ABOUT THE ORGANIZATION

Truckee Meadows Water Authority (TMWA) is a not-for-profit, community-owned water utility, overseen by elected officials and citizen appointees from Reno, Sparks and Washoe County. TMWA has a highly skilled workforce who ensure the around-the-clock treatment, delivery and availability of high-quality drinking water for more than 400,000 residents of the Truckee Meadows.

We are looking to hire an Systems Administrator, to join our Control Systems Engineering Department.

ABOUT THE POSITION

TMWA’s Control Systems Technologist is a multifaceted role that requires the incumbent to be proficient in the areas of System Administration, Network Management, and Cybersecurity design. The Technologist role is responsible for the planning, design, documentation, installation, maintenance, configuration, and management of all TMWA Operational Technology computer systems, network infrastructure, and security architecture through their lifecycles. The incumbent is expected to research and evaluate both existing and new technologies in those 3 key areas and recommend purchases of infrastructure and technology that will improve OT productivity, reliability, and security and while satisfying operational needs and goals. The Technologist role shall work with other CSE and Technology Service staff to ensure the integrity and availability of the environment through the data backup\restore of vital systems and security\performance monitoring of the OT network. The incumbent Technologist will provide technical support to TMWA Operational users, troubleshooting, resolving, and escalating technical issues as necessary

The Staff level Technologist is recognized as having the experience and technical expertise necessary for carrying out assigned tasks or projects, contributing to proficient and relevant technical decisions made within the scope of assigned work or project, and applying industry best practices while carrying out their job duties. Training of other CSE and Operations staff is required. A Staff Technologist is expected to perform under general supervision and guidance

The Senior Technologist differs from the Staff level in that those incumbents at the Senior level are recognized as having the experience and technical expertise necessary for carrying out assigned tasks or projects that are more complex with greater influence on the overall outcome, contributing to proficient and relevant final technical decisions within the scope of assigned work or project, and applying industry best practices while carrying out their job duties. This position may also be designated to coordinate on select CSE projects, directing allocated resources appropriately while taking on a supportive role in managing and maintaining materials in scope of those projects. Mentoring, coaching and training of Staff Technologist positions, along with other CSE and Operational staff is required. A Senior Technologist is expected to perform under moderate supervision and guidance.

The Principal Technologist differs from the Senior level in that those incumbents at the principal level are recognized as having subject matter expertise experience and technical acumen, performing significantly more complex related work with complete influence on the overall outcome. making proficient and relevant final technical decisions within the scope of assigned work or project and applying industry best practices while carrying out their job duties. This position may also be designated as a lead on select CSE projects, being expected to request, acquire, and direct resources needed to complete said projects while taking on an active role in managing and maintaining materials in scope of those projects. Mentoring, coaching and training of Senior and Staff Technologist positions, along with other CSE and Operational staff is required. The Principal Technologist is expected to perform under minimal supervision and guidance.

Progression from one position title, level or designation is not automatic nor guaranteed and is based on business need.

ESSENTIAL FUNCTIONS
We believe that each employee makes a significant contribution to our success. That contribution should not be limited by the assigned responsibilities. Therefore, this job description is designed to outline primary duties, qualifications, and job scope, but not limit the incumbent nor TMWA to just the work identified. It is our expectation that each employee will offer his/her services wherever and whenever necessary to ensure the success of our endeavors.

Examples of Duties:

• Develops and drives the architectural direction of complex Control Systems Engineering (CSE) technology projects, ensuring alignment with TMWA Operational objectives.
• Determines the utility's strategic (long-term) and operational (daily) technology needs and procurement acquisitions to accomplish the utility's business objectives.
• Participates in the planning and design of TMWA’s OT technology systems\networks\security platforms.
• Initiates & executes proof-of-concept solutions, building working prototypes to assess viability of new solution approaches and technology, and leading acceptance testing initiatives.
• Participates in the creation of operationally focused enterprise documentation such as policies, plans, standards, baselines, guidelines and procedures to support the environment in continuity, recoverability, and reliability.
• Ensures data integrity and availability of OT systems and information through the implementation of data backup and recovery solutions, the development of RTO and RPO objectives, and ongoing restorative testing.
• Applies advanced knowledge and skills in setup and support of a variety of operating systems and on-premise applications that are related to ICS and OT.
• Maintains up-to-date detailed knowledge and trends of the ICS industry including awareness of new or revised solutions, improved processes and new ICS cybersecurity attacks and threat vectors.
• Recommends additional solutions or enhancements to existing ICS security solutions to continually improve overall OT security defenses.
• Performs the deployment, integration, and initial configuration of all new technology solutions related to OT systems\network\security and the enhancements of any existing solutions in accordance with industry best operating procedures and CSE standard operating procedures.
• Maintains up-to-date baselines for the secure configuration on operationally relevant systems, networks, and devices.
• Monitors and maintains systems\networks\security for efficient and appropriate operations.
• Monitors and reviews logs and reports of security activity across the environment and aids in devising plans for appropriate resolution and response.
• Tracks and ensures OT software\hardware licensing\subscriptions are valid and associated to active support\contract agreements.
• Contacts vendors\suppliers\manufacturers for hardware \ software procurement and licensing quotes and coordinates the purchase requisition process to see to such acquisitions.
• Coordinates the execution of vulnerability assessments, security audits, and seeks to mitigate any security lapses found in the environment.
• Monitors and maintains patch and firmware management for all CSE managed and maintained devices in the environment, while making patching and firmware deployment recommendations for Operational Maintenance managed devices.
• Works collaboratively with others on the CSE team to successfully manage all aspects of the company’s OT infrastructure.
• Aids Operational Maintenance team members in troubleshooting of SCADA field networks and equipment.
• Monitors and maintains Virtualization Infrastructure, ensuring appropriate VM sizing and use
• Monitors and manages Active Directory systems, including designing and maintaining user\group rights and security.
• Monitors and maintains the Storage Area Network (SAN) for optimum performance and capacity.
• Monitors and maintains core networking equipment to ensure uptime and availability.
• Provides general technical support and problem resolution in the environment through identification of existing or potential problems, implement appropriate solutions, and documenting resolutions for future reference.
• Provides troubleshooting of HMI\OMI Client issues, along with support of PLC engineering stations.
• Assists personnel of other departments as a knowledgeable computer resource, providing technical guidance and knowledge transfer to peers and support personnel, as needed.
• Provides support to end users, responding to user requests through a variety of communication mediums.
• Participates in the CSE department On-call support rotation.
• Work with support vendors to resolve complex CSE-IT problems
• Prepares and delivers presentations and training to a variety of technical and non-technical audiences
• Prioritizes work assignments in accordance with departmental goals and timelines

