Senior Network Administrator

Trigyn; City of Albany (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

Trigyn Technologies, Inc. is seeking a Senior Network Administrator in Albany, NY to design and manage the Cisco Catalyst SD-WAN, deploy rugged edge routers (IR1101), and oversee Palo Alto security platforms. The role emphasizes IT/OT integration, strict adherence to FHWA/NEMA/NIST standards, and 24/7 operational support.

The candidate will configure SD-WAN, perform Zero-Touch provisioning, and ensure secure, reliable transport for critical ITS data across WAN, fiber, and cellular backhauls.

Qualifications

• Maintains computer infrastructures with emphasis on networking.
• Candidate is able to work independently, without assistance and provides guidance to others. May have advanced education.
• 72 months experience in enterprise-grade network administration in a complex environment with at least 1,000 remote endpoints including switches, routers/firewalls and VPN devices, with protocol analysis tools (Wireshark).
• 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-WAN Manager, Controllers, and Validator; build and deploy policies and standardize configurations.
• 72 months experience with Palo Alto NGFWs and Panorama; VM-Series in clouds a plus.
• 60 months experience with Cisco IR1101 hardware and IOS-XE SD-WAN software
• 60 months experience with routing protocols (BGP, OSPF, EIGRP), IPsec VPNs, QoS, and Multicast (PIM, IGMP).
• 36 months experience with NTCIP 1202/1203 and video streaming protocols (H.264/H.265, RTSP).
• 36 months experience in OT/ITS/TSMO environments managing roadside communications.

Responsibilities

• SD-WAN Orchestration: Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (vManage). Implement centralized control, data, and AAR policies to optimize traffic paths (prioritizing critical traffic signal data over video).
• Ruggedized Edge Deployment: Configure/deploy Cisco IR1101 routers in roadside cabinets with dual-active cellular backhaul, fiber, and legacy serial connections.
• Zero-Touch Provisioning (ZTP): Develop bootstrap configurations and WAN Edge templates to enable rapid provisioning by field technicians.
• Legacy Device Integration: Configure IR1101 serial interfaces and transport legacy ITS data over IP/MPLS or SD-WAN.
• Palo Alto & Panorama Security Administration: Centralized management of device groups, templates, and security policies across firewalls.
• IT/OT Network Segmentation: Implement Zero-Trust segmentation to isolate critical traffic control systems, tolling, and CCTV from IT networks.
• Threat Prevention & Monitoring: Configure Palo Alto profiles to detect and block threats in transportation infrastructure.
• Multicast Video Management: Design and troubleshoot Layer 3 multicast networks for CCTV feeds to TMCs and partners.
• Network Performance Monitoring: Monitor latency, jitter, and packet loss using SD-WAN analytics for real-time apps.
• Incident Response & Troubleshooting: Serve as Tier 3 escalation for outages affecting roadside devices or carrier services.
• Collaboration & Standards Compliance: Field support and adherence to FHWA, NEMA TS-2, and NIST SP 800-82 guidelines.
• Operational Support: 24/7/365 coverage for Cisco Catalyst SD-WAN Manager and Palo Alto/Panorama environments.

Skills

SD-WAN design

Network troubleshooting

Zero-Touch Provisioning

Field collaboration

IT/OT network segmentation

Traffic/Network optimization

NIST/FHWA/NEMA standards knowledge

Education

CCNP Enterprise

PCNSE

SD-WAN Implementation Expert (300-415 ENSDWI)

Tools

Cisco Catalyst SD-WAN Manager (vManage)

Cisco IR1101 Router

Palo Alto Panorama

VM-Series Firewalls

Wireshark

Job description

Trigyn's direct government client has an immediate need for Senior Network Administrator in Albany, NY.

