HBITS: HBITS-08-15078
Senior, Network Administrator
24 month contract
Interview: Virtual Interview
Work model: 50% telecommuting, 50% Office per week
--- Project Description ---
The incumbent will act as Senior Network Administrator for the DOT Transportation Safety Management
and Operations (TSMO) Technology Program is responsible for the engineering, secure deployment, and
operational management of the critical communications infrastructure supporting regional Intelligent
Transportation Systems (ITS). This role focuses on leveraging Cisco Catalyst SD-WAN to connect
ruggedized roadside edge devices specifically Cisco IR1101 routers to the Traffic Management Center
(TMC) and cloud environments. This role will ensure robust, end-to-end security across this converged
IT/OT network using Palo Alto Next-Generation Firewalls managed centrally via Panorama.
--- Day-to-Day Tasks ---
1. SD-WAN Orchestration: Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN
Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR)
policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).
2. Ruggedized Edge Deployment: Configure and deploy Cisco IR1101 Industrial Integrated Services Routers
in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G)
backhaul, fiber connections, and legacy serial connections.
3. Zero-Touch Provisioning (ZTP): Develop and maintain bootstrap configurations and WAN Edge templates
within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field
technicians.
4. Legacy Device Integration: Configure the IR1101 s serial interfaces and raw socket encapsulation to
transport legacy serial-based Intelligent Transporation System (ITS) device data (e.g., older conflict
monitors or loop detectors) over the modern IP/MPLS or SD-WAN network.
5. Centralized Security Management: Utilize Palo Alto Panorama to manage device groups, templates, and
security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress
points, and critical field hubs.
6. IT/OT Network Segmentation: Design and enforce strict Zero-Trust segmentation policies. Isolate critical
traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from
each other and from the corporate IT network.
7. Threat Prevention & Monitoring: Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering,
and WildFire) to detect and block malicious activity targeting transportation infrastructure, including
specialized signatures for industrial and IoT protocols.
8. Multicast Optimization: Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to
ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations
centers, and media partners.
9. Network Performance Monitoring: Monitor network latency, jitter, and packet loss across the SD-WAN
fabric using Catalyst SD-WAN Manager s analytics tools to ensure real-time traffic management
applications perform optimally.
10. Incident Response & Troubleshooting: Serve as the Tier 3 escalation point for complex network outages
affecting roadside devices, fiber cuts, or cellular carrier outages.
--- Required Qualifications ---
" 72 months experience in enterprise - grade network administration. This
includes configuring and troubleshooting LAN and WAN Networking
equipment in a complex networking environment of at least 1,000 remote
endpoints that includes switches, routers/firewalls and VPN devices. This
includes troubleshooting issues using protocol analysis tools (i.e. Wireshark)
and conducting analysis on network data captures.
" 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-
WAN Manager, Controllers, and Validator. This includes build and deploy
localized and centralized policies, keeping firmware up to date and
standardizing device configuration.
" 72 months experience with administration of Palo Alto NGFWs and
Panorama. Experience with VM-Series firewalls in public/private clouds is a
plus.
" 60 months experience with Cisco IR1101 hardware, including IOS-XE SD-
WAN software, expansion modules, and cellular configuration
" 60 months experience with routing protocols (BGP, OSPF, EIGRP), IPsec
VPNs, Quality of Service (QoS), and Multicast (PIM, IGMP).
" 36 months experience with with NTCIP 1202 (traffic signals), NTCIP 1203
(dynamic message signs), and video streaming protocols (H.264/H.265,
RTSP)
" 36 months experience in an Operational Technology (OT), Intelligent
Transportation Systems (ITS), or TSMO environment managing roadside
communications (fiber, wireless, cellular).
" Must hold one of the following:
" Cisco: Cisco Certified Network Professional (CCNP Enterprise) and/or
Cisco Certified Specialist - Enterprise SD-WAN Implementation (300-415
ENSDWI).
" Palo Alto: Palo Alto Networks Certified Network Security Engineer (PCNSE).
MVP Consulting Plus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law. Reasonable accommodations are available for qualified individuals with disabilities during the application process.