NetworkArchitect_Senior (14917)

Provide a short description of the Position:
The incumbent will act as Senior Network Architect/Engineer for the DOT Transportation Safety Management and Operations (TSMO) Technology Program as a team member building and maintaining the secure, reliable, and performant communication pathways that enable the integration and operation of both IT and OT systems, ensuring the smooth flow of data and the protection of critical industrial infrastructure. This role is critical in designing, building, and securing our critical infrastructure from evolving cyber threats, ensuring the safety, reliability and efficiency of our transportation networks.

Provide a list of the day to day tasks to be performed by the Selected Candidate:
Responsibilities include but not limited to the following:

Network Design and Architecture:

• Design, implement, and maintain robust and secure IT and OT network infrastructures for transportation systems (e.g., traffic management centers).
• Develop network architectures that integrate IT and OT environments, ensuring seamless data flow and interoperability.
• Plan for network scalability, redundancy, and disaster recovery to ensure continuous operation of critical transportation services.

Network Implementation and Configuration:

• Install, configure, and manage network hardware (routers, switches, firewalls, wireless access points, VPN concentrators) and software.
• Implement and manage network protocols relevant to both IT (TCP/IP, BGP, OSPF) and OT (Modbus, DNP3, IEC 60870-5-101/104, Profinet, EtherNet/IP).
• Configure and maintain network security devices and policies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs.
• Deploy and manage network monitoring and management tools.

Network Operations and Maintenance:

• Monitor network performance, identify bottlenecks, and troubleshoot network issues proactively.
• Respond to network incidents and outages, performing root cause analysis and implementing corrective actions.
• Perform regular network maintenance, including software/firmware updates and hardware replacements.
• Manage network configurations and documentation, ensuring accuracy and completeness.

IT/OT Convergence and Security:

• Bridge the gap between IT and OT networks, understanding the unique requirements and challenges of each.
• Implement and enforce cybersecurity best practices for both IT and OT environments, adhering to relevant industry standards (e.g., NIST Cybersecurity Framework, ISA/IEC 62443).
• Develop and implement network segmentation strategies to isolate critical OT systems from IT networks.
• Conduct security assessments and vulnerability testing of network infrastructure.

Collaboration and Support:

• Collaborate with cross-functional teams (e.g. business, technical and security) to ensure network requirements are met.
• Provide technical guidance and support to operations staff.
• Participate in project planning, design reviews, and implementation phases.
• Stay abreast of emerging technologies and industry trends in IT, OT, and transportation systems.

Documentation and Reporting:

• Create and maintain detailed network diagrams, configuration guides, and operational procedures.
• Generate reports on network performance, security incidents, and project status.

Position Mandatory Qualification (Per Attachment 7, Section 1.2.4)

Position Job Title: Network Architect
Designs and implements computer and information networks, such as local area networks (LAN), wide area networks (WAN), intranets, extranets, and other data communications networks. Performs network modeling, analysis, and planning.

Position Skill Level: Senior
60 - 84 Months: Candidate is able to work independently, without assistance and provides guidance to others. May have an advanced education.

Position Requested Qualifications (Per Attachment 7, Section 1.2.5)

• 72 months experience in foundational IT and OT networking including networking protocols (routing, switching and wireless protocols); network design and architecture; network security principles; and network monitoring and troubleshooting
• 72 months experience in designing, building, securing and managing IT and OT networks, with IT/OT convergence challenges and solutions preferably in the Transportation sector.
• 60 months experience in OT including network protocols; cybersecurity threats and vulnerabilities; IT/OT Convergence challenges; and real-time data processing and management
• 60 months experience in specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS).
• 60 months experience with IT and OT Network operational support including incident response and root cause analysis.
• 48 months experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero trust architecture and implementation
• 48 months experience collaboration with cross-functional teams (business, technical and security); and producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences
• MUST hold at least one of these Certifications:
  **Cisco (CCNA, CCNP, CCIE)
  **CompTIA Network+/Security+
  **CISSP

Required Documentation

• Re sume
• Copy of Candidate Identification (i.e., Driver's License/Green Card/Visa and Passport if applicable)
• Any documents referenced in the above Requested Qualifications (i.e., professional certifications, degrees, etc.)

Additional Information Requests:

• Are there additional security requirements for the Authorized User? Yes
• If YES, include the additional security requirements: Mandatory ITS Security Agreements and Fingerprint-based Background Check.
• Will additional training potentially be required during the Engagement? Yes
• If YES, provide description of anticipated training: All NYS Office of Employee Relations (OER) Mandated Annual Training
• What type and/or manner, of knowledge transfer is requested during the Engagement? Consultant will work with state staff and transfer knowledge gained with state staff and other consultants
• Is travel anticipated during the Engagement? No