Senior Network Engineer

The purpose of this position is to architect, plan, design, implement and maintain the City’s enterprise local and wide area networks to meet the current and future needs of the City.

Essential Duties and Responsibilities:

• Architects and administers all of the City’s enterprise networks, including infrastructure design, implementation, configuration, and maintenance of routers, firewalls, switches, VPN hardware, and wireless.

• Develops and maintains network architecture standards, logical/physical diagrams, and design documentation to support scalability, resiliency, and disaster recovery planning.

• Evaluates emerging networking and security technologies and makes recommendations on architecture upgrades, hardware refresh cycles, and capacity planning.

• Aids in the design and administration of the City’s server environment.

• Provides support of network infrastructure to ensure successful performance and secure operation of the enterprise network.

• Performs device configuration maintenance, firewall management & troubleshooting.

• Performs device and traffic monitoring, analysis, management and troubleshooting.

• Develops usage and security metrics to allow for the detection of abnormal activities.

• Administers overall network security, including planning and oversight of penetration and vulnerability testing performed internally or by third-party assessors.

• Performs security audits from internal and external parties.

• Investigates security incidents and researches and implements solutions.

• Identifies and remediates network vulnerabilities.

Supplemental Functions:

• Performs other similar duties as required.

Job Specifications and Qualifications:

Knowledge:

• Enterprise network architecture and design principles, including redundancy, segmentation, and disaster recovery

• Networking methods, materials and equipment

• Enterprise switching and routing platforms

• Enterprise firewall administration, VPN, and security policy management

• Network protocols, including BGP, QoS policy design, data center networking, NAC/ 802.1X port-based authentication, cloud/hybrid connectivity and enterprise monitoring software

Licensing and Certifications:

• Cisco Certified Network Professional (CCNP) preferred

• Cisco Certified Design Professional (CCDP) or Cisco Certified Design Expert (CCDE) preferred

• Fortinet Network Security Expert 4 (NSE 4) – Network Security Professional preferred

• Fortinet Network Security Expert 7 (NSE 7) preferred

• EC-Council Certified Ethical Hacker (CEH) preferred

• EC-Council Certified Network Defender (CND) preferred

• Valid North Carolina Driver’s License

PLEASE NOTE: Applicants must meet the City’s criteria for an acceptable driving record.

Working Conditions / Physical Requirements:

• Positions in this class require: vision, hearing, fine dexterity, sitting, talking, standing, walking, lifting, carrying, reaching, handling, kneeling, crawling, pushing/pulling, climbing, foot controls, balancing, crouching, twisting.

• Sedentary Work: Exerting up to 10 pounds occasionally or negligible weights frequently; sitting most of the time.

The intent of this job description is to provide a representative summary of the types of duties and responsibilities that will be required of the positions given this title and shall not be construed as a declaration of the specific duties and responsibilities of any particular position. Employees may be requested to perform job-related tasks other than those specifically presented in this description. Fair Labor Standards Act (exempt/non-exempt) is designated by position. The employer actively supports Americans with Disabilities Act and will consider reasonable accommodations.