Overview
Skills
Job Details
Roles/Responsibilities:
Deliverable 1: Network Architecture for client's Investment Office Cloud and On-Premises Solutions
The Network Architect Consultant will design and implement modern, sustainable networking technologies to support clients' Investment Office (INVO) initiatives and enterprise-wide infrastructure.
Key responsibilities include:
- Network Architecture and Implementation:
- Develop advanced network solutions to meet the needs of INVO's cloud platforms, including Snowflake and SimCorp, ensuring scalability, security, and alignment with organizational goals.
- Collaborate with stakeholders to ensure the network infrastructure supports the unique requirements of data platforms like Snowflake, investment management systems like SimCorp, and other INVO partner products such as BlackRock Aladdin, Charles River, Bloomberg, and State Street Bank.
- High Availability and Resiliency:
- Implement automated monitoring and failover mechanisms to ensure uninterrupted connectivity across core infrastructure..
- Design solutions for seamless transitions to alternate connectivity paths during failures, prioritizing critical applications such as BlackRock Aladdin, Snowflake, SimCorp, and other INVO partner products.
- Advanced Technology Integration:
- Plan and design secure, modern networking technologies, including Software-Defined Networking (SDN), Software-Defined Wide Area Networking (SD-WAN), and Network Function Virtualization (NFV).
- Leverage Terraform and other Infrastructure as Code (IaC) tools to automate the provisioning, configuration, and management of network infrastructure.
- Ensure IaC practices are integrated into the network architecture to improve efficiency, enable repeatable deployments, and reduce manual errors.
- Align all advanced technology integrations with clients' enterprise goals, ensuring enhanced network performance, scalability, and security.
This deliverable ensures CalPERS' network infrastructure is scalable, secure, and optimized to support INVO's critical business functions, including seamless operation of Snowflake, SimCorp, BlackRock Aladdin, and other partner platforms.
Deliverable 2: Enterprise Network Engineering and Advanced Technology Implementation
The Network Architect Consultant will provide Level II/III support for managing clients' enterprise data networks and contribute to the design and implementation of advanced networking technologies. Responsibilities include:
- Firewalls
- F5 Load Balancers
- Infoblox IP Management
- Identity Services Engine (ISE) for port security
- VPN and Site-to-Site VPN tunnels
- Wireless Networking
- Cacti and SolarWinds for alerting and monitoring
- Access Control Server (Device Authentication)
- SecureCRT (CLI Solution)
- Cyclades Management
- Gigamon Switch Monitoring
- Switching and Routing (all aspects)
-
The Network Architect Consultant will deliver a comprehensive knowledge transfer program to ensure CalPERS staff can independently manage and enhance the network infrastructure.
Key activities include:
- Knowledge Transfer Sessions: Conduct regular meetings to review work products, cross-train team members, and provide job shadowing opportunities.
- Documentation: Develop and maintain detailed documentation for all work products and deliverables, including:
- Project status reports
- Business processes
- Triage incident reports with resolutions
- Meeting minutes
- Test cases and outcomes
- Training Program: Provide hands-on workshops and Q&A sessions to train staff on:
- Network architecture best practices
- Advanced troubleshooting techniques
- Performance and cost optimization strategies
- Platform management tools and processes
The consultant will ensure all knowledge transfer activities are completed by the end of the contract, with all documentation stored in a shared repository accessible to CalPERS staf
Mandatory Skill:
- Bachelor's degree in computer science, information technology, or a related field
- 5+ years' experience in designing and implementing network architectures for enterprise-scale environments.
- 5+ years of proven experience in Software Defined Networking (SDN), Software Defined Access (SDA), Software Defined Wide Area Network (SD-WAN), Cisco Identity Engine (ISE)
- Proficiency in network protocols and technologies such as TCP/IP, OSPF, EIGRP, BGP, MPLS, VPN, Firewalls, Load Balancers, Routers/Switches
- Valid certifications such as CCNA, CCNP, CCIE, CCDE, PCNSE, NSE9, JNCDA, JNCDS-DC
Desirable Skills: N/A