HIBITS-08-15078-Network Administrator-Senior

Job Description Project/Program

TSMO Technology Program

The incumbent will act as Senior Network Administrator for the DOT Transportation Safety Management and Operations (TSMO) Technology Program is responsible for the engineering, secure deployment, and operational management of the critical communications infrastructure supporting regional Intelligent Transportation Systems (ITS). This role focuses on leveraging Cisco Catalyst SD-WAN to connect ruggedized roadside edge devices—specifically Cisco IR1101 routers—to the Traffic Management Center (TMC) and cloud environments. This role will ensure robust, end-to-end security across this converged IT/OT network using Palo Alto Next-Generation Firewalls managed centrally via Panorama.

Day-to-Day

Key Job Duties

• Cisco Catalyst SD-WAN & Roadside Edge Engineering
• SD-WAN Orchestration: Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR) policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).
• Ruggedized Edge Deployment: Configure and deploy Cisco IR1101 Industrial Integrated Services Routers in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G) backhaul, fiber connections, and legacy serial connections.
• Zero-Touch Provisioning (ZTP): Develop and maintain bootstrap configurations and WAN Edge templates within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field technicians.
• Legacy Device Integration: Configure the IR1101’s serial interfaces and raw socket encapsulation to transport legacy serial-based Intelligent Transporation System (ITS) device data (e.g., older conflict monitors or loop detectors) over the modern IP/MPLS or SD-WAN network.
• Palo Alto & Panorama Security Administration
• Centralized Security Management: Utilize Palo Alto Panorama to manage device groups, templates, and security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress points, and critical field hubs.
• IT/OT Network Segmentation: Design and enforce strict Zero-Trust segmentation policies. Isolate critical traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from each other and from the corporate IT network.
• Threat Prevention & Monitoring: Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering, and WildFire) to detect and block malicious activity targeting transportation infrastructure, including specialized signatures for industrial and IoT protocols.3. TSMO Operations & Multicast Video Management
• Multicast Optimization: Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations centers, and media partners.
• Network Performance Monitoring: Monitor network latency, jitter, and packet loss across the SD-WAN fabric using Catalyst SD-WAN Manager’s analytics tools to ensure real-time traffic management applications perform optimally.
• Incident Response & Troubleshooting: Serve as the Tier 3 escalation point for complex network outages affecting roadside devices, fiber cuts, or cellular carrier outages.
  
  

Mandatory Qualifications

Network Administrator - Maintains computer infrastructures with emphasis on networking. Key areas of expertise are with on-site servers, software-network interactions and network integrity/resilience.

Senior - 60 - 84 months: Candidate is able to work independently, without assistance and provides guidance to others. May have an advanced education.

Requested Qualifications

• 72 months experience in enterprise - grade network administration. This includes configuring and troubleshooting LAN and WAN Networking equipment in a complex networking environment of at least 1,000 remote endpoints that includes switches, routers/firewalls and VPN devices. This includes troubleshooting issues using protocol analysis tools (i.e. Wireshark) and conducting analysis on network data captures.
• 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-WAN Manager, Controllers, and Validator. This includes build and deploy localized and centralized policies, keeping firmware up to date and standardizing device configuration.
• 72 months experience with administration of Palo Alto NGFWs and Panorama. Experience with VM-Series firewalls in public/private clouds is a plus.
• 60 months experience with Cisco IR1101 hardware, including IOS-XE SD-WAN software, expansion modules, and cellular configuration
• 60 months experience with routing protocols (BGP, OSPF, EIGRP), IPsec VPNs, Quality of Service (QoS), and Multicast (PIM, IGMP).
• 36 months experience with with NTCIP 1202 (traffic signals), NTCIP 1203 (dynamic message signs), and video streaming protocols (H.264/H.265, RTSP)
• 36 months experience in an Operational Technology (OT), Intelligent Transportation Systems (ITS), or TSMO environment managing roadside communications (fiber, wireless, cellular).
• Must hold one of the following:
• Cisco: Cisco Certified Network Professional (CCNP Enterprise) and/or Cisco Certified Specialist - Enterprise SD-WAN Implementation (300-415 ENSDWI).
• Palo Alto: Palo Alto Networks Certified Network Security Engineer (PCNSE).
  
  

We provide equal employment opportunity for all applicants and employees regardless of race, color, sex, gender identity, gender expression, religion, age, national origin, citizenship, disability, medical condition, family care status, marital status, domestic partner status, sexual orientation, genetic information, military/veteran status, or any other protected basis.