Network Analyst (Systems Analyst)

Anne Arundel County; Annapolis (MD); On-site; USD 110,000 - 160,000; Full time

Job summary

Anne Arundel County in Maryland seeks a senior network engineer to hands-on engineer, configure, and support the countywide enterprise network infrastructure.

The role focuses on drafting, building, validating configurations for routers, switches, firewalls, wireless, and NAC; deploying 802.1X and ISE per security standards.

You will provide Tier 4 troubleshooting, lead multi‑phased IT projects, create topology diagrams, and mentor field staff in a high‑visibility enterprise environment.

Qualifications

• Requires a four‑year degree in math, IT, or related field with specialized training in electronic data processing or equivalent; six or more years of experience in electronic data processing systems analysis and design.

Responsibilities

• Build and validate device configurations for routers, switches, firewalls, optical gear, wireless controllers, and access points per standard templates.
• Deploy and maintain Cisco ISE, 802.1X port security, and NAC policies (MAB, RADIUS/TACACS+) to control access.
• Design and optimize enterprise wireless networks including SSID profiles, RF tuning, coverage mapping, and guest/internal controls.
• Configure IPsec/GRE VPN tunnels, SSL certificates, firewall rules, and ACLs; submit changes through formal review before deployment.
• Provide Tier 4 support to diagnose complex enterprise outages, vendor escalations, and high‑level diagnostic resolutions.
• Maintain high availability via firmware updates, patch management, and scheduled hardware replacements.
• Monitor traffic, QoS, ISE logs, and wireless performance using SNMP and packet capture tools.
• Draft change control requests, risk assessments, and rollback plans for maintenance.
• Lead hands‑on engineering tasks for network, wireless, and NAC rollouts with site surveys and heat mapping.
• Maintain topology diagrams, wireless maps, ISE policy docs, and IP/VLAN tables.
• Support field technicians and vendors during deployments and troubleshooting.

Skills

Network engineering

Team leadership

Documentation

Security awareness

Education

Bachelor's degree in CS/IT/Engineering

Tools

Cisco IOS

Cisco NX-OS

Palo Alto PAN-OS

Wireshark

SNMP monitoring

Job description

This senior technical position is responsible for the hands‑on engineering, configuration, implementation, and operational support of the County’s enterprise network infrastructure.

The primary focus of this role is drafting, building, and validating network device configurations—including routers, switches, firewalls, enterprise wireless infrastructure, and Network Access Control (NAC) systems. This includes deploying 802.1X port security and Cisco Identity Services Engine (ISE) policies in strict alignment with established security standards. Proposed configurations and architectural changes undergo formal technical review prior to production deployment.

This position provides Tier 4 advanced technical troubleshooting for complex, enterprise‑critical network incidents, vendor TAC escalations, and deep‑level diagnostic resolution.

Nature and Variety of Work:

Work involves supporting mission‑critical operations across public safety, medical, and utility facilities. This position applies technical engineering expertise to build device configurations, manage wireless controller environments, enforce switch port security, maintain firewall rulesets, and resolve high‑level technical escalations.

This position operates with moderate‑to‑high technical independence to execute scheduled maintenance, perform hardware rollouts, manage wireless access points, collaborate on Tier 4 incident resolutions, and lead technical tasks on multi‑phased IT projects within a high‑visibility enterprise environment. (Note: The duties and responsibilities enumerated in this class specification are for the purpose of determining a common set of minimum qualifications and salary level for all positions in this class. They are not intended to include all of the essential functions of all positions in the class.)