Key Job Duties:

Cisco Catalyst SD-WAN & Roadside Edge Engineering

• SD-WAN Orchestration: Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR) policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).
• Ruggedized Edge Deployment: Configure and deploy Cisco IR1101 Industrial Integrated Services Routers in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G) backhaul, fiber connections, and legacy serial connections.
• Zero-Touch Provisioning (ZTP): Develop and maintain bootstrap configurations and WAN Edge templates within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field technicians.
• Legacy Device Integration: Configure the IR1101’s serial interfaces and raw socket encapsulation to transport legacy serial-based Intelligent Transportation System (ITS) device data (e.g., older conflict monitors or loop detectors) over the modern IP/MPLS or SD-WAN network.

Palo Alto & Panorama Security Administration

• Centralized Security Management: Utilize Palo Alto Panorama to manage device groups, templates, and security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress points, and critical field hubs.
• IT/OT Network Segmentation: Design and enforce strict Zero-Trust segmentation policies. Isolate critical traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from each other and from the corporate IT network.
• Threat Prevention & Monitoring: Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering, and WildFire) to detect and block malicious activity targeting transportation infrastructure, including specialized signatures for industrial and IoT protocols.

TSMO Operations & Multicast Video Management

• Multicast Optimization: Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations centers, and media partners.
• Network Performance Monitoring: Monitor network latency, jitter, and packet loss across the SD-WAN fabric using Catalyst SD-WAN Manager’s analytics tools to ensure real-time traffic management applications perform optimally.
• Incident Response & Troubleshooting: Serve as the Tier 3 escalation point for complex network outages affecting roadside devices, fiber cuts, or cellular carrier outages.

Collaboration & Standards Compliance

• Field Support: Partner with field technicians to troubleshoot physical layer issues (fiber optics, patch panels, antennas, and power supplies) inside roadside cabinets.
• Standards Adherence: Ensure all network designs comply with FHWA (Federal Highway Administration) guidelines, NEMA TS-2 cabinet standards, and NIST SP 800-82 guidelines for industrial control systems security.

Operational Support 24/7/365 on a Rotation Basis

• Provide operational support 24/7/365 for the Cisco Catalyst SD-WAN Manager and Palo Alto/Panorama environments.

Mandatory Qualifications:

• Maintains computer infrastructures with emphasis on networking. Key areas of expertise are with on-site servers, software-network interactions and network integrity/resilience.
• Candidate is able to work independently, without assistance and provides guidance to others. May have advanced education.
• 72 months experience in enterprise - grade network administration. This includes configuring and troubleshooting LAN and WAN Networking equipment in a complex networking environment of at least 1,000 remote endpoints that includes switches, routers/firewalls and VPN devices. This includes troubleshooting issues using protocol analysis tools (i.e. Wireshark) and conducting analysis on network data captures.
• 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-WAN Manager, Controllers, and Validator. This includes build and deploy localized and centralized policies, keeping firmware up to date and standardizing device configuration.
• 72 months experience with administration of Palo Alto NGFWs and Panorama. Experience with VM-Series firewalls in public/private clouds is a plus.
• 60 months experience with Cisco IR1101 hardware, including IOS-XE SD-WAN software, expansion modules, and cellular configuration
• 60 months experience with routing protocols (BGP, OSPF, EIGRP), IPsec VPNs, Quality of Service (QoS), and Multicast (PIM, IGMP).
• 36 months experience with NTCIP 1202 (traffic signals), NTCIP 1203 (dynamic message signs), and video streaming protocols (H.264/H.265, RTSP)
• 36 months experience in an Operational Technology (OT), Intelligent Transportation Systems (ITS), or TSMO environment managing roadside communications (fiber, wireless, cellular).

Must hold one of the following:

• Cisco: Cisco Certified Network Professional (CCNP Enterprise) and/or Cisco Certified Specialist - Enterprise SD-WAN Implementation (300-415 ENSDWI).
• Palo Alto: Palo Alto Networks Certified Network Security Engineer (PCNSE).

TRIGYN TECHNOLOGIES, INC. is an EQUAL OPPORTUNITY EMPLOYER and has been in business for 35 years. TRIGYN is an ISO 27001:2022 and CMMI Level 5 certified company.