Computer Network Manager

Computer Network Manager (may also be referred to as the Systems Administrator & Cybersecurity Specialist)

District: Lowell Public Schools
Reports To: Director of Technology
Department: information Technology & Educational Technology

Position Summary
The Systems Administrator & Cybersecurity Specialist is a vital enterprise-level role
responsible for designing, securing, and maintaining the district's core network infrastructure,
directory services, and cybersecurity posture. This position ensures the confidentiality, integrity,
and availability of all district data, voice, and video networks across multiple school and
administrative sites. Operating in a high-compliance K-12 environment, the Network Manager &
Cybersecurity Specialist leads threat prevention, incident response, network architecture
planning, enterprise identity support, and proactive security hardening to protect sensitive
student and staff information.

Key Responsibilities

Systems Administrator

Manage high-availability core firewall and VPN tunnels.

Directory Services & Active Directory Support

Provide advanced support, maintenance, and security hardening for Microsoft Active Directory (AD) and associated identity synchronization services (such as Azure AD/Entra lD).

Collaborate closely with the Manager of ITCS-who handles day-to-day administration-to maintain organizational unit (OU) structures, Group Policy Objects (GPOs), schema updates, and robust authentication pipelines.

Ensure directory-level security controls, role-based access controls (RBAC), and multi-factor authentication (MFA) are rigorously enforced across all user and administrative accounts.

Cybersecurity & Risk Management

Develop, implement, and continuously update the district's comprehensive cybersecurity strategy and incident response plan.

Deploy and manage endpoint detection and response (EDR), intrusion detection/prevention systems (lDS/lPS), multi-factor authentication (MFA), and enterprise spam/phishing filters.

Conduct regular vulnerability scans, penetration testing, and risk assessments to identify and remediate security gaps across servers, network hardware, directory services, and cloud environments.

Lead incident triage and forensic investigation in the event of a security breach or suspicious activity.

Cross-Departmental Data Collaboration & Directory Services

Collaborate closely with the district data department to ensure secure data pipelines, proper integration handling for student information systems (SlS), and robust data protection during transport and storage.

Manage and maintain enterprise email distribution lists and mail groups, ensuring accurate role-based access, security group memberships, and compliance with communication policies.

Systems Patch Management & OS Lifecycle

Ensure all operating systems (servers and core infrastructure) are kept up to date, establishing and executing regular, automated patching schedules to minimize attack surfaces.

Monitor, test, and deploy critical security patches and firmware updates for servers, firewalls, network switches, and core infrastructure with minimal disruption to instructional time.

Data Privacy & Regulatory Compliance

Ensure all network, directory, and data architectures strictly comply with federal, state, and local mandates, including CIPA (Children's internet Protection Act), FERPA (Family Educational Rights and Privacy Act), COPPA, and state student data privacy laws.

Collaborate with the Director of Technology to vet third-party software and cloud vendors from a technical security and data encryption standpoint before Data Privacy Agreements (DPAs) are executed.

Oversee web-filtering infrastructure to ensure safe, filtered internet access for students and staff in accordance with legal requirements.

infrastructure Security & Collaboration with ITCS

Establish secure remote-management protocols and role-based access controls (RBAC)

for technical staff.

Disaster Recovery, Backup, & System Resiliency

Architect, test, and maintain enterprise disaster recovery and business continuity plans, including immutable local and off-site/cloud backup solutions.

Monitor network and server uptime, performance metrics, and log files using advanced SIEM (Security information and Event Management) tools.

Qualifications & Requirements

Education: Bachelor's Degree in Computer Science, information Assurance, Cybersecurity, information Technology, or a related field (equivalent professional experience will be strongly considered).

Experience: Minimum of 5-8 years of progressive experience in enterprise network engineering, cybersecurity administration, and directory services management, with a preferred background in K-12 public education or municipal government environments.

Technical Expertise:

Deep technical proficiency with Microsoft Active Directory, GPO design, identity synchronization, and directory security hardening.

Advanced knowledge of routing protocols (BGP, OSPF), VLAN segmentation, enterprise wireless architecture, and next-generation firewalls (e.9., Palo Alto, Fortinet, Cisco).

Hands-on experience with SIEM platforms, EDR solutions, vulnerability management scanners, patch management frameworks, and identity/access management (IAM/MFA)

Deep understanding of secure data integration, email administration, and packet analysis.

Certifications: industry-recognized certifications-such as CISSP, CISM, CompTlA Security+, CCNA, CCNP, or equivalent-are highly desirable.

Core Competencies: Strong analytical and problem-solving skills, ability to manage high-pressure security incidents calmly and systematically, and excellent technical documentation and communication abilities.