Cybersecurity Systems Administrator

Technology Services Department | Full-Time Salaried | Exempt | Non-Safety-Sensitive About the Job The Cybersecurity Systems Administrator ensures that MTD's technology environment is secure, resilient, and aligned with established cybersecurity standards. This position is responsible for implementing and maintaining cybersecurity controls across District systems, including network, server, endpoint, and cloud environments. The person in this position will work under the supervision of the Technology Services Director. Essential Functions Evaluates, implements, and maintains cybersecurity controls aligned with the NIST Cybersecurity Framework (CSF) and associated best practices Provides cybersecurity, governance, and policy recommendations to the Technology Services Director Owns identity and access security governance across Active Directory and Microsoft Entra ID, including authentication standards, privileged access requirements, Conditional Access strategy, and periodic access reviews, in coordination with the Network & Systems Administrator Implements and monitors endpoint, server, and network security configurations in collaboration with Technology Services staff Administers security tools including endpoint protection, vulnerability management, logging, and monitoring systems, and recommends improvements as appropriate Administers the District's disaster recovery program, including maintaining DR procedures, and leading periodic disaster recovery and restore testing Defines endpoint security and compliance requirements for Intune-managed devices and reviews device compliance posture and policy effectiveness in coordination with the Network & Systems Administrator Assists with development and execution of incident response procedures and participates in cybersecurity tabletop exercises. Supports data governance initiatives, including retention policies, classification, and regulatory compliance requirements Coordinates and facilitates external cybersecurity assessments, audits, and penetration tests, and assists with remediation efforts Documents security architecture, policies, and procedures Collaborates closely with the Network and Systems Administrator and other Technology Services staff to ensure secure system design and operation Prepares and maintains cybersecurity related KPIs for departmental KPI reporting Develops and conducts periodic cybersecurity training for District employees Other Duties & Responsibilities The list of duties and responsibilities is not intended to be all-inclusive and may be expanded to include other duties or responsibilities that management may deem necessary. The duties listed above are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related, or a logical assignment to the position. Physical Demands The exertion level required for this position is generally considered light work. Physical requirements include stooping, bending, standing, squatting/crouching, pushing/pulling, and reaching above shoulders. While performing the duties of this job, employees are often required to sit, with regular periods of walking and standing; talk or hear, both in person and by telephone; use hands repetitively to finger, handle, feel or operate standard office equipment; reach with hands and arms; use vision to read printed materials and a computer screen; and exert up to 20 lbs. of force occasionally or up to 10 lbs. of force frequently to lift, carry, push, pull, or otherwise move objects. Work Environment The work environment involves exposure to conditions generally found in an office setting. The noise level is quiet to moderate. There are frequent interruptions to this position's workflow and there is an expectation to hold and attend meetings on a regular basis. This position is predominantly located in one office building, but the position will sometimes require an employee to visit other locations to meet with employees or attend training and meetings, including the Illinois Terminal, Administrative Office Building, Maintenance Garage, or other off-site locations. Occasionally, the employee may need to work outdoors in inclement weather. Additional Information Work shifts vary from day to night, as needed. MTD operates seven days a week, including weekends and holidays, and this position may require some work outside of traditional business hours. All MTD employees are trained on the Management System Policy and the impacts associated with this position. Applicant must pass a pre-employment background check, physical, and drug and alcohol testing. The employee is required to comply with MTD's Drug & Alcohol Policy. This job description is subject to change as needs of the District, and the tools we use, evolve over time. Benefits Summary This is a salaried staff position with an excellent benefit package, including an Illinois Municipal Retirement Fund pension,100% employer-sponsored family health / dental / vision insurance premiums (employee + all dependents), a $40,000 employer-paid life insurance policy, voluntary insurance options, paid time off (vacation, personal, and sick/earned time), bereavement leave, parental leave, flexible spending account, a deferred compensation investment match plan, EAP, uniform allowance, fitness center, transportation, and Urbana Municipal Credit Union. An associate degree or equivalent experience in Cybersecurity, Network Administration, Information Technology, or a related field is required. A bachelor's degree is preferred. A minimum of three years of progressively responsible work experience in systems administration, network administration, or cybersecurity is required. Experience with

NIST CSF

is preferred. Hands-on experience with network and systems security, including firewall configuration, endpoint protection, and secure system hardening, is required. Experience with routing and switching is preferred. Experience with the following technologies is required or strongly preferred: Microsoft Windows Server management including Active Directory, Group Policy Microsoft PowerShell Microsoft 365, Microsoft Entra ID, Microsoft Intune, and Conditional Access Endpoint security platforms Microsoft Azure or other public cloud platforms Vulnerability management, logging, or security monitoring systems Experience implementing NIST Cyber Security Framework is preferred. MTD is an Equal Opportunity Employer. In accordance with federal law, MTD does not discriminate in hiring or employment practices based on race, color, religion, sex, age, national origin, disability, veteran status, or any other characteristic protected by applicable laws.