Senior Network Administrator

Senior Network Administrator

The Senior Network Administrator is responsible for the engineering, secure deployment, and operational management of the critical communications infrastructure. This role focuses on leveraging Cisco Catalyst SD-WAN, specifically Cisco IR1101 routers and cloud environments. This role will ensure robust, end-to-end security across this converged IT/OT network using Palo Alto Next-Generation Firewalls managed centrally via Panorama.

Responsibilities

The Senior Network Administrator will be tasked with the following responsibilities:

• Cisco Catalyst SD-WAN & Roadside Edge Engineering:
• Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR) policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).
• Configure and deploy Cisco IR1101 Industrial Integrated Services Routers in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G) backhaul, fiber connections, and legacy serial connections.
• Develop and maintain bootstrap configurations and WAN Edge templates within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field technicians.
• Configure the IR1101's serial interfaces and raw socket encapsulation to transport legacy serial-based Intelligent Transportation System (ITS) device data (e.g., older conflict monitors or loop detectors) over the modern IP/MPLS or SD-WAN network.
• Palo Alto & Panorama Security Administration:
• Utilize Palo Alto Panorama to manage device groups, templates, and security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress points, and critical field hubs.
• Design and enforce strict Zero-Trust segmentation policies. Isolate critical traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from each other and from the corporate IT network.
• Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering, and WildFire) to detect and block malicious activity targeting transportation infrastructure, including specialized signatures for industrial and IoT protocols.
• TSMO Operations & Multicast Video Management:
• Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations centers, and media partners.
• Monitor network latency, jitter, and packet loss across the SD-WAN fabric using Catalyst SD-WAN Manager's analytics tools to ensure real-time traffic management applications perform optimally.
• Serve as the Tier 3 escalation point for complex network outages affecting roadside devices, fiber cuts, or cellular carrier outages.

Requirements

• 72 months experience in enterprise-grade network administration. This includes configuring and troubleshooting LAN and WAN Networking equipment in a complex networking environment of at least 1,000 remote endpoints that includes switches, routers/firewalls, and VPN devices. This includes troubleshooting issues using protocol analysis tools (i.e. Wireshark) and conducting analysis on network data captures.
• 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-WAN Manager, Controllers, and Validator. This includes build and deploy localized and centralized policies, keeping firmware up to date, and standardizing device configuration.
• 72 months experience with administration of Palo Alto NGFWs and Panorama. Experience with VM-Series firewalls in public/private clouds is a plus.
• 60 months experience with Cisco IR1101 hardware, including IOS-XE SD-WAN software, expansion modules, and cellular configuration.

• Experience with multicast network design and optimization.
• Experience with Microsoft networking technologies.

Candidates are expected to submit their resume and LinkedIn profile as part of the application process.