Senior Network Engineer

Socket.dev; Concord (NH); On-site; USD 110,000 - 150,000; Full time

Job summary

Socket.dev in Concord, NH is seeking a Senior Network Architect to design, implement, and maintain the city’s enterprise network, including routers, firewalls, switches, VPN, and wireless.

You will develop architecture standards and diagrams, support scalability and resiliency, evaluate new technologies, and ensure secure operation of the network.

Qualifications

• Enterprise network architecture and design principles focusing on redundancy, segmentation, and DR planning.
• Networking methods, materials and equipment used across enterprise environments.
• Enterprise switching and routing platforms experience.
• Enterprise firewall administration, VPN, and security policy management.
• Network protocols including BGP, QoS policy design, data center networking, NAC/802.1X, cloud/hybrid connectivity, and monitoring software.

Responsibilities

• Architects and administers all of the City’s enterprise networks, including routers, firewalls, switches, VPN hardware, and wireless.
• Develops and maintains network architecture standards, diagrams, and design documentation for scalability and resilience.
• Evaluates emerging networking and security technologies and recommends upgrades and capacity planning.
• Aids in design and administration of the City’s server environment.
• Provides support of network infrastructure to ensure secure operation and performance.
• Performs device configuration maintenance, firewall management and troubleshooting.
• Performs device and traffic monitoring, analysis, management and troubleshooting.
• Develops security metrics to detect abnormal activities.

Skills

Enterprise network architecture

Network design principles

BGP QoS

Firewall administration

VPN security policies

Education

CCNP

CCDP or CCDE

NSE 4

NSE 7

CEH

CND

North Carolina Driver’s License

Job description

Essential Duties and Responsibilities:

• Architects and administers all of the City’s enterprise networks, including infrastructure design, implementation, configuration, and maintenance of routers, firewalls, switches, VPN hardware, and wireless.
• Develops and maintains network architecture standards, logical/physical diagrams, and design documentation to support scalability, resiliency, and disaster recovery planning.
• Evaluates emerging networking and security technologies and makes recommendations on architecture upgrades, hardware refresh cycles, and capacity planning.
• Aids in the design and administration of the City’s server environment.
• Provides support of network infrastructure to ensure successful performance and secure operation of the enterprise network.
• Performs device configuration maintenance, firewall management & troubleshooting.
• Performs device and traffic monitoring, analysis, management and troubleshooting.
• Develops usage and security metrics to allow for the detection of abnormal activities.
• Administers overall network security, including planning and oversight of penetration and vulnerability testing performed internally or by third-party assessors.
• Performs security audits from internal and external parties.
• Investigates security incidents and researches and implements solutions.
• Identifies and remediates network vulnerabilities.

Supplemental Functions:

• Performs other similar duties as required.

Job Specifications and Qualifications:

Knowledge:

• Enterprise network architecture and design principles, including redundancy, segmentation, and disaster recovery
• Networking methods, materials and equipment
• Enterprise switching and routing platforms
• Enterprise firewall administration, VPN, and security policy management
• Network protocols, including BGP, QoS policy design, data center networking, NAC/ 802.1X port-based authentication, cloud/hybrid connectivity and enterprise monitoring software

Licensing and Certifications:

• Cisco Certified Network Professional (CCNP) preferred
• Cisco Certified Design Professional (CCDP) or Cisco Certified Design Expert (CCDE) preferred
• Fortinet Network Security Expert 4 (NSE 4) – Network Security Professional preferred
• Fortinet Network Security Expert 7 (NSE 7) preferred
• EC-Council Certified Ethical Hacker (CEH) preferred
• EC-Council Certified Network Defender (CND) preferred
• Valid North Carolina Driver’s License

PLEASE NOTE: Applicants must meet the City’s criteria for an acceptable driving record.

Working Conditions / Physical Requirements:

• Positions in this class require: vision, hearing, fine dexterity, sitting, talking, standing, walking, lifting, carrying, reaching, handling, kneeling, crawling, pushing/pulling, climbing, foot controls, balancing, crouching, twisting.
• Sedentary Work: Exerting up to 10 pounds occasionally or negligible weights frequently; sitting most of the time.

The intent of this job description is to provide a representative summary of the types of duties and responsibilities that will be required of the positions given this title and shall not be construed as a declaration of the specific duties and responsibilities of any particular position. Employees may be requested to perform job-related tasks other than those specifically presented in this description. Fair Labor Standards Act (exempt/non-exempt) is designated by position. The employer actively supports Americans with Disabilities Act and will consider reasonable accommodations.