Sr Network Engineer

The Senior Network Engineer (LAN/WAN) is responsible for the firm''s LAN/WAN/Wi-Fi network infrastructure, which includes routers, switches, WAN accelerators, Wireless Access Points (WAPs), various data circuits, etc. This position will be responsible for the general welfare of the firm''s backbone, which will include activities such as network design, installation, upgrades, and troubleshooting. Candidate must have at least 5+ years'' experience with Cisco IOS/NX-OS-based routers, switches, etc.; DS3, Metro Ethernet, and MPLS circuits; TCP/IP v4 protocol (v6 experience a plus); and the routing protocols, OSPF, IEGRP and BGP. Candidate must know the specification, installation, programming, and troubleshooting of Cisco routers (ASR1002X,ISR4331,ISR4351,C3945), Cisco switches (C3750X, C3850X, Nexus N9K-C9300 data center and remote office switching), Cisco 5508 Wireless LAN controllers and AP''s. The candidate must be knowledgeable with Cisco ACI, Cisco SD-Access, and Cisco SDWAN(viptela). Candidate must have the ability to work with VLAN''s, interswitch 802.1Q trucking, switch and AP port security using 802.1x via Enterprise PKI and the ability to install, operate, and troubleshoot Cisco ACS, Cisco ISE, Cisco NX-OS, and Cisco Prime servers for TACACS control of routers, and 802.1x authentication of user switch ports and APs. Candidate must have the ability to set up and troubleshoot spanning tree, port groups, and know how/when to use port fast; the ability to program routers, switches and set up interface settings, device security (local/TACACS+), and access-lists; and must have the ability to install, test, and place into production various data circuits from T1 thru TenGigabit Ethernet. Candidate must have the ability to create private networks over the Internet using a combination IPSEC, GRE tunnels, and OSPF, IEGRP, BGP routing. Candidate must be able to connect to ISPs setup L3 connections, establish BGP peering, announce ARIN assigned routes, and perform basic traffic engineering as needed. Candidate must have the ability to perform traffic studies to determine what user/application is using the WAN, be able to determine if traffic is taking a non-optimum path and the ability to correct the routing metrics. Candidate should have the ability to create and oversee the installation of the fiber and copper cable plant in a building (generally new construction) and be the lead engineer in the design of all the firms MDF, IDF, and general data center moves (including the specification of Electrical, AC, cabling, space planning, etc. for Network/Server equipment). In general, lead all IT aspects of an office move. Candidate should have the ability to install, operate, and troubleshoot two factor authentication systems. Candidate should be able to install, configure, and operate the Cisco ASA5512 for end user remote access, Citrix NetScaler as a firewall and load-balancer; and work with our VoIP vendor in troubleshooting issues associated to our telephone system. Candidate should have a general knowledge of network security and system hardening, Microsoft Active Directory and Microsoft PKI, and DNS, and DHCP. Knowledge of Palo Alto Firewall, VMware vSphere, and NetApp SAN is considered a plus. This position requires the ability to lift up to fifty pounds and to install equipment at any position in a standard 7-foot EIA Relay Rack or HP/NetApp cabinet. Occasional travel is required.

Created: 2021-11-29