Typical Deliverables
· Design and implement Starlink-based WAN connectivity integrated with Cisco Firepower/FTD firewalls for new and existing Parks locations, including firewall configuration, WAN/LAN
interfaces, routing, NAT, security policies, network segmentation, and connectivity to County network resources. Perform end-to-end testing and troubleshooting to ensure secure, reliable, and resilient connectivity for remote Parks sites.
· Develop and support a standardized Starlink and firewall architecture for future Parks deployments, including primary/backup WAN connectivity, failover requirements, firewall security controls, monitoring, performance validation, and technical documentation to support scalable and consistent deployment across County Parks locations.
· Lead network modernization and migration activities, including VLAN, subnet, gateway, and IP-address changes; switch and firewall replacements; configuration updates; cutover planning; testing; validation; and rollback procedures.
· Assess existing Parks networks to identify legacy configurations, capacity limitations, unsupported equipment, addressing conflicts, security concerns, and opportunities to improve availability, performance, and maintainability.
Required Skills & Abilities
· Network engineer with at least 5 years of knowledge and hands-on experience and expert knowledge in PAN FW, Cisco ASA/FTD, F5 LB, Citrix Netscalers, Routing and Switching (BGP and EIGRP routing protocol), Authentication Policy servers such as ISE or Aruba Clearpass. Must have solid network design principles (Wired and Wireless) knowledge. Good experience with Layer 2 design concept.
· This position also requires knowledge and experience in using lnfoblox, Solarwinds, StruxureWare and Firepower management console.
· The individual must also possess ability to diagnose, troubleshoot, and resolve networking issues.
· Individual must be flexible to working off business hours since most of the network equipment must be deployed and brought online during off business hours including weekend under strict timeline and strict schedule.
· Individual must have a good communication, organization skill and meet deadlines.
· Individual must be able to work on-site five days a week
· Individual must be able to configure, install and test various network devices and services (e.g. routers, switches, load balancers, VPN).
· Position requires working in County Parks environments including some work outdoors. This may entail using ladders to reach devices on poles/rooftops or clearing signal obstructions such as branches.
· Work also requires going to different locations across the County. Candidates must possess a valid driver’s license and be legally permitted to drive in California. Selected candidate will be require to take County driver training (online) and pass the test to obtain a County permit in order to drive on the job
Additional Qualifications
· Cisco Certified Network Professional (CCNP) certification is desirable but not required.
· Good working experience on LAN, WAN, WLAN, VPN, EIGRP, HTTP, DHCP, ICMP, DNS, ACL, NAT, SNMP, SYSLOG, NTP, TACACS, UPS
· Good working experience on Cisco router, switch, and firewall hardware installation, configuration, IOS*, and support
· Good working experience on Aruba indoor and outdoor WAP hardware installation and configuration
· Good working experience on Cradlepoint hardware installation and configuration
· Good hands-on experience in physical installation, rack-and-stack, cabling, and use of basic hand and power tools
· Good working experience in coordinating with WAN carriers for site surveys and circuit installation, test, and turn-up
· General knowledge of PC, iPhone, printer, and IoT devices' installation and operation
· Working experience on SolarWinds, Infoblox, Cisco ISE, Cisco Catalyst Center, and Aruba Mobility/Airwave is a plus
· Good people and client relationship skills
· Self-motivated, persistent, accommodating, responsive, proactive, and reliable team player
· Ability to learn County environment