FLAGSTAFF UNIFIED SCHOOL DISTRICT NO. 1

Position Description
Network, Systems & Security Engineer
2025-2026 School Year

Position Title: Network, Systems & Security Engineer
Department/Section: Information Systems & Technology – Technical Services
Supervisor: Assistant Director of Technology
12 months; Benefit eligible
Placement on Salary Schedule based on experience and skills: Ancillary Salary Schedule KK $69,135.59 - $76,049.14 (Systems Administrator)

SUMMARY OF FUNCTION

The Senior Network & Security Engineer is responsible for the design, reliability, performance, and security of Flagstaff Unified School District’s wired and wireless networks, core Microsoft/Azure identity services, and related security platforms. This position architects and operates the district’s Cisco‑based WAN/LAN/Wi‑Fi, content/email/web security, endpoint security integrations, network monitoring, VoIP core standards, and backup/DR readiness. The role serves as a Tier‑3 technical authority, produces clear runbooks and playbooks in Confluence that enable Tier‑1/2 staff to succeed, and leads automation efforts to reduce manual work. The engineer collaborates with the Assistant Director, field service technicians, application systems administrators, and vendors to ensure safe, performant, and compliant services that support FUSD’s instructional mission.

KEY RESPONSIBILITIES

Network architecture, configuration, and lifecycle management for district WAN/LAN/Wi‑Fi (Cisco switching, routing, wireless controllers, and access points)
Plan and execute changes using documented methods of procedure (MOPs) with tested rollback; participate in the district’s change approval process and maintenance windows
Operate and continuously improve the district’s security stack (e.g., DNS/web filtering, email security, cloud access security, endpoint security integrations)
Maintain, configure, and improve VMWare virtual machines.
Administer core identity and directory services (Active Directory/Azure AD) supporting authentication, SSO, group policy, and secure access to district systems
Maintain Windows Server platform baselines related to networking and identity (DNS/DHCP/RADIUS as applicable); coordinate monthly patching plans for dependent network services
Administer Microsoft Azure, 365, and Exchange in conjunction with other Systems Administrators and the Assistant Director of Technology.
Own network monitoring and observability (e.g., SolarWinds) including alert tuning, capacity planning, and service health reporting
Design and enforce network standards: IP addressing, VLAN/SSID segmentation, QoS, naming, configuration baselines, and documentation of physical and logical topology
Serve as Tier‑3 escalation for high‑priority incidents; lead root‑cause analysis and publish post‑incident reviews with corrective actions
Partner with the Network Administrator on VoIP/UCM standards, dial plan changes, QoS, E911 compliance, and MACD playbooks
Develop, publish, and maintain runbooks, playbooks, diagrams, and KB articles in Confluence; ensure “no documentation, no close” for Tier‑3 fixes
Automate common tasks where feasible (e.g., configuration templates, scripts, API integrations, deployment pipelines) to improve reliability and reduce manual effort
Manage the district’s backup/DR platforms and conduct periodic disaster recovery exercises and data‑restore validations; document RTO/RPO and recovery steps. Follow all audit and insurance requirements
Collaborate with other Systems Administrators on secure integrations (SSO, SAML/OAuth, roster and identity flows); support least‑privilege and group‑based access models
Coordinate and supervise vendor involvement (e.g., managed services/SOC or network professional services) with clear scopes of work, change plans, and acceptance criteria
Contribute to E‑Rate technical scoping and maintain accurate as‑built documentation and inventories relevant to audits
Mentor Tier‑1/2 personnel; shift appropriate tasks downward through playbooks and training; foster a learning culture and growth mindset
Ensure compliance with applicable laws and policies (FERPA, HIPAA, COPPA, district security policies) and promote cybersecurity best practices district‑wide
Respond to service requests and incidents in the help desk system in accordance with service level objectives; communicate clearly with stakeholders throughout
Attend daily stand-ups, maintain project documentation in Confluence and the department’s project management tool, and participate in retrospectives and planning sessions.
Display exceptional customer support, communication and interpersonal skills.
Perform occasional evening/weekend work for maintenance windows or urgent incidents; participate in an on‑call rotation for critical outages
Perform other job-related duties as assigned.

QUALIFICATIONS

Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field; equivalent combination of education and directly relevant experience considered
Five (5) or more years of progressively responsible experience in enterprise network engineering and security operations (K–12, higher ed, or public sector experience a plus)
Demonstrated expertise with Cisco enterprise networking (routing, switching, wireless controllers/APs), VLAN/SSID segmentation, QoS, and network troubleshooting at scale
Hands‑on experience operating security platforms such as DNS/web filtering, email security, endpoint security, and MFA/conditional access integrations
Strong proficiency with Microsoft Active Directory/Azure AD, group policy, and identity lifecycle concepts; experience with RADIUS/NPS and SSO (SAML/OAuth) preferred
Experience with network monitoring/observability tools and capacity planning; ability to turn alerts into actionable runbooks and dashboards
Working knowledge of Windows Server services related to identity and networking; familiarity with backup/restore concepts and disaster recovery testing
Knowledge and experience with end user operating systems: MacOS, iPadOS, and Windows 10/11.
Scripting/automation skills (PowerShell required; Python or similar a plus); experience with APIs and configuration templating helpful
Experience with Lean or Agile methodologies and project management tools such as Trello or Jira.
Proficient in the use of Large Language Models (LLMs) in the workplace to help increase efficiencies while mitigating the risks.
Ability to develop high‑quality documentation (diagrams, runbooks, playbooks) in Confluence and to coach others in using and improving documentation
Relevant certifications a plus (e.g., Cisco CCNP Enterprise/Security, CCNA, Meraki CMNA, CompTIA Security+, Microsoft AZ‑104/AZ‑500)
Excellent troubleshooting skills, structured problem‑solving, and calm performance under pressure; strong written and verbal communication with both technical and non‑technical audiences
Proven ability to manage multiple priorities, meet deadlines, and drive initiatives from design through operational handoff
Knowledge of education‑specific privacy and security considerations (FERPA, COPPA) is a plus
Valid driver’s license and ability to travel between district sites as needed

PHYSICAL/WORKING CONDITIONS

Ability to stand and sit for extended periods; climb ladders; lift up to 50 pounds
Essential functions include: walking; working with and around other FUSD staff; managing interruptions; repetitive motion (hand‑wrist) for keyboarding; near vision acuity for monitoring screens; color vision for working with color‑coded cabling; hearing and speech for ordinary conversation; finger dexterity for keyboarding
Environmental hazards may include electrical hazards associated with computers, servers, and circuits, and potential for falls from ladders
Occasional night and weekend work for maintenance windows or urgent incidents

All who apply will automatically be put into “qualified” status to allow the site administrator the ability to review your application immediately. Therefore, you will not receive any verification email from HR advising your application has been pushed through.

All employees are subject to a criminal background check. The Flagstaff Unified School District is committed to a policy of nondiscrimination in relation to race, color, religion, gender expression, sexual orientation, military status, age, national origin, or disability.

Network, Systems & Security Engineer (2025-2026)