Lead Network Service Optimization Engineer

Overview

The Lead Network Service Optimization Engineer is a key member of Princeton University's network services team. Reporting to the Associate Director of Network Assurance Services, this role is responsible for optimizing the University's building aggregation, core and access layer routing, and switching operations. Additionally, the Engineer is also responsible for continuous improvement of products and services associated with firewalls, load balancers and IP address management (IPAM) solutions.     

The goal of the Lead Network Service Optimization Engineer is to continually improve network configurations, proactively monitor for potential issues, and provide recommendations for enhancements and improvements. To achieve this, the Lead Network Service Optimization Engineer works closely with the Associate Director to establish and monitor Service Level Agreements. This involves measuring and tracking performance metrics and Key Performance Indicators (KPIs) and providing regular updates to the Associate Director. 

The Lead Network Service Optimization Engineer collaborates with key colleagues in the Office of Information Technology (OIT), academic and administrative departments, and students to understand their IT needs and translate them into effective network solutions. The Service Optimization Engineer is instrumental in enabling the continuous improvement of network operations. Together with the Associate Director, the Service Optimization Engineer works closely with teams in OIT, Facilities, the Department of Public Safety, and other areas to design and maintain secure and reliable network services including network services for the University's critical infrastructure.  

Responsibilities

Audits and Assessment

• Lead the technical assessment of the campus network to identify and prioritize areas for continuous optimization and redundancy in support of the University mission. 
• Review and enhance existing operational network and network security solutions to ensure hosted/on-premises system security and high availability.  
• Perform regular network audits on the entire stack and work with vendors to assess current hardware and software configurations and identify areas of improvement. 
• After areas of improvement have been addressed, test and validate the best practice configurations in the lab and implement subsequent changes in the production environment following OIT’s change management process.  
• Ensure compliance with network security policies, procedures, and standards through routine security assessments and updates. 
• Monitor network performance and proactively identify potential issues, developing and implementing solutions to maintain a high level of network stability and uptime. 
• Develop and maintain network documentation and standard operating procedures. 
• Provide training and support to IT staff to ensure consistency and continuity in network operations. 
• Continuously assess and improve network resilience and redundancy plans, prepare and conduct disaster recovery exercises to ensure preparedness in the event of a network failure.  
• Maintain relationships with external network service providers and monitor service level agreements, escalating and resolving issues as needed.  
• Implement best practice recommendations.     

Operations and Support

• Collaborate with operations technical staff daily to review incidents and resolutions, workarounds and permanent fixes. 
• Responsible for ongoing optimization of network assurance services operations. 
• Promote operational excellence and new ideas, technologies, workflows, and concepts to improve security, availability, and performance of the operational network.  
• Collaborate with operations technical staff on proactive monitoring and reporting. 
• Provide monitoring of networks for utilization, errors and discards. 
• Collaborate with architectural, engineering and operational staff to provide capacity planning and implementation of best practice assessments. 
• Identify gaps in monitoring and alerting for all network services, including wired and wireless networks, 5G, Firewalls, LAN, WAN, data center networks and internet services connectivity, and work with colleagues to close critical gaps. 
• Under special circumstances, act as an escalation subject matter expert for Network Assurance Service team colleagues. 
• Ensure ITIL compliance with asset, change, incident, and problem management processes and policies. 

Technical and Project Leadership

• Keep abreast of emerging technologies. 
• Coordinate and manage small and medium projects with stakeholders related to Network Assurance Service. 
• Analyze and troubleshoot complex problems with the campus networks. 
• Develop and maintain documentation related to network architectures. 
• Show continuous improvement in achieving and maintaining optimal network availability. 
• Implement best practice recommendations.     

Administrative

• Proactively participate in professional development opportunities to continuously develop professional and technical skills.  
• Adhere to OIT IT service management processes. 
• Maintain confidential data in the strictest confidence and ensure privacy, security, and proper use in accordance with University Information Security Policy. 
• Assist and train other colleagues with lower technical skillsets.  

Qualifications

Essential Qualifications

• Minimum of 10 years of experience managing or supporting medium to large network infrastructure environments. 
• Demonstrated innovative thinker and creative problem solver. 
• Knowledge and experience in network routing, switching, and security management. 
• Demonstrated skill in solving complex problems in the network environment particularly in the areas of packet switching, routing and network security. 
• Extensive understanding of network protocols including TCP/IP and network security policies.  
• Experience with Cisco equipment and IOS, IOS-XE and NX-OS configurations. 
• Experience with Firewalls, such as Palo Alto, Juniper, or Cisco.
• Experience with Palo Alto Global Protect VPN solution. 
• Demonstrated ability to adapt to multiple operating systems and platforms.  
• Excellent oral and written communications skills in this highly collaborative environment. 
• Ability to work on multiple projects simultaneously, to respond to shifting priorities, and to work efficiently under the pressure of critical problems and deadlines. 
• Ability to work outside of normal working hours, be on call to perform network maintenance and support unexpected critical network failures. 
• Foundational knowledge of automation and AI features and capabilities in network software is required. 
• Ability to work independently, as well as in a team environment. 
• Education: Bachelor’s degree or equivalent related experience.

Preferred Qualifications

• Familiarity with network routing and switching management tools. 
• Experience with Aruba equipment and OS-CX configurations. 
• Experience with Aruba downloadable user roles and ClearPass integration. 
• Experience with VxLAN overlay, Multicast/Anycast and BGP routing. 
• Experience with ITIL asset, change, incident, and problem management processes. 
• Experience with Juniper routers. 
• Professional or Expert level network certifications such as CCNP, CCIE. 

Princeton University is an Equal Opportunity/Affirmative Action Employer and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability status, protected veteran status, or any other characteristic protected by law. KNOW YOUR RIGHTS

Standard Weekly Hours 36.25 Eligible for Overtime No Benefits Eligible Yes Probationary Period 180 days Essential Services Personnel (see policy for detail) No Physical Capacity Exam Required No Valid Driver’s License Required No Experience Level Director #Ll-DP1

---