Network Operations Specialist

Plans, implements, and operates network services/systems, to include hardware and virtual environments.

Tasks

The concrete work activities defined for this role in the DCWF v5.1 spreadsheet. Core tasks are required for the role; additional tasks are associated but not mandatory.

• T462 additional Configure and optimize network hubs, routers, and switches (e.g., higher-level protocols, tunneling).
• T522 additional Develop and implement network backup and recovery procedures.
• T555 additional Diagnose network connectivity problem.
• T572 additional Ensure application of security patches for commercial products integrated into system design meet the timelines dictated by the management authority for the intended operational environment.
• T656 additional Implement new system design procedures, test procedures, and quality standards.
• T666 additional Install and maintain network infrastructure device operating system software (e.g., IOS, firmware).
• T667 additional Install or replace network hubs, routers, and switches.
• T673 additional Integrate new systems into existing network architecture.
• T718 additional Monitor network capacity and performance.
• T736 additional Patch network vulnerabilities to ensure information is safeguarded against outside parties.
• T802 additional Provide feedback on network requirements, including network architecture and infrastructure.
• T857 additional Test and maintain network infrastructure including software and hardware devices.

Knowledge, Skills, and Abilities

KSA statements define what a person filling this role knows or can do. "Knowledge" is what they must know, "Skill" is what they can perform, and "Ability" is a durable capacity they bring to the work.

• A15B ability core Ability to operate network equipment including hubs, routers, switches, bridges, servers, transmission media, and related hardware.
• A271B ability core Ability to operate common network tools (e.g., ping, traceroute, nslookup).
• A347A ability core Ability to execute OS command line (e.g., ipconfig, netstat, dir, nbtstat).
• A901A ability core Ability to operate different electronic communication systems and methods (e.g., e-mail, VOIP, IM, web forums, Direct Video Broadcasts).
• K0012 knowledge core Knowledge of communication methods, principles, and concepts (e.g., crypto, dual hubs, time multiplexers) that support the network infrastructure.
• K0015 knowledge core Knowledge of capabilities and applications of network equipment including hubs, routers, switches, bridges, servers, transmission media, and related hardware.
• K0041 knowledge core Knowledge of organization's LAN/WAN pathways.
• K0055 knowledge core Knowledge of cybersecurity principles used to manage risks related to the use, processing, storage, and transmission of information or data.
• K0070 knowledge core Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• K0072 knowledge core Knowledge of local area and wide area networking principles and concepts including bandwidth management.
• K0076 knowledge core Knowledge of measures or indicators of system performance and availability.
• K0092 knowledge core Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
• K0106 knowledge core Knowledge of remote access technology concepts.
• K0112 knowledge core Knowledge of server administration and systems engineering theories, concepts, and methods.
• K0133 knowledge core Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).
• K0148 knowledge core Knowledge of Virtual Private Network (VPN) security.
• K0261 knowledge core Knowledge of basic concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless).
• K0271 knowledge core Knowledge of common network tools (e.g., ping, traceroute, nslookup).
• K0278 knowledge core Knowledge of different types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN).
• K081A knowledge core Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
• K0900 knowledge core Knowledge of web filtering technologies.
• K0901 knowledge core Knowledge of the capabilities of different electronic communication systems and methods (e.g., e-mail, VOIP, IM, web forums, Direct Video Broadcasts).
• K0902 knowledge core Knowledge of the range of existing networks (e.g., PBX, LANs, WANs, WIFI, SCADA).
• K1072 knowledge core Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust).
• K1073 knowledge core Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• S154 skill core Skill in analyzing network traffic capacity and performance characteristics.
• S193A skill core Skill in implementing and testing network infrastructure contingency and recovery plans.
• S198 skill core Skill in establishing a routing schema.
• S205 skill core Skill in implementing, maintaining, and improving established network security practices.
• S207 skill core Skill in installing, configuring, and troubleshooting LAN and WAN components such as routers, hubs, and switches.
• S231A skill core Skill in using network management tools (e.g., simple network management protocol (SNMP), (GrassMarlin) to analyze network traffic patterns (e.g., including control system network analysis).
• S234A skill core Skill in sub-netting.
• S891A skill core Skill in configuring and utilizing computer protection components (e.g., hardware firewalls, servers, routers, as appropriate).
• S893 skill core Skill in securing network communications.
• S896 skill core Skill in protecting a network against malware.
• S985 skill core Skill in configuring and utilizing network protection components (e.g., Firewalls, VPNs, network intrusion detection systems).
• A41A ability additional Ability to operate the organization's LAN/WAN pathways.
• A6918 ability additional Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.
• A6919 ability additional Ability to determine the best cloud deployment model for the appropriate operating environment.
• A76A ability additional Ability to monitor measures or indicators of system performance and availability.
• A92A ability additional Ability to monitor traffic flows across the network.
• K0903 knowledge additional Knowledge of Wi-Fi.
• K0989 knowledge additional Knowledge of Voice over IP (VoIP).
• K0990 knowledge additional Knowledge of the common attack vectors on the network layer.
• K1034A knowledge additional Knowledge of Personally Identifiable Information (PII) data security standards.
• K1034B knowledge additional Knowledge of Payment Card Industry (PCI) data security standards.
• K1034C knowledge additional Knowledge of Personal Health Information (PHI) data security standards.
• K1074A knowledge additional Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly.
• K1133 knowledge additional Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).
• K1134 knowledge additional Knowledge of symmetric key rotation techniques and concepts.
• K1141A knowledge additional Knowledge of an organization's information classification program and procedures for information compromise.
• K1142 knowledge additional Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).

EWU courses that develop this role

NCAE CyberGames scoreboard errors for this role

• NCAE-7aabdb11ec DNS EXT FWD / failure: Can't contact DNS Server on IP
• NCAE-b364740c09 DNS EXT REV / failure: Can't contact DNS Server on IP
• NCAE-9b363f6139 DNS INT FWD / failure: Can't contact DNS Server on INT_IP
• NCAE-7f0bb3106d DNS INT REV / failure: Can't contact DNS Server on INT_IP
• NCAE-a35a20c717 DNS EXT REV / partial: Connected to IP:53, no useful content though...
• NCAE-c8514560b8 Router ICMP / failure: Request Timed Out to host IP after 1 seconds
• NCAE-cb9ddf3665 DNS INT REV / partial: Connected to INT_IP:53, no useful content though...
• NCAE-a159d521db DNS INT FWD / partial: Connected to INT_IP:53, no useful content though...
• NCAE-c1a43a09d2 DNS EXT FWD / partial: Failed to lookup: ns1.team15.ncaecybergames.org, files.team15.ncaecybergames.org, shell.team15.ncaecybergames.org
• NCAE-98b67814b9 Router ICMP / failure: ping says "Destination Host Unreachable" to host IP
• NCAE-27ec0357b6 DNS EXT FWD / partial: Connected to IP:53, no useful content though...
• NCAE-71165e8b85 DNS EXT FWD / partial: Failed to lookup: ns1.team18.ncaecybergames.org, files.team18.ncaecybergames.org, shell.team18.ncaecybergames.org
• NCAE-6b1ed4e432 DNS INT REV / partial: Failed to lookup: INT_IP

Other roles in this element