SAN Administrator

SAN ADMINISTRATOR and INFORMATION ASSURANCE SECURITY OFFICER (IASO)

 

(Reports to Director of Information Technology/CISO)

 

Position Summary

 

Responsible for SAN management of the PEFCU environment, and formulation and implementation of system specific security policies and procedures. Responsible for maintaining a secure and stable SAN environment. The SAN Administrator establishes and maintains work processes and procedures, ensures adequate physical security and system controls and maintains effective and complete documentation of the SAN environment.

 

 

Primary Responsibilities

 

Manage storage area network including storage allocation, business continuance volumes, and host attachments. 

 

Evaluates impact of application changes on security.

 

Responsible for BCV?s integrity and procedures as they relate to backups.

 

Responsible for Asset Inventory Management of SAN systems and software licensing.

 

Responsible for capacity planning and disaster recovery of systems that are the responsibility of Network Operations including disaster recovery hot site.

 

Provide SAN technical support for all Credit Union locations for problems that require troubleshooting using advanced diagnostic or management tools.

 

Work with the Systems Administrator in responding to the needs and questions of network users concerning their access to resources on the servers.

 

Create operational documentation to support SAN operations functions and security.

 

Work with Director of Information Technology/CISO to make recommendations and implements improvements in computer systems and SAN.

 

Ensure the SAN is operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the accreditation/certification support documentation package.

 

Ensure that SAN recovery processes are monitored so that security features and procedures are properly restored.

 

Ensure that all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the IS.

 

Ensure that proper decisions are made concerning levels of concern for confidentiality, integrity, and availability of the data, and the protection level for confidentiality for the system.

 

Report all security-related incidents to the AISO. With approval of the CISO/AISO, initiate protective or corrective measures when a security incident or vulnerability is discovered.

 

Conduct periodic reviews to ensure compliance with the security documentation package.

 

Ensure Configuration Management (CM) for security-relevant IS software and hardware, to include IS warning banners, is maintained and documented.

 

Ensure all IS security-related documentation is current and accessible to properly authorized individuals.

 

Formally notify the AISO when changes occur that might affect the security posture of the network.

 

Ensure that system security requirements are addressed during all available phases of the system life-cycle.

 

Authorize software use prior to implementation on the system, following procedures developed by the AISO.

 

Establish audit trails and ensuring their review.

 

Administer user identification (USERID) and authentication mechanisms of the network.

 

Ensure the most feasible security safeguards and features are implemented on the network.

 

Assist AISO in maintaining configuration control of the SAN, systems and applications software.

 

Ensure that all components of the network are protected so that it can effectively and securely operate.

 

Advise AISO of security anomalies or integrity loopholes; and administering, when applicable, user identification or authentication mechanism(s) of the network.

 

Support AISO in developing and maintaining security support documentation for SAN systems.

 

Must be available to travel and work overtime as necessary to complete assigned tasks.

 

 

Secondary Responsibilities

 

Provide backup to Network Engineer, Systems Administrator and Help Desk as necessary.

 

Serve on the Credit Union Security Team as an Information Assurance Security Officer.

 

Serve on the Credit Union Configuration Management Team.

 

Serve as needed on the Credit Union Change Management Team.

 

Work closely with Assistant Network Security Officer to maintain security practices.

 



Required Skills

 

Experience in a networking environment with Windows 2000/2003, Windows XP and TCP/IP

 

Must have strong working knowledge and background of physical network design and terminology.

 

Works with cross-functional, multi-disciplined team to formulate, institute, and monitor security policies and procedures.

 

Working knowledge of security policies and procedures relating to end-user situational awareness (securing private information, user ID / password protection, etc.)

 

Excellent oral and written communication skills.

 

Must be able to understand, speak, read and write in English.

 

Must project an image of competence, efficiency and complete professionalism.

 

Skill in applying a logical approach to solving problems and willingness to follow a problem through to ultimate resolution.

 

Demonstrated ability to keep company/departmental goals in clear focus.

 

Ability to prioritize work in a logical, consistent way and attention to detail.

Strong interpersonal skills and a desire to promote team accomplishment.

Enthusiasm, enjoyment of solving problems and keeping customers satisfied.

 

Required Training or Certification

 

MCSA/MCSE 2000/2003 Certification and/or Technology related A.S. degree or equivalent experience

 

EMC DMX SAN experience

 

EMC Control Center knowledge

 

EMC PowerPath and Solutions Enabler knowledge

 

Desirable Training, knowledge or Certification

 

Cisco MDS

 

Legato Auto Start

 

Unix Experience

 

VMWare Experience