Network Engineer III

Full Salary Range: $81,097.00 - $129,584.00 Annually Hiring Salary Range: $81,097.00 - $105,341.00 Annually The Network Engineer is responsible for safeguarding and optimizing the City of Baltimore’s enterprise network by proactively identifying, mitigating, and preventing security vulnerabilities across critical infrastructure. This role combines deep expertise in enterprise routing, switching, and firewall administration with hands‑on data center management, wireless infrastructure support, and network automation. The engineer will manage Cisco ASA and Palo Alto firewall environments, administer Cisco ACI fabric architectures, support network monitoring tools, and ensure compliance with industry security standards to protect City systems, maintain high availability, and strengthen Baltimore’s overall IT environment. The city offers a comprehensive benefits package which includes medical, prescription drug, dental, vision, optional life, AD&D, and FSA plans. This office also supplies wellness programs, support groups, and workshops. You can learn about our benefits here: Key Responsibilities Routing & Switching: Design, deploy, and manage enterprise LAN/WAN environments using advanced routing protocols including BGP, OSPF, IS-IS, and EIGRP. Data Center Fabric: Manage and maintain Cisco ACI fabric environments in agency data centers; handle tenant configuration, EPGs, contracts, and policies. Firewall & Security Administration: Administer Palo Alto and Cisco ASA firewalls; manage security policies, NAT rules, VPN configurations, and threat prevention profiles. Ensure compliance with agency security policies. Wireless Infrastructure: Support and troubleshoot Cisco wireless infrastructure including wireless LAN controllers (WLCs) and access points. Network Operations & Monitoring: Operate network monitoring platforms including Catalyst Center (formerly DNAC), SolarWinds, Cisco Prime, Nexus Dashboard, and DNA Spaces. Advanced Troubleshooting: Perform advanced troubleshooting of routing, switching, and ISR platforms (Cisco routers and Catalyst switches) using Wireshark and packet capture tools to diagnose complex traffic issues. Automation: Develop and maintain network automation scripts using Python, Ansible, or similar tooling to reduce manual operational burden. Collaboration & Documentation: Coordinate with vendors, contractors, and cross-functional IT teams on projects and incidents. Produce and maintain accurate network documentation including diagrams, IP addressing schemes, and SOPs. Required Qualifications Experience: 6–8 years of hands‑on network engineering experience in an enterprise or government environment. Routing Expertise: Demonstrated expertise with BGP, OSPF, IS-IS, and EIGRP routing protocols. Data Center: Hands‑on experience with Cisco ACI data center networking. Firewalls: Proficiency in managing Cisco ASA and Palo Alto next‑generation firewalls. Wireless: Experience with Cisco wireless controllers and access points; ability to troubleshoot wireless connectivity issues. Tooling & Packet Analysis: Working experience with network monitoring tools (Catalyst Center/DNAC, SolarWinds, Cisco Prime, Nexus Dashboard, DNA Spaces) and strong packet analysis skills using Wireshark. Automation: Experience with scripting or network automation (Python, Ansible, Bash, or similar). Education: Bachelor's degree from an accredited college or university in Computer Science, Information Technology, or a related field (or equivalent experience). Preferred Qualifications Active Cisco CCNP Enterprise or CCIE certification. #J-18808-Ljbffr