical, Dental, and Vision Benefits are provided by the District in accordance

with current contract language between CM/C and Livermore Valley Joint Unified School District

SALARY RANGE: CM/C Salary Schedule: Level 19

FLSA STATUS: Exempt

Work Environment:

The usual and customary methods of performing the job's functions require the following physical

demands:

• Work in an enterprise office, server room/MDF/IDF environment, and travel to local schoolsites.

• Physical,mental,andemotionalstamina towork under sometimes-stressful conditions with

frequent distractions and interruptions.

• Occasional lifting, carrying, pushing, and/or pulling up to 50 lbs. (e.g., network switches,

servers, UPS battery backups, rack equipment).

• Dexterityof hands andfingerstooperatenetworkdiagnostictools,crimpcabling, terminate

ethernet/fiber connections, and accesstightserver rack spaces(stooping, kneeling, crouching, or

climbing ladders in IDF closets).

• The job is performed under minimal temperature variations and in a clean atmosphere; occasional

exposure to loud acoustic noise from server fans and temperature variations in datacenter/IDF

locations.

Completion by Human Resources

Board Approval Date – November 17, 2026