Network Engineer

Montclair State University; Montclair Heights (NJ); On-site; USD 89,000 - 111,000; Full time

Job summary

Montclair State University is seeking a Network Engineer to install, configure, maintain, and upgrade campus wired and wireless network infrastructure and related security services. The role involves proactive auditing, performance analysis, and collaboration with the Information Security group to enforce network security policies and threat mitigation.

The engineer will design network services, manage access control, conduct site surveys, and keep accurate change logs to ensure reliable, secure

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related discipline.
• CCNA certification or equivalent experience preferred.
• Minimum four years of professional network administration/engineering experience.
• Knowledge of Cisco products including ISE, Catalyst, Firepower, Infoblox; network security practices.
• Experience with fiber optics, wireless technologies, and security practices.

Responsibilities

• Design, install, and configure wired and wireless network services and security policies.
• Collaborate with campus community and IT departments.
• Identify network security threats and implement mitigation.
• Manage device registration systems for network access and monitoring.
• Perform wireless site surveys and optimize wireless performance.
• Maintain logs and change records, and document configurations.
• Evaluate goals and implement improvements to meet program objectives.

Skills

Network engineering

Cisco ISE

Wireshark

Security policy

Education

Bachelor's degree in CS/IT

Tools

Infoblox

Nessus

Wireshark

Job description

IMPORTANT APPLICATION INSTRUCTIONS:Upload Resume or Curriculum Vitae for automatic population of information to the application.The contact information, work experience, and education listed on your Resume/CV will be parsed and input into your Montclair application.Review information and double-check all fields containing information that the system parsed – the software is intelligent, but you need to verify that the data is accurate.In the “My Experience” section, you will find a Resume/CV upload option where you can submit your cover letter and all other supporting documents.Note: If you have an expansive CV, we recommend that you apply manually and only include the positions you have held in the last ten (10) years . You will then be able to attach your Resume/CV, as well as all other supporting documentation in the \"My Experience\" section of your application.Job DescriptionSUMMARY :Reporting to the Director of Networking and Telecommunications, the Network Engineer installs, configures, maintains, and upgrades all campus wired and wireless network infrastructure equipment and related security services. Also, performs analytical, technical, and administrative work in planning, designing, and implementing network-based services and tools; and implements programs and functions that are related to enterprise security and network operations. The Network Engineer proactively audits and analyzes network performance and stability and makes recommendations for hardware and software upgrades, works with Information Security group to assist in the development and enforcement of network-related security policies, access control lists, and threat mitigation to ensure the security, availability, and performance of network services.PRINCIPAL DUTIES AND RESPONSIBILITIES :Design, install and configure all wired and wireless network services, Internet connectivity, Network Access Control, and other related services.Work collaboratively with campus community and all departments under the division of Information Technology.Identify network security threats and evaluate how to proactively take steps to minimize their impact on the campus network, either through changes to firewall rule sets, packet shaping, packet analysis, client-side mitigation or any other means.Manage device registration system(s) for granting access to campus network resources and monitoring systems to identify potential malicious network activity, both internal and external.Serve as the subject matter experts on network/security threat detection tools and services.Design metrics and methods for measuring wireless performance and analyze results and propose solutions for correcting problems or improving the wireless network performance.Develop programs and command procedures to enhance the functionality and manageability of supported systems.Maintain accurate system change logs to track all device patch levels and network security policy changes.Evaluate program goals, operations and performance as required; develop and implement alternative procedures to improve performance and meet program objectives.Identify and adhere to open systems standards where applicable.Perform pre- and post-installation wireless site surveys to identify and correct wireless performance inefficiencies.Maintain systems and network logs to assist in identifying potential security threats or attacks/probes on IT systems and serve as the subject matter expert for the threat and vulnerability platform and metrics reporting.Consult with the Director of Networking and Telecommunications on the most unusual problems or policy matters.Maintain integrity and appropriate confidentiality in institutional and program operations.Contribute to the preparation of studies and reports containing findings and recommendations for the implementation of network performance monitoring, security and application software to meet the needs of the various users of MSUnet.Establish and maintain effective communication and cooperative working relationships with the institution's administrators, faculty and staff, government, and private agencies in order to accomplish the objectives of Information Technology.Develop appropriate communication with the user community to ensure transfer of operational, procedural, and policy information.Evaluate and recommend hardware and/or software to meet current and future needs on all supported campus platforms.Represent