Cybersecurity Systems Administrator II

Job Category

Job Profile

Job Title

Department

Compensation Range

The Compensation Range is the span between the minimum and maximum base salary for a position. The midpoint of the range is approximately halfway between the minimum and the maximum and represents an employee that possesses full job knowledge, qualifications and experience for the position. In the normal course, employees will be hired, transferred or promoted between the minimum and midpoint of the salary range for a job.

Posting End Date

Note: Applications will be accepted until 11:59 PM on the Posting End Date.

Job End Date

This position is subject to the satisfactory completion of required background checks. Security Credential Background check required.

At UBC, we believe that attracting and sustaining a diverse workforce is key to the successful pursuit of excellence in research, innovation, and learning for all faculty, staff and students. Our commitment to employment equity helps achieve inclusion and fairness, brings rich diversity to UBC as a workplace, and creates the necessary conditions for a rewarding career.

Job Summary

The Cybersecurity Systems Administrator II designs systems hardware and software solutions, defines systems scope, and provides recommendations for all systems supported infrastructure as part of regular operations. Collaborates with management and staff from all sections of the Office of the CISO, Information Technology, other administrative and academic offices, and faculty to coordinate application support. Interacts directly with other University technology professionals.

Organizational Status

The position reports to the Cybersecurity Systems Support Manager. The Cybersecurity Systems Administrator II is a member of the Cyber Security Systems Support Team. Works independently and jointly within the Solutions Security and Architecture team. The Cybersecurity Systems Support Team will provide “hands on keyboard” help to faculties and departments as needed to get into compliance. The CSS team is essential to the maintaining and upkeep, and currency of UBC cyber tools.

Work Performed

Specific Duties:

• Analyzes and reviews functional requirements, system features, integration requirements, security requirements, and scalability and performance requirements. Reviews implementation options, discusses approach and recommendations with systems staff and users, and provides input to technology recommendations for new and changing systems requirements.
• Contributes to the ongoing planning and development of systems enhancements in support of current or new enterprise services. Collaborates with peers/team members to identify, analyze, recommend and implement appropriate system enhancements that will improve existing information systems and improve business processes and productivity. This may include assisting with the management of the lifecycle of a service or product.
• Investigates and remains current with industry technology trends in Applications field such as: Security, privacy, e-commerce, PCI, workflow, systems development methodologies, web-services, applications middleware (Apache, Tomcat, etc.), anti-spam and anti-virus, electronic forms,
• Provides advice to and consults with UBC IT colleagues or others as appropriate on complex system design issues and provides technical opinions on the viability or suitability of techniques and methodology to meet project and/or Academic Systems Support Managers' objectives and goals.
• Implements customized tools and applications, prepares functional specifications and builds proof-of-concept test environments. Develops technical specifications for system development, testing and conversion processes, within established UBC IT's technical architecture and database design.
• Provides Tier 2 operational support for production systems including troubleshooting system problem reports, resolving issues with production systems, defining operational support processes, patching systems and applications, documenting and reporting problems and providing end user support as required.
• Prepares training plans, training materials, and trains staff as required during system implementation.
• Develops a high level of expertise in the functionality of vendor product(s). Works directly with the vendor's technical support centre in order to resolve product issues.

Core Duties:

• Designs solutions to resolve system related business problems, meet user requirements, and streamline system workflows.
• Formulates and defines system scope and objectives and recommends a strategy, potential solution, or "work-around".
• Monitors and analyzes systems issues and provides recommendations for all systems supported infrastructure as part of regular operations. - Provides guidance and training to less experienced analysts.
• Writes and maintains systems documentation including user and technical manuals. - Designs, provisions and configures systems.
• Acts as a liaison between technical groups and stakeholders to coordinate the system's installation and ensure technical compatibility and satisfaction.
• Prepares documentation and defines system specific dependencies to assist in problem analysis.
• Provides recommendations for improving procedures and coordinating system implementation.
• Integrates development of best practices, standards, procedures and quality objectives across systems infrastructure or platforms.
• Maintains appropriate professional designations and up-to-date knowledge of current information technology techniques and tools.
• Performs other related duties as required.

Consequence of Error/Judgement

Information Technology plays a key role in enabling the University to achieve its goal of becoming one of the world's leading universities. The services supported by Information Technology require reliable application systems in order to provide critical functions that support all students, faculty and staff. These systems must be available on a 7x24 basis.

Decisions and actions taken by the Cybersecurity Systems Administrator II will have a direct impact on how efficiently and effectively the systems will perform and function. Errors in judgment, poor analysis, or failure to act decisively could have a detrimental effect on these systems. Unreliable systems or failure to meet contractual obligations for performance and availability will damage the reputation of Information Technology and UBC. This could adversely impact the University community, including students, faculty and staff, and could significantly impact productivity, reputation funding and revenue.

