Network And Security Administrator

Background

Government of Sindh (GoS), through the Sindh Social Protection Authority (SSPA), is implementing the "Strengthening Social Protection Delivery (SSPDS) System in Sindh" project with the assistance of the World Bank to strengthen social protection service delivery system and enhance accessibility and utilization of mother and child health services in selected districts in Sindh.

The project will support three components, financed through an Investment Project Financing (IPF) instrument, with US$200 million from the International Development Association (IDA) and US$30 million from counterpart funding. The Project components are: (a) Strengthen Sindh Social Protection Service Delivery Systems to support the modernization of systems and processes to fully operationalize the newly established Sindh SP Authority and improve its institutional capacity by strengthening the administrative, operational, policy, and planning functions and capabilities, including the development of energy efficient/climate-smart information technology (IT) systems and capacity building through the provision of technical assistance; (b) Mother and Child Support Program (MCSP) focusing on birth and first 1,000 days where risks and needs are high but programmatic responses are weak; the main objective of this component is to create demand for Maternal and Newborn Child-Health (MNCH) services and promote behavioural change to increase uptake of the MNCH services focusing on the first 1,000 days of life through the provision of CCTs in selected districts; and (c) Contingent Emergency Response with zero allocation, providing the Borrower to gain quick access to Bank financing to respond to a crisis or emergency. As part of a comprehensive disaster risk management strategy, the Contingent Emergence Response Component typically provides support for immediate rehabilitation and reconstruction needs.

As part of strengthening IT systems, SSPA requires the services of a
Network & Security Administrator

to design, secure, and optimize enterprise-level IT infrastructure and provide technical leadership for advanced cybersecurity and network operations.

Objectives of the Assignment

The objective of this consultancy is to provide specialized services for:

1.     Design and implement secure, high-availability enterprise IT infrastructure.

2.     Develop and enforce advanced cybersecurity frameworks and policies.

3.     Provide technical leadership for data centre, cloud, and network security projects.

4.     Implement SIEM and SOUR solutions for proactive security monitoring and automated response.

5.     Mentor and guide support teams while advising management on infrastructure and security strategies.

Responsibilities and work scope:

The consultant will be responsible for the following tasks:

· Design, deploy, and optimize enterprise-level network and security infrastructure (LAN, WAN, SD-WAN, NGFW, VPNs, IDS/IPS).

· Lead data centre design and implementation in compliance with international standards (e.g., TIA-942).

· Manage enterprise-level cloud integration and Microsoft 365 security frameworks.

· Oversee large-scale data migration, virtualization, and automation projects ensuring uptime and security compliance.

· Implement Security Information and Event Management (SIEM) solutions for centralized monitoring, log analysis, and incident tracking.

· Deploy and configure Security Orchestration, Automation, and Response (SOUR) solutions to automate incident response, improve SOC efficiency, and reduce mean time to detect/respond.

· Develop cybersecurity policies, standards, and incident response frameworks.

· Conduct security risk assessments, penetration testing, and compliance audits.

· Implement disaster recovery (DR) and business continuity (BCP) strategies.

· Provide advisory support on IT infrastructure strategy, licensing, and security investments.

· Mentor and supervise technical staff on best practices in network and cybersecurity.

· Prepare technical documentation, policy manuals, and reports for SSPA management and stakeholders.

SUPERVISION

The professional will work with MIS department to perform the assigned tasks and will report to the Head of IT/ Technical Director.

QUALIFICATIONS AND EXPERIENCE

Following are qualification/skill requirements for the position:

· Bachelor's degree (16 years) in Computer Science, Information Technology, Software Engineering, or a related field (Master's degree preferred).

· At least
5 years of proven experience
in network engineering, IT infrastructure design, and cybersecurity.

· Demonstrated success in designing and managing enterprise networks, secure data centers, and cloud-based environments.

· Expertise in Fortinet, Cisco, Microsoft, VMware, and Citrix platforms.

· Strong background in NGFWs, IDS/IPS, SIEM and SOUR solutions.

· Relevant certifications:
CCNP/HCIP, Fortinet NSE 4+, CompTIA Security+, CEH
(required).

· Advanced certifications such as
CISSP, CISM, or CCNP Security
(desirable).

· Proven ability to lead teams, manage complex projects, and provide advisory input at the strategic level.

· Excellent problem-solving, communication, and report-writing skills.

Selection Process

The selection will be made using open competitive selection in accordance with the "World Bank Procurement Regulations for Investment Project Financing Goods, Works, Non-Consulting and Consulting Services" revised in November 2020.