Operations Security and Network Administrator, SPEC7

IT & Telecom Information Management

Org. Setting and Reporting

With its 192 member countries, the Universal Postal Union (UPU), a specialized agency of the United Nations, is the primary forum for cooperation between postal sector players. It helps to ensure a truly universal network of up-to-date products and services. The Postal sector has been faced with far- reaching changes over the past few years. It has become essential for Posts to apply the latest technology in order to respond effectively to changing customer needs. The Postal Technology Centre Directorate (DCTP) of the UPU acts as a link between technology and the needs of the Postal industry by being the first choice in providing IT solutions, applications and services that enable the delivery of domestic and international postal services.

Responsibilities

Under the direct supervision of the Operations Security and Network Manager, the incumbent performs engineering, maintenance and operations of security systems and networks throughout the Postal Technology Centre Directorate (DPTC). The incumbent will be responsible for working with application stakeholders to design, implement and support solutions related to integrations into security and network systems. The incumbent will also be responsible for various aspects of infrastructure management, including implementation, maintenance, performance monitoring and capacity planning, troubleshooting, support, etc. 1. IT security - Function as technical expert for access management and single sign-on (SSO) services. - Assist in problem resolutions with access management and federation services. - Operational management of north-south/east-west firewall infrastructure. - Develop, maintain and execute processes and procedures in support of routine administrative tasks. - Assist in capacity planning and performance management of supported products and technolo-gies. - Define and maintain appropriate controls and documentation ensuring compliance with regulatory and audit requirements. - Assist in the support of other security services/technologies as necessary. 2. Network administration - Provide technical expertise for layer 2/layer 3 networking services. - Assist in problem resolutions with networking infrastructure. 3. On-premises cloud administration - Provide technical expertise for security-related matters with on-premises cloud infrastructure. - Participate in on-call rotation for support of production infrastructure (coverage 24x7x365). 4. Monitoring - Analyze the performance, usage and availability of network and security devices/resources. - Monitor critical functions and regular reviewing of logs in order to anticipate potential problems. 5. Maintenance - Take proactive measures to ensure good service delivery. - Maintain, manage and update network devices and security systems. 6. Technical second level support - Perform network troubleshooting to detect common network problems. - Work closely with the support team in handling complex network or security issues. - Provide technical support and training and perform new hardware and software installations. 7. Quality management - Create and maintain standard operational procedures related to security and network services. - Prepare and maintain operations records and reports (training documentation, equipment inventory, licences, work orders, etc.). - Collaborate with other teams to identify and maintain a set of best practices for incident management and service monitoring.

Competencies

• Professionalism: Takes responsibility for own actions and decisions, and for the consequences of these. Produces and delivers high-quality results. Drives change and improvement, continually searching for new ways to position the organization for success. Ensures that knowledge and learning is shared across the organization and encourages staff to learn from each other. - Ethics: Ensures that personal views and convictions do not compromise ethical principles. Understands and behaves in accordance with the UPU’s professional, ethical and legal framework. Does not abuse power or authority vested by functions. Respects commitments and promises made to internal and external partners. Promptly confronts unprofessional or unethical behaviours and takes immediate appropriate action. Maintains confidentiality and treats sensitive information with discretion. - Working together/teamwork: Works collaboratively with team members to achieve results. Shows respect to other members of the team, regardless of gender or of cultural, educational or religious background. Seeks help when needed in order to achieve set goals. Shares information on issues that may affect the team and respects confidentiality. Accepts joint responsibility for the team’s successes and shortcomings. Encourages cooperation among staff within the programme and directorate and across the organization. Collects and assesses information on a broad range of issues related to the team’s work and seeks common solutions. Encourages others to be innovative in order to improve outcomes. - Taking responsibilities/results orientation: Seeks to achieve expected outputs within the agreed timeframe. Ensures competent delivery with minimal supervision, even under pressure and with constantly changing priorities. Keeps supervisors informed of challenges encountered and solutions found. Quickly identifies issues and the right person to provide solutions, and shows strong client orientation in business dealings. Explores the options for finding innovative solutions to improve work processes and results. Remains focused and keeps morale high when faced with adversity. Reallocates resources quickly and effectively when faced with unforeseen events - Job-related competencies: Interpersonal skills Ability to work in a multicultural team Adaptability Problem-solving skills Good communication skills

Education

First-level university degree (or equivalent) in computer science, engineering or a related field.

Job - Specific Qualification

Experience in administering access management and SSO solutions: BIG-IP F5 APM, Microsoft Active Directory Federation Services (ADFS), or equivalent is required. Knowledge of other identity management solutions is desirable. Experience in managing firewalls and network devices: knowledge of Check Point, NSX, Brocade and Arista vendors is desirable. Thorough understanding of Security Assertion Markup Language (SAML), Integrated Windows Authentication (IWA), NTLM and Kerberos is required. Experience in configuring web systems (IIS, Apache, Tomcat, etc.) to integrate with SSO products is required. Knowledge of Microsoft SharePoint and Azure family is desirable. Very good knowledge of Microsoft Active Directory is required. Knowledge of Azure AD is desirable. Working knowledge of Linux OS (CentOS/Debian) is desirable.