Supervision Received

Works under the general direction of the Cybersecurity Systems Support Manager and under day to day direction of Application Architects or other senior technical staff as assigned. The Cybersecurity Systems Administrator II must be able to work independently as well as contributing actively and collaboratively, and openly as a team member.

Supervision Given

May mentor less experienced staff, and other resources within the team as it pertains to application support and maintenance. May oversee deliverables as assigned to Contractors.

Minimum Qualifications

Undergraduate degree in a relevant discipline. In-depth knowledge of applications and the business requirements supporting them. Minimum of five years of related experience, or the equivalent combination of education and experience.

- Willingness to respect diverse perspectives, including perspectives in conflict with one’s own

- Demonstrates a commitment to enhancing one’s own awareness, knowledge, and skills related to equity, diversity, and inclusion

Preferred Qualifications

• Expert ability to work in all areas, and troubleshoot Linux, Windows, and VM Virtual Machines, VMware, libvirt.
• Experience with managing and supporting Windows Server, *BSD, Redhat/Ubuntu/Debian UBC prefers Redhat
• Experience with Linux and Windows patching and understanding CVEs, CVSSes and CPEs
• Experience with managing and supporting database services such as MySQL/MariaDB, PostgreSQL, Microsoft SQL
• Experience with managing and supporting networking services such as load balancers, firewalls, intrusion detection systems
• Demonstrated experience with the following tools and technologies: Python, PHP, Java, Shell, Apache, NGINX, Tomcat, JBoss, OIDC, SAML, HTTP, TLS, x509, JSON, YAML, XML, Nessus Professional, CrowdStrike Spotlight, Nucleus
• Experience with configuration and infrastructure automation tools such as Puppet, Ansible, Salt, Chef, Terraform, Nomad, etc.
• Familiar with the Elastic suite of products - Elasticsearch, Logstash, Kibana, Beats, etc.
• Familiar with big data services such as Hadoop and Spark
• Familiar with message brokers such as Redis and Kafka
• Knowledge of common version control tools, and standard office productivity tools.
• Proficient with git-based workflows
• Knowledge of IT application development and implementation best practices, "rules of thumb", benchmarks
• Thorough understanding of cybersecurity fundamentals including vulnerability mitigation strategies, how to analyze and determine vulnerability false positives, Exploit Prediction Scoring System (EPSS), threat intelligence, infrastructure security
• Ability to prepare complete, concise, and understandable technical documentation. Ability to communicate effectively verbally and in writing.

• An understanding of key trends and players in the IT industry and higher-education sector
• Applies problem-solving methodologies and tools to diagnose and solve operational and interpersonal problems
• Ability to conduct needs analyses, plan, organize, manage, monitor, complete, and evaluate projects within allocated time and resources

Competencies

Core Competencies

Collaboration - Consistently fosters collaboration and respect among team members by addressing elements of the group process that impedes, or could impede, the group from reaching its goal. Engages the “right people,” within and beyond organizational boundaries, by matching individual capabilities and skills to the team’s goals. Works with a wide range of teams and readily shares lessons learned and credit for team accomplishments.

Communication for Results - Converses with, writes reports for, and creates/delivers presentations to all levels of colleagues and peer groups in ways that support problem solving and planning. Seeks a consensus with business partners. Debates opinions, tests understanding, and clarifies judgments. Brings conflict into the open empathetically. Explains the context of multiple interrelated situations, asks searching, probing questions, and solicits expert advice prior to taking action and making recommendations. .

Problem Solving - Diagnoses problems using formal problem-solving tools and techniques from multiple angles and probes underlying issues to generate multiple potential solutions. Proactively anticipates and prevents problems. Devises, facilitates buy-in, makes recommendations, and guides implementation of corrective and/or preventive actions for complex issues that cross organizational boundaries and are unclear in nature. Identifies potential consequences and risk levels. Seeks support and buy-in for problem definition, methods of resolution, and accountability.

Role Based Competencies

Accountability - Sets enhanced objectives for self and others. Monitors performance trends and identifies opportunities to improve standards. Provides regular feedback and suggests alternative approaches necessary to ensure that organizational objectives and superior standards are achieved. Delegates responsibility and reallocates resources as needed to ensure that priorities are met for initiatives within area of responsibility.

Information Systems Knowledge - Engineers, coordinates, and submits approval for significant enterprise-wide information system solutions that align with organizational processes and long-term strategies. Recommends large-scale, best practice technological opportunities. Engages appropriate technical consultants, experts, and leaders.

Initiative - Describes future scenarios and related opportunities. Plans potential responses involving resource holders, peers, processes, and technology. Leads a timely response, seeking internal/external advice and consultation, and sustains progress through uncharted territories.