Security Infrastructure EngineerThe Information Security Specialist is responsible for safeguarding the district's technology infrastructure, data, and systems by developing, implementing, and maintaining security policies, tools, and best practices. This position monitors for threats, responds to incidents, ensures compliance with state and federal regulations, and supports secure technology operations across all K–12 schools within the district.
The role requires strong technical expertise, excellent communication skills, and a deep understanding of cybersecurity challenges in public education.Cybersecurity OperationsMonitor district networks, servers, cloud platforms, and endpoints for security alerts, anomalies, and indicators of compromise.Analyze logs, conduct threat assessments, and manage alerts from SIEM, firewall, endpoint protection, and email security systems.Lead or assist with investigations, containment, remediation, and recovery of security incidents.Maintain and tune security tools such as firewalls, DNS filtering, endpoint protection, vulnerability scanners, and identity security tools.Identity & Access ManagementManage secure user access practices across Active Directory, Azure/Entra ID, Google Workspace for Education, and district applications.Enforce MFA, password policies, and least-privilege access.Conduct regular access reviews and support account lifecycle processes.Compliance & Risk ManagementEnsure district compliance with NC DPI requirements, NIST Cybersecurity Framework, CIS Controls, FERPA, CIPA, and other applicable regulations.Conduct annual risk assessments and participate in external audits.Maintain documentation for policies, procedures, recovery plans, and incident response.Security Awareness & TrainingDevelop and deliver cybersecurity awareness training for staff, including phishing simulations and safe computing practices.Provide guidance to school administrators, technology facilitators, and support staff on secure use of district technology resources.Systems & Network SecurityAssist in hardening servers, switches, wireless systems, cloud resources, and network infrastructure.Support secure configuration and patch management across district devices.Review and validate vendor security controls for third-party applications and integrations.Disaster Recovery & Business ContinuityMaintain and test data backup systems, restoration procedures, and disaster recovery plans.Participate in district continuity planning for critical technology services.All other duties as assigned.QualificationsMinimum RequirementsAssociate or Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience).2–4 years of experience in IT systems, networking, cybersecurity, or related roles.Working knowledge of Windows Server, Active Directory, Azure/Entra ID, Google Workspace, firewalls, and basic scripting.Understanding of NIST CSF, CIS Controls, and K–12 security best practices.Preferred QualificationsPrior experience in K–12 or public sector IT.Certifications such as Security+, CySA+, SSCP, CCNA Security, Microsoft Security Analyst, or equivalent.Experience with SIEM tools, EDR solutions, vulnerability management platforms, and cloud security.Knowledge, Skills & AbilitiesStrong analytical and problem-solving skills.Ability to communicate technical concepts to non-technical staff and administrators.Ability to manage multiple priorities and meet deadlines.High level of discretion and professionalism when handling sensitive data.Ability to work independently and collaboratively in a school environment.Physical & Work Environment RequirementsAbility to lift up to 25 pounds, install or inspect equipment, and travel between district locations.Office setting with occasional on-site work in schools and data closets.Salary & Work Schedule12-month position (full-time).Salary based on NC public school salary schedule / district supplemental scale.Johnston County Public Schools is an equal opportunity employer and does not discriminate in the employment or promotion of employees on the basis of gender, race, religion, age, national origin or disability.