Direct Client: State Of New York
Job Title: Network Administrator
Duration: 24 Months
Location: Albany, NY Onsite
Hours Per Week: 40 Hours
I
Description: The resource will act as Senior Network Administrator for the DOT Transportation Safety Management and Operations (TSMO) Technology Program is responsible for the engineering, secure deployment, and operational management of the critical communications infrastructure supporting regional Intelligent Transportation Systems (ITS). This role focuses on leveraging Cisco Catalyst SD-WAN to connect ruggedized roadside edge devices—specifically Cisco IR1101 routers—to the Traffic Management Center (TMC) and cloud environments. This role will ensure robust, end-to-end security across this converged IT/OT network using Palo Alto Next-Generation Firewalls managed centrally via Panorama.
Key Job Duties
1. Cisco Catalyst SD-WAN & Roadside Edge Engineering
SD-WAN Orchestration: Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR) policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).
Ruggedized Edge Deployment: Configure and deploy Cisco IR1101 Industrial Integrated Services Routers in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G) backhaul, fiber connections, and legacy serial connections.
Zero-Touch Provisioning (ZTP): Develop and maintain bootstrap configurations and WAN Edge templates within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field technicians.
Legacy Device Integration: Configure the IR1101’s serial interfaces and raw socket encapsulation to transport legacy serial-based Intelligent Transporation System (ITS) device data (e.g., older conflict monitors or loop detectors) over the modern IP/MPLS or SD-WAN network.
Palo Alto & Panorama Security Administration
Centralized Security Management: Utilize Palo Alto Panorama to manage device groups, templates, and security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress points, and critical field hubs.
IT/OT Network Segmentation: Design and enforce strict Zero-Trust segmentation policies. Isolate critical traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from each other and from the corporate IT network.
Threat Prevention & Monitoring: Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering, and WildFire) to detect and block malicious activity targeting transportation infrastructure, including specialized signatures for industrial and IoT protocols.
TSMO Operations & Multicast Video Management
Multicast Optimization: Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations centers, and media partners.
Network Performance Monitoring: Monitor network latency, jitter, and packet loss across the SD-WAN fabric using Catalyst SD-WAN Manager’s analytics tools to ensure real-time traffic management applications perform optimally.
Incident Response & Troubleshooting: Serve as the Tier 3 escalation point for complex network outages affecting roadside devices, fiber cuts, or cellular carrier outages.
Collaboration & Standards Compliance
Field Support: Partner with field technicians to troubleshoot physical layer issues (fiber optics, patch panels, antennas, and power supplies) inside roadside cabinets.
Standards Adherence: Ensure all network designs comply with FHWA (Federal Highway Administration) guidelines, NEMA TS-2 cabinet standards, and NIST SP 800-82 guidelines for industrial control systems security.
Operational Support 24/7/365 on a Rotation Basis
Provide operational support 24/7/365 for the Cisco Cataylst SD-WAN Manager and Palo Alto/Panorama environments.
Required/Preferred Skills:
6 years of experience in enterprise - grade network administration. This includes configuring and troubleshooting LAN and WAN Networking equipment in a complex networking environment of at least 1,000 remote endpoints that includes switches, routers/firewalls and VPN devices. This includes troubleshooting issues using protocol analysis tools (i.e. Wireshark) and conducting analysis on network data captures.
6 years of experience with Cisco Catalyst SD-WAN, including Catalyst SD-WAN Manager, Controllers, and Validator. This includes build and deploying localized and centralized policies, keeping firmware up to date, and standardizing device configuration.
6 years of experience with administration of Palo Alto NGFWs and Panorama. Experience with VM-Series firewalls in public/private clouds is a plus.
.5 years' experience with Cisco IR1101 hardware, including IOS-XE SD-WAN software, expansion modules, and cellular configuration,
5 years' experience with routing protocols (BGP, OSPF, EIGRP), IPsec VPNs, Quality of Service (QoS), and Multicast (PIM, IGMP).
3 years' experience with NTCIP 1202 (traffic signals), NTCIP 1203 (dynamic message signs), and video streaming protocols (H.264/H.265, RTSP).
3 years' experience in an Operational Technology (OT), Intelligent Transportation Systems (ITS), or TSMO environment managing roadside communications (fiber, wireless, cellular).
Must hold one of the following:
Cisco: Cisco Certified Network Professional (CCNP Enterprise) and/or Cisco Certified Specialist - Enterprise SD-WAN Implementation (300-415 ENSDWI).
Palo Alto: Palo Alto Networks Certified Network Security Engineer (PCNSE).
This not for
Need Resume, Dl Copy, Passport Number Expiry Date with Passport Copy for Visa Candidates. Visa Copy. One Certificate copy from given list