Work Experience

At least five years' work experience as an IT operations security specialist is required. Experience with administration and operations of production systems in a large scale environment is required. Work experience in an international environment is desirable. Work experience with ISO 27001 is required.

Languages

Proficiency in English is mandatory. French would be an advantage.

Assessment

Applicants will be contacted directly if selected for written test. Additional testing/interviewing may be used as a form of screening.

Special Notice

• Monthly salary:(Net of tax) 7,000 CHF - This is a non-core post. This position will be in full compliance with the "Rules governing non-core staff", which expressly exclude some international benefits (home leave, installation grant, education grant and eligibility to a continuing appointment). The selected staff will participate in the UPU Provident Scheme and will be insured together with their recognized dependents against the risks of sickness and accidents. This is a three years' contract which can be renewed if the services continue to be required in the future, the funds are available and/or the staff member's performance is satisfactory. However, this appointment does not automatically carry any expectancy of extension or renewal or of conversion to any other type of appointment. - Scheduled date for taking up appointment: As soon as possible. - French is the official language of the UPU. English and French are the working languages of the UPU International Bureau. - Priority shall be given for an internal promotion. - The UPU is committed to encouraging diversity within its workforce. Interested candidates from minority groups and/or with disabilities are encouraged to apply. All applications will be treated equally and in the strictest confidence. - Applications from women and member states are particularly encouraged. - Candidates might be considered for other similar posts (for a period not exceeding one year). - Candidates must ensure that they provide relevant contact details so that they can be contacted at any time, to prevent them from being excluded from the selection process. - The UPU is committed to securing the highest standards of efficiency, competence and integrity for its staff members. In this regard, candidates under serious consideration for selection may be subject to satisfactory background checks aimed at validating the educational and professional background records as indicated by candidates in their respective application forms. At the discretion of the UPU, such background checks may also be extended to include criminal records, disciplinary measures, sexual exploitation and abuse, and professional license check validation.

United Nations Considerations

According to article 101, paragraph 3, of the Charter of the United Nations, the paramount consideration in the employment of the staff is the necessity of securing the highest standards of efficiency, competence, and integrity. Candidates will not be considered for employment with the United Nations if they have committed violations of international human rights law, violations of international humanitarian law, sexual exploitation, sexual abuse, or sexual harassment, or if there are reasonable grounds to believe that they have been involved in the commission of any of these acts. The term “sexual exploitation” means any actual or attempted abuse of a position of vulnerability, differential power, or trust, for sexual purposes, including, but not limited to, profiting monetarily, socially or politically from the sexual exploitation of another. The term “sexual abuse” means the actual or threatened physical intrusion of a sexual nature, whether by force or under unequal or coercive conditions. The term “sexual harassment” means any unwelcome conduct of a sexual nature that might reasonably be expected or be perceived to cause offence or humiliation, when such conduct interferes with work, is made a condition of employment or creates an intimidating, hostile or offensive work environment, and when the gravity of the conduct warrants the termination of the perpetrator’s working relationship. Candidates who have committed crimes other than minor traffic offences may not be considered for employment. Due regard will be paid to the importance of recruiting the staff on as wide a geographical basis as possible. The United Nations places no restrictions on the eligibility of men and women to participate in any capacity and under conditions of equality in its principal and subsidiary organs. The United Nations Secretariat is a non-smoking environment. Reasonable accommodation may be provided to applicants with disabilities upon request, to support their participation in the recruitment process. By accepting a letter of appointment, staff members are subject to the authority of the Secretary-General, who may assign them to any of the activities or offices of the United Nations in accordance with staff regulation 1.2 (c). Further, staff members in the Professional and higher category up to and including the D-2 level and the Field Service category are normally required to move periodically to discharge functions in different duty stations under conditions established in ST/AI/2023/3 on Mobility, as may be amended or revised. This condition of service applies to all position specific job openings and does not apply to temporary positions. Applicants are urged to carefully follow all instructions available in the online recruitment platform, inspira, and to refer to the Applicant Guide by clicking on “Manuals” in the “Help” tile of the inspira account-holder homepage. The evaluation of applicants will be conducted on the basis of the information submitted in the application according to the evaluation criteria of the job opening and the applicable internal legislations of the United Nations including the Charter of the United Nations, resolutions of the General Assembly, the Staff Regulations and Rules, administrative issuances and guidelines. Applicants must provide complete and accurate information pertaining to their personal profile and qualifications according to the instructions provided in inspira to be considered for the current job opening. No amendment, addition, deletion, revision or modification shall be made to applications that have been submitted. Candidates under serious consideration for selection will be subject to reference checks to verify the information provided in the application. Job openings advertised on the Careers Portal will be removed at 11:59 p.m. (New York time) on the deadline date.

No Fee

THE UNITED NATIONS DOES NOT CHARGE A FEE AT ANY STAGE OF THE RECRUITMENT PROCESS (APPLICATION, INTERVIEW MEETING, PROCESSING, OR TRAINING). THE UNITED NATIONS DOES NOT CONCERN ITSELF WITH INFORMATION ON APPLICANTS’ BANK ACCOUNTS.

Apply now

Added 3 hours ago - Updated 2 hours ago - Source: careers.un.org