About

Countries

Data & Research

Learning

News

Projects & Operations

Publications

Topics

Home > Jobs > Employment Opportuni... > Professional/Technical

Job #	091956
Job Title	Information Officer- Systems Engineering Officer Server Security Admin
Job Family	Information Technology
Location	Washington, DC
Appointment	Local Hire
Job Posted	06-Nov-2009
Closing Date	22-Nov-2009
Language Requirements	English [Essential]
Appointment Type	See Job Description Below

Background / General description

The World Bank Group is a global financial organization based in downtown Washington, DC with country offices in 120+ countries.  The Information Solutions Group (ISG) is the Information Technology division within the World Bank.  It provides core IT infrastructure and business application services to the World Bank Group (WBG), including the Washington DC headquarters and the Country Offices. The WB IT strategy is designed to align IT initiatives with the Bank’s business strategy and with the overarching objective of ensuring that end-users have uniform and ease of access to information and systems from either HQ or Country Offices.  The management of most of the end-user IT services, business solutions and the underlying technology infrastructure is centralized with ISG.

The Technology and Engineering department (ISGTE), composed of about 250 personnel, is responsible for providing and maintaining the IT infrastructure framework on top of which business applications and customers are serviced on an efficient and cost-effective manner. The organization strives to provide quality services to meet a variety of business requirements and its performance is regularly assessed by means of industry relevant benchmarks and annual certification/compliance with standards frameworks like SOX, ISO2000, and ISO27001. 

The ISGTE scope of activities is composed of a wide range of services including Data Center operations, Global Network, Telecommunications, Video-Conferencing, Desktop and server support for Windows, UNIX, and Linux, Email, Collaboration, Portals, WEB, Financial & HR platform support including SAP and PeopleSoft. The services are tightly integrated and standardized in a way to provide 24x7 availability and transparency to some 13,000 users spread throughout DC headquarters and country offices. 

The ISGTE organization is also proud of the quality of its cadre of IT professionals. It has over the years emphasized the hiring of the right set of people equipped with the means to adjust to a culture of excellence and dedicated to promote IT as an enabler of the core missions of the Bank.

As part of ISGTE, the Enterprise Systems Management (ISGSM) group is responsible for Unix/Linux Server Administration, centralized Disk Storage and SAN administration, centralized Data Backup services, Server Security administration, and operational and infrastructure components of business continuity.

Note: If the selected candidate is a current Bank Group staff member with a Regular or Open-Ended appointment, s/he will retain his/her Regular or Open-Ended appointment. All others will be offered a 2 year renewable term appointment.

Duties and Accountabilities

The position is accountable for the following functions:

1.	Systems engineering and Administration with an emphasis on IT Security aspects of server and systems availability including compliance with security standards and best practices operations in the UNIX, Linux and Windows server environments. 
2.	Select, implement, and maintain infrastructure components needed to ensure standards compliance and intrusion prevention required levels can be maintained and ascertained on an on-going basis on endpoint server systems. Maintains optimal performance of server security infrastructure resources by monitoring and assessing hardware/software performance. Ensures performance meets the present and future needs of the business. Recommends changes/enhancements for improved systems availability, reliability and performance.
3.	Availability to participate in On-Call rotations aimed at supporting operations on a 24x7 basis.
4.	Promote and support the effort of enforcing adherence to institutional policies including change and adjustment recommendations whenever appropriate.
5.	Determines requirements impact on existing architecture, work processes and systems.  Works with impacted areas to ensure proper communication/review of requirements and integration.
6.	Determines infrastructure systems specifications for hardware/software compatibility in close collaboration with ISGTE and the Office of Information Security (OIS) teams. Interact with solutions providers, vendors, or suppliers in enforcing adequate levels of support to the installed inventory. Articulate and define functionality requirements that best meet the Server Security administration needs of ISGTE.
7.	Evaluates and provides feedback on future systems security technologies and new releases/upgrades. Assesses and provides recommendations on business relevance, appropriate timing and deployment.  Identifies opportunities that impact business strategy, business requirements and performance.
8.	Analyzes, designs, codes, tests, debugs, maintains, modifies and documents systems/solutions to meet business requirements. Coordinates design of subsystems and integration with larger systems. May coordinate development activities with other groups.
9.	Implements integration plans. Interfaces with testing teams to incorporate plans into integration testing process.
10.	Designs, plans and leads testing efforts and coordinates feedback of test results. Develops cases test files. Conducts unit, system, stress, integration and/or user testing to ensure requirements are met.
11.	Ensures all documentation is delivered according to specified guidelines (e.g. Standard Operating Procedures – SOPs). Produce and maintain appropriate documentation and charts describing framework setups, diagrams, operational procedures and overall inventory. 
12.	Whenever needed, performs troubleshooting for security incidents that involves software and network forensic analysis in close collaboration with ISGTE and the Office of Information Security (OIS) teams. Follows up on Problem Resolution tracking using the Remedy tool and uses the Security Incident system to report and track down major Security incidents in close association with the OIS.
13.	Performs technology watch on market trends in the field of Information Technology Security and advises management on benefits and disadvantages of related decisions and their impact to the business. 
14.	Produce daily and weekly reports of activities and operational status.
15.	Follow and comply with ISMS policies, processes and procedures.
16.	Participate in audits, as needed, producing necessary documentation, reports and explanations. Assist with the definition and implementation of corrective measures aimed at correcting possible findings.

