Network Security Engineer

GREENWICH PUBLIC SCHOOLS Purchasing Department 290 Greenwich Avenue Greenwich, Connecticut 06830 (203) 625-7411 eugene_watta@greenwich.ct.k12.us EUGENE H. WATTS Senior Buyer June 21, 2023 Dear Sir/Madam: EUGENE H. WATTS Senior Buyer June 21, 2023 Dear Sir/Madam: You are invited to submit a proposal for a Network Security Engineer for Greenwich Public Schools. The attached proposal specifications detail the requirements we are looking for. Proposers are urged to read all documents carefully and fill out all information requested. Proposals which are incomplete, obscure, or conditional, and which contain irregularities of any kind, will be subject to rejection for failure to comply strictly with these conditions. Proposals must be submitted on the schedule form attached hereto. All unit prices must be filled in. Each Proposal must be submitted with one (1) original and five (5) copies of the Proposal. Proposals must

submit Proposal in a clear, concise and legible manner so as to permit proper evaluation of responsive Bids. Faxed Proposals will not be accepted however, hand delivered Proposals will be accepted on Monday through Friday between the hours of 8:30 a,m and 3:30 p.m. The original Proposal and copies must be in a sealed envelope plainly marked: Proposal: Network Security Engineer Opening Date: 7/13/23 Opening Time: 11:00 a.m. RFP Number: 2417-23 Join by computer: https://meet.google.com/ujd-fcnh-aho Dial-In by phone: 8575-458-405 1 PIN: 489# 460 955 All Proposers and other interested people are invited to call in to hear the proposals being read at 11:00 a.m. Very truly yours, _____________________ Eugene H. Watts https://meet.google.com/ufo-ssgg-tuq https://meet.google.com/ufo-ssgg-tuq https://meet.google.com/ufo-ssgg-tuq tel:%E2%80%AA+1%20405-458-8575%E2%80%AC Request for Proposal Network Security Engineer BACKGROUND: The Town of Greenwich, CT is about 30 miles northeast of New York City and has a population of about 60,000 people. The Greenwich Public Schools enjoy a national reputation for excellence and have strong support from the community. Our fifteen public schools have a current enrollment of 9000 students and consist of eleven elementary schools (K-5), three middle schools (6-8), and one comprehensive high school (9-12). Our district also offers some Pre-K and alternative high school programs. 1. SUMMARY Greenwich Public Schools is looking for a qualified senior level Network Security Engineer with established experience operating and managing the range of security products and software that are used within government agencies with a focus on public school systems. Overview Greenwich Public Schools is seeking a Network Security Engineer for the school district. The selected contractor will act as an integral part of the organization, working with the Board of Education IT Department to produce successful outcomes as specified by the school. The selected contractor will report to the Board of Education IT Department, they are expected to work with multiple entities across the Town of Greenwich. . 2. CONTRACT LENGTH: This Request for Proposal is for awarding a contract to cover an eleven (11) month period beginning August through June. The service and work contemplated under this Contract shall be completed in full on or before June 30, 2024, with the option, if agreed by both parties, to extend the contract for the 2024/2025, 2025/2026, 2026/2027 and 2027/2028 school years. Should the selected consultant not perform to the satisfaction of Greenwich Public Schools, the District may cancel the contract with 30 days’ notice. 3. OPTION TO EXTEND: The proposer may be asked to extend the period of this agreement for the school if agreeable to both parties. The proposer shall be notified in writing by the Purchasing Department if the Board of Education intends to extend the contract period by at least thirty (30) days prior to the expiration of the original contract 4. PROPOSAL EVALUATION: A committee composed of various constituents (i.e. staff, and administrators) will evaluate proposals. The following criteria guidelines will be used in analyzing and evaluating this proposal. a. Requests for presentations or clarification of portions of the proposals may be required. b. Conformance to the requirements of this RFP, i.e., conformance to Terms, Conditions and Scope of work. c. Background experience of the proposer and resume. d. References. e. Interview by committee if requested. 5. AWARD OF CONTRACT: The contract will be awarded by the Board of Education to the qualified firm or person at compensation determined to be fair and reasonable considering budgetary limitations, scope, complexity and the nature of goods and/or services. 6. REQUIREMENTS: The services required by the selected Network Security Engineer include: 1. Work directly with the Chief Technology Officer and the Chief Information Security Officer on projects related to the security improvement roadmap. 2. Develop plans and produce roadmaps for cybersecurity related projects. 3. Prepare project specification documents. 4. Prepare technical network diagrams using Visio or similar products. 5. Prepare documentation for presentation and discussion to leadership. 6. Coordinate with stakeholders to verify methods, equipment, and timelines. 7. Scope projects to ensure adequate infrastructure ahead of project implementation (power, connectivity, redundancy, environmental, cabling, physical clearances, and similar). 8. Hands on technical work in the execution, implementation, maintenance, and support of large-scale network security projects. 9. Training existing staff to increase cybersecurity knowledge and awareness. 10. Engage with certified teaching staff in order to manage expectations within their school buildings and negotiate the balance between potentially intrusive security practices and teaching and learning. 7. SCOPE The scope of technical experience required by the selected Network Security Engineer includes: 1. Cybersecurity policy and planning for large enterprises 2. Network security program management 3. Vendor management, including audit, assessment, and compliance 4. Hyperconverged infrastructure solutions 5. HP switching and routing 6. Palo Alto firewall management 7. Fortinet security appliances 8. VPN, site to site and remote access 9. Enterprise disaster recovery 10. SAML OAuth 2.0 application configuration 11. Alertus monitoring 12. Scripting with powershell, bash, and python 13. Prior software development experience 14. Cloud architecture, security, and automation 15. Training large groups of staff 16. Manage large SIEM solutions 17. Network segmentation 18. Endpoint and server protection 19. Enterprise firewall and threat platforms 20. Email security 21. High availability and disaster recovery 22. Telecom Systems 23. High Density Wireless Networks