Job Title: Network Administrator - Senior Task ID: HBITS-08-15078 Position Duration: 24 Months Client: State of NY Agency: Office of Information Technology Services
Please call
(703) 466-0951 | (571) 351-1868 | (703) 348-3018 or email at
nysreqs@ilinksolutions.com
Description
Key Job Duties
1. Cisco Catalyst SD-WAN & Roadside Edge Engineering
- SD-WAN Orchestration: Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR) policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).
- Ruggedized Edge Deployment: Configure and deploy Cisco IR1101 Industrial Integrated Services Routers in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G) backhaul, fiber connections, and legacy serial connections.
- Zero-Touch Provisioning (ZTP): Develop and maintain bootstrap configurations and WAN Edge templates within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field technicians.
- Legacy Device Integration: Configure the IR1101's serial interfaces and raw socket encapsulation to transport legacy serial-based Intelligent Transporation System (ITS) device data (e.g., older conflict monitors or loop detectors) over the modern IP/MPLS or SD-WAN network.
2. Palo Alto & Panorama Security Administration
- Centralized Security Management: Utilize Palo Alto Panorama to manage device groups, templates, and security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress points, and critical field hubs.
- IT/OT Network Segmentation: Design and enforce strict Zero-Trust segmentation policies. Isolate critical traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from each other and from the corporate IT network.
- Threat Prevention & Monitoring: Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering, and WildFire) to detect and block malicious activity targeting transportation infrastructure, including specialized signatures for industrial and IoT protocols.
3. TSMO Operations & Multicast Video Management
- Multicast Optimization: Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations centers, and media partners.
- Network Performance Monitoring: Monitor network latency, jitter, and packet loss across the SD-WAN fabric using Catalyst SD-WAN Manager's analytics tools to ensure real-time traffic management applications perform optimally.
- Incident Response & Troubleshooting: Serve as the Tier 3 escalation point for complex network outages affecting roadside devices, fiber cuts, or cellular carrier outages.
4. Collaboration & Standards Compliance
- Field Support: Partner with field technicians to troubleshoot physical layer issues (fiber optics, patch panels, antennas, and power supplies) inside roadside cabinets.
- Standards Adherence: Ensure all network designs comply with FHWA (Federal Highway Administration) guidelines, NEMA TS-2 cabinet standards, and NIST SP 800-82 guidelines for industrial control systems security.
4. Operational Support 24/7/365 on a Rotation Basis
- Provide operational support 24/7/365 for the Cisco Cataylst SD-WAN Manager and Palo Alto/Panorama environments.
Mandatory Qualifications| 1 | 72 months experience in enterprise - grade network administration. This includes configuring and troubleshooting LAN and WAN Networking equipment in a complex networking environment of at least 1,000 remote endpoints that includes switches, routers/firewalls and VPN devices. This includes troubleshooting issues using protocol analysis tools (i.e. Wireshark) and conducting analysis on network data captures. |
| 2 | 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-WAN Manager, Controllers, and Validator. This includes build and deploy localized and centralized policies, keeping firmware up to date and standardizing device configuration. |
| 3 | 72 months experience with administration of Palo Alto NGFWs and Panorama. Experience with VM-Series firewalls in public/private clouds is a plus. |
| 4 | 60 months experience with Cisco IR1101 hardware, including IOS-XE SD-WAN software, expansion modules, and cellular configuration |
| 5 | 60 months experience with routing protocols (BGP, OSPF, EIGRP), IPsec VPNs, Quality of Service (QoS), and Multicast (PIM, IGMP). |
| 6 | 36 months experience with with NTCIP 1202 (traffic signals), NTCIP 1203 (dynamic message signs), and video streaming protocols (H.264/H.265, RTSP) |
| 7 | 36 months experience in an Operational Technology (OT), Intelligent Transportation Systems (ITS), or TSMO environment managing roadside communications (fiber, wireless, cellular). |
| 8 | Must hold one of the following:
" Cisco: Cisco Certified Network Professional (CCNP Enterprise) and/or Cisco Certified Specialist - Enterprise SD-WAN Implementation (300-415 ENSDWI).
" Palo Alto: Palo Alto Networks Certified Network Security Engineer (PCNSE). |
| Required Documentation | " Re sume
" Copy of Candidate Identification
(i.e., Driver's License/Green Card/Visa and Passport if applicable)
" Any documents referenced in the above Requested Qualifications
(i.e., professional certifications, degrees, etc.) |
i-Link Solutions requires a Bachelor's Degree or its equivalent in Computer Science, Computer Information Systems, Information Systems or a closely related field of study for all positions.
Disclaimer: i-Link Solutions Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply. EEO/AA/M/F/Vet/Disability