ICT Security Engineer at Kenyatta University

Duties and Responsibilities:

• Implement, manage and monitor the ICT security solutions and systems for the protection of information assets, systems and networks.
• Ensure network security at all times by managing security infrastructure devices to provide safety of information passed through the network.
• Regularly review and evaluate information system security policies so as to ensure secure usage of systems by the various authorized users.
• Provide continuous maintenance of information system security through proper management of firewalls and antivirus software so as to safeguard information stored and passed in the computer system.
• Implement solutions to help mitigate security vulnerabilities by designing system hardening processes and procedures.
• Run regular penetration tests and remediate gaps identified
• Prepare and document standard operating procedures and ensure that security incidents are promptly mitigated and reported.
• Prepare ICT security reports including risk assessment findings and proposals for system security enhancement.
• Developing measures and strategies for user sensitization on ICT Security through Cyber Security Awareness.

Qualification:

• Must have at least a Bachelor’s Degree in an ICT related field.
• Master’s Degree in an ICT related field, or equivalent will be an added advantage.
• Must have certification in either Checkpoint Systems (CCSA/CCSE), Cisco Security (CCNP-Security or HCIP-Security) or equivalent.
• Certified Ethical Hacking (CEH) will be an added advantage.
• Must have 5 years’ experience working in a busy IT environment as an ICT Security Officer or Network Engineer.
• Must have hands on experience in ICT security and technologies especially on Next Generation Firewalls, Web Application Filters/Firewalls, Wireless Systems etc.
• Must have a good understanding of encryption algorithms, VPN configuration, setup and troubleshooting.
• Must have hands on experience in implementing and maintaining Enterprise Security Systems such as Anti-virus, Firewalls, Log Management/SIEM solutions, Authentication Systems, SSL certificates and IDS/IPS.
• Must have an excellent understanding of penetration testing processes and remedial actions.
• Member of an ICT professional body will be an added advantage.

Key Competencies and Skills:

• Ability to communicate effectively at all levels and produce concise documentation.
• Ability to analyze and apply technical knowledge to solving complex IT problems.
• Project Management and Interpersonal skills.