MINIMUM REQUIREMENTS
Any combination of training and experience that would provide the required knowledge, skills, and abilities is qualifying. A typical way to obtain the minimum requirements is:

Experience: Three (3) to ten (10) years in the field of either information technology or operational technology with exposure to systems administration, network management and security design.

Education & Training: Bachelor’s degree in either Computer Science, Information Systems, Controls Engineering

Must have working-level knowledge of the English language including reading, writing, and speaking English.

CERTIFICATIONS, LICENSURE & SPECIAL REQUIREMENTS

Security: Certified Information Security Professional (CISSP) or GIAC Critical Infrastructure Protection Certification (GCIP) or Global Industrial Security Professional Certification (GICSP) is desirable.

Network: Cisco Certified Network Associate (CCNA) is desirable
 

Systems:  Microsoft MCSE certification or equivalent MS role based certification and VMware Certified Professional Associate certification is desirable

A valid Nevada (or California – depending on state of residency) Driver License at time of hire and continuing thereafter and ability to maintain insurability under TMWA’s vehicle insurance policy.

Employment is contingent upon successful completion of a background investigation during hire and periodically thereafter during employment.

This position is considered a safety sensitive position and employment is contingent upon the results of drug and/or alcohol testing which includes screening for marijuana. The presence of marijuana or other screened for substances on any employment related substance test may result in a refusal to hire or termination of employment.

KNOWLEDGE, SKILLS, AND ABILITIES

Knowledge of:

Principles and practices of virtualized environments with a focus on VMWare Hypervisor; switches and routing equipment with a focus on Cisco devices; firewall equipment and management, specifically Checkpoint and/or Palo Alto; operating systems such as Windows and Linux; general familiarity with system\data backup and recovery practices; general Database support and administration within MS SQL servers; management of Storage Area Network (SAN, NFS) and utilization of various storage protocols and connectivity; HMI\OMI ICS software, specifically AVEVA System Platform; SCADA plant and distribution control system operations, principles, and practices; security design and implementation in a complex environment; solid network knowledge with a focus on cybersecurity; security stack tools such as EDR platforms, network monitoring solutions, SIEM system; understand and analyze network layering and protocols specifically TCP/IP. OPC DA\UA and Modbus TCP; wireless communication systems, design and operation; proficient working knowledge of modern troubleshooting methodologies and techniques to effectively remediate OT system problems quickly and effectively; pertinent federal, state, and local laws, codes, and regulations as the relate to information technologies.

Skill/Ability to:

Research and apply best practices across a variety of systems; work within a fast-paced environment and be adaptable to change; effectively manage and prioritize day-to-day tasks; research, plan, install, configure, troubleshoot, maintain and upgrade of hardware and software; identify complex problems and review related information to develop and evaluate options and implement solutions; keep current on OT security concerns, protocols and related topics; audit and test security across OT platforms; be a team player with a collaborative orientation and the ability to effectively interact with, and influence, internal and external stakeholders; maintain documentation regarding hardware\software inventories, system\application licensing, and user access security; design, develop, and implement policies, procedures, and technical write-ups; train end users to work with computer information systems; establish and maintain effective work relationships with those contacted in the performance of required duties; organize, prioritize and handle multiple tasks and meet deadlines; strong presentation, facilitation, and written/verbal communication skills; perform objective analysis of business processes, provide quality service and ensure cost effectiveness.

TMWA is an equal opportunity employer. It is TMWA’s policy to provide equal employment opportunity to all employees and applicants for employment without regard to race (including traits associated with race, such as hair texture and protective hairstyles), color, gender, religion, age, national origin, social or ethnic origin, sexual orientation, gender identity or expression, marital status, pregnancy, disability, military and/or veteran status or any other characteristic protected by law. TMWA’s commitment to equal opportunity includes all terms, conditions, and privileges of employment, including but not limited to recruiting, hiring, job placement, training, compensation, benefits, discipline, advancement, and termination.

All decisions affecting any terms and conditions of employment, including recruitment, hiring, assignment, training, compensation, promotion, salary, disciplinary action, and an employee’s caregiving responsibilities, will be made without regard to race (including traits associated with race, such as hair texture and protective hairstyles), color, gender, religion, age, national origin, social or ethnic origin, sexual orientation, gender identity or expression, marital status, pregnancy, disability, military and/or veteran status or any other characteristic protected by law.

TMWA complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at hr@tmwa.com or 775-834-8294.

TMWA is committed to providing a safe work environment and to fostering the health and well-being of our employees. That commitment is jeopardized when any of our employees illegally use drugs at home or at work, comes to work under the influence, possesses, distributes, or sells drugs in the workplace, or abuses alcohol on the job. As part of our commitment to safeguard the well-being of our employees and to provide a safe environment for everyone, TMWA has established a drug-free workplace policy.