the university at conferences, seminars or meetings and serve on ad hoc and standing committees as required.Participate in operational support activities to ensure uninterrupted service delivery and timely resolution of incidents affecting core infrastructure.Perform other duties as assigned.Management retains the right to add or change job duties at any time.QUALIFICATIONS :REQUIRED :Bachelor’s degree in from an accredited college or university in Computer Science, Information Technology, or related discipline. Relevant IT certifications/equivalent experience supported by industry-recognized completed certifications in networking (CCNA preferred) and/or fiber optic technologies may be considered in lieu of degree.SM/MM Experience in Cleaning fiber optics technologies..Minimum four years of professional experience in network administration, engineering and support.Working knowledge of Cisco ISE, Cisco Catalyst Center, Cisco StackWise Architecture, Cisco Prime, Infoblox (IPAM/DNS), NGFW, ASA and Firepower.Extensive knowledge of network protocols, products and services including: Ethernet, 802.1Q, 802.1X, TCP/IP, UDP, DNS, BGP, OSPF, EIGRP, PBR, VRF, VLAN, STP, SVI, LACP, EtherChannel, DHCP, VTP, HSRP, VRRP, SNMP, Netflow, IPSec, EAP, TLS, QOS, Wireshark, OTDR, UPoE, PoE+, PoE++, Etherscope, LinkSprinter, Syslog, Multicast and Unicast.Strong working knowledge of fiber optic design and operations, including differences between multimode (OM3/OM4/OM5) and single-mode (OS1/OS2), optical budgets, attenuation calculations, splice vs. patch management, polarity, high-capacity trunks (MPO/MTP), and uplink optics (10G/25G/40G/100G+). Ability to evaluate strand availability, pathway diversity, and high-availability routing in campus environments.Working knowledge of Radio Frequencies/Wireless Technologies: Wireless Surveying tools, Ekahau, Spectrum Analyzers, NetAlly Air Check, 802.11a/b/g/n/ac/ax, 2.4GHz, 5GHz, 6GHz, RF Tuning/Optimization, RADIUS, WPA2 WPA3, CAPWAP, and HA SSO.Working Knowledge of data communications hardware and software including: Cisco Catalyst 96xx, 95xx, 93xx, 92xx, IOS-XE 17.x, 3850, routing hardware, FirePower and IDS/IPS services.Knowledge of NIST, Internet and local area network security practices and procedures.Working Knowledge of middleware/scripting language Example: Python, Ruby, bash, C, Perl, PHP, and/or AppleScript.Proven ability to implement and maintain industry best practices for the deployment, operation, and security of enterprise data communications systems in a production environment.Proven ability to establish productive partnerships and align cross-departmental initiatives that influence or depend on the unit’s services.Ability to lift, rack, mount, and cable network equipment, including switches and related hardware, and safely operate standard and power installation tools.PREFERRED :Experience supporting and securing enterprise operating systems including: Red Hat Linux, Windows, and MacOS as well as an understanding of common vulnerabilities and secure configuration practices.Experience with systems and network auditing and scanning tools such as Nmap, tripwire, and Nessus in production environments.Working Knowledge of StatSeeker, NetDisco, CheckMK, Splunk, Scrutinizer and other monitoring tools.Working knowledge of data encryption technologies and secure communication protocols.Understanding of the higher education environment and the operational needs of the institution.Strong written and verbal communication skills with the ability to produce clear, concise and detailed documentation and correspondence.Ability to professionally represent the university at conferences and seminars.PROCEDURE FOR CANDIDACY:Applicants should include a resume and cover letter describing how their background, skills and education match the needs of the University. When applying, please take a moment to carefully read and follow the steps in the application instructions.Salary Range$88,545.14-$110,690.73 AnnuallyThe position may also be eligible for comprehensive benefits, including health insurance, retirement plans, and tuition assistance. For further details, please visit: https://www.montclair.edu/human-resources/benefits/Montclair State University considers factors such as, but not limited to, scope and responsibilities of the position, candidate’s relevant work experience, education, skills, and internal equity, when extending an offer.Salary offers for internal employees who are part of a collective bargaining unit (CBU) and are applying to a position that is within a CBU will be determined in accordance with contractual provisions.DepartmentNetworking and TelecommunicationsPosition TypeProfessional - Non-FacultyContact Information:For questions or concerns, please contact Human Resources' Workday Recruiting Support at 973-655-5000 (Option 2) , or email [e-mail] .Inclusion StatementMontclair State University values access and educational excellence. We are committed to an environment of diverse perspectives which ensures that graduates will be civically engaged, committed to democracy, and prepared to thrive as global citizens. We foster a community that promotes varied experiences and voices. We seek applicants who will contribute diverse ideas and perspectives and who value an environment that promotes educational growth and advancement for all.EEO/AA StatementMontclair State University is an Equal Opportunity/Affirmative Action institution with a strong commitment to diversity.Additional information can be found on the website atwww.montclair.edu/human-resources/about-us/eo-aa-and-diversity/Title IX and 34 C.F.R. 106 PolicyMontclair State is required by Title IX and 34 C.F.R. 106 not to discriminate on the basis of sex or gender, and does not discriminate on the basis of sex or gender in the operation of education programs and activities. The requirement to not discriminate on the basis of sex or gender in the operation of education programs and activities extends to admission and employment. For further details, please visit: https://www.montclair.edu/human-resources/job-seekers/