DevOps Systems Engineer

DevOps Systems Engineer

Responsibilities

Manage and lead in the orchestration of multi-discipline technologies for the resolution of complex problems; communicate with technology and business leaders for problem resolution and make recommendations for system enhancements as required. Provide 24x7x365 on-call network support for advanced troubleshooting, escalation and ticket resolutions on a rotating basisDesign, deploy, and maintain cloud networking infrastructure in AWS, Azure, and GCP to support new and existing agency application deployments in the cloudDesign, deploy, and maintain network virtual appliances as needed including Arista CloudEOS and Palo Alto PAN-OS with integrations into CSP network infrastructure (GCP NCC, AWS TGW Connect, etc.)Design and implement on-prem to cloud connectivity solutions as required by application needs in collaboration with ISO and network/application architecture teamsAssist with application design to ensure connectivity compliance with information security standardsCollaborate and troubleshoot with direct cloud connectivity providers to develop solutions and solve problemsAssist in the development of Infrastructure as Code (IaC) uniform cloud configuration, deployment, and backup solutions using TerraformProvide in-depth analysis on network performance using monitoring tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etc.Ensure that network availability of cloud environments is maximized by overseeing Change Control procedures, code upgrades, network monitoring, installations, moves and changes, and troubleshooting complex issues.Oversee network monitoring to ensure maximum network availability.Participate in network performance analysis, training, and capacity planning.Document all design and implementation work using Microsoft VisioParticipate in knowledge transfer and training sessions with junior staffOccasional travel may be required.

Mandatory Qualifications

7 years of experience as a DevOps EngineerExpert GCP network infrastructure: VPCs, subnets, firewall rules, VPC routing, Network Connectivity Center, Cloud Router, CloudVPN, Cloud Interconnect, CloudNAT, load balancers, private service connections, logging, alerting, and troubleshooting Advanced experience designing, implementing, and supporting hybrid GCP connectivity.Proficiency in layer 3 routing including Border Gateway Protocol (BGP), VRFs, route maps, redistribution, NAT, subnetting, etc. Proficiency in Palo Alto PAN-OS including security policies, NAT policies, zones, routing, tunnels, upgrades, logging, and monitoringDesirable QualificationsWorking knowledge of cloud application platforms and their networking requirements (Kubernetes engines/services, serverless, etc.)Proficiency in Terraform to assist in the development of Infrastructure as Code (IaC) and CI/CD for uniform cloud configuration and backup solutionsProficient Microsoft Azure network infrastructure: VNets, subnets, NSGs, route tables, VNGs, Site-to-site VPN, ExpressRoute Direct, load balancers, logging, alerting, and troubleshootingProficient AWS network infrastructure: VPCs, subnets, security groups, route tables, Virtual Private GW, Transit Gateway, Cloud WAN, Site-to-Site VPN, Direct Connect, NACLs, load balancers, peering, logging, alerting, and troubleshooting.Experience working with monitoring and packet capture/analysis tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etcProficiency in Microsoft Visio for solutions documentationProficiency in Domain Name System (DNS) and managing split-brain public/private resolution designs

Desirable Qualifications

Working knowledge of cloud application platforms and their networking requirements (Kubernetes engines/services, serverless, etc.)Proficiency in Terraform to assist in the development of Infrastructure as Code (IaC) and CI/CD for uniform cloud configuration and backup solutionsProficient Microsoft Azure network infrastructure: VNets, subnets, NSGs, route tables, VNGs, Site-to-site VPN, ExpressRoute Direct, load balancers, logging, alerting, and troubleshootingProficient AWS network infrastructure: VPCs, subnets, security groups, route tables, Virtual Private GW, Transit Gateway, Cloud WAN, Site-to-Site VPN, Direct Connect, NACLs, load balancers, peering, logging, alerting, and troubleshooting.Experience working with monitoring and packet capture/analysis tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etcProficiency in Microsoft Visio for solutions documentationProficiency in Domain Name System (DNS) and managing split-brain public/private resolution designs