• Build and validate configurations for enterprise routers, switches, firewalls, optical gear, wireless LAN controllers, and access points according to standard templates.
• Deploy and maintain Cisco ISE, 802.1X port security, and NAC policies (MAB, RADIUS/TACACS+) to control wired and wireless network access.
• Design and optimize enterprise wireless networks, managing SSID profiles, RF tuning, coverage mapping, and guest/internal controls.
• Configure IPsec/GRE VPN tunnels, SSL certificates, firewall rules, and ACLs; submit proposed changes through formal review processes before deployment.
• Provide Tier 4 support to diagnose complex enterprise outages, protocol failures, and vendor TAC escalations.
• Maintain high availability by executing firmware updates, patch management, and scheduled hardware replacements during maintenance windows.
• Monitor traffic, QoS, ISE authentication logs, switch port security, and wireless performance using SNMP and packet capture tools.
• Draft change control requests, risk assessments, and rollback plans for all scheduled maintenance activities.
• Serve as the hands‑on engineering lead for network, wireless, and NAC rollout projects, performing site surveys and heat mapping.
• Maintain network topology diagrams, wireless coverage maps, ISE policy documentation, and IP/VLAN allocation tables.
• Support field technicians, system administrators, and third‑party vendors during deployments and troubleshooting. Conducts detailed methods and systems surveys of programs with a view to applying electronic data processing methods.
• Conducts feasibility and cost‑comparison studies and prepares recommendations; may conduct work‑measurement, work‑simplification, and manpower‑utilization studies in conjunction with the design of overall systems.
• Participates in the preparation of electronic data processing system specifications; develops block diagrams, flow charts, and input‑output requirements.
• Provides complete analysis and documentation for programming; instructs computer staff in the conversion of operations to electronic data processing methods; designs forms associated with the systems; prepares procedure manuals for the operation of the systems; devises data verification methods and standards.
• Participates in development and maintaining of the long‑range County master plan and the database.
• Maintains existing systems through the review and analysis of user requests for program changes; recommends approach and estimates impact of requested changes; coordinates and monitors progress of program changes.
• Leads other analysts in the conduct of their work.
• Performs related work as required.

KNOWLEDGE, SKILLS, AND ABILITIES

• Thorough knowledge of modern techniques in systems analysis and design.
• Thorough knowledge of current developments in systems analysis, management information systems, and electronic data processing.
• Thorough knowledge of the capabilities and requirements of electronic data processing equipment.
• Considerable knowledge of management principles and practices, including organizational structure, staffing patterns, and administrative control techniques.
• Ability to plan, organize, and conduct systems analyses and to evaluate alternative processes and procedures.
• Ability to communicate effectively with administrators and subordinate personnel.
• Ability to establish and maintain effective working relationships with administrators, departmental representatives, and electronic data processing personnel.
• Ability to make oral and written reports and presentations, and to prepare charts and graphs clearly and effectively.
• Ability to lead others in the performance of their duties.

Graduation from an accredited four‑year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations, and methodologies; and six (6) or more years of experience in electronic data processing systems analysis and design.

NOTE: Graduation from an accredited four‑year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations and methodologies may be substituted on a year‑for‑year basies with up to four (4) years of experience in electronic data processing systems analysis and design for a total of ten (10) years of experience.

*Note: Accredited University or College is the recognition from an accrediting agency that an institution maintains a certain level of educational standards. The U.S. Department of Education maintains a database of accrediting agencies it recognizes for schools within the United States.

For a University or College outside the United States, the applicant must provide documentation of accreditation and educational equivalency, which can be accomplished through a credential evaluation service. Applicants with a foreign degree must provide this documentation upon the close of the announcement.

Preference will be given to candidates with the following:

• Advanced capability using packet capture tools (e.g., Wireshark), wireless analyzers, ISE logs, diagnostic utility commands, and SNMP monitoring platforms to isolate complex root causes and manage vendor escalations.
• Strong proficiency drafting error‑free configurations across major network operating systems (e.g., Cisco IOS/NX‑OS, Junos, Palo Alto PAN‑OS, Cisco Wireless LAN Controllers).
• Working knowledge of Cisco ISE, 802.1X protocol execution, RADIUS/TACACS+, MAB (MAC Authentication Bypass), and switch port security enforcement.
• Proficiency with enterprise Wi‑Fi standards (802.11a/b/g/n/ac/ax), RF spectrum analysis, wireless controllers, heat‑mapping software, and central wireless management platforms.
• Solid working knowledge of TCP/IP (IPv4 & IPv6), EIGRP, BGP, MPLS, VLANs, and subnetting.
• Experience configuring enterprise firewalls, IPsec/GRE VPNs, certificates, and border security appliances.
• Ability to clearly document network topology, write technical procedures, and present proposed configurations for review.