This job has expired, please see additional jobs below
Analyst, Engineering Systems
NBC Universal
Orlando, FL, United States
Job Details - this job has expired, please see similar jobs below
About Us
Universal Orlando® Resort is a universe of opportunities for people who have a lot to offer. It takes a special kind of person to work at Universal Orlando. An individual who knows how to be part of a team. Someone with a sense of fun who's serious about their work. A person who knows it doesn't take magic to put a smile on a guest's face… it takes hard work, dedication, knowledge and just the right amount of Universal attitude. Whether you're serving food, working in an office, maintaining equipment, performing in costume or operating a ride, you won't just be "doing a job." You'll be creating memories for our guests that will last a lifetime. Are YOU that kind of person?
JOB SUMMARY:
Performs activities related to support and administration of Ride and Show networks (RSN) and related information systems, including: supporting the installation and administration of specialized client and server software applications used by control systems engineers, such as Rockwell Automation’s Asset Centre and others; provisioning, managing and enforcing RSN access security controls; maintaining per-attraction RSN assets inventory database of both hardware and software; monitoring, reporting on, and deploying security patches for RSN firmware and software; periodic auditing and reporting on attraction RSN compliance with Engineering security policies; RSN performance analysis and capacity planning; conducting or supporting RSN testing, troubleshooting and fault analysis; evaluating, testing and deploying non-security firmware and software upgrades; Be on call 24/7 and carry an Engineering duty phone on rotational basis to facilitate engineering maintenance support per departmental guidelines.
MAJOR RESPONSIBILITIES
• Execute attraction RSN access control strategy as per Engineering policies. Including:
• Maintaining user database for each attraction RSN per Engineering security policy and standards.
• Provisioning (registering) new RSN accounts using role-based privilege level determination per Engineering policy, as well as record-keeping for tracking and audit purposes.
• De-provisioning (revoking) RSN accounts using the due process documented in security policy and standards.
• Producing and analyzing audit reports periodically to measure and verify RSN compliance with Engineering access control policy in support of necessary corrective actions such as disabling accounts, etc.
• Maintaining usernames and passwords securely for RSN local and service shared accounts and conducting periodic audit of shared account usage by authorized personnel.
• Create and maintain proper and current inventory of all IT assets in each RSN, for both hardware and software. Stay apprised of IT and control systems security threats that can potentially affect RSNs as well as use tools to scan RSNs for known vulnerabilities and provide detailed reporting including risk assessment and action items. Use software manufacturer guidelines, recommendations and tools to identify and apply required security updates as well as to harden the system, in accordance with Engineering policies and change management process. Remain abreast of latest technology regarding hardware, software and security tools.
• Ensure Engineering & Tech Services PCs integrate with various tools and programs that are required with technology in the field. Perform and/or assist with the provisioning of PCs for use at Universal Orlando attractions RSNs by Engineering and Ride/Show personnel, including control systems software installation and proper setup of permissions and user/group policies, in compliance with Engineering security policies.
• Provide design and maintenance support for all attractions at Universal Orlando as required including training controls and tech services personnel. Maintain configuration management of hardware and software documentation in accordance with Engineering guidelines for proper archiving and security. Ensure proper access, accountability, and processes are in place for appropriate maintenance, support, testing, and design of ride show networks in new and existing attractions. Conduct periodic RSN performance and capacity analysis to ensure ride sustainability, and develop / implement a capacity planning strategy to predict if and when network infrastructure investment will be required.
• Understand and actively participate in Environmental, Health & Safety responsibilities by following established UO policy, procedures, training and team member involvement activities.
• Perform other duties as assigned.
Qualifications/Requirements
SUPERVISORY RESPONSIBILITY: Indirect supervision of Ride & Show technicians on a project by project, or fault analysis / isolation assistance basis. Carries out supervisory responsibilities in accordance with the organization’s policies and applicable laws.
