Senior Network Architect

Direct Client

Vacaville, CA - Hybrid

Long Term Contract

Must Haves:

• Extensive hands-on experience of implementing F5 WAF and Load balancer.
• Work experience in AWS VPC, EC2, ELB, Transit gateway
• Experience in implementing and managing DDoS solution with Cloudflare or Akamai
• Experience in managing Pala Alto global protect VPN

Job Description:

Objective & Deliverables

This position will act as a primary technical principal and is responsible for delivery of network solutions at an enterprise level. Expertise with network infrastructure technologies such as LAN, WAN,Wireless, Security, VoIP, Video and Data Center. Ideal candidates will have Data Center experience. Candidates for this position must be able to, from day one, roll up their sleeves and hit the ground running, and bring their experience to the team to make the project deployments much smoother.

Deliverables or Tasks:

• planning, design, implementation, and operation of network infrastructure projects and participate in the specification of business requirements and implementation plans for technically advanced internetworking solutions
• implementation of network infrastructure projects, from both technical and communication aspects.
• network design for network security and other risks during course of projects. Serve as a liaison to vendors and/or third-party providers as assigned
• on-site and remote technical assistance to other resources and to customers
• and document new Infrastructure environments following industry best practices and internal security policies and standards
• infrastructure design, implementation planning, deployment support, software strategy, system troubleshooting, performance engineering and optimization, maintenance strategy.
• technical guidance, knowledge transfer and mentorship to State Fund internal engineering peers as required and lead technical staff responsibilities.
• networking environment by designing system configuration; directing system installation; defining, documenting, and enforcing system standards.
• network performance by monitoring performance; troubleshooting network problems and outages; scheduling upgrades; collaborating with other team on network optimization.
• network and server systems by establishing and enforcing policies; defining and monitoring access.
• information systems and organization mission by completing related results as needed.
• 24 by 7 support
• network operational status by gathering, prioritizing information.
• in capacity planning and demand forecasting, software performance analysis and network tuning
• able to collaborate well with cross functional teams in order to ensure timely delivery of solutions which drive successful business outcomes

Technical Knowledge and Skills:

• with Palo Alto Network Firewall, Global Protect VPN, Prisma Cloud and Cisco ASA and Firepower.
• with F5 Load Balancers and AWS ELB.
• OSI layer 2 knowledge and practical experience, including various flavors of STP, ARP, QOS, etc.
• knowledge of OSI layer 3 networks and protocols, including broadcast, multicast, anycast concepts, routing, etc.
• with various routing protocols (BGP, OSPF, EIGRP) and multi-homing Internet circuit configuration
• of network security methodologies as a whole, including but not limited to: ACLs, Stateful firewalls, VPNs (tunneling, IPsec, SSL, etc.)
• with common network admin and monitoring tools such as Rancid, Opmanager, Nagios, Solarwinds, Wireshark, Nmap, Nessus, Netflow, Sflow etc.
• scripting skills (Perl, UNIX shell scripting)
• knowledge of Cisco IOS, NX-OS, both Cisco Nexus 1K, 2K, 5K 7K, 9K and non-Nexus series switches, Cisco routers and other Cisco networking gear.
• understanding of data center related technology and collocation environment.
• knowledge of MPLS network.
• in Cisco Fabric interconnect configuration
• Must have Nexus 9K and VPC experience
• Advanced knowledge of Cisco, F5, Palo Alto Firewall, Websense/Forcepoint, Juniper and other vendor equipment and configuration
• Advanced knowledge and experience with Routing Protocols (BGP, RIP, OSPF, etc.)
• Must have experience in PulseSecure and Global Protect (Palo Alto) VPN
• In-depth knowledge and hands-on experience on Cisco Network Devices automation
• Expertise and Hands-on experience with Ansible or Python scripting for Network automation
• Deep domain expertise in networking, network security and public/private clouds

Preferred Skills:

• deploying and maintaining wireless networks.
• hands-on experience of implementing F5 WAF and Cloudflare DDoS
• knowledge of AWS services i.e. EC2, ELB, RDS, S3, Route53, VPC, Cloud formation, SSM and Transit gateway
• deploying and maintaining VOIP deployments (network side, not telecom), SIP Trunking and Content Center
• Management Experience
• with Scripting and Automation Technologies