Selection Criteria

1.	MA/MS (In Computer Science or Engineering or equivalent combination of education and experience. BS/BA is minimum education requirement.)
2.	Minimum of 5 years relevant experience in the IT security field. 
3.	Relevant and proven involvement in operations requiring for stringent uptime service levels. Experience in the following areas:

	Strong working knowledge of server security hardening, including Operating System, its services, and related utilities and infrastructure software.
	Strong knowledge and experience with UNIX (Solaris and AIX), Linux Red Hat, and Windows operating systems and administration.
	In-depth working knowledge of networking, principles of routing, Internet services, protocols and their security implications.
	Relevant experience and intimacy with environments supporting Databases (Oracle, SQL/DS, MySQL, and Sybase) and Web Services (Websphere, JBoss, Tuxedo, etc.).
	Problem analysis, systems analysis and user support.
	Some exposure to Disaster/Recovery and system backup disciplines.
	Experience with security tools with emphasis on Security Compliance and Protection/Prevention (Network and Host based firewalls, IDS/IPS/HIPS Systems). 
	Exposure to Log Analysis and Vulnerability identification tools are also required.
	Exposure or knowledge of related technologies (PKI, SSO, Smart Cards, etc.).

4.	Specific intimacy with Symantec’s ESM and IBM’s Proventia-SiteProtector products. 
5.	Strong knowledge of ArcSight architecture and hands-on experience with ArcSight content creation.
6.	Previous experience with IT security services regarding network-based security threats and vulnerabilities.  Strong hands-on, working knowledge with Nessus vulnerability scanning tool.
7.	Professional security qualification and certification like CISSP, Sans GIAC, and other related certifications (ITIL, Operating Systems Management, Firewalls, IDS/IPS, Database Systems management, etc.) 
8.	Demonstrated ability to understand business needs requiring an IT security perspective and addresses them in a responsive and comprehensive manner. 
9.	Excellent interpersonal skills, including ability to work effectively in a team/task force as a participant or team leader. Demonstrated sensitivity to the Bank’s distinctive demographics and cross cultural context and influences, including the ability to build effective work relationships with clients and colleagues.
10.	Initiative and resourcefulness in complex environments; flexibility and ability to prioritize conflicting demands in high-pressure and time-critical situations.
11.	Proven conceptual, analytical and evaluation skills. Ability to break down raw information and undefined problems into specific, workable components that, in turn, clearly identify the issues at hand. Makes logical conclusions, anticipates obstacles and considers different approaches that are relevant to the decision-making process.
12.	Excellent oral and written communication skills in the English language. Able to prepare, present, and defend/explain technical information to diverse types of audience (management, users, vendor, and technical staff) in a way that establishes rapport and shares understanding. Demonstrated ability to produce a wide range of deliverables such as memoranda, requirements documents, status reports, terms of reference (TORs), project plans, etc.
13.	Solid project management skills in planning and monitoring projects in a cross-functional, multi-cultural environment. Flexibility in adapting to new, different or changing situations, requirements or priorities. Demonstrated understanding and appreciation of individual differences including working effectively with varied persons and/or groups.
14.	Ability to gather and analyzes information or data on current and future trends of best practice. Seeks information on issues impacting the progress of organizational and process issues. Translates up-to-date information into continuous improvement activities that enhance performance.

The World Bank Group is committed to achieving diversity in terms of gender, nationality, culture and educational background.  Individuals with disabilities are equally encouraged to apply.  All applications will be treated in the strictest confidence.

Site Tools