Lead Network Automation Engineer

Job Description

Note: This position will follow our hybrid work model, we expect the selected candidate to be in office 2-3 days a week at one of the following office locations: St, Petersburg, FL or Southfield, MI.

Job Summary:

The Lead Network Automation Engineer is responsible for managing, designing, and improving RJ's enterprise network. He or she will assist network architects with design and implementation of network technologies, focused on Cloud and Network Automation initiatives (Phyton, Ansible, Terraform, etc) . This role is responsible for senior level network engineering implementation and providing guiding principles and technical leadership to peer engineers, proactively taking technology project delivery from 0 to 100% with little to no supervision. General duties include leading the buildout of solutions and driving innovation for implementation of new modern technologies in the enterprise network. Partners with management and peer engineers to drive infrastructure modernization projects to completion and provides Tier3 technical support using extensive expertise to take on work assignments the team is engaged in. Strong people skills and the ability to balance/prioritize between multiple tasks and projects are essential. This position involves routing and switching and network firewall implementation projects for both on-prem and cloud infrastructure.

Responsibilities:

Design, improve and innovate:

• Primary focus is to implement recent technologies or changes to existing technologies as identified and designed by the architecture team.
• Build, configure, and test new network and network security technologies or changes to existing technologies as identified and designed by the architecture team.
• Researches and recommends innovative technologies and approaches for enterprise infrastructure management, upgrades, or improvements.
• Utilize and integrate network components such as Cloud and Network Automation initiatives (Phyton, Ansible, Terraform, etc) switches, routers, firewalls, wireless AP/Controllers, SDN fabric components, load balancers, Network Access Control (NAC) servers and cloud infrastructure network elements.
• Proactively identify and implement network improvements to assure the performance, resiliency, and redundancy of the network.
• Utilizes blueprints to engineer solutions and adhere to enterprise standards (engineering focused, architecture supported).
• Take disaster recovery and business continuity plan aspects into consideration for any new technology implementation or change.

Monitor, document and offer proactive support:

• Provides ad-hoc support for incidents requiring T3 level resources (engineering/architecture) and knowledge.
• Use Microsoft Visio to produce and maintain documentation with regards to implementation of new systems or system changes
• Participate in 24x7 on call rotation for SME T3 support requirements as needed.
• Maintains service level agreements of departmental metrics, key performance indicators and adhering to strict project timelines.
• Maintain/Improve security posture, promptly addressing issues, vulnerabilities, and security requirements according to regulatory guidelines (PCIDSS, PII, CIS, NIST).

Lead, collaborate and coach:

• Work collaboratively across a variety of business units to implement new technologies.
• Coordinate and take lead of assigned projects in all technical and communication aspects.
• Lead engineering peers towards achieving common goals in assigned projects.
• Coach peer engineers and effectively perform knowledge transfer/cross training activities.
• Provide technical leadership as an SME or as part of an Information Technology (IT) project.

Position qualifications:

Required:

• 7-10 years of experience in network design, implementation, and documentation of medium-large scale enterprise networks (10,000+ users).
• 7-10 years of experience using cisco enterprise technologies - CCNP Enterprise (R&S) knowledge level required, CCIE nice to have: knowledge of Layer2 LAN technologies (STP, VLANs, VTP, LACP), knowledge of modern high availability technologies (VPC, SVL, HSRP, VRRP), knowledge of routing protocols concepts (BGP, EIGRP, OSPF).
• 3-5 years of experience with Cloud technologies (Azure, AWS)
• 3-5 years of experience with Automation/scripting (Python, Ansible, Terraform)

Desirable (not required):

• Experience with designing, implementing, and maintaining Palo Alto Centrally managed firewall platforms (NGFW Pan OS, Threat Prevention, UserID, Global Protect, HA setup, Prisma Access)
• Administering F5 Clusters, Load balancing, SSL decryption policies, DNS Geolocation (LTM, GTM, APM, ASM/Cloud WAF).
• Remote Access VPN solutions (Global Protect, F5 BIG-IP Edge)
• Certificate management (Venafi), Cryptographic protocols and algorithms, certificate PKI.
• Implementing NAC solutions (Forescout/Cisco ISE)
• Experience with Infoblox DNS/IPAM functions.
• Familiarity with cloud computing principles and experience in designing secure and scalable network solutions for cloud environments.
• Automation/scripting experience (Python, Ansible)
• Network security protocols, architecture, and design principles; intrusion detection, prevention systems, secure socket layer (SSL) protocols, virtual private networks (VPNs),
• Network performance optimization, capacity planning and load balancing.
• Familiarity with the following monitoring platforms: Microsoft SevOne, SolarWinds, DataDog, Splunk)
• 1-2 years of experience in designing, implementing and maintaining data center spine leaf fabrics (Arista/Cisco). Arista ACE L3 certification desirable.
• 1-2 years of experience with Cisco DNA Center
• 1-2 years of Experience with SDWAN technologies (Cisco, Palo Alto ION).
• Experience with Cisco Wireless technologies in a large enterprise environment (Cisco WLC, FlexConnect, CAPWAP).

Licenses/Certifications:

Required:

• One of AWS CCP or Microsoft Certified: Azure Fundamentals or Microsoft Certified: Azure Network Engineer Associate,
• One of CCNA R&S or CCNP R&S

Desirable:

• Security and control certifications (CISSP, CISM, CISA, CRISC)

Travel Required:

• Yes, 10%

Education
Bachelor's: Computer and Information Science, Bachelor's: Computer Engineering, Bachelor's: Computer Systems Analysis, High School (HS) (Required)

Work Experience
General Experience - 3 to 6 years

Certifications

Travel
Less than 25%

Workstyle
Hybrid

At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view.

We expect our associates at all levels to:
Grow professionally and inspire others to do the same
Work with and through others to achieve desired outcomes
Make prompt, pragmatic choices and act with the client in mind
Take ownership and hold themselves and others accountable for delivering results that matter
Contribute to the continuous evolution of the firm

At Raymond James - as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.
#LI-NM1