POSITION IS ONLY OPEN TO CANDIDATES WITH PERMANENT NYC CIVIL SERVICE STATUS AS CERTIFIED IT ADMINISTRATOR (LAN/WAN).
POSITION SUMMARY: The Senior Network Engineer / F5 Load Balancer is responsible for providing Tier 4 network level support specializing in F5 and application delivery. The Senior Network Engineer / F5 Load Balancer will also be responsible for supervising the operation of the network infrastructure through coordination with support teams, internal customer technicians, and engineers, ensuring that the network infrastructure continues to function at optimal performance. In addition s/he will maintain all highly technical network infrastructure hardware devices in compliance with defined architectures governed by the Architecture Standards Team. Performs related work.
REPORTS TO: Level III NOC Supervisor
DIRECT REPORTS: N/A
KEY RELATIONSHIPS: Interfaces with WAN support, LAN support, network integrators, DOE network engineers, Project Connect network engineers, and other support teams to oversee that compliance and direction are maintained with the placement of server hardware connections to the network switching equipment.
RESPONSIBILITIES
- Works on the design, development, and deployment of application load balancing with custom portals with Single Sign-On (SSO).
- Identifies configurations of existing F5 appliances and documents via Spreadsheet and Visio.
- Configures and maintains F5 Local Traffic Manager (LTM) and Global Traffic Manager (GTM) devices.
- Maintains F5 devices for load balancing, SSO authentication, and high availability/disaster recovery.
- Troubleshoots various application issues using F5 load balancer Command Line Interface (CLI).
- Supervises multiple network modification projects in relation to mainframe connectivity design, Border Gateway Protocol (BGP) architecture, router/switch design and deployment, firewall design and implementation, DoITT/DIIT design collaboration for mainframe disaster recovery and support, and Verizon circuit design, support, and deployment for administrative campus locations. Meets with and collects data from various departments and agencies in the creation of practical network modifications for design, development, testing, and eventual implementation in the production environment.
- Performs day-to-day network administration tasks, including network equipment installation, configuration, upgrades, testing, and troubleshooting.
- Configures Virtual Local Area Network (VLAN) trunking protocol on Cisco catalyst switches and creates native and auxiliary VLAN’s for data and voice traffic.
- Diagnoses problems, verifying servers/switches/router status, testing device connectivity, path trace, etc., using different network monitoring software such as CiscoWorks.
- Provides documentation and tactical assistance regarding developmental, technical, and operational support to the Department of Education communication and Internet Security infrastructure.
- Monitors firewall performance and integrity and maintains and resolves all Internet related technical issues concerning implementation of the Internet Firewall and the management of its related network security.
- Provides periodic internet traffic and security status reporting. Provides back-end LAN and security support for all Internet and Intranet infrastructure.
- Participates in architectural design and implementation of new technologies.
- Prepares network diagrams, floor plans and schematics using Visio 2000.
- Responds to emergency calls in the evenings and on weekends regarding the WAN.
QUALIFICATION REQUIREMENTS:
MINIMUM
POSITION IS ONLY OPEN TO CANDIDATES WITH PERMANENT NYC CIVIL SERVICE STATUS AS CERTIFIED IT ADMINISTRATOR (LAN/WAN).
Plus
- Two additional years in the Certified IT Administrator (LAN/WAN) title or two years of satisfactory full-time (not classroom based) experience in local area network and/or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management.
- Hands-on support and troubleshooting experience with networks utilizing F5: GUI Interface management, iRules, VIP Management, SSL Certificates, as well as creating portals that can support Single Sign On (SSO) with integration of different authentication platforms.
PREFERRED
- Proficient in F5 Networks technologies, including LTM, GTM, Access Policy Manager (APM), and Application Security Manager (ASM).
- Experience with Cisco ASA Firewalls, load balancing, and Layer 2 & 3 routing/switching.
- At least six years of network engineering experience of medium to large LAN/WAN network experience. Knowledge of functions and concepts of a wide area network, designing LAN/WAN's and network administration.
- Superior Knowledge of F5: GUI Interface management, iRules, VIP Management, SSL Certificates, Application authentication, SSO integration.
- Preferred certifications include F5 Certified BIG-IP Administrator, F5 Certified Solution Expert, and/or F5 Certified Technology Specialists.
- Expertise and significant hands-on experience working with large LAN/WAN infrastructure and all LAN and WAN networking technologies, all Microsoft networking technologies, and all TCP/IP networking.
- Knowledge of Cisco Application Control Engine (ACE) load-balancing and content-switching technologies.
- Knowledge of communication protocols and Cisco communication equipment.
- Hands-on experience and expertise with Cisco Nexus Switches, Cisco Catalyst Switches 6xxx, 5xxx, 4xxx, 29xx, 19xx, RSM; Cisco Routers 7500, 7200, 4000, 3600, 2600, 2500, 800; Cisco VPN 3000 technology infrastructure; Ethernet, Frame Relay, T1, T3, ISDN; Routing protocols (RIP, EIGRP, OSPF); and Cisco Firewall Technology (ASA), Virtual Private Networks, Voice over IP, Class of service and quality of service and traffic flow classification.
- Working knowledge of DNS and Cisco Global Site Selector (GSS).
- Understanding of Blue Coat proxy and caching technologies.
- Technical expertise in server technologies that deliver cores services to remote end users.
- Extensive networking industry experience in handling various switched and routed data networks and protocols in a multi-platform environment.
- Excellent analytical and organizational skills and attention to detail.
- Excellent oral and written communication skills in preparing reports, presentations and documentation.
- Ability to verbally translate and articulate complex technical issues for the advocacy of non-technical users.
- Experience implementing high bandwidth core server farms, and high level knowledge of core server redundancy technologies and standards.
- Experience in the development of technology standards for Architecture, Design and Implementation.
SALARY: $98,177+
(Internal candidates who are selected for this position and who currently hold comparable or less senior positions within the DOE will not make less than their current salary.)
PLEASE INCLUDE A RESUME AND COVER LETTER WITH YOUR APPLICATION.
APPLICATIONS WILL BE ACCEPTED THROUGH FEBRUARY 21, 2020, UNTIL 3:00 P.M.
NOTE: THE FILLING OF ALL POSITIONS IS SUBJECT TO BUDGET AVAILABILITY.
AN EQUAL OPPORTUNITY EMPLOYER
It is the policy of the Department of Education of the City of New York to provide equal employment opportunities without regard to actual or perceived race, color, religion, creed, ethnicity, national origin, alienage, citizenship status, age, marital status, partnership status, disability, sexual orientation, gender (sex), military status, unemployment status, caregiver status, consumer credit history, prior record of arrest or conviction (except as permitted by law), predisposing genetic characteristics, or status as a victim of domestic violence, sexual offenses and stalking, and to maintain an environment free of harassment on any of the above-noted grounds, including sexual harassment or retaliation. For more information, please refer to the DOE Non-Discrimination Policy.
Required Skills
Required Experience