Network L3 Engineer

Role: Network L3 Engineer

Location: Poughkeepsie, NY - Onsite

Duration: 6-12+ Month


s a Network Engineer L3 specializing in VSS and Nexus integration services, you'll be responsible for designing, implementing, and maintaining complex network infrastructures, focusing on Cisco Nexus 6000 or 7000 or 9000 series switches and Cisco Virtual Switch System technologies, ensuring high availability, performance, and security.



Key Responsibilities:

Network Design and Implementation:

• Design, implement, and maintain complex network infrastructures, including LAN, WAN, and data center networks.
• Focus on Cisco Nexus 6000 or 7000 or 9000 series switches and Cisco VSS technologies.
• Ensure network designs meet business requirements, performance standards, and security policies.
• Develop and document network topologies and configurations.

VSS and Nexus Expertise:

• Deep understanding of Cisco VSS technology, including fabric partitioning, redundancy, and failover mechanisms.
• Extensive experience with Cisco Nexus 6000 or 7000 or 9000 series switches, including configuration, troubleshooting, and optimization.
• Proficient in implementing and managing Nexus Fabric, including Virtual Port Channels (vPC) and Nexus 9000 series switch features.

Troubleshooting and Problem Resolution:

• Diagnose and resolve complex network issues, including performance bottlenecks, connectivity problems, and security vulnerabilities.
• Utilize network monitoring tools and protocols to identify and address issues proactively.
• Document and communicate network issues and resolutions effectively.

Network Security:

• Implement and maintain network security measures, including access control lists (ACLs), firewalls, and intrusion detection/prevention systems.
• Stay up-to-date on the latest security threats and vulnerabilities.

Skills and Qualifications:

Experience:
5+ years of experience in network engineering, with a strong focus on Cisco technologies.



Certifications:
Cisco certifications (e.g., CCNP, CCIE) are highly desirable.

Technical Skills:

• Extensive knowledge of networking protocols (e.g., TCP/IP, OSPF, BGP, MPLS).
• Experience with network operating systems (e.g., IOS, NX-OS).
• Familiarity with network monitoring and management tools (e.g., SolarWinds, PRTG).
• Strong understanding of network security principles and practices.

Soft Skills:

• Excellent problem-solving and troubleshooting skills.
• Strong communication and interpersonal skills.
• bility to work independently and as part of a team.
• bility to manage multiple tasks and priorities effectively.
• Provide current design and architecture documents.
• Provide policies for security vulnerability management
• Performance and fault monitoring of LAN/WLAN/WAN devices.
• Create and plan configuration changes, incident management on existing LAN/WLAN/WAN devices.
• Provide recommendations and suggestions to improve network performance as managing network performance with QOS
• Co-ordinate with network service provider or third-party vendor to dispatch a field technician if required to repair / replace defective devices that support network services
• Managing traffic and congestion
• WiFi client disconnection issues and identifying radius authentication issues
• Updating IOS to access points through WLC
• Problem management for data center repetitive faults.
• Execute Central Hudson approved remediation plans in response to intrusions
• Perform local backup and periodic restoration testing
• Review impact of patches relevant to the IT environment and document impact and analysis.
• Review asset hardening reports for suggested configuration and IOS changes and provide summary of proposed actions.
• Patching of network devices (routers, switches etc.).
• Emergency patching of network devices (routers, switches etc.).
• Capacity planning & suggestions.
• Create SOPs where not present
• Update and Maintain SOP
• Create Knowledgebase (KB's) articles as needed
• Review and revise network Knowledgebase articles keeping them current.

pprove scope, date, time of vulnerability scans
Define/approve/review the risk rating of the intrusion prevention in case of zero-day signatures and remediation plans and actions
Manage, administer and maintenance of load balancer in Central Hudson environment
Confirms high availability and reliability monitoring, moving requests only to servers/applications that are online
Manage distribution of Client requests or network load efficiently across multiple servers/applications
dd or remove servers/applications to Load Balancer configuration as demand dictates
Monitor load balancer Health