Network Architect

HBITS: HBITS-08-14915

Expert, Network Architect

24 month contract

Interview: Virtual Interview

Work model: 50% telecommuting, 50% Office per week

--- Project Description ---
The incumbent will act as Expert Network Architect for the DOT
Transportation Safety Management and Operations (TSMO)
Technology Program as a team member focusing on the overall
design, structure, and future direction of the network
infrastructure that seamlessly and securely integrates both
Information Technology (IT) and Operational Technology (OT)
systems. This role is critical for ensuring the secure, reliable,
and efficient operation of the NYS TSMO complex transportation
networks that integrate both information technology (IT) and
operational technology (OT) systems.

--- Day-to-Day Tasks ---
1. Define and articulate the long-term vision for the organization's
IT/OT network infrastructure, aligning it with transportation
system goals, technological advancements, and business
objectives.
2. Develop and maintain a multi-year network roadmap,
identifying key initiatives, technology investments, and
migration strategies.
3. Conduct thorough assessments of existing network
infrastructure, identifying gaps, risks, and opportunities for
improvement.
4. Guide the design and architecture of highly available, scalable,
secure, and resilient network solutions for diverse
transportation systems (e.g., traffic management, ITS, ATMS).
5. Create detailed network designs, including logical and physical
topologies, IP addressing schemes, routing protocols, and
Quality of Service (QoS) policies.
6. Design network segmentation strategies to isolate critical OT
systems from IT networks, enhancing security and operational
integrity.
7. Architect solutions for IT/OT convergence, ensuring seamless
and secure data exchange between different operational
domains.
8. Evaluate and select appropriate network hardware, software,
and services from various vendors.
9. Establish and enforce robust network security policies and
procedures across both IT and OT environments, adhering to
industry's best practices and regulatory requirements (e.g.,
NIST).
10. Design and implement security controls, including firewalls,
Intrusion Detection/Prevention Systems (IDS/IPS), VPNs,
network access control (NAC), and encryption.
11. Conduct regular security risk assessments, vulnerability
analyses, and penetration testing of network infrastructure.
12. Ensure network designs comply with relevant cybersecurity
standards and contribute to overall system resilience.
13. Support internal and external audits related to network
security and compliance.
14. Ensure the optimal performance, availability, and reliability of
all network components and services critical to transportation
operations.
15. Develop and implement network monitoring strategies,
utilizing tools to track performance metrics, identify anomalies,
and proactively address potential issues.
16. Troubleshoot complex network problems, often under
pressure, to minimize downtime and impact on transportation
services.
17. Design and implement disaster recovery and business
continuity plans for network infrastructure.
18. Stay at the forefront of emerging network technologies and
trends relevant to transportation, such as 5G, IoT, AI/ML for
network analytics, Software-Defined Networking (SDN), and
cloud networking.
19. Research, evaluate, and pilot new technologies to enhance
network capabilities, efficiency, and security.
20. Champion innovation and drive the adoption of advanced
network solutions that can improve transportation system
management and operations.
21. Guide network-related projects, ensuring successful delivery
within scope, budget, and timeline.
22. Collaborate effectively with cross-functional teams, including
IT operations, OT engineers, system integrators, cybersecurity
teams, business teams, and external vendors.
23. Provide technical guidance, and mentorship to network
engineering teams.
24. Manage vendor relationships, negotiate contracts, and oversee
the implementation of vendor solutions.
25. Maintain comprehensive and up-to-date network
documentation, including architecture diagrams, configuration
details, operational procedures, and security policies.
26. Develop and deliver technical training and knowledge transfer
to relevant personnel.

--- Required Qualifications ---
• 84 months of experience in IT and OT networking including
networking protocols (routing, switching and wireless protocols);
enterprise-grade network hardware (Cisco, Palo Alto, Fortinet);
network security principles and technologies; wireless networking
technologies; and network monitoring and troubleshooting
• 84 months of experience in designing and managing complex IT
and OT networks within the transportation sector such as adaptive
traffic signal control; safety and reliability standards; Intelligent
Transportation Systems (ITS); and Advanced Traffic Management
Systems (ATMS).
• 72 months of experience in architecting and implementing
solutions that integrate IT and OT environments addressing IT/OT
Convergence challenges; and real-time data processing and
management
• 72 months of experience in designing and managing specific
networks needs of transportation sector technologies such as
adaptive traffic signal control; safety and reliability standards;
Intelligent Transportation Systems (ITS); and Advanced Traffic
Management Systems (ATMS).
• 60 months of experience with IT and OT Network operational
support including incident response and root cause analysis.
• 60 months of experience with Cybersecurity specific to IT/OT
Convergence including implementation of layered security
approaches; compliance with regulations and standards; and zero-
trust architecture and implementation.
• 60 months of experience collaborating with cross-functional teams
(business, technical and security); and, producing both written and
verbal communication articulating secure networking concepts to
both technical and non-technical audiences
• MUST hold at least one of these:
**bachelor's degree in computer science, Information Technology
or a closely related field
**Cisco Certified Internetwork Expert (CCIE) - Enterprise

MVP Consulting Plus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law. Reasonable accommodations are available for qualified individuals with disabilities during the application process.