SCOPE: Responsible for performing activities related to the continued supervision, design, development, implementation, acceptance tests and maintenance related to access controls, network security, IT infrastructure security and overall systems performance for all Ride & Show control and software systems and modification projects for increased reliability and operational improvements.
QUALIFICATIONS:
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skills, and/or abilities (KSAs) required.
Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
Consistent attendance is a job requirement.
EDUCATION: Bachelor’s degree in Electrical Engineering, Electrical Engineering Technology, Computer Engineering, Computer Science or related field required.
CERTIFICATIONS, LICENSES, REGISTRATIONS:
Preferred (any combination of) certifications:
• Microsoft MCP, MCSA, MCSE
• VMware VCP6-DCV, VCP-NV
• Comp-TIA A+, CASP
• Cisco CCNA Security
• Industrial Cyber Security GICSP and GCCC, ISC2 CISSP
• Cisco Industrial CCNA, CCNP Routing, CCNA / CCNP Wireless
• Vendor-agnostic wireless certification CWNA, CWSP
EXPERIENCE:
3+ years of experience with IT systems / servers administration and support (Windows and Linux), Active Directory, RADIUS authentication, 802.1X, TACACS+, user groups, group policies, DHCP, DNS, firewalls;
3+ years of experience with IT and network security, Windows and Linux systems hardening, security patch deployment, vulnerability scans, endpoint security, access controls;
Solid experience with TCP/IP routing using OSPF/EIGRP/BGP, layer-2 switching, 802.1Q VLANs, STP, QoS, access lists;
Experience with server virtualization, VMware vSphere 6, VMware vCenter/VSAN, NetApp SAN;
Knowledge of 802.11 standards, wireless networks deployment, configuration and support, wireless site survey, RF interference troubleshooting;
Additional Information:
Required
• Microsoft Windows operating systems, Office, Visio, SQL, etc
• Microsoft Windows Server 2012 R2, Active Directory, domain controllers
• Microsoft NPS, group policies, RADIUS, DHCP, DNS
• Endpoint security, vulnerability scanners, network scanners, anti-virus, etc
• Cisco routers, switches, catalyst series, Cisco IOS
• L2 switching, L3 routing, OSPF, EIGRP, STP, VLANs
• Network security, access lists, SSH, SCP.
Preferred
• Cisco ISE – Identity Services Engine, TACACS+
• VPN, encryption, IPSec, digital certificates, PKI
• VMWare vSphere 6, Cisco firewalls, Unix/Linux, UCS / Dell servers
• NetApp SAN, VMware VSAN, vCenter
• Cisco wireless access points and controllers, AireOS 7.x/8.x
• Rockwell’s FactoryTalk View SE server, client, studio, etc
• Experience with PLC and automated control systems
• Experience with Common Industrial Protocol (CIP, Ethernet/IP)
• Knowledge of ISA-99 / IEC-62443 ICS security standards.
Desired Characteristics
PHYSICAL DEMANDS: How much on-the-job time is spent in the following physical activities during a work day?
Must be able to regularly (2/3 of the time and more):
• Repetition-using an input device-a keyboard or mouse-in a steady manner
• Close vision with or without corrective lens. (clear vision at 20 inches or less)
• Ability to maintain alertness and attentiveness up to 4 hours while working varying hours.
• Ability to maintain concentration/focus (e.g., ability to interpret the work environment and make decisions on predetermined operating policies and procedure)
Must be able to occasionally (up to 1/3 of the time):
• Stand for prolonged periods
• Walk for prolonged periods (including ability to walk at a given pace that is predetermined by a moving sidewalk)
• Sit for prolonged periods
• Talk
• Hear audible alarms, voice commands with background noise
• Use of hands and fingers to grip, pinch, handle or feel objects, tools or controls
• Will require performing maintenance or servicing of powered (energized) equipment (pneumatic, hydraulic, electrical) LOTO
This position will require a valid Florida state driver’s license